CVE-2008-2295

creationtimestamp| type| source ---|---|--- 2008-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5620...

CVE-2008-1802

creationtimestamp| type| source ---|---|--- 2008-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5585...

CVE-2008-2117: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a news action to index.php, a different vector than CVE-2007-6126...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

No description provided by source. Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module...

CVE-2008-2130

creationtimestamp| type| source ---|---|--- 2008-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31747...

CVE-2008-6653

creationtimestamp| type| source ---|---|--- 2008-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5527...

CVE-2008-1489

creationtimestamp| type| source ---|---|--- 2008-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5498...

CVE-2008-1975

creationtimestamp| type| source ---|---|--- 2008-04-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5487...

CVE-2008-1906

Cross-site scripting XSS vulnerability in calendar.php in cpCommerce 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a view.year action...

CVE-2008-1906: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in calendar.php in cpCommerce 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a view.year action...

CVE-2008-1839: Improper Neutralization of Input During Web Page Generation

Multgiple cross-site scripting XSS vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 day, 2 month, and 3 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-4764

creationtimestamp| type| source ---|---|--- 2008-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5435...

CVE-2008-1869

creationtimestamp| type| source ---|---|--- 2008-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5383...

CVE-2008-1690

creationtimestamp| type| source ---|---|--- 2008-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31563...

CVE-2008-1635

creationtimestamp| type| source ---|---|--- 2008-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5324...

CVE-2008-0114

creationtimestamp| type| source ---|---|--- 2008-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5287...

CVE-2008-1344: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year parameter in a dayview action to plugins/calendar/calendarbackend.php and the 2 page parameter to ajaxpbackend.php...

CVE-2008-1295

creationtimestamp| type| source ---|---|--- 2008-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5231...

CVE-2008-1145

creationtimestamp| type| source ---|---|--- 2008-03-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5215...

CVE-2008-1220

creationtimestamp| type| source ---|---|--- 2008-03-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31351...