257301
|
- |
|
limesurvey
|
limesurvey
|
Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to execute arbitrary PHP code via a URL in the homedir parameter to (1) OLE/PPS/File.…
|
NVD-CWE-Other
|
CVE-2007-3632
|
2017-09-29 10:29 |
2007-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257302
|
- |
|
chilkat_software
|
chilkat_zip_activex_control
|
Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathnam…
|
NVD-CWE-Other
|
CVE-2007-3633
|
2017-09-29 10:29 |
2007-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257303
|
- |
|
hp
|
photo_digital_imaging_activex_control
|
Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Digital Imaging allows remote attackers to create or overwrite arbitrary files via…
|
NVD-CWE-Other
|
CVE-2007-3649
|
2017-09-29 10:29 |
2007-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257304
|
- |
|
openld
|
openld
|
SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
NVD-CWE-Other
|
CVE-2007-3682
|
2017-09-29 10:29 |
2007-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257305
|
- |
|
infernotechnologies
|
rpg_inferno
|
SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module, allows remote authenticated attackers to execute arbitrary SQL commands via the…
|
CWE-89
SQL Injection
|
CVE-2007-3687
|
2017-09-29 10:29 |
2007-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257306
|
- |
|
mail_machine
|
mail_machine
|
Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the arch…
|
NVD-CWE-Other
|
CVE-2007-3702
|
2017-09-29 10:29 |
2007-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257307
|
- |
|
zenturi
|
zenturi_programchecker
|
Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker (ProgramChecker) Pro allows remote attackers to execute arbitrary code via a long argument …
|
NVD-CWE-Other
|
CVE-2007-3703
|
2017-09-29 10:29 |
2007-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257308
|
- |
|
redhat
|
enterprise_linux
|
mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service (O…
|
CWE-399 CWE-119
Resource Management Errors Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-3739
|
2017-09-29 10:29 |
2007-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257309
|
- |
|
linux
|
linux_kernel
|
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2007-3740
|
2017-09-29 10:29 |
2007-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257310
|
- |
|
psnews
|
psnews
|
Directory traversal vulnerability in news/show.php in PsNews 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newspath parameter.
|
NVD-CWE-Other
|
CVE-2007-3772
|
2017-09-29 10:29 |
2007-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|