CVEs published July 25, 2008
31 CVEs were published on July 25, 2008: 0 critical, 0 high.
- Published
- 31
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 31
- CVE-2008-3305Cross-site scripting (XSS) vulnerability in mensaje.php in C.
- CVE-2008-3306SQL injection vulnerability in info.php in C.
- CVE-2008-3307SQL injection vulnerability in todos.php in C.
- CVE-2008-3308PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C.
- CVE-2008-3309SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the
- CVE-2008-3310SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parame
- CVE-2008-3311PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute arbitrary PHP code via
- CVE-2008-3312Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 allows remote attacke
- CVE-2008-3313Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1)
- CVE-2008-3314ZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted type 6 command, which triggers
- CVE-2008-3315Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via th
- CVE-2008-3316Cross-site scripting (XSS) vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to injec
- CVE-2008-3317admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending a
- CVE-2008-3318admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending a
- CVE-2008-3319admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an
- CVE-2008-3320admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sendin
- CVE-2008-3321admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending
- CVE-2008-3322admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending a
- CVE-2008-3325Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profil
- CVE-2008-3326Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inj
- CVE-2008-3327Moodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive information via a direct request to (1) blog/blogp
- CVE-2008-3295Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to inject arbitrary web scrip
- CVE-2008-3296Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary loc
- CVE-2008-3297Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL commands via (1) an
- CVE-2008-3298SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administrators to execute arb
- CVE-2008-3299eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin_lng cookie value to 1.
- CVE-2008-3300AlphAdmin CMS 1.0.5/03 allows remote attackers to bypass authentication and gain administrative access by setting the aa_login cookie value
- CVE-2008-3301Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated administrators to inject arbitrary web scr
- CVE-2008-3302SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote authenticated administr
- CVE-2008-3303admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication and obtain administra
- CVE-2008-3304BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache=false query string to footer.php or (2) a di