Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
224 results · Clear filters · Feed
-
Unscored —CVE-2006-6976 Public exploit
PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers t…
-
Unscored —CVE-2007-0836 Public exploit
admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitr…
-
Unscored —CVE-2007-0839 Public exploit
Multiple PHP remote file inclusion vulnerabilities in index/index_album.php in Valarsoft WebMatic 2.6 allow remote atta…
-
Unscored —CVE-2007-0837 Public exploit
PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attacker…
-
Unscored —CVE-2007-0827 Public exploit
The Alibaba Alipay PTA Module ActiveX control (PTA.DLL) allows remote attackers to execute arbitrary code via a JavaScr…
-
Unscored —CVE-2007-0825 Public exploit
FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD …
-
Unscored —CVE-2007-0826 Public exploit
SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-0828 Public exploit
PHP remote file inclusion vulnerability in affichearticles.php3 in MySQLNewsEngine allows remote attackers to execute a…
-
Unscored —CVE-2007-0824 Public exploit
PHP remote file inclusion vulnerability in inhalt.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-0820 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbi…
-
Unscored —CVE-2007-0821 Public exploit
Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary fil…
-
Unscored —CVE-2007-0810 Public exploit
PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to exe…
-
Unscored —
The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earli…
-
Unscored —CVE-2007-0804 Public exploit
Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to injec…
-
Unscored —CVE-2007-0812 Public exploit
SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenti…
-
Unscored —CVE-2007-0805 Public exploit
The ps (/usr/ucb/ps) command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including en…
-
Unscored —CVE-2007-0809 Public exploit
PHP remote file inclusion vulnerability in includes/class_template.php in Categories hierarchy (aka CH or mod-CH) 2.1.2…
-
Unscored —
Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a deni…
-
Unscored —CVE-2007-0817 Public exploit
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTM…
-
Unscored —CVE-2007-0786 Public exploit
SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attacker…
-
Unscored —CVE-2007-0790 Public exploit
Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner.
-
Unscored —CVE-2007-0797 Public exploit
PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remot…
-
Unscored —
PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote…
-
Unscored —CVE-2007-0768 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 …
-
Unscored —CVE-2007-0760 Public exploit
EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an ad…
-
Unscored —CVE-2007-0757 Public exploit
PHP remote file inclusion vulnerability in index.php in Miguel Nunes Call of Duty 2 (CoD2) DreamStats System 4.2 and ea…
-
Unscored —CVE-2007-0761 Public exploit
PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter (ezconvert) 0.2 allows remote attacker…
-
Unscored —CVE-2007-0764 Public exploit
Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload a…
-
Unscored —CVE-2007-0759 Public exploit
Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-0763 Public exploit
Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote atta…
-
Unscored —CVE-2007-0756 Public exploit
Chicken of the VNC (cotv) 2.0 allows remote attackers to cause a denial of service (application crash) via a large comp…
-
Unscored —CVE-2007-0758 Public exploit
PHP remote file inclusion vulnerability in lang.php in PHPProbid 5.24 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2007-0766 Public exploit
Stack-based buffer overflow in Remotesoft .NET Explorer 2.0.1 allows user-assisted remote attackers to cause a denial o…
-
Unscored —CVE-2007-0765 Public exploit
SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2007-0762 Public exploit
PHP remote file inclusion vulnerability in includes/functions.php in phpBB++ Build 100 allows remote attackers to execu…
-
Unscored —CVE-2006-6966 Public exploit
phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter with a valu…
-
Unscored —CVE-2007-0704 Public exploit
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-0703 Public exploit
PHP remote file inclusion vulnerability in library/StageLoader.php in WebBuilder 2.0 and earlier allows remote attacker…
-
Unscored —CVE-2007-0699 Public exploit
PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Po…
-
Unscored —CVE-2007-0702 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP…