|
284371
|
- |
|
aeries
|
aeries_student_information_system
|
Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event.
|
CWE-79
Cross-site Scripting
|
CVE-2008-0941
|
2018-10-16 07:03 |
2008-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284372
|
- |
|
aeries
|
aeries_student_information_system
|
SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter.
|
CWE-89
SQL Injection
|
CVE-2008-0942
|
2018-10-16 07:03 |
2008-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284373
|
- |
|
aeries
|
aeries_student_information_system
|
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or t…
|
CWE-89
SQL Injection
|
CVE-2008-0943
|
2018-10-16 07:03 |
2008-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284374
|
- |
|
ipswitch
|
instant_messaging
|
Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero.
|
CWE-189
Numeric Errors
|
CVE-2008-0944
|
2018-10-16 07:03 |
2008-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284375
|
- |
|
ipswitch
|
imserver instant_messaging
|
Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a deni…
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2008-0945
|
2018-10-16 07:03 |
2008-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284376
|
- |
|
ipswitch
|
imserver instant_messaging
|
Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files v…
|
CWE-22
Path Traversal
|
CVE-2008-0946
|
2018-10-16 07:03 |
2008-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284377
|
- |
|
barracuda_networks
|
barracuda_im_firewall barracuda_load_balancer barracuda_message_archiver barracuda_spam_firewall barracuda_web_filter
|
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before 3.3.0.052, IM Firewall before…
|
CWE-79
Cross-site Scripting
|
CVE-2008-0971
|
2018-10-16 07:03 |
2008-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284378
|
- |
|
astrosoft
|
astrosoft_helpdesk
|
Multiple cross-site scripting (XSS) vulnerabilities in AstroSoft HelpDesk before 1.95.228 allow remote attackers to inject arbitrary web script or HTML via the (1) txtSearch parameter to operator/art…
|
CWE-79
Cross-site Scripting
|
CVE-2008-0605
|
2018-10-16 07:02 |
2008-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284379
|
- |
|
ipswitch
|
ws_ftp
|
The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to por…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-0608
|
2018-10-16 07:02 |
2008-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284380
|
- |
|
divideconcept
|
vhd_web_pack
|
Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.
|
CWE-22
Path Traversal
|
CVE-2008-0609
|
2018-10-16 07:02 |
2008-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|