Archive
23 October 2007
Vulnerabilities first published on this day (UTC), newest first.
31 results · Clear filters · Feed
-
Unscored —CVE-2007-5643 Public exploit
Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary…
-
Unscored —CVE-2007-5649 Public exploit
Cross-site scripting (XSS) vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote at…
-
Unscored —CVE-2007-5646 Public exploit
SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows re…
-
Unscored —CVE-2007-5648 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in rnote.php in rNote 0.9.7.5 allow remote attackers to inject arbi…
-
Unscored —
LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%0…
-
Unscored —CVE-2007-5653 Public exploit
The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrict…
-
Unscored —CVE-2007-5644 Public exploit
Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortro…
-
Unscored —CVE-2007-5650 Public exploit
Directory traversal vulnerability in system.php in ReloadCMS 1.2.7 allows remote attackers to include and execute arbit…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers …
-
Unscored —CVE-2007-5647 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2007-5642 Public exploit
Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to inc…
-
Unscored —CVE-2007-5630 Public exploit
SQL injection vulnerability in tnews.php in BBsProcesS BBPortalS 1.5.10 through 2.0 allows remote attackers to execute …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when register_globals is enabled, allow…
-
Unscored —CVE-2007-5636 Public exploit
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (applicati…
-
Unscored —CVE-2007-5637 Public exploit
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Commun…
-
Unscored —CVE-2007-5633 Public exploit
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users t…
-
Unscored —
PHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site (TOWels) 0.1 allows remote …
-
Unscored —CVE-2007-5625 Public exploit
Cross-site scripting (XSS) vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attacker…
-
Unscored —CVE-2007-5627 Public exploit
PHP remote file inclusion vulnerability in content/fnc-readmail3.php in SocketMail 2.2.8 allows remote attackers to exe…
-
Unscored —CVE-2003-1430 Public exploit
Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known f…
-
Unscored —CVE-2003-1452 Public exploit
Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code b…
-
Unscored —CVE-2003-1461 Public exploit
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: t…
-
Unscored —CVE-2003-1453 Public exploit
Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 thr…
-
Unscored —CVE-2003-1459 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary…
-
Unscored —CVE-2003-1442 Public exploit
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remo…
-
Unscored —CVE-2003-1445 Public exploit
Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash…
-
Unscored —CVE-2003-1435 Public exploit
SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the d…
-
Unscored —CVE-2003-1450 Public exploit
BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via …
-
Unscored —CVE-2003-1436 Public exploit
PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute…
-
Unscored —CVE-2003-1456 Public exploit
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via…
-
Unscored —CVE-2003-1431 Public exploit
Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (cras…