CVEs published May 20, 2008
12 CVEs were published on May 20, 2008: 0 critical, 0 high.
- Published
- 12
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 12
- CVE-2008-0957Multiple stack-based buffer overflows in the PhotoStockPlus Uploader Tool ActiveX control (PSPUploader.ocx) allow remote attackers to execut
- CVE-2008-2346AlkalinePHP 0.77.35 and earlier allows remote attackers to bypass authentication and gain administrative access by creating an admin account
- CVE-2008-2347MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter
- CVE-2008-2348MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and exceed application qu
- CVE-2008-2349Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install
- CVE-2008-2350Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) ..
- CVE-2008-2351Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the (
- CVE-2008-2352Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and exec
- CVE-2008-2353Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and execute arbitrary l
- CVE-2008-2354Unspecified vulnerability in the data export function in testMaker before 3.0p10 allows test authors to obtain access to export data via unk
- CVE-2008-2355Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and
- CVE-2008-2356SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands v