Archive
September 2007
Vulnerabilities first published in this month (UTC), newest first.
174 results · Clear filters · Feed
-
Unscored —
PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 componen…
-
Unscored —CVE-2007-4953 Public exploit
SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the k…
-
Unscored —
PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Jooml…
-
Unscored —CVE-2007-4937 Public exploit
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote atta…
-
Unscored —CVE-2007-4941 Public exploit
KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file …
-
Unscored —
Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in…
-
Unscored —CVE-2007-4942 Public exploit
PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote …
-
Unscored —
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a d…
-
Unscored —CVE-2007-4925 Public exploit
The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attacker…
-
Unscored —CVE-2007-4930 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform ce…
-
Unscored —CVE-2007-4932 Public exploit
admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative…
-
Unscored —CVE-2007-4933 Public exploit
Direct static code injection vulnerability in includes/admin/sub/conf_appearence.php in Shop-Script FREE 2.0 and earlie…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2007-4919 Public exploit
Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-4922 Public exploit
SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to exe…
-
Unscored —CVE-2007-4911 Public exploit
JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service (daemon crash) via a l…
-
Unscored —CVE-2007-4917 Public exploit
Cross-site scripting (XSS) vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitra…
-
Unscored —CVE-2007-4920 Public exploit
SQL injection vulnerability in soporte_derecha_w.php in PHP Webquest 2.5 and earlier allows remote attackers to execute…
-
Unscored —
Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MF…
-
Unscored —CVE-2007-4909 Public exploit
Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remot…
-
Unscored —
PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attacke…
-
Unscored —CVE-2007-4918 Public exploit
SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component …
-
Unscored —
The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent s…
-
Unscored —CVE-2007-4904 Public exploit
RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other p…
-
Unscored —CVE-2007-4903 Public exploit
Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component all…
-
Unscored —CVE-2007-4907 Public exploit
Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a…
-
Unscored —
PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is …
-
Unscored —CVE-2007-4905 Public exploit
Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute a…
-
Unscored —CVE-2007-4908 Public exploit
Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execut…
-
Unscored —CVE-2007-4902 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto C…
-
Unscored —CVE-2007-4899 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject…
-
Unscored —
pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (applic…
-
Unscored —CVE-2007-4896 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/header.php in Toms Gaestebuch 1.01 and earlier allow remot…
-
Unscored —CVE-2007-4895 Public exploit
Directory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbit…
-
Unscored —CVE-2007-4892 Public exploit
Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attacker…
-
Unscored —
A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) S…
-
Unscored —
Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) …
-
Unscored —CVE-2007-4886 Public exploit
Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbi…
-
Unscored —CVE-2007-4845 Public exploit
Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute…