Archive
5 January 2007
Vulnerabilities first published on this day (UTC), newest first.
24 results · Clear filters · Feed
-
Unscored —CVE-2006-6890 Public exploit
Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2006-6888 Public exploit
P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2006-6889 Public exploit
FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information under the web root with insufficient access cont…
-
Unscored —CVE-2006-6891 Public exploit
Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —CVE-2007-0091 Public exploit
newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —CVE-2007-0092 Public exploit
SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-0093 Public exploit
SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbi…
-
Unscored —CVE-2007-0098 Public exploit
Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, all…
-
Unscored —CVE-2006-6887 Public exploit
Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP …
-
Unscored —CVE-2006-6885 Public exploit
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Intern…
-
Unscored —CVE-2006-6884 Public exploit
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for Win…
-
Unscored —CVE-2007-0085 Public exploit
Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when t…
-
Unscored —CVE-2007-0082 Public exploit
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows…
-
Unscored —CVE-2007-0081 Public exploit
Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a…
-
Unscored —CVE-2004-2670 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitr…
-
Unscored —CVE-2006-6878 Public exploit
admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights[7] par…
-
Unscored —CVE-2006-6873 Public exploit
Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-6880 Public exploit
Multiple SQL injection vulnerabilities in code/guestadd.php in PHP-Update 2.7 and earlier allow remote attackers to exe…
-
Unscored —CVE-2006-6872 Public exploit
Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2006-6871 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2006-6879 Public exploit
Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated u…
-
Unscored —CVE-2006-6877 Public exploit
Directory traversal vulnerability in index.php in Matteo Lucarelli 3editor CMS 0.42 and earlier, when register_globals …
-
Unscored —CVE-2003-1317 Public exploit
Cross-site scripting (XSS) vulnerability in mod.php in eNdonesia 8.2 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2007-0059 Public exploit
Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbit…