Browse Database

Browsing Vulnerabilities Disclosed in January of 2008

<< Back to Browse
OSVDB IDDisclosure DateTitle
27531 2008-01-31 Novell GroupWise WebAccess webacc Multiple Variable XSS
40833 2008-01-31 MySpace Uploader Control MySpace.Uploader ActiveX (MySpaceUploader.ocx) Action Property Arbitrary Code Execution
40887 2008-01-31 Nilsons Blogger index.php permalink Variable Local File Inclusion
40888 2008-01-31 Nilsons Blogger comments.php thispost Variable Local File Inclusion
40889 2008-01-31 Aurigma Image Uploader Aurigma.ImageUploader ActiveX (ImageUploader4.ocx) Action Property Overflow Arbitrary Code Execution
41128 2008-01-31 Mindmeld acweb/admin_index.ph MM_GLOBALS[home] Variable Remote File Inclusion
41129 2008-01-31 Mindmeld include/ask.inc.php MM_GLOBALS[home] Variable Remote File Inclusion
41130 2008-01-31 Mindmeld include/learn.inc.php MM_GLOBALS[home] Variable Remote File Inclusion
41131 2008-01-31 Mindmeld include/manage.inc.php MM_GLOBALS[home] Variable Remote File Inclusion
41132 2008-01-31 Mindmeld include/mind.inc.php MM_GLOBALS[home] Variable Remote File Inclusion
41133 2008-01-31 Mindmeld include/sensory.inc.php MM_GLOBALS[home] Variable Remote File Inclusion
41213 2008-01-31 Restaurant Component for Mambo / Joomla! index.php id Variable SQL Injection
41214 2008-01-31 AkoGallery Component for Mambo / Joomla! index.php id Variable SQL Injection
41216 2008-01-31 cforms Plugin for Wordpress cforms-css.php tm Variable Remote File Inclusion
41219 2008-01-31 CatalogShop Component for Mambo and Joomla! index.php id Variable SQL Injection
41522 2008-01-31 sflog! index.php Multiple Variable Traversal Arbitrary File Access
41761 2008-01-30 VirtueMart Product View Unspecified Arbitrary File Access
41762 2008-01-30 VirtueMart Unspecified CSRF
40854 2008-01-30 WassUp Plugin for WordPress spy.php Multiple Variable SQL Injection
43849 2008-01-30 Mozilla Multiple Browsers Basic Authentication Referrer Header Spoofing
41068 2008-01-30 Comment Upload Module for Drupal Arbitrary File Upload
42199 2008-01-30 MPlayer url.c IPv6 Parsing Code Crafted URL Overflow
42200 2008-01-30 MPlayer stream_cddb.c CDDB Database Album Title Handling Overflow
41069 2008-01-30 Secure Site Module for Drupal Authentication Bypass
42834 2008-01-30 GFL SDK libgfl280.dll Radiance RGBE (.hdr) Handling Overflow
42150 2008-01-30 Drupal Project Issue Tracking Module Comment Summary XSS
42151 2008-01-30 Drupal Project Issue Tracking Module Arbitrary File Upload
42832 2008-01-30 XnView Radiance RGBE (.hdr) Handling Overflow
42833 2008-01-30 NConvert Radiance RGBE (.hdr) Handling Overflow
41685 2008-01-30 ELOG Logbook Unspecified XSS
40775 2008-01-30 SoftCart SoftCart.exe Multiple Variable XSS
40779 2008-01-30 AdServe Plugin for WordPress adclick.php id Variable SQL Injection
40781 2008-01-30 SQLiteManager spaw/dialogs/confirm.php spaw_root Variable Remote File Inclusion
40784 2008-01-30 Connectix Boards part_userprofile.php template_path Variable Remote File Inclusion
41067 2008-01-30 OpenID Module for Drupal claimed_id Authority Spoofing
40824 2008-01-30 webSPELL index.php sort Variable XSS
40841 2008-01-30 Userpoints Module for Drupal Point Moderation Form CSRF
40825 2008-01-30 webSPELL admin/admincenter.php CSRF
40840 2008-01-30 PHP Links vote.php id Variable SQL Injection
40931 2008-01-30 Sun Java Runtime Environment External XML Entities Restriction Bypass

DONATE NOW!

User Status

Quick Searches

Advertisements

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

© Copyright 2008 Open Source Vulnerability Database (OSVDB), All Rights Reserved.
Privacy Statement - Terms of Use