Skip to content
OpenAdvisories

Archive

14 September 2007

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —

    XWiki Remote Code Execution

    PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose …

  • Medium 6.1
    CVE-2007-4465 EPSS 26%

    Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on…