Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
327 results · Clear filters · Feed
-
Unscored —CVE-2004-2701 Public exploit
Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject a…
-
Unscored —CVE-2004-2725 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2004-2715 Public exploit
edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by…
-
Unscored —CVE-2004-2720 Public exploit
Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attacker…
-
Unscored —CVE-2004-2717 Public exploit
Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrati…
-
Unscored —CVE-2005-4869 Public exploit
The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application cr…
-
Unscored —CVE-2005-4868 Public exploit
Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, whi…
-
Unscored —
Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers …
-
Unscored —CVE-2004-2692 Public exploit
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass res…
-
Unscored —CVE-2007-5261 Public exploit
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-5255 Public exploit
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbit…
-
Unscored —CVE-2007-5248 Public exploit
Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1…
-
Unscored —
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Compon…
-
Unscored —
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versi…
-
Unscored —CVE-2007-5256 Public exploit
Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote…
-
Unscored —
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.…
-
Unscored —CVE-2007-5253 Public exploit
c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName pa…
-
Unscored —CVE-2007-5235 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to injec…
-
Unscored —CVE-2007-5231 Public exploit
Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticat…
-
Unscored —CVE-2007-5229 Public exploit
Cross-site request forgery (CSRF) vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote atta…
-
Unscored —
PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers …
-
Unscored —CVE-2007-5230 Public exploit
admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote …
-
Unscored —CVE-2007-5233 Public exploit
SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbit…
-
Unscored —CVE-2007-5218 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Don Barnes DRBGuestbook 1.1.13 allows remote attackers to inje…
-
Unscored —CVE-2007-5222 Public exploit
SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-5221 Public exploit
PHP remote file inclusion vulnerability in mail/childwindow.inc.php in Poppawid 2.7 allows remote attackers to execute …
-
Unscored —
Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CL…
-
Unscored —
Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) …
-
Unscored —CVE-2007-5225 Public exploit
Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the c…
-
Unscored —CVE-2007-5198 Public exploit
Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow…
-
Unscored —CVE-2007-5177 Public exploit
SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execu…
-
Unscored —CVE-2007-5175 Public exploit
PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-5178 Public exploit
contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment be…
-
Unscored —CVE-2007-5181 Public exploit
SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-5173 Public exploit
PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote …
-
Unscored —CVE-2007-5174 Public exploit
Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arb…
-
Unscored —
Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute …
-
Unscored —CVE-2007-5180 Public exploit
Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands …
-
Unscored —
PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled,…