Archive
December 2007
Vulnerabilities first published in this month (UTC), newest first.
203 results · Clear filters · Feed
-
Unscored —CVE-2007-6496 Public exploit
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hos…
-
Unscored —CVE-2007-6503 Public exploit
Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users…
-
Unscored —CVE-2007-6489 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arb…
-
Unscored —CVE-2007-6504 Public exploit
Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticat…
-
Unscored —CVE-2007-6474 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2007-6497 Public exploit
Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a requ…
-
Unscored —CVE-2007-6490 Public exploit
Cross-site request forgery (CSRF) vulnerability in Falcon Series One CMS 1.4.3 allows remote attackers to change a pass…
-
Unscored —CVE-2007-6476 Public exploit
GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.ph…
-
Unscored —CVE-2007-6488 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arb…
-
Unscored —
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 all…
-
Unscored —CVE-2007-6457 Public exploit
Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of servi…
-
Unscored —
Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and …
-
Unscored —CVE-2007-6466 Public exploit
Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-6470 Public exploit
phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attack…
-
Unscored —CVE-2007-6462 Public exploit
SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-6459 Public exploit
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2007-6464 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-6467 Public exploit
SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2007-6471 Public exploit
Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory…
-
Unscored —CVE-2007-6453 Public exploit
Directory traversal vulnerability in raidenhttpd-admin/workspace.php in RaidenHTTPD 2.0.19, when the WebAdmin function …
-
Unscored —CVE-2007-6458 Public exploit
SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-6455 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitr…
-
Unscored —CVE-2007-3876 Public exploit
Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a lon…
-
Unscored —
Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle …
-
Unscored —
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allo…
-
Unscored —CVE-2007-5583 Public exploit
Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" respons…
-
Unscored —CVE-2007-6414 Public exploit
admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which al…
-
Unscored —CVE-2007-6393 Public exploit
SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbi…
-
Unscored —CVE-2007-6404 Public exploit
Directory traversal vulnerability in Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote atta…
-
Unscored —CVE-2007-6403 Public exploit
Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via…
-
Unscored —CVE-2007-6391 Public exploit
SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2007-6392 Public exploit
SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2007-6405 Public exploit
Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI progr…
-
Unscored —CVE-2007-6395 Public exploit
Flat PHP Board 1.2 and earlier stores sensitive information under the web root with insufficient access control, which …
-
Unscored —
Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 …
-
Unscored —CVE-2007-6398 Public exploit
Flat PHP Board 1.2 and earlier allows remote attackers to bypass authentication and obtain limited access to an arbitra…
-
Unscored —CVE-2007-6402 Public exploit
Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1…
-
Unscored —CVE-2007-6399 Public exploit
index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current us…
-
Unscored —CVE-2007-6397 Public exploit
Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to (…