|
270381
|
- |
|
net_activity_viewer
|
net_activity_viewer
|
Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program, whi…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-1132
|
2008-09-6 06:36 |
2008-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270382
|
- |
|
small_axe_solutions
|
weblog
|
PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the ffile parameter, a different vector than CV…
|
CWE-94
Code Injection
|
CVE-2008-0442
|
2008-09-6 06:35 |
2008-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270383
|
- |
|
endian
|
firewall
|
Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the psearch parameter. NOTE: the provenanc…
|
CWE-79
Cross-site Scripting
|
CVE-2008-0494
|
2008-09-6 06:35 |
2008-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270384
|
- |
|
trixbox
|
trixbox
|
Multiple cross-site scripting (XSS) vulnerabilities in trixbox 2.4.2.0 allow remote attackers to inject arbitrary web script or HTML via the query string to index.php in (1) user/ or (2) maint/.
|
CWE-79
Cross-site Scripting
|
CVE-2008-0540
|
2008-09-6 06:35 |
2008-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270385
|
- |
|
uniwin
|
ecart_professional
|
Cross-site scripting (XSS) vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified…
|
CWE-79
Cross-site Scripting
|
CVE-2008-0558
|
2008-09-6 06:35 |
2008-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270386
|
- |
|
liferay
|
liferay_enterprise_portal
|
Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated u…
|
CWE-352
Origin Validation Error
|
CVE-2008-0563
|
2008-09-6 06:35 |
2008-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270387
|
- |
|
xlight_ftp_server
|
xlight_ftp_server
|
The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended ac…
|
CWE-255
Credentials Management
|
CVE-2008-0604
|
2008-09-6 06:35 |
2008-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270388
|
- |
|
mplayer
|
mplayer
|
Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-0629
|
2008-09-6 06:35 |
2008-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270389
|
- |
|
mplayer
|
mplayer
|
Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-0630
|
2008-09-6 06:35 |
2008-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270390
|
- |
|
portail_web_php
|
portail_web_php
|
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.p…
|
CWE-94
Code Injection
|
CVE-2008-0645
|
2008-09-6 06:35 |
2008-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
