Skip to content
OpenAdvisories

Archive

28 February 2007

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2007-1165 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2007-1166 Public exploit

    SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2007-1163 Public exploit

    SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-1171 Public exploit

    SQL injection vulnerability in includes/nsbypass.php in NukeSentinel 2.5.05, 2.5.11, and other versions before 2.5.12 a…

  • Unscored —
    CVE-2007-1164 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in DBImageGallery 1.2.2 allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-1167 Public exploit

    inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data…

  • Unscored —
    CVE-2007-1162 Public exploit

    A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) all…

  • Unscored —
    CVE-2007-1172 Public exploit

    SQL injection vulnerability in nukesentinel.php in NukeSentinel 2.5.05, and possibly earlier, allows remote attackers t…

  • Unscored —
    CVE-2006-7091 Public exploit

    PHP remote file inclusion vulnerability in config.php in phpht Topsites FREE 1.022b allows remote attackers to execute …

  • Unscored —
    CVE-2006-7086 Public exploit

    The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and d…

  • Unscored —
    CVE-2007-0001 Public exploit

    The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.…

  • Unscored —
    CVE-2007-1159 Public exploit

    Cross-site scripting (XSS) vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arb…

  • Unscored —
    CVE-2007-1158 Public exploit

    Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows …