|
269471
|
- |
|
invision_power_services
|
invision_power_board
|
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context.
|
CWE-79
Cross-site Scripting
|
CVE-2008-0913
|
2008-09-6 06:36 |
2008-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269472
|
- |
|
tor_world
|
com_vote
i-navigator
interactive_bbs
mobile_frontier
quotes_of_the_day
simple_bbs
simple_vote
tor_board
tor_news
tor_search
|
Cross-site scripting (XSS) vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cgi (aka Quotes of the Day) 1.5 and earlier, Tor News 1.21 an…
|
CWE-79
Cross-site Scripting
|
CVE-2008-0917
|
2008-09-6 06:36 |
2008-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269473
|
- |
|
freshmeat
|
xwine
|
w_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print arbitrary files via a symlink attack on the temporaire temporary file. NOTE: some of these details are obtain…
|
CWE-59
Link Following
|
CVE-2008-0930
|
2008-09-6 06:36 |
2008-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269474
|
- |
|
xwine
|
xwine
|
w_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine/config, which might allow local users to execute arbitrary commands or cause a denial of service by modify…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-0931
|
2008-09-6 06:36 |
2008-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269475
|
- |
|
xoops
|
prayer_list_module
|
SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.
|
CWE-89
SQL Injection
|
CVE-2008-0936
|
2008-09-6 06:36 |
2008-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269476
|
- |
|
tinyevent
xoops
|
tinyevent
tiny_event_module
|
SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a differ…
|
CWE-89
SQL Injection
|
CVE-2008-0937
|
2008-09-6 06:36 |
2008-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269477
|
- |
|
webgui
|
webgui
|
Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrary web script or HTML when creating a username, a different vulnerability than CV…
|
CWE-79
Cross-site Scripting
|
CVE-2008-0940
|
2008-09-6 06:36 |
2008-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269478
|
- |
|
matts_whois
|
matts_whois
|
Cross-site scripting (XSS) vulnerability in mwhois.php in Matt Wilson Matt's Whois (MWhois) allows remote attackers to inject arbitrary web script or HTML via the domain parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2008-1041
|
2008-09-6 06:36 |
2008-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269479
|
- |
|
intervideo
|
windvd_media_center
|
InterVideo IMC Server (aka IMCSvr.exe) and InterVideo Home Theater (aka IHT.exe) in InterVideo WinDVD Media Center 2.11.15.0 allow remote attackers to cause a denial of service (NULL dereference and …
|
CWE-20
Improper Input Validation
|
CVE-2008-1062
|
2008-09-6 06:36 |
2008-02-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269480
|
- |
|
xoops
|
xm_memberstats
|
Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the (1) letter or (2) sort…
|
CWE-89
SQL Injection
|
CVE-2008-1065
|
2008-09-6 06:36 |
2008-02-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
