Skip to content
OpenAdvisories

Archive

27 February 2007

Vulnerabilities first published on this day (UTC), newest first.

27 results · Clear filters · Feed

  • Unscored —
    CVE-2006-7068 Public exploit

    PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-7072 Public exploit

    Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2006-7081 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2006-7080 Public exploit

    Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to d…

  • Unscored —
    CVE-2006-7065 Public exploit EPSS 21%

    Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain X…

  • Unscored —
    CVE-2006-7069 Public exploit

    PHP remote file inclusion vulnerability in smarty_config.php in Socketwiz Bookmarks 2.0 and earlier allows remote attac…

  • Unscored —
    CVE-2006-7071 Public exploit

    SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote at…

  • Unscored —
    CVE-2006-7079 Public exploit EPSS 13%

    Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrit…

  • Unscored —
    CVE-2006-7070 Public exploit

    Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier al…

  • Unscored —
    CVE-2006-7066 Public exploit EPSS 22%

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creatin…

  • Unscored —
    CVE-2007-1156 Public exploit

    JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct r…

  • Unscored —
    CVE-2007-1140 Public exploit

    Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a…

  • Unscored —
    CVE-2007-1142 Public exploit

    Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2007-1138 Public exploit

    Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote atta…

  • Unscored —
    CVE-2007-1151 Public exploit

    Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2007-1149 Public exploit

    Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (do…

  • Unscored —
    CVE-2007-1148 Public exploit

    PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-1141 Public exploit

    PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-1152 Public exploit

    Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2007-1118 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2007-1130 Public exploit

    PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-1125 Public exploit

    Cross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to i…

  • Unscored —
    CVE-2007-1127 Public exploit

    Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files vi…

  • Unscored —
    CVE-2007-1126 Public exploit

    Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (…

  • Unscored —
    CVE-2007-1133 Public exploit

    PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-1124 Public exploit

    Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arb…

  • Unscored —
    CVE-2007-1131 Public exploit

    PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrar…