CVEs published April 9, 2007
5 CVEs were published on April 9, 2007: 0 critical, 0 high.
- Published
- 5
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 5
- CVE-2007-1893xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended
- CVE-2007-1894Cross-site scripting (XSS) vulnerability in wp-includes/general-template.php in WordPress before 20070309 allows remote attackers to inject
- CVE-2007-1895PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers
- CVE-2007-1896Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local f
- CVE-2007-1897SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users to execute ar