Archive
19 January 2007
Vulnerabilities first published on this day (UTC), newest first.
57 results · Feed
-
Unscored —
SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecifi…
-
Unscored —
DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors.
-
Unscored —CVE-2007-0368 Public exploit
Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or …
-
Unscored —
Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users…
-
Unscored —
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-0371 Public exploit
A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) all…
-
Unscored —
WDaemon 9.5.4 allows remote attackers to access the /WorldClient.dll URI on TCP port 3000, which has unknown impact. NO…
-
Unscored —CVE-2007-0369 Public exploit
SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to…
-
Unscored —CVE-2007-0370 Public exploit
Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to in…
-
Unscored —
Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecif…
-
Unscored —
Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an…
-
Unscored —
The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalida…
-
Unscored —
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users t…
-
Unscored —CVE-2007-0389 Public exploit
Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Educa…
-
Unscored —
Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via (1)…
-
Unscored —CVE-2007-0388 Public exploit
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in th…
-
Unscored —
Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —
Multiple SQL injection vulnerabilities in letterman.class.php in the Letterman 1.2.3 (com_letterman) component for Joom…
-
Unscored —
Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via u…
-
Unscored —
SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 (com_weblinks) al…
-
Unscored —
Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, allows remote attacke…
-
Unscored —
Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attac…
-
Unscored —
HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local use…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-0373 EPSS 12%
Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for (1) plugins/user/ex…
-
Unscored —
SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute…
-
Unscored —CVE-2007-0395 Public exploit
PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers t…
-
Unscored —
Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH…
-
Unscored —CVE-2007-0019 Public exploit
Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execu…
-
Unscored —
Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the co…
-
Unscored —CVE-2007-0364 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to i…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009 and earlier allow remot…
-
Unscored —CVE-2006-6942 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbit…
-
Unscored —
phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false hea…
-
Unscored —CVE-2006-6943 Public exploit
PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/che…
-
Unscored —
Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attack…
-
Unscored —
choShilA.bpl in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows local users, and user-assisted remote attackers …