Archive
26 June 2007
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
Unscored —CVE-2006-7208 Public exploit
PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum) component (aka phpBB c…
-
Unscored —
Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPl…
-
Unscored —
Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attack…
-
Unscored —CVE-2007-3407 Public exploit
Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) v…
-
Unscored —CVE-2007-3396 Public exploit
Cross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0 allows remote attackers to inje…
-
Unscored —CVE-2007-3404 Public exploit
Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary file…
-
Unscored —
PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-3402 Public exploit
SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-3400 Public exploit
The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2…
-
Unscored —CVE-2007-3398 Public exploit
LiteWEB 2.7 allows remote attackers to cause a denial of service (hang) via a large number of requests for nonexistent …
-
Unscored —CVE-2007-3394 Public exploit
Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-3403 Public exploit
Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload …
-
Unscored —CVE-2007-3182 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307, when register_globals is enabled, allow…
-
Unscored —CVE-2007-3183 Public exploit
Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is disabled, allow remote atta…
-
Unscored —CVE-2007-2520 Public exploit
SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to …
-
Unscored —
Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in …