Skip to content
OpenAdvisories

Archive

18 September 2007

Vulnerabilities first published on this day (UTC), newest first.

21 results · Clear filters · Feed

  • Unscored —
    CVE-2007-4964 Public exploit

    WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsP…

  • Unscored —
    CVE-2007-4966 Public exploit

    SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2007-4962 Public exploit

    Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overw…

  • Unscored —
    CVE-2007-4965 Public exploit EPSS 14%

    Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause…

  • Critical 9.8
    CVE-2007-3010 Exploited Public exploit Scanner template EPSS 97%

    masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows re…

    KEV Apr 15, 2022
  • Unscored —
    CVE-2007-4957 Public exploit

    Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or over…

  • Unscored —
    CVE-2007-4956 Public exploit

    Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) t…

  • Unscored —
    CVE-2007-4952 Public exploit

    SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2007-4955 Public exploit EPSS 30%

    PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 componen…

  • Unscored —
    CVE-2007-4953 Public exploit

    SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the k…

  • Unscored —
    CVE-2007-4954 Public exploit EPSS 29%

    PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Jooml…

  • Unscored —
    CVE-2007-4937 Public exploit

    CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote atta…

  • Unscored —
    CVE-2007-4941 Public exploit

    KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file …

  • Unscored —
    CVE-2007-4939 Public exploit EPSS 12%

    Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in…

  • Unscored —
    CVE-2007-4942 Public exploit

    PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote …

  • Unscored —
    CVE-2007-4938 Public exploit EPSS 16%

    Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a d…

  • Unscored —
    CVE-2007-4925 Public exploit

    The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attacker…

  • Unscored —
    CVE-2007-4930 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform ce…

  • Unscored —
    CVE-2007-4932 Public exploit

    admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative…

  • Unscored —
    CVE-2007-4933 Public exploit

    Direct static code injection vulnerability in includes/admin/sub/conf_appearence.php in Shop-Script FREE 2.0 and earlie…

  • Unscored —
    CVE-2007-4934 Public exploit EPSS 22%

    Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code …