Archive
November 2007
Vulnerabilities first published in this month (UTC), newest first.
167 results · Clear filters · Feed
-
Unscored —CVE-2007-6187 Public exploit
Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote a…
-
Unscored —CVE-2007-6189 Public exploit
A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows rem…
-
Unscored —CVE-2007-6191 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execu…
-
Unscored —CVE-2007-6188 Public exploit
Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute …
-
Unscored —CVE-2007-6177 Public exploit
PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote attackers to execute arbit…
-
Unscored —CVE-2007-6176 Public exploit
kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shel…
-
Unscored —CVE-2007-6184 Public exploit
Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute a…
-
Unscored —CVE-2007-6178 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu (EHCP) 0.22.8 and earlier a…
-
Unscored —CVE-2007-6173 Public exploit
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers t…
-
Unscored —CVE-2007-6185 Public exploit
Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2007-6172 Public exploit
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the i…
-
Unscored —CVE-2007-6179 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-6182 Public exploit
The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain privileges via shell met…
-
Unscored —CVE-2007-6164 Public exploit
Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-6160 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2007-6159 Public exploit
SQL injection vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6158 Public exploit
Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attack…
-
Unscored —CVE-2007-6157 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2007-6163 Public exploit
SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Ma…
-
Unscored —CVE-2007-6162 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web…
-
Unscored —
Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDou…
-
Unscored —CVE-2007-6141 Public exploit
Cross-site scripting (XSS) vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2007-6139 Public exploit
PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbit…
-
Unscored —CVE-2007-6136 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote…
-
Unscored —CVE-2007-6147 Public exploit
Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-6138 Public exploit
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2007-6133 Public exploit
PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows rem…
-
Unscored —CVE-2007-6134 Public exploit
SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-6137 Public exploit
SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2007-6135 Public exploit
Cross-site scripting (XSS) vulnerability in phpslideshow.php in PHPSlideShow 0.9.9.2, and possibly earlier, allows remo…
-
Unscored —CVE-2007-6127 Public exploit
Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-6128 Public exploit
SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-6126 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to injec…
-
Unscored —CVE-2007-6124 Public exploit
Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to injec…
-
Unscored —CVE-2007-6129 Public exploit
Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to in…
-
Unscored —CVE-2007-6125 Public exploit
SQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbit…
-
Unscored —CVE-2007-6110 Public exploit
Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2007-6106 Public exploit
SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2007-6113 Public exploit
Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attacke…