cve.nowby Sazabi

CVEs published June 20, 2008

13 CVEs were published on June 20, 2008: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 13
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 13
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 13

CVE-2008-2787Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via…UnratedJun 20, 2008
CVE-2008-2788Cross-site scripting (XSS) vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML…UnratedJun 20, 2008
CVE-2008-2789SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id…UnratedJun 20, 2008
CVE-2008-2790SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via…UnratedJun 20, 2008
CVE-2008-2791SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to…UnratedJun 20, 2008
CVE-2008-2792SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site…UnratedJun 20, 2008
CVE-2008-2793SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQL commands via the…UnratedJun 20, 2008
CVE-2008-2794Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain…UnratedJun 20, 2008
CVE-2008-2795Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to…UnratedJun 20, 2008
CVE-2008-2796SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.UnratedJun 20, 2008
CVE-2008-2797Cross-site scripting (XSS) vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows remote attackers to inject arbitrary web…UnratedJun 20, 2008
CVE-2008-2665Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode…UnratedJun 20, 2008
CVE-2008-2666Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions…UnratedJun 20, 2008