|
283871
|
- |
|
aol
|
instant_messenger
|
The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant me…
|
CWE-94
Code Injection
|
CVE-2007-5124
|
2018-10-16 06:40 |
2007-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283872
|
- |
|
simpgb
|
simpgb
|
Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote attackers to inject arbitrary web script or HTML via (1) the l_username parameter to the default URI under admin/ or…
|
CWE-79
Cross-site Scripting
|
CVE-2007-5127
|
2018-10-16 06:40 |
2007-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283873
|
- |
|
boesch-it php
|
simpnews php
|
SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_date parameter to events.php, which reveals the path in an erro…
|
CWE-20
Improper Input Validation
|
CVE-2007-5128
|
2018-10-16 06:40 |
2007-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283874
|
- |
|
boesch-it
|
simpgb
|
SimpGB 1.46.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain sensitive configuration information via a direct request f…
|
CWE-200
Information Exposure
|
CVE-2007-5129
|
2018-10-16 06:40 |
2007-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283875
|
- |
|
boesch-it
|
simpgb
|
SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php or (2) a direct request to admin/trailer.php, which reveals the path in var…
|
CWE-20
Improper Input Validation
|
CVE-2007-5130
|
2018-10-16 06:40 |
2007-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283876
|
- |
|
interspire
|
activekb_nx
|
SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately r…
|
CWE-89
SQL Injection
|
CVE-2007-5131
|
2018-10-16 06:40 |
2007-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283877
|
- |
|
openssl
|
openssl
|
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that trigger…
|
CWE-189
Numeric Errors
|
CVE-2007-5135
|
2018-10-16 06:40 |
2007-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283878
|
- |
|
sitex
|
sitex_cms
|
SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary SQL commands via the search parameter.
|
CWE-89
SQL Injection
|
CVE-2007-5141
|
2018-10-16 06:40 |
2007-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283879
|
- |
|
north_country_public_radio
|
public_media_manager
|
PHP remote file inclusion vulnerability in NewsCMS/news/newstopic_inc.php in North Country Public Radio Public Media Manager (PMM) 1.3 allows remote attackers to execute arbitrary PHP code via a URL …
|
CWE-94
Code Injection
|
CVE-2007-5149
|
2018-10-16 06:40 |
2007-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283880
|
- |
|
nukescripts
|
nukesentinel
|
SQL injection vulnerability in the is_god function in includes/nukesentinel.php in NukeSentinel 2.5.11 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin co…
|
CWE-89
SQL Injection
|
CVE-2007-5150
|
2018-10-16 06:40 |
2007-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|