Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
587 results · Feed
-
Unscored —
Unspecified vulnerability in Advanced Webhost Billing System (AWBS) before 2.6.0 allows remote authenticated users to o…
-
Unscored —CVE-2007-4106 Public exploit
SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Inter…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php for sBlog 0.7.3 Beta allows remote attackers to inject arbitrary…
-
Unscored —
SQL injection vulnerability in editpost.php in phpMyForum before 4.1.4 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to ex…
-
Unscored —CVE-2007-4115 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary we…
-
Unscored —
Multiple SQL injection vulnerabilities in Advanced Webhost Billing System (AWBS) before 2.6.0, when magic_quotes_gpc is…
-
Unscored —CVE-2007-4105 Public exploit
A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2007-4116 Public exploit
SQL injection vulnerability in philboard_forum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-4111 Public exploit
SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as…
-
Unscored —CVE-2007-4110 Public exploit
SQL injection vulnerability in sign_in.aspx in Message Board / Threaded Discussion Forum Application Template allows re…
-
Unscored —
SQL injection vulnerability in sign_in.aspx in WebEvents (Online Event Registration Template) allows remote attackers t…
-
Unscored —
MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, wh…
-
Unscored —CVE-2007-4104 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote at…
-
Unscored —CVE-2007-4109 Public exploit
SQL injection vulnerability in sign_in.aspx in WebStore (Online Store Application Template) allows remote attackers to …
-
Unscored —
The IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance De…
-
Unscored —CVE-2007-4101 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP co…
-
Unscored —
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, al…
-
Unscored —
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (…
-
Unscored —
Buffer overflow in Tor before 0.1.2.15, when using BSD natd support, allows remote attackers to cause a denial of servi…
-
Unscored —
Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers …
-
Unscored —
Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attacke…
-
Unscored —
Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows …
-
Unscored —
Minb Is Not a Blog (minb) stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —CVE-2007-4095 Public exploit
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-4092 Public exploit
Directory traversal vulnerability in index.php in iFoto 1.0.1 and earlier allows remote attackers to list arbitrary dir…
-
Unscored —
PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to exec…
-
Unscored —CVE-2007-4081 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to injec…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4.7.7, (1) allow remote …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inje…
-
Unscored —CVE-2007-4076 Public exploit
Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbit…
-
Unscored —
Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows re…
-
Unscored —CVE-2007-4060 Public exploit
Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attac…
-
Unscored —CVE-2007-4069 Public exploit
SQL injection vulnerability in show_cat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (…
-
Unscored —
Unspecified vulnerability in Low Bandwidth X proxy (lbxproxy) on Sun Solaris 8 through 10 before 20070725 allows local …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web…
-
Unscored —
Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary…
-
Unscored —
Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send…
-
Unscored —CVE-2007-4084 Public exploit
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary …