cve.nowby Sazabi

CVEs published December 30, 2008

31 CVEs were published on December 30, 2008: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 31
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 31
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 31

CVE-2008-5761Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary…UnratedDec 30, 2008
CVE-2008-5762Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which…UnratedDec 30, 2008
CVE-2008-5763PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to…UnratedDec 30, 2008
CVE-2008-5764PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to…UnratedDec 30, 2008
CVE-2008-5765WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…UnratedDec 30, 2008
CVE-2008-5766SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id…UnratedDec 30, 2008
CVE-2008-5767SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands via the authorID…UnratedDec 30, 2008
CVE-2008-5768SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute…UnratedDec 30, 2008
CVE-2008-5769Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script…UnratedDec 30, 2008
CVE-2008-5770Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web…UnratedDec 30, 2008
CVE-2008-5771Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files…UnratedDec 30, 2008
CVE-2008-5772Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands…UnratedDec 30, 2008
CVE-2008-5773Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download…UnratedDec 30, 2008
CVE-2008-5774Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via…UnratedDec 30, 2008
CVE-2008-5775SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id…UnratedDec 30, 2008
CVE-2008-5776Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via…UnratedDec 30, 2008
CVE-2008-5777SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter.UnratedDec 30, 2008
CVE-2008-5778SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL…UnratedDec 30, 2008
CVE-2008-5779SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL…UnratedDec 30, 2008
CVE-2008-5780Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…UnratedDec 30, 2008
CVE-2008-5781SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execute arbitrary SQL…UnratedDec 30, 2008
CVE-2008-5757Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated…UnratedDec 30, 2008
CVE-2008-5758Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified actions as…UnratedDec 30, 2008
CVE-2008-5759Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script…UnratedDec 30, 2008
CVE-2008-5760Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web…UnratedDec 30, 2008

Show all 31 entriesShow fewer entries