Archive
April 2007
Vulnerabilities first published in this month (UTC), newest first.
264 results · Clear filters · Feed
-
Unscored —CVE-2007-2372 Public exploit
admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exi…
-
Unscored —CVE-2007-2373 Public exploit
SQL injection vulnerability in viewcat.php in the WF-Links (wflinks) 1.03 and earlier module for XOOPS allows remote at…
-
Unscored —CVE-2007-2368 Public exploit
picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter.
-
Unscored —CVE-2007-2371 Public exploit
admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modificatio…
-
Unscored —CVE-2007-2369 Public exploit
Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows…
-
Unscored —CVE-2007-2367 Public exploit
Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of se…
-
Unscored —CVE-2007-2370 Public exploit
SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attacker…
-
Unscored —
Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a cra…
-
Unscored —
Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assis…
-
Unscored —CVE-2007-2363 Public exploit
Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute arbitrary code via a cra…
-
Unscored —
Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user…
-
Medium 5.3
Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor
Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.
-
Unscored —CVE-2007-2364 Public exploit
Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote attackers to execute arbitra…
-
Unscored —
Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and pos…
-
Unscored —CVE-2007-2345 Public exploit
PHP remote file inclusion vulnerability in include/include_stream.inc.php in CodeWand phpBrowse allows remote attackers…
-
Unscored —CVE-2007-2347 Public exploit
PHP remote file inclusion vulnerability in main/forum/komentar.php in OneClick CMS (aka Sisplet CMS) 05.10 and earlier …
-
Unscored —CVE-2007-2346 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHP-Generics 1.0 beta allow remote attackers to execute arbitrary…
-
Unscored —CVE-2007-2342 Public exploit
SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2341 Public exploit
PHP remote file inclusion vulnerability in suite/index.php in phpBandManager 0.8 allows remote attackers to execute arb…
-
Unscored —CVE-2007-2338 Public exploit
Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote atta…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php in phporacleview allow remote attackers t…
-
Unscored —CVE-2007-2339 Public exploit
Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-2337 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to …
-
Unscored —CVE-2007-2327 Public exploit
PHP remote file inclusion vulnerability in _editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2330 Public exploit
PHP remote file inclusion vulnerability in includes_handler.php in DynaTracker 151 allows remote attackers to execute a…
-
Unscored —CVE-2007-2325 Public exploit
PHP remote file inclusion vulnerability in include.php in MyNewsGroups :) allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2326 Public exploit
Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2007-2324 Public exploit
Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2007-2302 Public exploit
PHP remote file inclusion vulnerability in autoindex.php in Expow 0.8 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2007-2304 Public exploit
Multiple directory traversal vulnerabilities in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote a…
-
Unscored —CVE-2007-2320 Public exploit
SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-2308 Public exploit
Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2007-2312 Public exploit
Multiple SQL injection vulnerabilities in the Virtual War (VWar) 1.5.0 R15 module for PHP-Nuke allow remote attackers t…
-
Unscored —CVE-2007-2317 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and …
-
Unscored —CVE-2007-2310 Public exploit
Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS 0.2.2 allows remote attackers to i…
-
Unscored —CVE-2007-2301 Public exploit
Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2319 Public exploit
PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to …
-
Unscored —CVE-2007-2299 Public exploit
Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-2313 Public exploit
PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers…
-
Unscored —CVE-2007-2305 Public exploit
Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, …