CVE-2007-4675: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR QuickTime Virtual Reality movie file containing a large size field in the atom header of a panorama sample atom...

PT-2007-6065 · Yapig · Yapig

Name of the Vulnerable Software and Affected Versions: YaPiG version 0.95b Description: A remote file inclusion issue in sample.php allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG PATH parameter. Recommendations: For YaPiG version 0.95b, consider restricting the use o...

PT-2007-6063 · Phpreactor · Phpreactor

Name of the Vulnerable Software and Affected Versions: phpReactor version 1.2.7pl1 Description: Multiple PHP remote file inclusion issues allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to certain PHP files, including 1 ekilat.com-int.tpl.php, 2...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

DEBIAN-CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

CVE-2007-3467

Integer overflow in the statusUpdate function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service crash via a WAV file with a large sample rate...

myserver-xss.txt

MyServer-0.8.9 - xss in sample cgi page ---------------------------------------- site: http://www.myserverproject.net/ poc: ---- http://localhost/cgi-bin/post.mscgi Post:alert'xss'; Found By Shay Priel aka Prili...

CVE-2007-2857: Undefined Security Weakness

PHP remote file inclusion vulnerability in sample/xls2mysql in ABC Excel Parser Pro 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the parserpath parameter...

CVE-2007-1355: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inject arbitrary web script or HTML via the...

Tomcat Sample App hello.jsp 'test' Parameter XSS

The remote web server includes an example JSP application that fails to sanitize user-supplied input before using it to generate dynamic content in an error page. An unauthenticated, remote attacker can exploit this issue to inject arbitrary HTML or script code into a user's browser to be execute...

[CVE-2007-1355] Tomcat documentation XSS vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-1355: Tomcat documentation XSS vulnerabilities Severity: Moderate Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.23 Tomcat...

tomcat -- XSS vulnerability in sample applications

The Apache Project reports: The JSP and Servlet included in the sample application within the Tomcat documentation webapp did not escape user provided data before including it in the output. This enabled a XSS attack. These pages have been simplified not to use any user provided data in the outpu...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor STSD atom size in a QuickTime movie...

CVE-2007-0754

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor STSD atom size in a QuickTime movie...

CVE-2007-1871: Cross site scripting in chcounter 3.1.3

Cross site scripting in chcounter 3.1.3 security advisory References: http://chcounter.org/ https://vulners.com/cve/CVE-2007-1871 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be used to steal session...

CVE-2007-1871.txt

Cross site scripting in chcounter 3.1.3 security advisory References: http://chcounter.org/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1871 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be use...

Code injection

Unspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote attackers to "gain unauthorized access to data", possibly involving a sample application...