Skip to content
OpenAdvisories

Archive

27 June 2007

Vulnerabilities first published on this day (UTC), newest first.

21 results · Clear filters · Feed

  • Unscored —
    CVE-2007-3461 Public exploit

    SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-3460 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attackers to e…

  • Unscored —
    CVE-2007-3459 Public exploit

    A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overw…

  • Unscored —
    CVE-2006-7210 Public exploit EPSS 25%

    Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via …

  • Unscored —
    CVE-2007-3449 Public exploit

    SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2007-3431 Public exploit EPSS 71%

    PHP remote file inclusion vulnerability in cal.func.php in Valerio Capello Dagger - The Cutting Edge r23jan2007 allows …

  • Unscored —
    CVE-2007-3426 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to injec…

  • Unscored —
    CVE-2007-3430 Public exploit

    SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2007-3446 Public exploit

    BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers …

  • Unscored —
    CVE-2007-3450 Public exploit

    SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2007-3427 Public exploit

    SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-3433 Public exploit

    SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-3434 Public exploit

    index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' (quote) char…

  • Unscored —
    CVE-2007-3451 Public exploit

    PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to exe…

  • Unscored —
    CVE-2007-3447 Public exploit

    SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2007-3435 Public exploit EPSS 35%

    Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) Ba…

  • Unscored —
    CVE-2007-3425 Public exploit

    Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbi…

  • Unscored —
    CVE-2007-3452 Public exploit

    SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2007-3432 Public exploit

    Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execut…

  • Unscored —
    CVE-2007-3429 Public exploit

    Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allo…

  • Unscored —
    CVE-2007-3448 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in BugMall Shopping Cart 2.5 and earlier allows remote attackers …