Skip to content
OpenAdvisories

Archive

14 March 2007

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement …

  • Unscored —

    ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly str…

  • Unscored —

    GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting…

  • Unscored —

    The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x before 5.2.2, does not imp…

  • Unscored —

    SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —

    Buffer overflow in the urarlib_get function in Christian Scheurer UniquE RAR File Library (unrarlib, aka URARFileLib) 0…

  • Unscored —
    CVE-2007-1455 Public exploit

    Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated us…

  • Unscored —
    CVE-2007-1453 Public exploit

    Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows conte…

  • Unscored —
    CVE-2007-1452 Public exploit

    The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which a…

  • Unscored —

    PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows remote attackers to execute arbitrary P…

  • Unscored —

    Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary…

  • Unscored —
    CVE-2007-1458 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code v…

  • Unscored —
    CVE-2007-1459 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execut…

  • Unscored —

    Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretio…

  • Unscored —

    netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.

  • Unscored —

    The 4thPass browser (BlackBerry Browser) on the RIM BlackBerry 8100 (Pearl) before 4.2.1 allows remote attackers to cau…

  • Unscored —
    CVE-2007-1446 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1beta allow remote attackers to exe…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in register.php in Woltlab Burning Board (wBB) 2.3.6 and Burning Bo…

  • Unscored —
    CVE-2007-1445 Public exploit

    SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote atta…