Skip to content
OpenAdvisories

Archive

3 October 2007

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —
    CVE-2007-5177 Public exploit

    SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote…

  • Unscored —
    CVE-2007-5185 Public exploit EPSS 42%

    Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execu…

  • Unscored —
    CVE-2007-5175 Public exploit

    PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary…

  • Unscored —

    Multiple SQL injection vulnerabilities in mes_add.php in x-script GuestBook 1.3a, when magic_quotes_gpc is disabled, al…

  • Unscored —
    CVE-2007-5178 Public exploit

    contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment be…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2007-5181 Public exploit

    SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-5173 Public exploit

    PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inj…

  • Unscored —
    CVE-2007-5174 Public exploit

    Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2007-5184 Public exploit EPSS 12%

    Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in mail.asp in Netkamp Emlak Scripti allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2007-5180 Public exploit

    Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands …

  • Unscored —

    Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows remote attackers to uplo…

  • Unscored —
    CVE-2007-5186 Public exploit EPSS 47%

    PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled,…

  • Unscored —
    CVE-2007-5187 Public exploit

    SQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded Calendar 2.x module for …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Mailbox.mws in OdysseySuite, possibly 4.0.729, allows remote attackers to i…