Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
224 results · Clear filters · Feed
-
Unscored —CVE-2007-1165 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2007-1166 Public exploit
SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-1163 Public exploit
SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-1171 Public exploit
SQL injection vulnerability in includes/nsbypass.php in NukeSentinel 2.5.05, 2.5.11, and other versions before 2.5.12 a…
-
Unscored —CVE-2007-1164 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DBImageGallery 1.2.2 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-1167 Public exploit
inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data…
-
Unscored —CVE-2007-1162 Public exploit
A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) all…
-
Unscored —CVE-2007-1172 Public exploit
SQL injection vulnerability in nukesentinel.php in NukeSentinel 2.5.05, and possibly earlier, allows remote attackers t…
-
Unscored —CVE-2006-7091 Public exploit
PHP remote file inclusion vulnerability in config.php in phpht Topsites FREE 1.022b allows remote attackers to execute …
-
Unscored —CVE-2006-7086 Public exploit
The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and d…
-
Unscored —CVE-2007-0001 Public exploit
The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.…
-
Unscored —CVE-2007-1159 Public exploit
Cross-site scripting (XSS) vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arb…
-
Unscored —CVE-2007-1158 Public exploit
Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows …
-
Unscored —CVE-2006-7068 Public exploit
PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2006-7072 Public exploit
Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to in…
-
Unscored —CVE-2006-7081 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2006-7080 Public exploit
Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to d…
-
Unscored —
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain X…
-
Unscored —CVE-2006-7069 Public exploit
PHP remote file inclusion vulnerability in smarty_config.php in Socketwiz Bookmarks 2.0 and earlier allows remote attac…
-
Unscored —CVE-2006-7071 Public exploit
SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote at…
-
Unscored —
Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrit…
-
Unscored —CVE-2006-7070 Public exploit
Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier al…
-
Unscored —
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creatin…
-
Unscored —CVE-2007-1156 Public exploit
JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct r…
-
Unscored —CVE-2007-1140 Public exploit
Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a…
-
Unscored —CVE-2007-1142 Public exploit
Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2007-1138 Public exploit
Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote atta…
-
Unscored —CVE-2007-1151 Public exploit
Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2007-1149 Public exploit
Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (do…
-
Unscored —CVE-2007-1148 Public exploit
PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-1141 Public exploit
PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbi…
-
Unscored —CVE-2007-1152 Public exploit
Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a…
-
Unscored —CVE-2007-1118 Public exploit
Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2007-1130 Public exploit
PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbit…
-
Unscored —CVE-2007-1125 Public exploit
Cross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to i…
-
Unscored —CVE-2007-1127 Public exploit
Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files vi…
-
Unscored —CVE-2007-1126 Public exploit
Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (…
-
Unscored —CVE-2007-1133 Public exploit
PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-1124 Public exploit
Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arb…
-
Unscored —CVE-2007-1131 Public exploit
PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrar…