Archive
April 2007
Vulnerabilities first published in this month (UTC), newest first.
264 results · Clear filters · Feed
-
Unscored —CVE-2007-2094 Public exploit
PHP remote file inclusion vulnerability in index.php in Anthologia 0.5.2 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-2098 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to …
-
Unscored —CVE-2007-2087 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when register_globals is enabled and .htaccess is n…
-
Unscored —CVE-2007-2092 Public exploit
Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) allows remote attac…
-
Unscored —
Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote a…
-
Unscored —CVE-2007-2091 Public exploit
PHP remote file inclusion vulnerability in blocks/tsdisplay4xoops_block2.php in tsdisplay4xoops (TSD4XOOPS, aka the Tea…
-
Unscored —CVE-2007-2090 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbit…
-
Unscored —CVE-2007-2086 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CNStats 2.9 allow remote attackers to execute arbitrary PHP code …
-
Unscored —
Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers…
-
Unscored —CVE-2007-2061 Public exploit
Cross-site scripting (XSS) vulnerability in check_login.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attacke…
-
Unscored —CVE-2007-2069 Public exploit
Directory traversal vulnerability in scr/soustab.php in openMairie 1.11 and earlier allows remote attackers to include …
-
Unscored —CVE-2007-2079 Public exploit
The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the…
-
Unscored —CVE-2007-2064 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Robert Ladstaetter ActionPoll 1.1.0, and possibly 1.1.1, allow re…
-
Unscored —CVE-2007-2070 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote…
-
Unscored —CVE-2007-2083 Public exploit
vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being…
-
Unscored —CVE-2007-2081 Public exploit
MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication requirements via the admin cookie parameter t…
-
Unscored —CVE-2007-2062 Public exploit
Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary co…
-
Unscored —
Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafte…
-
Unscored —CVE-2007-2065 Public exploit
PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remote attackers…
-
Unscored —CVE-2007-2067 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Marco Antonio Islas Cruz Web Slider (WebSlider) 0.6 allow remote …
-
Unscored —CVE-2007-2080 Public exploit
Multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-2059 Public exploit
Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allo…
-
Unscored —CVE-2007-2068 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute…
-
Unscored —CVE-2007-2043 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) 1.08 and earlie…
-
Unscored —CVE-2007-2048 Public exploit
Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows rem…
-
Unscored —
Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect…
-
Unscored —CVE-2007-2044 Public exploit
PHP remote file inclusion vulnerability in mod_weather.php in the Antonis Ventouris Weather module for Mambo and Joomla…
-
Unscored —CVE-2007-2049 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the Calendar Module (com_calendar) 1.5.5 for Mambo allow remote a…
-
Unscored —CVE-2007-2050 Public exploit
Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and ex…
-
Unscored —
Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote …
-
Unscored —CVE-2007-1873 Public exploit
Cross-site scripting (XSS) vulnerability in Mephisto 0.7.3 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 20…
-
Unscored —CVE-2007-1872 Public exploit
Cross-site scripting (XSS) vulnerability in toendaCMS 1.5.3 allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2007-2027 Public exploit
Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11…
-
Unscored —CVE-2003-1325 Public exploit
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows …
-
Unscored —CVE-2007-1998 Public exploit
Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP…
-
Unscored —CVE-2007-1999 Public exploit
PHP remote file inclusion vulnerability in index.php in Weatimages 1.7.1 and earlier, when weatimages.ini is missing, a…
-
Unscored —CVE-2007-2000 Public exploit
Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers to execut…
-
Unscored —CVE-2007-2002 Public exploit
InoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted functionality, and upload …
-
Unscored —CVE-2007-2005 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote a…