cve.nowby Sazabi

CVEs published December 30, 2008

31 CVEs were published on December 30, 2008: 0 critical, 0 high.

Published: 31
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 31
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 31

CVE-2008-5761Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary webUnratedDec 30, 2008
CVE-2008-5762Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allowUnratedDec 30, 2008
CVE-2008-5763PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to eUnratedDec 30, 2008
CVE-2008-5764PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to exUnratedDec 30, 2008
CVE-2008-5765WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloadUnratedDec 30, 2008
CVE-2008-5766SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id paUnratedDec 30, 2008
CVE-2008-5767SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands via the authorID parUnratedDec 30, 2008
CVE-2008-5768SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute arbitrary UnratedDec 30, 2008
CVE-2008-5769Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script oUnratedDec 30, 2008
CVE-2008-5770Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web scriUnratedDec 30, 2008
CVE-2008-5771Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via UnratedDec 30, 2008
CVE-2008-5772Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands viUnratedDec 30, 2008
CVE-2008-5773Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download thUnratedDec 30, 2008
CVE-2008-5774Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via tUnratedDec 30, 2008
CVE-2008-5775SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id paraUnratedDec 30, 2008
CVE-2008-5776Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via diUnratedDec 30, 2008
CVE-2008-5777SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter.UnratedDec 30, 2008
CVE-2008-5778SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commanUnratedDec 30, 2008
CVE-2008-5779SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commandsUnratedDec 30, 2008
CVE-2008-5780Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloaUnratedDec 30, 2008
CVE-2008-5781SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execute arbitrary SQL comUnratedDec 30, 2008
CVE-2008-5757Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated usUnratedDec 30, 2008
CVE-2008-5758Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified actions as authenticUnratedDec 30, 2008
CVE-2008-5759Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script orUnratedDec 30, 2008
CVE-2008-5760Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web scUnratedDec 30, 2008
CVE-2008-5751SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL coUnratedDec 30, 2008
CVE-2008-5752Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_UnratedDec 30, 2008
CVE-2008-5753Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark UnratedDec 30, 2008
CVE-2008-5754Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka Session-UnratedDec 30, 2008
CVE-2008-5755Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a lonUnratedDec 30, 2008
CVE-2008-5756Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute aUnratedDec 30, 2008