Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
202 results · Clear filters · Feed
-
Unscored —CVE-2007-3593 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject…
-
Unscored —CVE-2007-3590 Public exploit
Cross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2007-3589 Public exploit
Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2007-2839 Public exploit
gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrar…
-
Unscored —CVE-2007-3572 Public exploit
Incomplete blacklist vulnerability in cgi-bin/runDiagnostics.cgi in the web interface on the Yoggie Pico and Pico Pro a…
-
Unscored —CVE-2007-3585 Public exploit
PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2007-3583 Public exploit
SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2007-3574 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway w…
-
Unscored —CVE-2007-3584 Public exploit
SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execu…
-
Unscored —CVE-2007-3587 Public exploit
MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a…
-
Unscored —CVE-2007-3586 Public exploit
Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbit…
-
Unscored —CVE-2007-3582 Public exploit
SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbit…
-
Unscored —CVE-2007-3569 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Oliver Library Management System allow remote attackers to injec…
-
Unscored —CVE-2007-3011 Public exploit
The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote …
-
Unscored —CVE-2007-3563 Public exploit
SQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-3562 Public exploit
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-3558 Public exploit
SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrar…
-
Unscored —
Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check b…
-
Unscored —CVE-2007-3556 Public exploit
Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote…
-
Unscored —CVE-2007-3555 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2007-3549 Public exploit
SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-3553 Public exploit
Cross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote att…
-
Unscored —CVE-2007-3548 Public exploit
Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang o…
-
Unscored —CVE-2007-3539 Public exploit
Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers…
-
Unscored —CVE-2007-3542 Public exploit
Cross-site scripting (XSS) vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2007-3535 Public exploit
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include an…
-
Unscored —
Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers…
-
Unscored —CVE-2007-3547 Public exploit
Directory traversal vulnerability in qti_checkname.php in QuickTicket 1.2 allows remote attackers to include and execut…
-
Unscored —CVE-2007-3534 Public exploit
SQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2007-3526 Public exploit
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-3519 Public exploit
SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execut…
-
Unscored —CVE-2007-3515 Public exploit
SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2007-3518 Public exploit
SQL injection vulnerability in msg.php in HispaH YouTube Clone Script (youtubeclone) allows remote attackers to execute…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to …
-
Unscored —CVE-2007-3523 Public exploit
Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and ex…
-
Unscored —CVE-2007-3520 Public exploit
SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2007-3530 Public exploit
PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain…
-
Unscored —CVE-2007-3521 Public exploit
SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-3517 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web s…