Archive
September 2007
Vulnerabilities first published in this month (UTC), newest first.
448 results · Feed
-
Unscored —
PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2007-4952 Public exploit
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL…
-
Unscored —
PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 componen…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-4953 Public exploit
SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the k…
-
Unscored —
PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Jooml…
-
Unscored —
The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the…
-
Unscored —
Race condition in the tee (sys_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might allow local users to …
-
Unscored —
The ipv6_getsockopt_sticky function in the kernel in Red Hat Enterprise Linux (RHEL) Beta 5.1.0 allows local users to o…
-
Unscored —
Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-S…
-
Unscored —CVE-2007-4937 Public exploit
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote atta…
-
Unscored —
LetterGrade allows remote attackers to obtain sensitive information (installation path or account existence) via unspec…
-
Unscored —CVE-2007-4941 Public exploit
KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file …
-
Unscored —
Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in…
-
Unscored —CVE-2007-4942 Public exploit
PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote …
-
Unscored —
Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause …
-
Unscored —
Unspecified vulnerability in Office Efficiencies SafeSquid 4.1.x has unknown impact and attack vectors, related to a "s…
-
Unscored —
The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before…
-
Unscored —
Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote att…
-
Unscored —
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a d…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web scrip…
-
Unscored —
axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service (reb…
-
Unscored —CVE-2007-4925 Public exploit
The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attacker…
-
Unscored —
The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to o…
-
Unscored —CVE-2007-4930 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform ce…
-
Unscored —CVE-2007-4932 Public exploit
admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative…
-
Unscored —
HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Cont…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2007-4933 Public exploit
Direct static code injection vulnerability in includes/admin/sub/conf_appearence.php in Shop-Script FREE 2.0 and earlie…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code …
-
Unscored —
The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote atta…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary …
-
Unscored —CVE-2007-4919 Public exploit
Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-4922 Public exploit
SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to exe…
-
Unscored —CVE-2007-4911 Public exploit
JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service (daemon crash) via a l…
-
Unscored —
Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security chec…
-
Unscored —CVE-2007-4917 Public exploit
Cross-site scripting (XSS) vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitra…
-
Unscored —CVE-2007-4920 Public exploit
SQL injection vulnerability in soporte_derecha_w.php in PHP Webquest 2.5 and earlier allows remote attackers to execute…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ips_kernel/class_ajax.php in Invision Power Board (IPB or IP.Board) 2.3.1 u…
-
Unscored —
Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MF…