cve.nowby Sazabi

CVEs published January 3, 2007

30 CVEs were published on January 3, 2007: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 30
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 30
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 30

CVE-2006-4575Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1)…UnratedJan 3, 2007
CVE-2006-4576Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to inject arbitrary web script or HTML by…UnratedJan 3, 2007
CVE-2006-4577Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or…UnratedJan 3, 2007
CVE-2006-4578export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL…UnratedJan 3, 2007
CVE-2006-4579Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a ..UnratedJan 3, 2007
CVE-2006-4580register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary…UnratedJan 3, 2007
CVE-2006-4581Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which…UnratedJan 3, 2007
CVE-2006-4582Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other…UnratedJan 3, 2007
CVE-2006-6488Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as…UnratedJan 3, 2007
CVE-2007-0044Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the…UnratedJan 3, 2007
CVE-2007-0045Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with…UnratedJan 3, 2007
CVE-2007-0046Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to…UnratedJan 3, 2007
CVE-2007-0047CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet…UnratedJan 3, 2007
CVE-2007-0048Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and…UnratedJan 3, 2007
CVE-2006-6837Multiple stack-based buffer overflows in the (1) LoadTree, (2) ReadHeader, and (3) LoadXBOXTree functions in the ISO (iso_wincmd) plugin…UnratedJan 3, 2007
CVE-2006-6838Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information…UnratedJan 3, 2007
CVE-2006-6839Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection…UnratedJan 3, 2007
CVE-2006-6840Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."UnratedJan 3, 2007
CVE-2006-6841Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.UnratedJan 3, 2007
CVE-2006-6842SQL injection vulnerability in admin/admin_acronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote attackers to execute…UnratedJan 3, 2007
CVE-2006-6843PHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla! allows remote attackers to execute…UnratedJan 3, 2007
CVE-2006-6844Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject…UnratedJan 3, 2007
CVE-2006-6845Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or…UnratedJan 3, 2007
CVE-2006-6846Multiple SQL injection vulnerabilities in While You Were Out (WYWO) InOut Board 1.0 allow remote attackers to execute arbitrary SQL…UnratedJan 3, 2007
CVE-2006-6847An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet…UnratedJan 3, 2007

Show all 30 entriesShow fewer entries