Skip to content
OpenAdvisories

Archive

12 October 2007

Vulnerabilities first published on this day (UTC), newest first.

19 results · Clear filters · Feed

  • Unscored —
    CVE-2007-5430 Public exploit

    Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via (1) t…

  • Unscored —
    CVE-2007-5428 Public exploit

    Cross-site scripting (XSS) vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via …

  • Unscored —
    CVE-2007-5426 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2007-5423 Public exploit EPSS 77%

    tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f a…

  • Unscored —
    CVE-2007-5429 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-5427 Public exploit

    Cross-site scripting (XSS) vulnerability in the com_search component in Joomla! 1.0.13 and earlier allows remote attack…

  • Unscored —
    CVE-2007-5416 Public exploit

    Drupal 5.2 and earlier does not properly unset variables when the input data includes a numeric parameter with a value …

  • Unscored —
    CVE-2007-5417 Public exploit

    Directory traversal vulnerability in index.php in boastMachine (aka bMachine) 2.8 allows remote attackers to read arbit…

  • Unscored —
    CVE-2007-5407 Public exploit EPSS 40%

    Multiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8 component for Joomla! al…

  • Unscored —
    CVE-2007-5409 Public exploit

    PHP remote file inclusion vulnerability in admin/nuseo_admin_d.php in NuSEO PHP Enterprise 1.6 (NuSEO.PHP), when regist…

  • Unscored —
    CVE-2007-5410 Public exploit

    PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader (com_wmtrs…

  • Unscored —
    CVE-2007-5412 Public exploit EPSS 38%

    Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass (com_mp3_allopass) 1.0 component for Jo…

  • Unscored —
    CVE-2007-5408 Public exploit

    SQL injection vulnerability in category.php in cpDynaLinks 1.02 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-5411 Public exploit

    Cross-site scripting (XSS) vulnerability in the Linksys SPA941 VoIP Phone with firmware 5.1.8 allows remote attackers t…

  • Unscored —
    CVE-2007-5386 Public exploit

    Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that doe…

  • Unscored —
    CVE-2007-5388 Public exploit EPSS 38%

    Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-5390 Public exploit

    PHP remote file inclusion vulnerability in index.php in PicoFlat CMS 0.4.14 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2007-5387 Public exploit EPSS 29%

    PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers…

  • Unscored —
    CVE-2007-5381 Public exploit EPSS 15%

    Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T…