Skip to content
OpenAdvisories

Archive

September 2007

Vulnerabilities first published in this month (UTC), newest first.

448 results · Feed

  • Unscored —

    backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaint…

  • Unscored —
    CVE-2007-4653 Public exploit

    SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote …

  • Unscored —

    The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, whi…

  • Unscored —
    CVE-2007-4652 Public exploit

    The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session fil…

  • Unscored —

    The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, w…

  • Unscored —

    Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (applicatio…

  • Unscored —
    CVE-2007-3997 Public exploit EPSS 14%

    The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass…

  • Unscored —

    Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify i…