Archive
November 2007
Vulnerabilities first published in this month (UTC), newest first.
167 results · Clear filters · Feed
-
Unscored —
PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute …
-
Unscored —
PHP remote file inclusion vulnerability in admin/index.php in nuBoard 0.5 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-5845 Public exploit
Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include a…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-5840 Public exploit
PHP remote file inclusion vulnerability in starnet/themes/c-sky/main.inc.php in Fred Stuurman SyndeoCMS 2.5.01 allows r…
-
Unscored —CVE-2007-5824 Public exploit
webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service …
-
Unscored —CVE-2007-5822 Public exploit
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inj…
-
Unscored —CVE-2007-5821 Public exploit
Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and ex…
-
Unscored —CVE-2007-5837 Public exploit
GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary comma…
-
Unscored —CVE-2007-5826 Public exploit
Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote…
-
Unscored —CVE-2007-5820 Public exploit
Directory traversal vulnerability in index.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to include an…
-
Unscored —CVE-2007-5823 Public exploit
Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or ov…
-
Medium 6.1CVE-2007-5817 Public exploit
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (…
-
Unscored —CVE-2007-5815 Public exploit
Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.…
-
Unscored —
Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.…
-
Unscored —CVE-2007-5816 Public exploit
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by mak…
-
Unscored —CVE-2007-5812 Public exploit
Directory traversal vulnerability in modules/Builder/DownloadModule.php in ModuleBuilder 1.0 allows remote attackers to…
-
Unscored —CVE-2007-5813 Public exploit
Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary…
-
Unscored —CVE-2007-5802 Public exploit
Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote at…
-
Unscored —CVE-2007-5796 Public exploit
Cross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow…
-
Unscored —CVE-2007-5795 Public exploit
The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly …
-
Unscored —
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEX…
-
Unscored —CVE-2002-2417 Public exploit
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows…
-
Unscored —CVE-2002-2420 Public exploit
site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters…
-
Unscored —CVE-2002-2400 Public exploit
Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2002-2403 Public exploit
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for reco…
-
Unscored —CVE-2002-2404 Public exploit
Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via…
-
Unscored —CVE-2002-2422 Public exploit
Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remo…
-
Unscored —CVE-2002-2416 Public exploit
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot…
-
Unscored —CVE-2002-2425 Public exploit
Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError …
-
Unscored —CVE-2002-2424 Public exploit
Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2002-2399 Public exploit
Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files…
-
Unscored —CVE-2007-5785 Public exploit
SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-5782 Public exploit
Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2007-5774 Public exploit
index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an inval…
-
Unscored —CVE-2007-5786 Public exploit
Multiple PHP remote file inclusion vulnerabilities in GoSamba 1.0.1 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —
Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Play…
-
Unscored —CVE-2007-5776 Public exploit
Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to r…