Skip to content
OpenAdvisories

Archive

18 January 2007

Vulnerabilities first published on this day (UTC), newest first.

19 results · Clear filters · Feed

  • Unscored —
    CVE-2007-0338 Public exploit

    Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command wit…

  • Unscored —
    CVE-2007-0333 Public exploit

    Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into …

  • Unscored —
    CVE-2007-0337 Public exploit

    Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and e…

  • Unscored —
    CVE-2007-0335 Public exploit

    Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execut…

  • High 7.5
    CVE-2007-0342 Public exploit

    WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and applicat…

  • Unscored —
    CVE-2007-0340 Public exploit

    SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2007-0344 Public exploit

    Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier…

  • Unscored —
    CVE-2007-0329 Public exploit

    download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathn…

  • Unscored —
    CVE-2007-0302 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-0301 Public exploit

    PHP remote file inclusion vulnerability in _admin/admin_menu.php in FdWeB Espace Membre 2.1 and earlier allows remote a…

  • Unscored —
    CVE-2007-0300 Public exploit

    PHP remote file inclusion vulnerability in i-accueil.php in TLM CMS 1.1 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2007-0307 Public exploit

    PHP remote file inclusion vulnerability in include/common.php in Poplar Gedcom Viewer 2.0 and earlier allows remote att…

  • Unscored —
    CVE-2007-0311 Public exploit

    Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service…

  • Unscored —
    CVE-2007-0316 Public exploit

    Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.010 and earlier, when magic_quotes_gpc i…

  • Unscored —
    CVE-2007-0314 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2007-0305 Public exploit

    SQL injection vulnerability in etkinlikbak.asp in Okul Web Otomasyon Sistemi 4.0.1 allows remote attackers to execute a…

  • Unscored —
    CVE-2007-0309 Public exploit

    SQL injection vulnerability in blocks/block-Old_Articles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when register…

  • Unscored —
    CVE-2007-0306 Public exploit

    SQL injection vulnerability in visu_user.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2007-0304 Public exploit

    SQL injection vulnerability in duyuru.asp in MiNT Haber Sistemi 2.7 allows remote attackers to execute arbitrary SQL co…