261501
|
- |
|
interact
|
interact
|
Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) module_key parameter to (a) kb/kb.php, (b) quiz/ru…
|
NVD-CWE-Other
|
CVE-2007-3328
|
2017-07-29 10:32 |
2007-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261502
|
- |
|
xvid
|
xvid
|
Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263, and (3) get_inter_block_mpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute ar…
|
NVD-CWE-Other
|
CVE-2007-3329
|
2017-07-29 10:32 |
2007-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261503
|
- |
|
stphp
|
easynews
|
Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web script or HTML via a news post, which is stored in news/ without sanitization.
|
NVD-CWE-Other
|
CVE-2007-3330
|
2017-07-29 10:32 |
2007-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261504
|
- |
|
stphp
|
easynews
|
Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via (1) a certain HTML form that is posted automatically by JavaScript o…
|
NVD-CWE-Other
|
CVE-2007-3331
|
2017-07-29 10:32 |
2007-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261505
|
- |
|
ibm
|
aix
|
Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code via a large number of terminal control sequences.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-3333
|
2017-07-29 10:32 |
2007-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261506
|
- |
|
ca ingres
|
etrust_secure_content_manager database_server
|
Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associate…
|
NVD-CWE-Other
|
CVE-2007-3334
|
2017-07-29 10:32 |
2007-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261507
|
- |
|
raidenhttpd
|
raidenhttpd
|
Cross-site scripting (XSS) vulnerability in RaidenHTTPD before 2.0.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2007-3343
|
2017-07-29 10:32 |
2007-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261508
|
- |
|
netjukebox
|
netjukebox
|
Multiple cross-site scripting (XSS) vulnerabilities in netjukebox 4.01b allow remote attackers to inject arbitrary web script or HTML via the (1) album_id, (2) order, (3) sort, (4) filter, and (5) ge…
|
NVD-CWE-Other
|
CVE-2007-3344
|
2017-07-29 10:32 |
2007-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261509
|
- |
|
php_accounts
|
php_accounts
|
Multiple SQL injection vulnerabilities in index.php in PHPAccounts 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) Outgoing_Type_ID, (2) Outgoing_ID, (3) Project_ID, (4) Clie…
|
NVD-CWE-Other
|
CVE-2007-3345
|
2017-07-29 10:32 |
2007-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261510
|
- |
|
php_accounts
|
php_accounts
|
Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local files via unspecified manipulations of the page parameter.
|
NVD-CWE-Other
|
CVE-2007-3346
|
2017-07-29 10:32 |
2007-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|