Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
630 results · Feed
-
Unscored —
phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via crafted argume…
-
Unscored —
CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.p…
-
Unscored —CVE-2006-7017 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code…
-
Unscored —
The Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web page via an arbitrary …
-
Unscored —
admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain…
-
Unscored —
PHP remote file inclusion vulnerability in admin.jobline.php in Jobline 1.1.1 allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-7021 Public exploit
PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers …
-
Unscored —
phpjobboard allows remote attackers to bypass authentication and gain administrator privileges via a direct request to …
-
Unscored —CVE-2006-7024 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Harpia CMS 1.0.5 and earlier allow remote attackers to execute ar…
-
Unscored —
phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbit…
-
Unscored —CVE-2007-0955 Public exploit
The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cau…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject …
-
Unscored —CVE-2007-0950 Public exploit
Cross-site scripting (XSS) vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inj…
-
Unscored —
Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers …
-
Unscored —
MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and at…
-
Unscored —CVE-2007-0951 Public exploit
SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrar…
-
Unscored —
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges…
-
Unscored —CVE-2007-0920 Public exploit
SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arb…
-
Unscored —
Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a …
-
Unscored —
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and cond…
-
Unscored —
Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via "…
-
Unscored —
buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a q…
-
Unscored —
Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string…
-
Unscored —
Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and …
-
Unscored —
Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote …
-
Unscored —CVE-2007-0919 Public exploit
Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to…
-
Unscored —CVE-2007-0925 Public exploit
Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to in…
-
Unscored —
Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject ar…
-
Unscored —
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do…
-
Unscored —
Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows…
-
Unscored —
The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signa…
-
Unscored —
Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) …
-
Unscored —
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and…
-
Unscored —
Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges…
-
Unscored —
The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not e…
-
Unscored —CVE-2007-0913 EPSS 12%
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via u…
-
Unscored —
Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving th…