Archive
18 September 2007
Vulnerabilities first published on this day (UTC), newest first.
21 results · Clear filters · Feed
-
Unscored —CVE-2007-4964 Public exploit
WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsP…
-
Unscored —CVE-2007-4966 Public exploit
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execut…
-
Unscored —CVE-2007-4962 Public exploit
Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overw…
-
Unscored —
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause…
-
Critical 9.8
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows re…
KEV Apr 15, 2022 -
Unscored —CVE-2007-4957 Public exploit
Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or over…
-
Unscored —CVE-2007-4956 Public exploit
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) t…
-
Unscored —CVE-2007-4952 Public exploit
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL…
-
Unscored —
PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 componen…
-
Unscored —CVE-2007-4953 Public exploit
SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the k…
-
Unscored —
PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Jooml…
-
Unscored —CVE-2007-4937 Public exploit
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote atta…
-
Unscored —CVE-2007-4941 Public exploit
KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file …
-
Unscored —
Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in…
-
Unscored —CVE-2007-4942 Public exploit
PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote …
-
Unscored —
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a d…
-
Unscored —CVE-2007-4925 Public exploit
The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attacker…
-
Unscored —CVE-2007-4930 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform ce…
-
Unscored —CVE-2007-4932 Public exploit
admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative…
-
Unscored —CVE-2007-4933 Public exploit
Direct static code injection vulnerability in includes/admin/sub/conf_appearence.php in Shop-Script FREE 2.0 and earlie…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code …