Skip to content
OpenAdvisories

Archive

1 November 2007

Vulnerabilities first published on this day (UTC), newest first.

24 results · Clear filters · Feed

  • Unscored —
    CVE-2002-2417 Public exploit

    acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows…

  • Unscored —
    CVE-2002-2420 Public exploit

    site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters…

  • Unscored —
    CVE-2002-2400 Public exploit

    Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2002-2403 Public exploit

    Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for reco…

  • Unscored —
    CVE-2002-2404 Public exploit

    Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via…

  • Unscored —
    CVE-2002-2422 Public exploit

    Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remo…

  • Unscored —
    CVE-2002-2416 Public exploit

    Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot…

  • Unscored —
    CVE-2002-2425 Public exploit

    Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError …

  • Unscored —
    CVE-2002-2424 Public exploit

    Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2002-2399 Public exploit

    Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files…

  • Unscored —
    CVE-2007-5785 Public exploit

    SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-5781 Public exploit EPSS 39%

    PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2007-5782 Public exploit

    Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. …

  • Unscored —
    CVE-2007-5774 Public exploit

    index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an inval…

  • Unscored —
    CVE-2007-5786 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in GoSamba 1.0.1 allow remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2007-5779 Public exploit EPSS 72%

    Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Play…

  • Unscored —
    CVE-2007-5776 Public exploit

    Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to r…

  • Critical 9.8
    CVE-2007-5775 Public exploit EPSS 29%

    Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-…

  • Unscored —
    CVE-2007-5784 Public exploit

    PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-5773 Public exploit

    Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote att…

  • Unscored —
    CVE-2007-5772 Public exploit

    Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrat…

  • Unscored —
    CVE-2007-5783 Public exploit

    SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2007-5771 Public exploit

    Flatnuke 3 (aka FlatnuX) allows remote attackers to obtain administrative access via a myforum%00 cookie.

  • Unscored —
    CVE-2007-5780 Public exploit

    PHP remote file inclusion vulnerability in pub/pub08_comments.php in teatro 1.6 allows remote attackers to execute arbi…