Skip to content
OpenAdvisories

Archive

September 2007

Vulnerabilities first published in this month (UTC), newest first.

174 results · Clear filters · Feed

  • Unscored —
    CVE-2007-4714 Public exploit

    SQL injection vulnerability in error_view.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2007-4718 Public exploit

    Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to incl…

  • Unscored —
    CVE-2007-4717 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators…

  • Unscored —
    CVE-2007-4719 Public exploit

    SQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-4725 Public exploit

    Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip befor…

  • Unscored —
    CVE-2007-4715 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2007-4711 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-4722 Public exploit EPSS 10%

    Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie070510…

  • Unscored —
    CVE-2007-4712 Public exploit EPSS 58%

    PHP remote file inclusion vulnerability in index.php in eNetman 1 allows remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2007-4726 Public exploit

    Directory traversal vulnerability in Web Oddity 0.09b allows remote attackers to read arbitrary files via a .. (dot dot…

  • Unscored —
    CVE-2007-4476 Public exploit EPSS 15%

    Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a …

  • Unscored —
    CVE-2007-4653 Public exploit

    SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote …

  • Unscored —
    CVE-2007-4652 Public exploit

    The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session fil…

  • Unscored —
    CVE-2007-3997 Public exploit EPSS 14%

    The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass…