Skip to content
OpenAdvisories

Archive

25 July 2007

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Unscored —
    CVE-2007-3987 Public exploit

    SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attac…

  • Unscored —
    CVE-2007-3989 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set …

  • Unscored —
    CVE-2007-3991 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cv.asp in Asp cvmatik 1.1 and earlier allow remote attackers to …

  • Unscored —
    CVE-2007-3984 Public exploit

    Buffer overflow in a certain ActiveX control in the NixonMyPrograms class in sasatl.dll 1.5.0.531 in Zenturi ProgramChe…

  • Unscored —
    CVE-2007-3973 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2007-3979 Public exploit

    SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to exec…

  • Unscored —
    CVE-2007-3974 Public exploit

    admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary acco…

  • Unscored —
    CVE-2007-3978 Public exploit

    Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parame…

  • Unscored —
    CVE-2007-3977 Public exploit

    Cross-site scripting (XSS) vulnerability in bwired allows remote attackers to inject arbitrary web script or HTML via u…

  • Unscored —
    CVE-2007-3963 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote att…

  • Unscored —
    CVE-2007-3976 Public exploit

    SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the ne…

  • Unscored —
    CVE-2007-3980 Public exploit

    PHP remote file inclusion vulnerability in page.php in RCMS Pro RGameScript Pro allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-3982 Public exploit

    Absolute path traversal vulnerability in the Data Dynamics ActiveReport (ActiveReports) ActiveX control in actrpt2.dll …

  • Unscored —
    CVE-2007-3983 Public exploit

    Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 (ActiveReports) ActiveX cont…

  • Unscored —
    CVE-2007-3981 Public exploit

    SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL co…