Archive
8 August 2007
Vulnerabilities first published on this day (UTC), newest first.
84 results · Feed
-
Unscored —
Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file…
-
Unscored —
SQL injection vulnerability in admin_console/index.asp in Gallery In A Box allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-4208 Public exploit
SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary S…
-
Unscored —
Kaspersky Anti-Spam 3.0 MP1 before Critical Fix 2 (3.0.278.4) sets incorrect permissions for application files in certa…
-
Unscored —
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags vi…
-
Unscored —
SQL injection vulnerability in Recherche.php in Aceboard forum allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject a…
-
Unscored —
XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of s…
-
Unscored —CVE-2007-4210 Public exploit
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arb…
-
Unscored —
Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target dur…
-
Unscored —
Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) Output…
-
Unscored —
icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks in certain code paths, which allows us…
-
Unscored —
Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus…
-
Unscored —CVE-2007-4186 Public exploit
PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module …
-
Unscored —
Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow …
-
Unscored —
Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative …
-
Unscored —
ntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK) before 2.09 interprets a certain variable as a byte count rather…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary w…
-
Unscored —
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and…
-
Unscored —
Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie …
-
Unscored —
icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 misinterprets a certain memory location as the holder of a loop …
-
Unscored —
Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors.
-
Unscored —
The fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (TSK) before 2.09 does not validate a cer…
-
Medium —
Joomla! vulnerable to CRLF injection
CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-si…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in IDE Group DVD Rental System (DRS) 5.1 before…
-
Unscored —CVE-2007-4183 Public exploit
SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-4178 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject …
-
Unscored —
Unrestricted file upload vulnerability in index.php in WikiWebWeaver 1.1 and earlier allows remote attackers to upload …
-
Unscored —
Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote …
-
Unscored —
SQL injection vulnerability in administrator/popups/pollwindow.php in Joomla! 1.0.12 allows remote attackers to execute…
-
Unscored —CVE-2007-4187 EPSS 11%
Multiple eval injection vulnerabilities in the com_search component in Joomla! 1.5 beta before RC1 (aka Mapya) allow re…
-
Unscored —CVE-2007-4191 Public exploit
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenRat CMS 0.8-beta1 and earlier allow remote atta…
-
Unscored —
PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows re…
-
Unscored —
Directory traversal vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to in…
-
Unscored —
Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service (stack memory consumpti…
-
Unscored —
Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (appl…
-
Medium —
Apache Tomcat's CookieExample Vulnerable to XSS
Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.