Archive
June 2007
Vulnerabilities first published in this month (UTC), newest first.
193 results · Clear filters · Feed
-
Unscored —CVE-2007-3403 Public exploit
Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload …
-
Unscored —CVE-2007-3182 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307, when register_globals is enabled, allow…
-
Unscored —CVE-2007-3183 Public exploit
Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is disabled, allow remote atta…
-
Unscored —CVE-2007-2520 Public exploit
SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to …
-
Unscored —
Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in …
-
Unscored —CVE-2007-2401 Public exploit
CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows rem…
-
Unscored —
PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers t…
-
Unscored —
PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to ex…
-
Unscored —CVE-2007-3354 Public exploit
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-3346 Public exploit
Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local fi…
-
Unscored —CVE-2007-3360 Public exploit
hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data con…
-
Unscored —CVE-2007-3365 Public exploit
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote at…
-
Unscored —CVE-2007-3336 Public exploit
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multipl…
-
Unscored —CVE-2007-3364 Public exploit
Cross-site scripting (XSS) vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attacker…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitra…
-
Unscored —
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creatin…
-
Unscored —
Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe…
-
Unscored —CVE-2007-3340 Public exploit
BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a…
-
Unscored —CVE-2007-3339 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, E…
-
Unscored —CVE-2007-3332 Public exploit
Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary …
-
Unscored —CVE-2007-3313 Public exploit
Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (Engli…
-
Unscored —
PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows rem…
-
Unscored —CVE-2007-3312 Public exploit
Directory traversal vulnerability in admin/plugin_manager.php in Jasmine CMS 1.0 allows remote authenticated administra…
-
Unscored —CVE-2007-3327 Public exploit
httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI …
-
Unscored —CVE-2007-3315 Public exploit
Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when register_globals is enabled, allow rem…
-
Unscored —CVE-2007-3323 Public exploit
SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to exe…
-
Unscored —CVE-2007-3324 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2007-3311 Public exploit
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to e…
-
Unscored —
PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute…
-
Unscored —CVE-2007-3307 Public exploit
SQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute …
-
Unscored —CVE-2007-3310 Public exploit
Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2007-3301 Public exploit
SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-3294 Public exploit
Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow co…
-
Unscored —
PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remot…
-
Unscored —CVE-2007-3290 Public exploit
categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) charac…
-
Unscored —CVE-2007-3291 Public exploit
Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2007-3292 Public exploit
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitra…
-
Unscored —CVE-2007-3293 Public exploit
SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-3297 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code v…