Skip to content
OpenAdvisories

Archive

30 July 2007

Vulnerabilities first published on this day (UTC), newest first.

24 results · Clear filters · Feed

  • Unscored —
    CVE-2007-4095 Public exploit

    SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2007-4092 Public exploit

    Directory traversal vulnerability in index.php in iFoto 1.0.1 and earlier allows remote attackers to list arbitrary dir…

  • Unscored —
    CVE-2007-4081 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to injec…

  • Unscored —
    CVE-2007-4076 Public exploit

    Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbit…

  • Unscored —
    CVE-2007-4060 Public exploit

    Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attac…

  • Unscored —
    CVE-2007-4069 Public exploit

    SQL injection vulnerability in show_cat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-4084 Public exploit

    Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-4061 Public exploit EPSS 11%

    Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote atta…

  • Unscored —
    CVE-2007-4068 Public exploit

    Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1)…

  • Unscored —
    CVE-2007-4054 Public exploit

    SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-4057 Public exploit

    Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users…

  • Unscored —
    CVE-2007-4055 Public exploit

    SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-4075 Public exploit

    Cross-site scripting (XSS) vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arb…

  • Unscored —
    CVE-2007-4088 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2007-4056 Public exploit

    SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2007-4058 Public exploit EPSS 22%

    Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows…

  • Unscored —
    CVE-2007-4059 Public exploit

    Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware…

  • Unscored —
    CVE-2007-4067 Public exploit

    Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Inte…

  • Unscored —
    CVE-2007-4062 Public exploit

    The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers t…

  • Unscored —
    CVE-2007-4053 Public exploit

    SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2007-4085 Public exploit

    Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-4089 Public exploit

    Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2)…

  • Unscored —
    CVE-2007-4079 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers …

  • Unscored —
    CVE-2007-4052 Public exploit

    Cross-site scripting (XSS) vulnerability in utilities/login.asp in nukedit 4.9.7 and earlier allows remote attackers to…