Archive
14 October 2007
Vulnerabilities first published on this day (UTC), newest first.
28 results · Clear filters · Feed
-
Unscored —CVE-2002-2258 Public exploit
Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large in…
-
Unscored —CVE-2002-2246 Public exploit
Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2002-2247 Public exploit
The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive informatio…
-
Unscored —CVE-2002-2249 Public exploit
PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands…
-
Unscored —CVE-2002-2255 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attac…
-
Unscored —CVE-2002-2235 Public exploit
member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which cau…
-
Unscored —CVE-2002-2232 Public exploit
Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) com…
-
Unscored —CVE-2002-2251 Public exploit
Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to e…
-
Unscored —CVE-2003-1348 Public exploit
Cross-site scripting (XSS) vulnerability in guestbook.cgi in ftls.org Guestbook 1.1 allows remote attackers to inject a…
-
Unscored —CVE-2003-1350 Public exploit
List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field d…
-
Unscored —CVE-2003-1342 Public exploit
Trend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memo…
-
Unscored —CVE-2003-1343 Public exploit
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.e…
-
Unscored —CVE-2003-1354 Public exploit
Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows re…
-
Unscored —CVE-2003-1347 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2003-1355 Public exploit
Buffer overflow in the remote console (rcon) in Battlefield 1942 1.2 and 1.3 allows remote attackers to cause a denial …
-
Unscored —CVE-2003-1341 Public exploit
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentic…
-
Unscored —CVE-2003-1344 Public exploit
Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords,…
-
Unscored —CVE-2007-5458 Public exploit
SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magic_quotes_gpc is disabled, al…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flas…
-
Unscored —CVE-2007-5446 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7 ActiveX Edition allow…
-
Unscored —CVE-2007-5449 Public exploit
SQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows remote attackers to execute arb…
-
Unscored —CVE-2007-5450 Public exploit
Unspecified vulnerability in Safari on the Apple iPod touch (aka iTouch) and iPhone 1.1.1 allows user-assisted remote a…
-
Unscored —CVE-2007-5455 Public exploit
Cross-site scripting (XSS) vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbit…
-
Unscored —CVE-2007-5447 Public exploit
ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_func…
-
Unscored —CVE-2007-5452 Public exploit
Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute ar…
-
Unscored —
PHP remote file inclusion vulnerability in admin.color.php in the com_colorlab (aka com_color) 1.0 component for Joomla…
-
Unscored —CVE-2007-5453 Public exploit
Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbit…
-
Unscored —CVE-2007-5440 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code …