266981
|
- |
|
abottoms
|
mayavi
|
test_parser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/err.log temporary file.
|
CWE-59
Link Following
|
CVE-2008-5151
|
2008-11-19 01:00 |
2008-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266982
|
- |
|
typo3
|
another_backend_login
|
SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2008-5087
|
2008-11-17 23:39 |
2008-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266983
|
- |
|
kkeim
|
kmita_catalogue
|
Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this informa…
|
CWE-79
Cross-site Scripting
|
CVE-2008-5067
|
2008-11-17 14:00 |
2008-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266984
|
- |
|
debian
|
xsabre
|
XRunSabre in sabre (aka xsabre) 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to cause a denial of service (application unavailability) by creating a /tmp/sabre.log …
|
NVD-CWE-Other
|
CVE-2008-4407
|
2008-11-15 16:20 |
2008-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266985
|
- |
|
plone
|
plone
|
Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as…
|
CWE-79
Cross-site Scripting
|
CVE-2008-4571
|
2008-11-15 16:20 |
2008-10-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266986
|
- |
|
mybb
|
mybb
|
SQL injection vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field.
|
CWE-89
SQL Injection
|
CVE-2008-3965
|
2008-11-15 16:19 |
2008-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266987
|
- |
|
mybb
|
mybb
|
Patch information - http://community.mybboard.net/showthread.php?tid=36022
|
CWE-89
SQL Injection
|
CVE-2008-3965
|
2008-11-15 16:19 |
2008-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266988
|
- |
|
mybb
|
mybb
|
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (1) a certain referrer field in usercp…
|
CWE-79
Cross-site Scripting
|
CVE-2008-3966
|
2008-11-15 16:19 |
2008-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266989
|
- |
|
mybb
|
mybb
|
Patch information - http://community.mybboard.net/showthread.php?tid=36022
|
CWE-79
Cross-site Scripting
|
CVE-2008-3966
|
2008-11-15 16:19 |
2008-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266990
|
- |
|
mybb
|
mybb
|
moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-3967
|
2008-11-15 16:19 |
2008-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|