Archive
14 March 2007
Vulnerabilities first published on this day (UTC), newest first.
19 results · Feed
-
Unscored —
The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement …
-
Unscored —
ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly str…
-
Unscored —
GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting…
-
Unscored —
The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x before 5.2.2, does not imp…
-
Unscored —
SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —
Buffer overflow in the urarlib_get function in Christian Scheurer UniquE RAR File Library (unrarlib, aka URARFileLib) 0…
-
Unscored —CVE-2007-1455 Public exploit
Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated us…
-
Unscored —CVE-2007-1453 Public exploit
Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows conte…
-
Unscored —CVE-2007-1452 Public exploit
The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which a…
-
Unscored —
PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows remote attackers to execute arbitrary P…
-
Unscored —
Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary…
-
Unscored —CVE-2007-1458 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code v…
-
Unscored —CVE-2007-1459 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execut…
-
Unscored —
Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretio…
-
Unscored —
netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug.
-
Unscored —
The 4thPass browser (BlackBerry Browser) on the RIM BlackBerry 8100 (Pearl) before 4.2.1 allows remote attackers to cau…
-
Unscored —CVE-2007-1446 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1beta allow remote attackers to exe…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Woltlab Burning Board (wBB) 2.3.6 and Burning Bo…
-
Unscored —CVE-2007-1445 Public exploit
SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote atta…