Skip to content
OpenAdvisories

Archive

14 June 2007

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Unscored —
    CVE-2007-3222 Public exploit

    PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to…

  • Unscored —
    CVE-2007-3230 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute…

  • Unscored —
    CVE-2007-3228 Public exploit EPSS 67%

    PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite C…

  • Unscored —
    CVE-2007-3221 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows…

  • Unscored —
    CVE-2007-3220 Public exploit EPSS 63%

    PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS …

  • Medium —
    CVE-2007-3227 Public exploit

    Moderate severity vulnerability that affects rails

    Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json) function in Ruby on Rails before edge 9606 allows remote attackers to inject arbitrary web script via the input values.

  • Medium —
    CVE-2007-2449 Public exploit Scanner template EPSS 77%

    Apache Tomcat XSS Vulnerabilities in Examples Web Application

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to…

  • Unscored —
    CVE-2007-3214 Public exploit

    SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows re…

  • Unscored —
    CVE-2007-3217 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to exe…

  • Unscored —
    CVE-2007-3216 Public exploit EPSS 59%

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops …

  • Unscored —
    CVE-2007-3212 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to injec…