260561
|
- |
|
preprojects
|
pre_classified_listings
|
Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject arbitrary web script or HTML via the address parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2008-6888
|
2017-08-17 10:29 |
2009-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260562
|
- |
|
codetoad
|
asp_forum_script
|
SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the message_id parameter.
|
CWE-89
SQL Injection
|
CVE-2008-6890
|
2017-08-17 10:29 |
2009-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260563
|
- |
|
codetoad
|
asp_forum_script
|
Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter to (a) new_message.asp and (b) mes…
|
CWE-79
Cross-site Scripting
|
CVE-2008-6891
|
2017-08-17 10:29 |
2009-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260564
|
- |
|
3cx
|
phone_system
|
Multiple cross-site scripting (XSS) vulnerabilities in login.php in 3CX Phone System Free Edition 6.1793 and 6.0.806.0 allow remote attackers to inject arbitrary web script or HTML via the (1) fName …
|
CWE-79
Cross-site Scripting
|
CVE-2008-6894
|
2017-08-17 10:29 |
2009-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260565
|
- |
|
3cx
|
phone_system
|
3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service (unstable service or crash) via unspecified vectors, as demonstrated by vulnerability scans from Nessus or SAINT.
|
NVD-CWE-noinfo
|
CVE-2008-6895
|
2017-08-17 10:29 |
2009-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260566
|
- |
|
3cx
|
phone_system
|
login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows remote attackers to gain sensitive information via unspecified vectors that reveal the installation path.
|
CWE-200
Information Exposure
|
CVE-2008-6896
|
2017-08-17 10:29 |
2009-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260567
|
- |
|
sophos
|
anti-virus anti-virus7.6.3
|
Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibl…
|
NVD-CWE-noinfo
|
CVE-2008-6904
|
2017-08-17 10:29 |
2009-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260568
|
- |
|
marc_ingram
|
services
|
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote attackers to impersonate other users and gain privileges.
|
CWE-310
Cryptographic Issues
|
CVE-2008-6908
|
2017-08-17 10:29 |
2009-08-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260569
|
- |
|
marc_ingram
|
services
|
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not sign all required data in requests, which has unspecified impact, probably related to man-in-the-middle attacks tha…
|
CWE-310
Cryptographic Issues
|
CVE-2008-6909
|
2017-08-17 10:29 |
2009-08-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260570
|
- |
|
marc_ingram
|
services
|
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via …
|
CWE-310
Cryptographic Issues
|
CVE-2008-6910
|
2017-08-17 10:29 |
2009-08-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|