Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
300 results · Clear filters · Feed
-
Unscored —CVE-2007-1459 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execut…
-
Unscored —CVE-2007-1446 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1beta allow remote attackers to exe…
-
Unscored —CVE-2007-1445 Public exploit
SQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7.0.2 allows remote atta…
-
Unscored —CVE-2007-1439 Public exploit
PHP remote file inclusion vulnerability in ressourcen/dbopen.php in bitesser MySQL Commander 2.7 and earlier, when regi…
-
Unscored —CVE-2007-1438 Public exploit
SQL injection vulnerability in devami.asp in X-Ice News System 1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-1440 Public exploit
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) G…
-
Unscored —CVE-2007-1434 Public exploit
SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to exe…
-
Unscored —CVE-2007-1433 Public exploit
Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attacker…
-
Unscored —CVE-2007-1432 Public exploit
Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests wit…
-
Unscored —CVE-2007-1427 Public exploit
Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbi…
-
Unscored —CVE-2007-1425 Public exploit
SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute…
-
Unscored —CVE-2007-1423 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers t…
-
Unscored —CVE-2007-1430 Public exploit
PHP remote file inclusion vulnerability in include/adodb-connection.inc.php in ClipShare 1.5.3 allows remote attackers …
-
Unscored —CVE-2007-1424 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to ex…
-
Unscored —CVE-2007-1422 Public exploit
SQL injection vulnerability in goster.asp in fystyq Duyuru Scripti allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Premod SubDog 2 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2007-1428 Public exploit
SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-1000 Public exploit
The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users …
-
Unscored —CVE-2007-1416 Public exploit
PHP remote file inclusion vulnerability in createurl.php in JCcorp (aka James Coyle) URLshrink allows remote attackers …
-
Unscored —CVE-2007-1415 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute…
-
Unscored —CVE-2007-1420 Public exploit
MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_sche…
-
Unscored —
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probabl…
-
Unscored —CVE-2007-1412 Public exploit
The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensit…
-
Unscored —CVE-2007-1417 Public exploit
SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.…
-
Unscored —CVE-2007-1394 Public exploit
Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2007-1401 Public exploit
Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might all…
-
Unscored —
tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP …
-
Unscored —CVE-2007-1391 Public exploit
PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO (aka weborganizer) 1.0 allows …
-
Unscored —CVE-2007-1398 Public exploit
The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the i…
-
Unscored —CVE-2007-1411 Public exploit
Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to…
-
Unscored —CVE-2007-1397 Public exploit
Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote …
-
Unscored —CVE-2007-1392 Public exploit
Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a ..…
-
Unscored —CVE-2007-1410 Public exploit
SQL injection vulnerability in kategori.asp in GaziYapBoz Game Portal allows remote attackers to execute arbitrary SQL …
-
Unscored —
Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote…
-
Unscored —CVE-2007-1402 Public exploit
The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via un…
-
Unscored —CVE-2007-1393 Public exploit
PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary…
-
Unscored —
Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragm…
-
Unscored —CVE-2007-1388 Public exploit
The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions,…