Archive
6 July 2007
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote a…
-
Unscored —
eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more l…
-
Unscored —
The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does no…
-
Unscored —
eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which al…
-
Unscored —
Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 b…
-
Unscored —
eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authent…
-
Unscored —
The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, a…
-
Unscored —
eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated us…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote …
-
Unscored —
mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with insufficient access control, …
-
Unscored —
eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which all…
-
Unscored —
The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric c…
-
Unscored —CVE-2007-3613 Public exploit
Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attacke…
-
Unscored —
The report module in vtiger CRM before 5.0.3 does not properly apply security rules, which allows remote authenticated …
-
Unscored —CVE-2007-3609 Public exploit
Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitra…
-
Unscored —CVE-2007-3612 Public exploit
Stack-based buffer overflow in Visual IRC (ViRC) 2.0 allows remote IRC servers to execute arbitrary code via a long res…
-
Unscored —CVE-2007-3606 Public exploit
Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASC…
-
Unscored —
The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows rem…
-
Unscored —
vtiger CRM before 5.0.3 allows remote authenticated users to import and export the information for a contact even when …
-
Unscored —CVE-2007-3610 Public exploit
SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL com…
-
Unscored —
WordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote authenticated users to bypass fiel…
-
Unscored —
SQL injection vulnerability in the dashboard (include/utils/SearchUtils.php) in vtiger CRM before 5.0.3 allows remote a…
-
Unscored —CVE-2007-3607 Public exploit
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a deni…
-
Unscored —CVE-2007-3611 Public exploit
admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attack…
-
Unscored —
vtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read certain other users' …
-
Unscored —CVE-2007-3608 Public exploit
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certa…
-
Unscored —
Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on…
-
Unscored —
Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP…
-
Unscored —
index.php in vtiger CRM before 5.0.3 allows remote authenticated users to perform administrative changes to arbitrary p…
-
Unscored —
vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data re…
-
Unscored —
index.php in vtiger CRM before 5.0.3 allows remote authenticated users to obtain all users' names and e-mail addresses,…
-
Unscored —
Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, al…
-
Unscored —
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting …
-
Unscored —
inc/vul_check.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sess_id parameter, which has u…
-
Unscored —
Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profil…
-
Unscored —CVE-2007-3594 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers …
-
Unscored —CVE-2007-3593 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject…
-
Unscored —
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and cond…