Browse CVEs

HIGH 7.5 CVE-2007-6485EPSS 11% Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL i… Centreon No fix yet Fix from $1,9502007-12-20 MEDIUM 6.8 CVE-2007-6459 Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter… Anon Proxy Server No fix yet Fix from $1,6002007-12-20 MEDIUM 6.8 CVE-2007-6464 Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the g_root_… Form Tools No fix yet Fix from $1,6002007-12-20 HIGH 7.5 CVE-2007-6396 Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to inject arbitrary PHP code via th… Flat Php Board No fix yet Fix from $1,9502007-12-17 MEDIUM 6.8 CVE-2007-6412 Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when comments are enabled, allows remote attackers to in… Bitweaver after 2.0.0 Fix from $1,6002007-12-17 MEDIUM 6.8 CVE-2007-6348 SquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been externally modified to create a Trojan Horse that introdu… Squirrelmail Mitigation only Fix from $1,6002007-12-14 MEDIUM 6.8 CVE-2007-6347EPSS 7% PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, and (4) S… Cms No fix yet Fix from $1,6002007-12-13 MEDIUM 6.8 CVE-2007-6324EPSS 5% PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PHP code via a URL in the path p… Citywriter No fix yet Fix from $1,6002007-12-13 MEDIUM 6.8 CVE-2007-6325EPSS 11% PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitrary PHP c… Fastpublish Cms No fix yet Fix from $1,6002007-12-13 MEDIUM 6.8 CVE-2007-5344EPSS 27% Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, mod… Ie Mitigation only Fix from $1,6002007-12-12 MEDIUM 6.8 CVE-2007-6289 Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in… Serweb after 2.0.0dev1 Fix from $1,6002007-12-10 MEDIUM 5.0 CVE-2007-6296 PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in t… Phpmychat Mitigation only Fix from $1,6002007-12-10 HIGH 9.3 CVE-2007-4575EPSS 14% HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via craft… Openoffice after 2.3 Fix from $1,9502007-12-06 MEDIUM 5.0 CVE-2007-5615 CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response spli… Jetty after 6.1.6rc0 Fix from $1,6002007-12-05 HIGH 7.5 CVE-2007-6229 PHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to execute arbitrar… Rayzz Script No fix yet Fix from $1,9502007-12-04 HIGH 7.5 CVE-2007-6231 Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tm_includ… Tellmatic No fix yet Fix from $1,9502007-12-04 MEDIUM 6.8 CVE-2007-6191 Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execute arbitrary PHP code via a UR… P.mapper No fix yet Fix from $1,6002007-11-30 HIGH 7.5 CVE-2007-6177 PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the… Php Con No fix yet Fix from $1,9502007-11-30 MEDIUM 6.8 CVE-2007-6139 PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the… Toolbox No fix yet Fix from $1,6002007-11-27 MEDIUM 6.8 CVE-2007-6147 Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (a) php… Iapr Commence No fix yet Fix from $1,6002007-11-27 MEDIUM 6.8 CVE-2007-6105EPSS 7% Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) langua… Talkback No fix yet Fix from $1,6002007-11-23 HIGH 9.3 CVE-2007-6082 Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary … Sciurus Hosting Panel No fix yet Fix from $1,9502007-11-22 HIGH 9.3 CVE-2007-6088EPSS 7% PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remote attackers to execute arbit… Phpbbviet after 02.03.07 Fix from $1,9502007-11-22 HIGH 9.3 CVE-2007-6089 PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP code via a URL in the action … Mebiblio No fix yet Fix from $1,9502007-11-22 MEDIUM 6.8 CVE-2007-6057EPSS 6% PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote attackers to execu… Social Networking Script No fix yet Fix from $1,6002007-11-20 MEDIUM 6.8 CVE-2007-6042 PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code … Confixx Professional No fix yet Fix from $1,6002007-11-20 MEDIUM 6.8 CVE-2007-6038EPSS 28% PHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14 component for Joomla! allows remote attackers to execu… Juser No fix yet Fix from $1,6002007-11-20 HIGH 7.5 CVE-2007-6029 Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this info… Clamav No fix yet Fix from $1,9502007-11-20 MEDIUM 6.8 CVE-2007-6027 PHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image Gallery (com_jjgallery) component for Joomla! allows remot… Carousel Flash Image Gallery No fix yet Fix from $1,6002007-11-20 MEDIUM 6.8 CVE-2007-5994 PHP remote file inclusion vulnerability in check_noimage.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 allows re… Yappa Ng Mitigation only Fix from $1,6002007-11-15