Archive
5 January 2007
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
Unscored —CVE-2006-6890 Public exploit
Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2006-6888 Public exploit
P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2006-6889 Public exploit
FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information under the web root with insufficient access cont…
-
Unscored —CVE-2006-6891 Public exploit
Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the GetLocation function in online.php in Jonathon J. Freeman OvBB 0.13a al…
-
Unscored —
Multiple stack-based buffer overflows in the (1) LoadTree and (2) ReadHeader functions in PAISO.DLL 1.7.3.0 (1.7.3 beta…
-
Unscored —CVE-2007-0091 Public exploit
newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —
jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers t…
-
Unscored —CVE-2007-0092 Public exploit
SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-0093 Public exploit
SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbi…
-
Unscored —
Multiple directory traversal vulnerabilities in openmedia allow remote attackers to read arbitrary files via a .. (dot …
-
Unscored —CVE-2007-0086 EPSS 10%
The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cau…
-
Unscored —CVE-2007-0087 EPSS 24%
Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows …
-
Unscored —
Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —
WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attacke…
-
Unscored —
CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote…
-
Unscored —
phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblue_ora…
-
Unscored —CVE-2007-0098 Public exploit
Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, all…
-
Unscored —CVE-2006-6887 Public exploit
Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP …
-
Unscored —
phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request for (1) files.public-use…
-
Unscored —
Cross-site scripting (XSS) vulnerability in golden book allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —
Buffer overflow in the Get_Wep function in cofvnet.c for ATMEL Linux PCI PCMCIA USB Drivers drivers 3.4.1.1 corruption …
-
Unscored —
PHP remote file inclusion vulnerability in php4you.php in PHPIrc_bot 0.2 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2006-6885 Public exploit
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Intern…
-
Unscored —CVE-2006-6884 Public exploit
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for Win…
-
Unscored —
AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers t…
-
Unscored —CVE-2007-0085 Public exploit
Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when t…
-
Unscored —
Openforum stores sensitive information under the web root with insufficient access control, which allows remote attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web …
-
Unscored —
rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers t…
-
Unscored —CVE-2007-0082 Public exploit
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows…
-
Unscored —
Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain pr…
-
Unscored —
BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attack…
-
Unscored —CVE-2007-0081 Public exploit
Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a…
-
Unscored —
lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers t…
-
Unscored —
Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrar…
-
Unscored —
mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certa…
-
Unscored —CVE-2004-2670 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitr…
-
Unscored —CVE-2006-6878 Public exploit
admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights[7] par…
-
Unscored —
Buffer overflow in the validateospheader function in the Open Settlement Protocol (OSP) module in OpenSER 1.1.0 and ear…