Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
202 results · Clear filters · Feed
-
Unscored —CVE-2007-3933 Public exploit
SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-3938 Public exploit
SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote atta…
-
Unscored —CVE-2007-3909 Public exploit
Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-3888 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to i…
-
Unscored —CVE-2007-3883 Public exploit
The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrit…
-
Unscored —CVE-2007-3882 Public exploit
SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2007-3889 Public exploit
Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitr…
-
Unscored —CVE-2007-3881 Public exploit
SQL injection vulnerability in index.php in Pictures Rating (Picture Rating) allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-3884 Public exploit
SQL injection vulnerability in philboard_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQ…
-
Unscored —
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows rem…
-
Unscored —
The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2…
-
Unscored —
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, …
-
Unscored —CVE-2007-3838 Public exploit
Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 11-10-05-BETA-SF1:111005 and earlier allow…
-
Unscored —
Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remo…
-
Unscored —CVE-2007-3840 Public exploit
SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-3831 Public exploit
PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to…
-
Unscored —CVE-2007-3830 Public exploit
Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows rem…
-
Unscored —CVE-2007-3822 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2007-3824 Public exploit
SQL injection vulnerability in katgoster.asp in MzK Blog (tr) allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-3017 Public exploit
The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from articles sent…
-
Unscored —CVE-2007-3814 Public exploit
Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via (…
-
Unscored —
PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attac…
-
Unscored —
The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arb…
-
Unscored —CVE-2007-3808 Public exploit
SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3810 Public exploit
SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2007-3809 Public exploit
Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3811 Public exploit
Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) th…
-
Unscored —CVE-2007-3812 Public exploit
SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL …
-
Critical 9.8
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2007-3799 Public exploit
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert …
-
Unscored —CVE-2007-3790 Public exploit
The com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cause a denial …
-
Unscored —CVE-2007-3785 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in PGPBBox.dll in EldoS SecureBlackbox (sbb) 5.1.0.1…
-
Unscored —CVE-2007-3789 Public exploit
SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-3013 Public exploit
SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit perm…
-
Unscored —CVE-2007-3792 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AzDG Dating Gold 3.0.5 allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-3014 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers t…
-
Unscored —
The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands …
-
Unscored —CVE-2007-3103 Public exploit
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change th…
-
Unscored —CVE-2007-3772 Public exploit
Directory traversal vulnerability in news/show.php in PsNews 1.1 allows remote attackers to include and execute arbitra…
-
Unscored —CVE-2007-3673 Public exploit
Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Secu…