261181
|
- |
|
snarky
|
visualpic
|
Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the pic parameter to the default URI. NOTE: the provenance of thi…
|
CWE-79
Cross-site Scripting
|
CVE-2008-3379
|
2017-08-8 10:31 |
2008-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261182
|
- |
|
moinmoin
|
moinmoin
|
Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vec…
|
CWE-79
Cross-site Scripting
|
CVE-2008-3381
|
2017-08-8 10:31 |
2008-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261183
|
- |
|
webwizguide
|
web_wiz_forum
|
Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to (1) admin_group_details.asp and (2) ad…
|
CWE-79
Cross-site Scripting
|
CVE-2008-3391
|
2017-08-8 10:31 |
2008-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261184
|
- |
|
webwizguide
|
web_wiz_forum
|
Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to log_off_user.asp.
|
CWE-352
Origin Validation Error
|
CVE-2008-3392
|
2017-08-8 10:31 |
2008-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261185
|
- |
|
infomining
|
bookmine
|
SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter.
|
CWE-89
SQL Injection
|
CVE-2008-3393
|
2017-08-8 10:31 |
2008-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261186
|
- |
|
infomining
|
bookmine
|
Multiple cross-site scripting (XSS) vulnerabilities in search.cfm in BookMine allow remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters.
|
CWE-79
Cross-site Scripting
|
CVE-2008-3394
|
2017-08-8 10:31 |
2008-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261187
|
- |
|
calacode
|
atmail
|
Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail/Config.php and (2) webmail/webadmin/.htpasswd, which allows local users to obtain sensitive information b…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-3395
|
2017-08-8 10:31 |
2008-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261188
|
- |
|
ibm
|
websphere_portal
|
IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-3423
|
2017-08-8 10:31 |
2008-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261189
|
- |
|
sun
|
java_system_web_server_plugin n1_service_provisioning_system
|
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to t…
|
CWE-287
Improper Authentication
|
CVE-2008-3425
|
2017-08-8 10:31 |
2008-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261190
|
- |
|
phpfreechat
|
phpfreechat
|
Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.
|
CWE-287
Improper Authentication
|
CVE-2008-3428
|
2017-08-8 10:31 |
2008-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|