Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
327 results · Clear filters · Feed
-
Unscored —CVE-2007-5321 Public exploit
Directory traversal vulnerability in index.php in Verlihub Control Panel (VHCP) 1.7 and earlier allows remote attackers…
-
Unscored —
Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote …
-
Unscored —CVE-2007-5320 Public exploit
Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to (1) delete…
-
Unscored —CVE-2007-5316 Public exploit
SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute…
-
Unscored —
PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remo…
-
Unscored —CVE-2007-5314 Public exploit
PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when register_globals is enable…
-
Unscored —CVE-2007-5313 Public exploit
PHP remote file inclusion vulnerability in install/config.php in Picturesolution 2.1 and earlier allows remote attacker…
-
Unscored —CVE-2007-5309 Public exploit
PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery (com_wmtg…
-
Unscored —CVE-2007-5312 Public exploit
Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-5311 Public exploit
Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote at…
-
Unscored —CVE-2007-5310 Public exploit
PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtpo…
-
Unscored —CVE-2007-5306 Public exploit
ELSEIF CMS Beta 0.6 allows remote attackers to obtain sensitive information (full path) via unspecified vectors to util…
-
Unscored —CVE-2007-5305 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-5308 Public exploit
SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows re…
-
Unscored —CVE-2007-5293 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IDMOS 1.0-beta (aka Phoenix) allow remote attackers to inject ar…
-
Unscored —CVE-2007-5290 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMai…
-
Unscored —CVE-2007-5307 Public exploit
ELSEIF CMS Beta 0.6 does not properly unset variables when the input data includes a numeric parameter with a value mat…
-
Unscored —CVE-2007-5294 Public exploit
PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to ex…
-
Unscored —CVE-2007-5298 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-5299 Public exploit
Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow r…
-
Unscored —CVE-2007-5300 Public exploit
Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2, and possibly other v…
-
Unscored —CVE-2007-5304 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary w…
-
Unscored —
Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in Als…
-
Unscored —CVE-2004-2727 Public exploit
Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a den…
-
Unscored —CVE-2004-2732 Public exploit
nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which c…
-
Unscored —CVE-2004-2736 Public exploit
Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cook…
-
Unscored —CVE-2004-2737 Public exploit
SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-5272 Public exploit
SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-5278 Public exploit
Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control,…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to e…
-
Unscored —
The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows rem…
-
Unscored —CVE-2007-5265 Public exploit
Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to …
-
Unscored —CVE-2007-5264 Public exploit
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which al…
-
Unscored —CVE-2004-2716 Public exploit
Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2004-2702 Public exploit
Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inje…
-
Unscored —CVE-2004-2697 Public exploit
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges vi…
-
Unscored —CVE-2004-2698 Public exploit
Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial…
-
Unscored —CVE-2004-2719 Public exploit
Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitra…
-
Unscored —CVE-2004-2699 Public exploit
deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified Pr…
-
Unscored —CVE-2004-2718 Public exploit
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive i…