Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to 1 the db parameter in the "Creating a Database" functionality dbcreate.php, and 2 the convcharset and collationconnection parameters related...

CVE-2008-3153

creationtimestamp| type| source ---|---|--- 2008-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6017...

CVE-2008-3033

creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32003...

CVE-2008-2873: Undefined Security Weakness

sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request to Db/urun.mdb...

Fedora 9 : roundcubemail-0.2-0.alpha.fc9 (2008-5333)

XSS fixes. Requires manual intervention for DB upgrades, see UPGRADING for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 7 : roundcubemail-0.2-0.alpha.fc7.1 (2008-5315)

XSS fixes. Requires manual intervention for DB upgrades, see UPGRADING for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 8 : roundcubemail-0.2-0.alpha.fc8 (2008-5342)

XSS fixes. Requires manual intervention for DB upgrades, see UPGRADING for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2008-3280

creationtimestamp| type| source ---|---|--- 2008-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5720...

CVE-2008-2774

creationtimestamp| type| source ---|---|--- 2008-05-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5678...

CVE-2008-2343: Undefined Security Weakness

News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to 1 db/connectstr.php and 2 login/info.php...

OpenSSL 0.9.8c-1 < 0.9.8g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH (Ruby)

!/usr/bin/ruby Debian SSH Key Tester L4teral This tool helps to find user accounts with weak SSH keys that should be regenerated with an unaffected version of openssl. You will need the precalculated keys provided by HD Moore See http://metasploit.com/users/hdm/tools/debian-openssl/ for further...

TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability

TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-04 May 13, 2008 -- CVE ID: CVE-2007-6026 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Word Microsoft Office Access -- TippingPointT...

CVE-2008-2536

creationtimestamp| type| source ---|---|--- 2008-05-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5601...

CVE-2008-2029

creationtimestamp| type| source ---|---|--- 2008-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5494...

CVE-2008-1613

creationtimestamp| type| source ---|---|--- 2008-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5482...

CVE-2008-1757

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31608...

CVE-2008-1758

creationtimestamp| type| source ---|---|--- 2008-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5353...

USN-584-1: OpenLDAP vulnerabilities

Jonathan Clarke discovered that the OpenLDAP slapd server did not properly handle modify requests when using the Berkeley DB backend and specifying the NOOP control. An authenticated user with modify permissions could send a crafted modify request and cause a denial of service via application...

Versant Object Database 7.0.1.3 - Commands Execution

Versant server = 7.0.1.3 Arbitrary Commands Execution Exploit Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/5213.zip 2008-versantcmd.zip milw0rm.com 2008-03-04...

Versant Object Database 7.0.1.3 - Commands Execution

Versant Object Database 7.0.1.3 - Commands Execution Versant server = 7.0.1.3 Arbitrary Commands Execution Exploit Exploit-DB Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/5213.zip 2008-versantcmd.zip milw0rm.com 2008-03-04...