Archive
27 February 2007
Vulnerabilities first published on this day (UTC), newest first.
69 results · Feed
-
Unscored —CVE-2006-7068 Public exploit
PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute ar…
-
Unscored —
Directory traversal vulnerability in index.php in Rigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers …
-
Unscored —CVE-2006-7072 Public exploit
Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to in…
-
Unscored —
Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers t…
-
Unscored —
admin.php in SmartSiteCMS 1.0 allows remote attackers to bypass authentication and gain administrator privileges by set…
-
Unscored —
Rigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to add arbitrary content and conduct XSS attacks v…
-
Unscored —CVE-2006-7081 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Professional Home Page Tools Login Script, as of July 2006, allo…
-
Unscored —
Buffer overflow in the meta_read_flac function in meta_decoder.c for Aqualung 0.9beta5 and earlier, and CVS 0.193.2 and…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Opentools Attachment Mod before 2.4.5 allows remote attackers to inject arb…
-
Unscored —
SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arb…
-
Unscored —CVE-2006-7080 Public exploit
Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to d…
-
Unscored —
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain X…
-
Unscored —CVE-2006-7069 Public exploit
PHP remote file inclusion vulnerability in smarty_config.php in Socketwiz Bookmarks 2.0 and earlier allows remote attac…
-
Unscored —CVE-2006-7071 Public exploit
SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote at…
-
Unscored —
Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrit…
-
Unscored —CVE-2006-7070 Public exploit
Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier al…
-
Unscored —
Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other i…
-
Unscored —
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creatin…
-
Unscored —
Rigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to bypass authentication and upload arbitrary file…
-
Unscored —CVE-2007-1156 Public exploit
JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct r…
-
Unscored —
PHP remote file inclusion vulnerability in view.php in hbm allows remote attackers to execute arbitrary PHP code via a …
-
Unscored —CVE-2007-1140 Public exploit
Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a…
-
Unscored —
Unrestricted file upload vulnerability in LoveCMS 1.4 allows remote authenticated administrators to upload arbitrary fi…
-
Unscored —
Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary …
-
Unscored —CVE-2007-1142 Public exploit
Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitr…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrar…
-
Unscored —
Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2007-1138 Public exploit
Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote atta…
-
Unscored —CVE-2007-1151 Public exploit
Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —
Unspecified vulnerability in Watchtower (WT) before 0.12 has unknown impact and attack vectors, related to "unauthorize…
-
Unscored —
Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arb…
-
Unscored —
Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitr…
-
Unscored —CVE-2007-1149 Public exploit
Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (do…
-
Unscored —CVE-2007-1148 Public exploit
PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrar…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote …
-
Unscored —CVE-2007-1141 Public exploit
PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbi…
-
Unscored —
SQL injection vulnerability in webSPELL allows remote attackers to execute arbitrary SQL commands via a ws_auth cookie,…
-
Unscored —
putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it…