cve.nowby Sazabi

CVEs published March 23, 2007

29 CVEs were published on March 23, 2007: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 29
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 29
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 29

CVE-2007-1638Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function in lib/lib.inc.php in PHProjekt 5.2.0, when…UnratedMar 23, 2007
CVE-2007-1639Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticated users to upload…UnratedMar 23, 2007
CVE-2007-1640Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitrary PHP code via a…UnratedMar 23, 2007
CVE-2007-1641SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the idnews…UnratedMar 23, 2007
CVE-2007-1634Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to…UnratedMar 23, 2007
CVE-2007-1635Static code injection vulnerability in admin/settings.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote authenticated…UnratedMar 23, 2007
CVE-2007-1636Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a ..UnratedMar 23, 2007
CVE-2007-1637Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers…UnratedMar 23, 2007
CVE-2007-1623Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when register_globals is enabled, allow remote attackers to…UnratedMar 23, 2007
CVE-2007-1624Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to execute arbitrary SQL commands via the (1) name…UnratedMar 23, 2007
CVE-2007-1625Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows remote attackers to inject arbitrary web script or…UnratedMar 23, 2007
CVE-2007-1626PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP…UnratedMar 23, 2007
CVE-2007-1628Multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier, when register_globals is enabled…UnratedMar 23, 2007
CVE-2007-1629SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL…UnratedMar 23, 2007
CVE-2007-1630SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL…UnratedMar 23, 2007
CVE-2007-1631PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the…UnratedMar 23, 2007
CVE-2007-1632Unspecified vulnerability in TYPOlight webCMS before 2.2 Build 5 has unknown impact and attack vectors related to a "major security hole."UnratedMar 23, 2007
CVE-2007-1633Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote…UnratedMar 23, 2007
CVE-2007-1612SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitrary SQL commands…UnratedMar 23, 2007
CVE-2007-1613Directory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include and execute arbitrary local files via a ..UnratedMar 23, 2007
CVE-2007-1614Stack-based buffer overflow in the zzip_open_shared_io function in zzip/file.c in ZZIPlib Library before 0.13.49 allows user-assisted…UnratedMar 23, 2007
CVE-2007-1615SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands…UnratedMar 23, 2007
CVE-2007-1616SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitrary SQL commands…UnratedMar 23, 2007
CVE-2007-1617SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands…UnratedMar 23, 2007
CVE-2007-1618SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute arbitrary SQL…UnratedMar 23, 2007

Show all 29 entriesShow fewer entries