Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
273 results · Clear filters · Feed
-
Unscored —CVE-2006-6859 Public exploit
SQL injection vulnerability in coupon_detail.asp in Website Designs For Less Click N' Print Coupons 2005.01 and earlier…
-
Unscored —CVE-2006-6864 Public exploit
PHP remote file inclusion vulnerability in E2_header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers t…
-
Unscored —CVE-2006-6861 Public exploit
Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-6867 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Vladimir Menshakov buratinable templator (aka bubla) 0.9.1 allow …
-
Unscored —CVE-2006-6865 Public exploit
Directory traversal vulnerability in SAFileUpSamples/util/viewsrc.asp in SoftArtisans FileUp (SAFileUp) 5.0.14 allows r…
-
Unscored —CVE-2007-0055 Public exploit
Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read …
-
Unscored —CVE-2007-0052 Public exploit
SQL injection vulnerability in haberdetay.asp in Vizayn Haber allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-0053 Public exploit
SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute…
-
Unscored —CVE-2007-0056 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote att…
-
Unscored —CVE-2007-0054 Public exploit
Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject…
-
Unscored —CVE-2007-0051 Public exploit
Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted a…
-
Unscored —CVE-2007-0049 Public exploit
Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add ac…
-
Unscored —CVE-2006-6851 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in contact_us.php in ac4p Mobilelib gold 2 allow remote attackers t…
-
Unscored —CVE-2006-6855 Public exploit
AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service (daemon crash) via a floo…
-
Unscored —CVE-2006-6856 Public exploit
Direct static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote attackers to inject arbitra…
-
Unscored —CVE-2006-6853 Public exploit
Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-6488 Public exploit
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) befor…
-
Unscored —
Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attac…
-
Unscored —
Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows r…
-
Unscored —CVE-2006-6850 Public exploit
PHP remote file inclusion vulnerability in include.php in the Roster Module (character_roster) in Shadowed Portal 5.7 a…
-
Unscored —CVE-2006-6846 Public exploit
Multiple SQL injection vulnerabilities in While You Were Out (WYWO) InOut Board 1.0 allow remote attackers to execute a…
-
Unscored —CVE-2006-6838 Public exploit
Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive in…
-
Unscored —CVE-2006-6847 Public exploit
An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2006-6848 Public exploit
SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2006-6842 Public exploit
SQL injection vulnerability in admin/admin_acronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote att…
-
Unscored —CVE-2006-6845 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitr…
-
Unscored —CVE-2006-6849 Public exploit
administration/index.php in Cahier de texte (CDT) 2.2 does not properly exit when authentication fails, which allows re…
-
Unscored —
Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA…
-
Unscored —CVE-2007-0016 Public exploit
Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code via a long filename in …
-
Unscored —CVE-2006-6831 Public exploit
SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2006-6830 Public exploit
PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers to execut…
-
Unscored —CVE-2006-6827 Public exploit
Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via …
-
Unscored —
Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.