Archive
4 January 2008
Vulnerabilities first published on this day (UTC), newest first.
35 results · Clear filters · Feed
-
Unscored —CVE-2007-6654 Public exploit
Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows…
-
Unscored —CVE-2007-6658 Public exploit
SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbit…
-
Unscored —CVE-2007-6666 Public exploit
SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-6647 Public exploit
SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6656 Public exploit
SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remot…
-
Unscored —CVE-2007-6653 Public exploit
Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-6663 Public exploit
SQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU Arcade (com_puarcade) …
-
Unscored —CVE-2007-6650 Public exploit
Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbi…
-
Unscored —CVE-2007-6665 Public exploit
SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6657 Public exploit
PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlie…
-
Unscored —CVE-2007-6648 Public exploit
Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include an…
-
Unscored —CVE-2007-6649 Public exploit
PHP remote file inclusion vulnerability in includes/tumbnail.php in MatPo Bilder Galerie 1.1 allows remote attackers to…
-
Unscored —CVE-2007-6655 Public exploit
PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to exe…
-
Unscored —CVE-2007-6652 Public exploit
cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers …
-
Unscored —CVE-2007-6664 Public exploit
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-6651 Public exploit
Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive info…
-
Unscored —CVE-2007-6667 Public exploit
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-0092 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1…
-
Unscored —CVE-2008-0091 Public exploit
Directory traversal vulnerability in download2.php in AGENCY4NET WEBFTP 1 allows remote attackers to read and delete ar…
-
Unscored —
A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (In…
-
Unscored —CVE-2008-0089 Public exploit
SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2007-6646 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow …
-
Unscored —CVE-2007-6639 Public exploit
SQL injection vulnerability in index.php in IPTBB 0.5.4 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-6641 Public exploit
Cross-site scripting (XSS) vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbit…
-
Unscored —CVE-2007-6621 Public exploit
Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read …
-
Unscored —CVE-2007-6622 Public exploit
SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —
March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —CVE-2007-6631 Public exploit
Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2007-6633 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers …
-
Unscored —CVE-2007-6620 Public exploit
Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary fi…
-
Unscored —CVE-2007-6623 Public exploit
Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directo…
-
Unscored —CVE-2007-6630 Public exploit
The Url_init function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote attackers to cause a d…
-
Unscored —CVE-2007-6624 Public exploit
Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and …
-
Unscored —CVE-2007-6632 Public exploit
showCode.php in xml2owl 0.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the pat…
-
Unscored —CVE-2007-6634 Public exploit
Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to execute ar…