257881
|
- |
|
xen
|
xen
|
qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file.
|
CWE-59
Link Following
|
CVE-2008-4993
|
2017-09-29 10:32 |
2008-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257882
|
- |
|
phpx
|
phpx
|
SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via uppercase characters in the…
|
CWE-89
SQL Injection
|
CVE-2008-5000
|
2017-09-29 10:32 |
2008-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257883
|
- |
|
chilkat_software
|
chilkat_crypt_activex_control
|
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbit…
|
CWE-20
Improper Input Validation
|
CVE-2008-5002
|
2017-09-29 10:32 |
2008-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257884
|
- |
|
shahrood
|
shahrood
|
SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2008-5003
|
2017-09-29 10:32 |
2008-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257885
|
- |
|
mywebland
|
bloggie_lite
|
SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands via a crafted cookie.
|
CWE-89
SQL Injection
|
CVE-2008-5004
|
2017-09-29 10:32 |
2008-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257886
|
- |
|
sun
|
opensolaris solaris
|
in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unknown D…
|
NVD-CWE-noinfo
|
CVE-2008-5010
|
2017-09-29 10:32 |
2008-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257887
|
- |
|
mozilla
|
firefox
|
Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attacker…
|
CWE-94
Code Injection
|
CVE-2008-5015
|
2017-09-29 10:32 |
2008-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257888
|
- |
|
graphiks
|
myforum
|
Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1) myforum_login and (2) myforum_pass cookies to 1.
|
CWE-287
Improper Authentication
|
CVE-2008-5040
|
2017-09-29 10:32 |
2008-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257889
|
- |
|
zeeways
|
photovideotube
|
Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php.
|
CWE-287
Improper Authentication
|
CVE-2008-5042
|
2017-09-29 10:32 |
2008-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257890
|
- |
|
network-client.com
|
ftp_now
|
Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to cause a denial of service (crash) via a 200 server response that is exactly 1024 ch…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-5045
|
2017-09-29 10:32 |
2008-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|