Skip to content
OpenAdvisories

Archive

27 March 2007

Vulnerabilities first published on this day (UTC), newest first.

18 results · Clear filters · Feed

  • Unscored —
    CVE-2007-1712 Public exploit

    SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to exec…

  • Unscored —
    CVE-2007-1715 Public exploit

    PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers …

  • Unscored —
    CVE-2007-1714 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in CcCounter 2.0 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-1708 Public exploit

    PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2007-1711 Public exploit

    Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbi…

  • Unscored —
    CVE-2007-1702 Public exploit

    PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote…

  • Unscored —
    CVE-2007-1709 Public exploit

    Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows conte…

  • Unscored —
    CVE-2007-1701 Public exploit

    PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to exe…

  • Unscored —
    CVE-2007-1696 Public exploit

    SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2007-1706 Public exploit

    SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2007-1700 Public exploit

    The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session var…

  • Unscored —
    CVE-2007-1704 Public exploit

    SQL injection vulnerability in index.php in the Car Manager (com_resman) 1.1 and earlier component for Joomla! allows r…

  • Unscored —
    CVE-2007-1698 Public exploit

    download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain se…

  • Unscored —
    CVE-2007-1697 Public exploit EPSS 73%

    PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2007-1699 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for M…

  • Unscored —
    CVE-2007-1705 Public exploit

    SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2007-1707 Public exploit

    PHP remote file inclusion vulnerability in index.php in Net Side Content Management System (Net-Side.net CMS) allows re…

  • Unscored —
    CVE-2007-1703 Public exploit

    SQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component for Joomla! allows re…