Archive
4 January 2008
Vulnerabilities first published on this day (UTC), newest first.
54 results · Feed
-
Unscored —CVE-2007-6654 Public exploit
Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows…
-
Unscored —CVE-2007-6658 Public exploit
SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbit…
-
Unscored —CVE-2007-6666 Public exploit
SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL c…
-
Unscored —
2z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to index.php with an inval…
-
Unscored —CVE-2007-6647 Public exploit
SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6656 Public exploit
SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remot…
-
Unscored —CVE-2007-6653 Public exploit
Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-6663 Public exploit
SQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU Arcade (com_puarcade) …
-
Unscored —CVE-2007-6650 Public exploit
Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbi…
-
Unscored —CVE-2007-6665 Public exploit
SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL …
-
Unscored —
Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2007-6657 Public exploit
PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlie…
-
Unscored —CVE-2007-6648 Public exploit
Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include an…
-
Unscored —CVE-2007-6649 Public exploit
PHP remote file inclusion vulnerability in includes/tumbnail.php in MatPo Bilder Galerie 1.1 allows remote attackers to…
-
Unscored —CVE-2007-6655 Public exploit
PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to exe…
-
Unscored —CVE-2007-6652 Public exploit
cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers …
-
Unscored —
2z project 0.9.6.1 allows attackers to change the password without supplying the old password.
-
Unscored —CVE-2007-6664 Public exploit
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrar…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2007-6651 Public exploit
Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive info…
-
Unscored —CVE-2007-6667 Public exploit
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —
Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the L…
-
Unscored —
Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause …
-
Unscored —CVE-2008-0092 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1…
-
Unscored —CVE-2008-0091 Public exploit
Directory traversal vulnerability in download2.php in AGENCY4NET WEBFTP 1 allows remote attackers to read and delete ar…
-
Unscored —
A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (In…
-
Unscored —CVE-2008-0089 Public exploit
SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Joomla! before 1.5 RC4 allow remote attackers to (1) add …
-
Unscored —
Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group…
-
Unscored —CVE-2007-6646 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow …
-
Unscored —
Unspecified vulnerability in Joomla! before 1.5 RC4 allows remote authenticated users to gain privileges via unspecifie…
-
Unscored —
Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, whic…
-
Unscored —CVE-2007-6639 Public exploit
SQL injection vulnerability in index.php in IPTBB 0.5.4 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the com_poll component in Joomla! before 1.5 RC4 allows remote attackers to…
-
Unscored —CVE-2007-6641 Public exploit
Cross-site scripting (XSS) vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbit…
-
Unscored —CVE-2007-6621 Public exploit
Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read …
-
Unscored —
LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash)…
-
Unscored —CVE-2007-6622 Public exploit
SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —
March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —
Integer overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and earlier allows remote att…