Archive
September 2007
Vulnerabilities first published in this month (UTC), newest first.
448 results · Feed
-
Unscored —
backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaint…
-
Unscored —CVE-2007-4653 Public exploit
SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote …
-
Unscored —
The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, whi…
-
Unscored —CVE-2007-4652 Public exploit
The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session fil…
-
Unscored —
The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, w…
-
Unscored —
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (applicatio…
-
Unscored —
The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass…
-
Unscored —
Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify i…