Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
300 results · Clear filters · Feed
-
Unscored —CVE-2007-1289 Public exploit
SQL injection vulnerability in ViewBugs.php in Tyger Bug Tracking System (TygerBT) 1.1.3 allows remote attackers to exe…
-
Unscored —CVE-2007-1296 Public exploit
SQL injection vulnerability in postingdetails.php in AJ Classifieds 1.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-1297 Public exploit
SQL injection vulnerability in view_profile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (st…
-
Unscored —CVE-2007-1264 Public exploit
Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail…
-
Unscored —CVE-2007-1266 Public exploit
Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolutio…
-
Unscored —CVE-2007-1263 Public exploit
GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed an…
-
Unscored —
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a lon…
-
Unscored —CVE-2007-1287 Public exploit
A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduc…
-
Unscored —CVE-2006-7129 Public exploit
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection …
-
Unscored —CVE-2006-7132 Public exploit
Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary l…
-
Unscored —CVE-2006-7128 Public exploit
PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-7116 Public exploit
SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbit…
-
Unscored —CVE-2006-7130 Public exploit
PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote …
-
Unscored —CVE-2006-7112 Public exploit
Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read a…
-
Unscored —CVE-2006-7134 Public exploit
Unrestricted file upload vulnerability in main_user.php in Upload Tool for PHP 1.0 allows remote attackers to upload an…
-
Unscored —CVE-2006-7131 Public exploit
PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2006-7118 Public exploit
SQL injection vulnerability in index.asp in DMXReady Site Engine Manager 1.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-7119 Public exploit
PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distribut…
-
Unscored —CVE-2006-7127 Public exploit
Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitra…
-
Unscored —CVE-2006-7133 Public exploit
Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read…
-
Unscored —CVE-2006-7117 Public exploit
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute…
-
Unscored —CVE-2006-7114 Public exploit
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attacke…
-
Unscored —CVE-2006-7120 Public exploit
PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows…
-
Unscored —
WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an extern…
-
Unscored —
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apac…
-
Unscored —CVE-2006-7104 Public exploit
PHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor (MOStlyCE) as created…
-
Unscored —CVE-2006-7106 Public exploit
PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers …
-
Unscored —CVE-2006-7102 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpBurningPortal quiz-modul 1.0.1, and possibly earlier, allow re…
-
Unscored —CVE-2006-7100 Public exploit
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and earlier allow…
-
Unscored —CVE-2006-7107 Public exploit
PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to e…
-
Unscored —CVE-2006-7101 Public exploit
SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-1260 Public exploit
Stack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows remote attackers to execu…
-
Unscored —
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQ…
-
Unscored —CVE-2007-1247 Public exploit
Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-1248 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject …
-
Unscored —CVE-2007-1255 Public exploit
Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authentica…
-
Unscored —CVE-2007-1250 Public exploit
SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers…
-
Unscored —CVE-2007-1254 Public exploit
SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated use…
-
Unscored —CVE-2007-1251 Public exploit
Format string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVEN…