Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
327 results · Clear filters · Feed
-
Unscored —CVE-2002-2353 Public exploit
tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT req…
-
Unscored —CVE-2002-2359 Public exploit
Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbit…
-
Unscored —CVE-2002-2348 Public exploit
Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2007-5688 Public exploit
Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, fo…
-
Unscored —CVE-2007-5685 Public exploit
The safe_path function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read fi…
-
Unscored —CVE-2002-2312 Public exploit
Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaS…
-
Unscored —CVE-2002-2321 Public exploit
Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote at…
-
Unscored —CVE-2002-2309 Public exploit
php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to…
-
Unscored —CVE-2002-2335 Public exploit
Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allow…
-
Unscored —CVE-2002-2314 Public exploit
Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and e…
-
Unscored —CVE-2002-2319 Public exploit
Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code a…
-
Unscored —CVE-2002-2318 Public exploit
Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to …
-
Unscored —CVE-2002-2325 Public exploit
The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.4…
-
Unscored —CVE-2002-2315 Public exploit
Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a den…
-
Unscored —CVE-2007-5684 Public exploit
Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and exec…
-
Unscored —CVE-2003-1506 Public exploit
Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers…
-
Unscored —CVE-2003-1513 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 all…
-
Unscored —CVE-2003-1519 Public exploit
Cross-site scripting (XSS) vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2003-1517 Public exploit
cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, wh…
-
Unscored —
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or …
-
Unscored —CVE-2003-1498 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allow…
-
Unscored —CVE-2003-1520 Public exploit
SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2003-1516 Public exploit
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to…
-
Unscored —CVE-2003-1499 Public exploit
Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2003-1511 Public exploit
Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inj…
-
Unscored —CVE-2003-1521 Public exploit
Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDo…
-
Unscored —CVE-2003-1504 Public exploit
SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2003-1512 Public exploit
Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND r…
-
Unscored —CVE-2003-1522 Public exploit
Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject …
-
Unscored —CVE-2003-1518 Public exploit
Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog mes…
-
Unscored —CVE-2007-2983 Public exploit
Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebc…
-
Unscored —CVE-2007-5679 Public exploit
SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2003-1463 Public exploit
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with a…
-
Unscored —CVE-2003-1472 Public exploit
Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execut…
-
Unscored —CVE-2003-1473 Public exploit
Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitra…
-
Unscored —CVE-2003-1488 Public exploit
The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator…
-
Unscored —CVE-2003-1481 Public exploit
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which all…
-
Unscored —CVE-2003-1478 Public exploit
Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with…
-
Unscored —CVE-2003-1468 Public exploit
The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via a…
-
Unscored —CVE-2003-1480 Public exploit
MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the…