Archive
9 May 2007
Vulnerabilities first published on this day (UTC), newest first.
79 results · Feed
-
Unscored —CVE-2007-0605 Public exploit
Cross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject a…
-
Unscored —
Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid (1) GB_TBL parameter to…
-
Unscored —CVE-2007-0609 Public exploit
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and…
-
Unscored —
Associated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allow…
-
Unscored —CVE-2007-2553 Public exploit
Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges vi…
-
Unscored —
Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly ses…
-
Unscored —
Cross-site scripting (XSS) vulnerability in usersettings.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote att…
-
Unscored —
Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown impact and an l remote …
-
Unscored —
Multiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remote attackers to inject arbitrary HTTP he…
-
Unscored —CVE-2007-2547 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attack…
-
Unscored —
The RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to obtain the names, and pos…
-
Unscored —CVE-2007-2549 Public exploit
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execut…
-
Unscored —
Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web s…
-
Unscored —
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of …
-
Unscored —CVE-2007-2536 Public exploit
PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structur…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2007-2539 Public exploit
The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file exist…
-
Unscored —CVE-2007-2543 Public exploit
SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arb…
-
Unscored —CVE-2007-2540 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-2538 Public exploit
SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows remote attackers to execut…
-
Unscored —
WinAce allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure…
-
Unscored —CVE-2007-2544 Public exploit
PHP remote file inclusion vulnerability in templates/default/tpl_message.php in PHP TopTree BBS 2.0.1a and earlier allo…
-
Unscored —CVE-2007-2541 Public exploit
PHP remote file inclusion vulnerability in includes/ajax_listado.php in Versado CMS 1.07 allows remote attackers to exe…
-
Unscored —CVE-2007-2542 Public exploit
PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execu…
-
Unscored —CVE-2007-2537 Public exploit
Multiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote authenticated users to exe…
-
Unscored —
avpack32.dll before 7.3.0.6 in Avira AntiVir allows remote attackers to cause a denial of service (infinite loop) via a…
-
Unscored —
zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with viru…
-
Unscored —
avast! antivirus before 4.7.981 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive …
-
Unscored —
Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO…
-
Unscored —
Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remo…
-
Unscored —CVE-2007-2530 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2 allow remote attackers to execut…
-
Unscored —
Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a deni…
-
Critical 9.8
Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-2532 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote atta…
-
Unscored —
Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors…
-
Unscored —
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attacke…
-
Unscored —
Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers …
-
Unscored —CVE-2007-2531 Public exploit
PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows remote attackers to exec…
-
Unscored —
Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vect…