Archive
June 2007
Vulnerabilities first published in this month (UTC), newest first.
193 results · Clear filters · Feed
-
Unscored —CVE-2007-2801 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is …
-
Unscored —CVE-2007-3487 Public exploit
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imag…
-
Unscored —
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified…
-
Unscored —CVE-2007-3492 Public exploit
Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service (daemon crash) via a certain string …
-
Unscored —
Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P…
-
Unscored —
A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sien…
-
Unscored —CVE-2007-3479 Public exploit
Stack-based buffer overflow in PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to execute arbitrary…
-
Unscored —
The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to…
-
Unscored —CVE-2007-3461 Public exploit
SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-3460 Public exploit
Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attackers to e…
-
Unscored —CVE-2007-3459 Public exploit
A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overw…
-
Unscored —
Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via …
-
Unscored —CVE-2007-3449 Public exploit
SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
PHP remote file inclusion vulnerability in cal.func.php in Valerio Capello Dagger - The Cutting Edge r23jan2007 allows …
-
Unscored —CVE-2007-3426 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to injec…
-
Unscored —CVE-2007-3430 Public exploit
SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2007-3446 Public exploit
BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers …
-
Unscored —CVE-2007-3450 Public exploit
SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2007-3427 Public exploit
SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-3433 Public exploit
SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-3434 Public exploit
index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' (quote) char…
-
Unscored —CVE-2007-3451 Public exploit
PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to exe…
-
Unscored —CVE-2007-3447 Public exploit
SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) Ba…
-
Unscored —CVE-2007-3425 Public exploit
Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbi…
-
Unscored —CVE-2007-3452 Public exploit
SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2007-3432 Public exploit
Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execut…
-
Unscored —CVE-2007-3429 Public exploit
Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allo…
-
Unscored —CVE-2007-3448 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in BugMall Shopping Cart 2.5 and earlier allows remote attackers …
-
Unscored —CVE-2006-7208 Public exploit
PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum) component (aka phpBB c…
-
Unscored —
Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPl…
-
Unscored —
Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attack…
-
Unscored —CVE-2007-3407 Public exploit
Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) v…
-
Unscored —CVE-2007-3396 Public exploit
Cross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0 allows remote attackers to inje…
-
Unscored —CVE-2007-3404 Public exploit
Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary file…
-
Unscored —
PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-3402 Public exploit
SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-3400 Public exploit
The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2…
-
Unscored —CVE-2007-3398 Public exploit
LiteWEB 2.7 allows remote attackers to cause a denial of service (hang) via a large number of requests for nonexistent …
-
Unscored —CVE-2007-3394 Public exploit
Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via th…