Skip to content
OpenAdvisories

Archive

8 June 2007

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —
    CVE-2007-1685 Public exploit EPSS 14%

    Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows…

  • Unscored —
    CVE-2007-3138 Public exploit

    Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to i…

  • Unscored —
    CVE-2007-3133 Public exploit

    SQL injection vulnerability in urunbak.asp in W1L3D4 WEBmarket 0.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2007-3136 Public exploit

    PHP remote file inclusion vulnerability in inc/nuke_include.php in newsSync 1.5.0rc6 allows remote attackers to execute…

  • Unscored —
    CVE-2007-3139 Public exploit

    config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to…

  • Unscored —

    Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other vers…

  • Unscored —
    CVE-2007-3140 Public exploit

    SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL c…

  • Unscored —
    CVE-2007-3137 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to i…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in add_comment.php in Light Blog 4.1 before 20070606 allows remote attackers t…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attacke…

  • Unscored —
    CVE-2007-3130 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the OpenWiki (formerly JD-Wiki) component (com_jd-wiki) 1.0.2, an…

  • Unscored —
    CVE-2007-3134 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remo…

  • Unscored —

    Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an Info…