Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
202 results · Clear filters · Feed
-
Unscored —CVE-2007-4106 Public exploit
SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Inter…
-
Unscored —CVE-2007-4115 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2007-4105 Public exploit
A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2007-4116 Public exploit
SQL injection vulnerability in philboard_forum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-4111 Public exploit
SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as…
-
Unscored —CVE-2007-4110 Public exploit
SQL injection vulnerability in sign_in.aspx in Message Board / Threaded Discussion Forum Application Template allows re…
-
Unscored —CVE-2007-4104 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote at…
-
Unscored —CVE-2007-4109 Public exploit
SQL injection vulnerability in sign_in.aspx in WebStore (Online Store Application Template) allows remote attackers to …
-
Unscored —CVE-2007-4101 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-4095 Public exploit
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-4092 Public exploit
Directory traversal vulnerability in index.php in iFoto 1.0.1 and earlier allows remote attackers to list arbitrary dir…
-
Unscored —CVE-2007-4081 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to injec…
-
Unscored —CVE-2007-4076 Public exploit
Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbit…
-
Unscored —CVE-2007-4060 Public exploit
Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attac…
-
Unscored —CVE-2007-4069 Public exploit
SQL injection vulnerability in show_cat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-4084 Public exploit
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary …
-
Unscored —
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote atta…
-
Unscored —CVE-2007-4068 Public exploit
Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1)…
-
Unscored —CVE-2007-4054 Public exploit
SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-4057 Public exploit
Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users…
-
Unscored —CVE-2007-4055 Public exploit
SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-4075 Public exploit
Cross-site scripting (XSS) vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arb…
-
Unscored —CVE-2007-4088 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web…
-
Unscored —CVE-2007-4056 Public exploit
SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary S…
-
Unscored —
Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows…
-
Unscored —CVE-2007-4059 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware…
-
Unscored —CVE-2007-4067 Public exploit
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Inte…
-
Unscored —CVE-2007-4062 Public exploit
The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers t…
-
Unscored —CVE-2007-4053 Public exploit
SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execut…
-
Unscored —CVE-2007-4085 Public exploit
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-4089 Public exploit
Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2)…
-
Unscored —CVE-2007-4079 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers …
-
Unscored —CVE-2007-4052 Public exploit
Cross-site scripting (XSS) vulnerability in utilities/login.asp in nukedit 4.9.7 and earlier allows remote attackers to…
-
Unscored —
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent a…
-
Unscored —
Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before…
-
Unscored —CVE-2007-4031 Public exploit
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote atta…
-
Unscored —CVE-2007-4046 Public exploit
SQL injection vulnerability in index.php in the Pony Gallery (com_ponygallery) 1.5 and earlier component for Joomla! al…
-
Unscored —CVE-2007-4047 Public exploit
geoBlog (aka BitDamaged) 1 does not require authentication for (1) deletecomment.php, (2) deleteblog.php, and (3) listc…
-
Unscored —CVE-2007-4032 Public exploit
Buffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute arbitrary code via a long st…
-
Unscored —CVE-2007-4004 Public exploit
Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspeci…