Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
224 results · Clear filters · Feed
-
Unscored —CVE-2006-7017 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2006-7021 Public exploit
PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers …
-
Unscored —CVE-2006-7024 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Harpia CMS 1.0.5 and earlier allow remote attackers to execute ar…
-
Unscored —CVE-2007-0955 Public exploit
The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cau…
-
Unscored —CVE-2007-0950 Public exploit
Cross-site scripting (XSS) vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inj…
-
Unscored —
Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers …
-
Unscored —CVE-2007-0951 Public exploit
SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-0920 Public exploit
SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arb…
-
Unscored —
Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a …
-
Unscored —CVE-2007-0919 Public exploit
Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to…
-
Unscored —CVE-2007-0925 Public exploit
Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to in…
-
Unscored —
The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize t…
-
Unscored —CVE-2007-0911 Public exploit
Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of…
-
Unscored —
The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbit…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals …
-
Unscored —CVE-2007-0904 Public exploit
SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-0896 Public exploit
Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows r…
-
Unscored —CVE-2006-7005 Public exploit
SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2006-7004 Public exploit
Cross-site scripting (XSS) vulnerability in email_request.php in PSY Auction allows remote attackers to inject arbitrar…
-
Unscored —CVE-2006-7007 Public exploit
Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service (daemon crash) via a …
-
Unscored —CVE-2007-0888 Public exploit
Directory traversal vulnerability in the TFTP server in Kiwi CatTools before 3.2.0 beta allows remote attackers to read…
-
Unscored —CVE-2007-0890 Public exploit
Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allo…
-
Unscored —
axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial…
-
Unscored —CVE-2007-0886 Public exploit
Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (appli…
-
Unscored —
Cross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen (Rainbow.Zen) extens…
-
Unscored —
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterp…
-
Unscored —CVE-2007-0883 Public exploit
Directory traversal vulnerability in portalgroups/portalgroups/getfile.cgi in IP3 NetAccess before firmware 4.1.9.6 all…
-
Unscored —CVE-2007-0881 Public exploit
PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute…
-
Unscored —CVE-2007-0873 Public exploit
nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a d…
-
Unscored —CVE-2007-0872 Public exploit
Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remot…
-
Unscored —CVE-2007-0871 Public exploit
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary P…
-
Unscored —CVE-2006-6995 Public exploit
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername…
-
Unscored —CVE-2007-0867 Public exploit
PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers …
-
Unscored —CVE-2007-0864 Public exploit
SQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to inject arbitrary SQL comma…
-
Unscored —CVE-2007-0865 Public exploit
SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject a…
-
Unscored —CVE-2007-0845 Public exploit
admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain admi…
-
Unscored —CVE-2007-0848 Public exploit
PHP remote file inclusion vulnerability in classes/class_mail.inc.php in Maian Recipe 1.0 allows remote attackers to ex…
-
Unscored —CVE-2007-0847 Public exploit
SQL injection vulnerability in mod/PM/reply.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attac…
-
Unscored —CVE-2007-0849 Public exploit
scripts/cronscript.php in SysCP 1.2.15 and earlier does not properly quote pathnames in user home directories, which al…
-
Unscored —CVE-2007-0846 Public exploit
Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote…