Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
300 results · Clear filters · Feed
-
Unscored —
Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute…
-
Unscored —
Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execu…
-
Unscored —CVE-2006-7170 Public exploit
Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-7168 Public exploit
PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers …
-
Unscored —CVE-2006-7167 Public exploit
Unspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the authentication mechanism for …
-
Unscored —CVE-2006-7169 Public exploit
PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allow…
-
Unscored —CVE-2007-1515 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers…
-
Unscored —CVE-2007-1508 Public exploit
Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2007-1511 Public exploit
Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privi…
-
Unscored —CVE-2007-1516 Public exploit
PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to ex…
-
Unscored —CVE-2007-1510 Public exploit
SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2007-1514 Public exploit
PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute ar…
-
Unscored —CVE-2007-1509 Public exploit
Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote atta…
-
Unscored —CVE-2007-1513 Public exploit
PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_…
-
Unscored —CVE-2003-1321 Public exploit
Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute…
-
Unscored —CVE-2007-1506 Public exploit
Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remot…
-
Unscored —CVE-2007-1501 Public exploit
Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service (crash)…
-
Unscored —
Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibl…
-
Medium —
Apache Tomcat Directory Traversal
Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with com…
-
Unscored —CVE-2007-1493 Public exploit
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, whi…
-
Unscored —
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) vi…
-
Unscored —CVE-2007-1469 Public exploit
SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-1483 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-1475 Public exploit
Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4…
-
Unscored —CVE-2007-1472 Public exploit
Variable overwrite vulnerability in groupit/base/groupit.start.inc in Groupit 2.00b5 allows remote attackers to conduct…
-
Unscored —CVE-2007-1476 Public exploit
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security …
-
Unscored —CVE-2007-1484 Public exploit
The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, …
-
Unscored —CVE-2007-1480 Public exploit
Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php…
-
Unscored —CVE-2007-1487 Public exploit
Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remot…
-
Unscored —CVE-2007-1474 Public exploit
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Fra…
-
Unscored —CVE-2007-1482 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in WBBlog allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2007-1481 Public exploit
SQL injection vulnerability in index.php in WBBlog allows remote attackers to execute arbitrary SQL commands via the e_…
-
Unscored —CVE-2007-1471 Public exploit
admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a…
-
Unscored —CVE-2007-1473 Public exploit
Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login p…
-
Unscored —CVE-2007-1478 Public exploit
download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the fi…
-
Unscored —CVE-2007-1479 Public exploit
Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject a…
-
Unscored —CVE-2007-1455 Public exploit
Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated us…
-
Unscored —CVE-2007-1453 Public exploit
Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows conte…
-
Unscored —CVE-2007-1452 Public exploit
The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which a…
-
Unscored —CVE-2007-1458 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code v…