Skip to content
OpenAdvisories

Archive

4 January 2007

Vulnerabilities first published on this day (UTC), newest first.

← December 2006 2007 / January /4 February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • Unscored —
    CVE-2006-6866 Public exploit

    STphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access control, which allows r…

  • Critical 9.8
    CVE-2006-6863 Public exploit EPSS 13%

    PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote at…

  • Unscored —
    CVE-2006-6869 Public exploit

    Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic…

  • Unscored —
    CVE-2006-6859 Public exploit

    SQL injection vulnerability in coupon_detail.asp in Website Designs For Less Click N' Print Coupons 2005.01 and earlier…

  • Unscored —
    CVE-2006-6864 Public exploit

    PHP remote file inclusion vulnerability in E2_header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers t…

  • Unscored —
    CVE-2006-6861 Public exploit

    Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-6867 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Vladimir Menshakov buratinable templator (aka bubla) 0.9.1 allow …

  • Unscored —
    CVE-2006-6865 Public exploit

    Directory traversal vulnerability in SAFileUpSamples/util/viewsrc.asp in SoftArtisans FileUp (SAFileUp) 5.0.14 allows r…

  • Unscored —
    CVE-2007-0055 Public exploit

    Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read …

  • Unscored —
    CVE-2007-0052 Public exploit

    SQL injection vulnerability in haberdetay.asp in Vizayn Haber allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-0053 Public exploit

    SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2007-0056 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote att…

  • Unscored —
    CVE-2007-0054 Public exploit

    Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject…

  • Unscored —
    CVE-2007-0051 Public exploit

    Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted a…

  • Unscored —
    CVE-2007-0049 Public exploit

    Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add ac…

  • Unscored —
    CVE-2006-6851 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in contact_us.php in ac4p Mobilelib gold 2 allow remote attackers t…

  • Unscored —
    CVE-2006-6855 Public exploit

    AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service (daemon crash) via a floo…

  • Unscored —
    CVE-2006-6856 Public exploit

    Direct static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-6853 Public exploit

    Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary …