Archive
12 February 2007
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
The mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to integer when the variab…
-
Unscored —
PHP remote file inclusion vulnerability in admin/index.php in Fusion Polls allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-7005 Public exploit
SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Joomla! before 1.0.10 allows remote attackers to spoof the frontend submission forms, which has unknown impact and atta…
-
Unscored —
Unspecified vulnerability in Joomla! before 1.0.10 has unknown impact and attack vectors, related to "securing mosmsg f…
-
Unscored —CVE-2006-7004 Public exploit
Cross-site scripting (XSS) vulnerability in email_request.php in PSY Auction allows remote attackers to inject arbitrar…
-
Unscored —
PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers…
-
Unscored —CVE-2006-7007 Public exploit
Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service (daemon crash) via a …
-
Unscored —CVE-2007-0888 Public exploit
Directory traversal vulnerability in the TFTP server in Kiwi CatTools before 3.2.0 beta allows remote attackers to read…
-
Unscored —
Directory traversal vulnerability in phpMyVisites before 2.2 allows remote attackers to include arbitrary files via lea…
-
Unscored —CVE-2007-0890 Public exploit
Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the GetCurrentCompletePath function in phpmyvisites.php in phpMyVisites bef…
-
Unscored —
axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial…
-
Unscored —CVE-2007-0886 Public exploit
Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (appli…
-
Unscored —
MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.…
-
Unscored —
CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and co…
-
Unscored —
Kiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding") for passwords, account names, and IP addre…
-
Unscored —
Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen (Rainbow.Zen) extens…
-
Unscored —
Capital Request Forms stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —
Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service an…
-
Unscored —
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterp…
-
Unscored —CVE-2007-0883 Public exploit
Directory traversal vulnerability in portalgroups/portalgroups/getfile.cgi in IP3 NetAccess before firmware 4.1.9.6 all…
-
Unscored —
Buffer overflow in Roaring Penguin MIMEDefang 2.59 and 2.60 allows remote attackers to cause a denial of service (appli…
-
Unscored —CVE-2007-0881 Public exploit
PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute…
-
Unscored —CVE-2007-0878 EPSS 21%
Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denia…
-
Unscored —
Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote attackers to read arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in add_comment.php in Wheatblog (wB) 1.1 allows remote attackers to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624 allows remote…
-
Unscored —CVE-2007-0873 Public exploit
nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a d…
-
Unscored —CVE-2007-0872 Public exploit
Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remot…
-
Unscored —
SQL injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary SQL commands via uns…
-
Unscored —
Unspecified vulnerability in March Networks DVR 3000 and 4000 Digital Video Recorders allows attackers to cause an unsp…
-
Unscored —CVE-2007-0871 Public exploit
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary P…
-
Unscored —
Allons_voter 1.0 allows remote attackers to bypass authentication and access certain administrative functionality via a…
-
Unscored —
Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to (1) email/mail.php, …
-
Unscored —
install/loader_help.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via …
-
Unscored —
attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary HTM…
-
Unscored —
Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attacker…