Skip to content
OpenAdvisories

Archive

3 July 2007

Vulnerabilities first published on this day (UTC), newest first.

21 results · Clear filters · Feed

  • Unscored —
    CVE-2007-3549 Public exploit

    SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-3553 Public exploit

    Cross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote att…

  • Unscored —
    CVE-2007-3548 Public exploit

    Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang o…

  • Unscored —
    CVE-2007-3539 Public exploit

    Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers…

  • Unscored —
    CVE-2007-3542 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-3535 Public exploit

    Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include an…

  • Unscored —
    CVE-2007-3536 Public exploit EPSS 14%

    Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers…

  • Unscored —
    CVE-2007-3547 Public exploit

    Directory traversal vulnerability in qti_checkname.php in QuickTicket 1.2 allows remote attackers to include and execut…

  • Unscored —
    CVE-2007-3534 Public exploit

    SQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2007-3526 Public exploit

    Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-3519 Public exploit

    SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2007-3515 Public exploit

    SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-3518 Public exploit

    SQL injection vulnerability in msg.php in HispaH YouTube Clone Script (youtubeclone) allows remote attackers to execute…

  • Unscored —
    CVE-2007-3524 Public exploit EPSS 64%

    Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to …

  • Unscored —
    CVE-2007-3523 Public exploit

    Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and ex…

  • Unscored —
    CVE-2007-3520 Public exploit

    SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2007-3522 Public exploit EPSS 66%

    Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2007-3530 Public exploit

    PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain…

  • Unscored —
    CVE-2007-3521 Public exploit

    SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2007-3517 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-3529 Public exploit

    videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value o…