Skip to content
OpenAdvisories

Archive

10 November 2007

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2007-5918 Public exploit

    Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that…

  • Unscored —
    CVE-2007-5914 Public exploit

    Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allow…

  • Unscored —
    CVE-2007-5915 Public exploit

    Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2007-5925 Public exploit EPSS 11%

    The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows…

  • Unscored —
    CVE-2007-5926 Public exploit

    OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in…

  • Unscored —
    CVE-2007-5913 Public exploit

    dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attac…

  • Unscored —
    CVE-2007-5923 Public exploit

    Cross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer Associates) eTrust SiteMind…

  • Unscored —
    CVE-2007-5912 Public exploit

    SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2007-5911 Public exploit

    Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Med…