Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
632 results · Feed
-
Unscored —CVE-2006-7130 Public exploit
PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote …
-
Unscored —CVE-2006-7112 Public exploit
Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read a…
-
Unscored —CVE-2006-7134 Public exploit
Unrestricted file upload vulnerability in main_user.php in Upload Tool for PHP 1.0 allows remote attackers to upload an…
-
Unscored —CVE-2006-7131 Public exploit
PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PH…
-
Unscored —
The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service (reboot) via…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats (component for Joomla)…
-
Unscored —CVE-2006-7118 Public exploit
SQL injection vulnerability in index.asp in DMXReady Site Engine Manager 1.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-7119 Public exploit
PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distribut…
-
Unscored —
SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions befor…
-
Unscored —CVE-2006-7127 Public exploit
Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitra…
-
Unscored —CVE-2006-7133 Public exploit
Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read…
-
Unscored —
PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and pos…
-
Unscored —
Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbi…
-
Unscored —CVE-2006-7117 Public exploit
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute…
-
Unscored —CVE-2006-7114 Public exploit
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attacke…
-
Unscored —
SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid …
-
Unscored —CVE-2006-7120 Public exploit
PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows…
-
Unscored —
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of serv…
-
Unscored —
A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.…
-
Unscored —
Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of …
-
Unscored —
Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating systems, allows remote user-assis…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of s…
-
Unscored —
Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (cr…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of s…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of s…
-
Unscored —
Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (cr…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of s…
-
Unscored —
Directory traversal vulnerability in the delete function in IMCE before 1.6, a Drupal module, allows remote authenticat…
-
Unscored —
Unspecified vulnerability in Futomi's CGI Cafe KMail CGI 1.0.3 and earlier allows remote attackers to bypass authentica…
-
Unscored —
Unrestricted file upload vulnerability in IMCE before 1.6, a Drupal module, allows remote authenticated users to upload…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allo…
-
Unscored —
WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an extern…
-
Unscored —
mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 163…
-
Unscored —
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos kr…
-
Unscored —
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apac…
-
Unscored —
Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to caus…
-
Unscored —CVE-2006-7104 Public exploit
PHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor (MOStlyCE) as created…
-
Unscored —
Multiple directory traversal vulnerabilities in EZOnlineGallery 1.3 and earlier, and possibly other versions before 1.3…