CVE-2010-1407

WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method in certain situations involving IFRAME elements, which allows remote attackers to obtain sensitive information via a crafted HTML document...

CVE-2010-1407

CVE-2010-1407 affects WebKit in Apple iOS prior to version 4, where history.replaceState implemented with IFRAME handling could allow a remote attacker to obtain sensitive information via a crafted HTML document. The NVD entry assigns a CVSS v2 base score of 4.3 (Medium) with network attack vecto...

NotFTP config.php本地文件包含漏洞

BUGTRAQ ID: 34636 CVECAN ID: CVE-2009-1407 NotFTP是用PHP编写的基于Web的HTTP-FTP网关。 NotFTP的config.php脚本没有正确地过滤用户所提交的参数，如果远程攻击者在提交的URL请求中使用newlang参数指定了本地系统的恶意文件的话，就可能在Web服务器上读取敏感信息或执行任意代码。以下是config.php脚本中的有漏洞代码段： if isset$newlang requireonce"lib/lang/".$languages$newlang"file"; elseif...

CVE-2009-1407

Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .. dot dot in a certain languagesfile parameter...

CVE-2009-1407

NotFTP 1.3.1 is affected by a directory traversal/Local File Inclusion in config.php. The script fails to properly filter user input in languages[][file] (and related language loading logic), allowing remote attackers to read arbitrary local files via crafted URLs (e.g., .. paths). The vulnerabil...

CVE-2009-1407

creationtimestamp| type| source ---|---|--- 2009-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8504...

CVE-2008-1407

The provided connected documents identify a concrete vulnerability: an SQL injection in the WebChat 1.60 module for eXV2, affecting index.php. The vulnerability is triggered via the roomid parameter, enabling remote attackers to inject arbitrary SQL commands. The root cause is unsafe handling of ...

CVE-2008-1407

creationtimestamp| type| source ---|---|--- 2008-03-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5255...

CVE-2007-1407

Technical details for CVE-2007-1407 are not publicly available in the provided connected documents. Monitor for updates; current sources reiterate an unspecified vulnerability in OpenSolution Quick.Cart before 2.1 with unclear impact and vectors.

CVE-2006-1407

CVE-2006-1407 concerns multiple cross-site scripting (XSS) flaws in Helm Web Hosting Control Panel 3.2.10 and earlier. The affected components are domains.asp (txtDomainName) and default.asp (SearchText, UserLevel) where user-controlled inputs can inject arbitrary script/HTML. The practical impac...

CVE-2005-1407

CVE-2005-1407 affects Skype for Windows versions 1.2.0.0 through 1.2.0.46. The issue allows a local user to bypass the identity check for an authorized application and then call arbitrary Skype API functions by modifying or replacing that application. The underlying impact is limited to a local e...

CVE-2004-1407

CVE-2004-1407 affects the Singapore Gallery (Singapore Image Gallery Web Application) version 0.9.10. The vulnerability set consists of multiple directory traversal flaws in the PHP code: specifically the showThumb method in thumb.php allows reading arbitrary files, and admin.class.php enables de...

CVE-2002-1407

Summary of CVE-2002-1407 : TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA–signed certificate, which enables a remote attacker to perform a man-in-the-middle attack to spoof certificates of trusted sites. The provided documents describe the affected software,...

SNMP apc Community String (deprecated)

Binary data 1407.prm...

CVE-2003-1407

Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command...

CVE-2002-1407

TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack...

CVE-2001-1407

Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug...

CVE-2001-1407

Bugzilla before 2.14 is vulnerable: users can bypass group security by marking a bug as a duplicate of a restricted bug, which adds the user to the restricted bug’s CC list and lets them view it. Affected: Bugzilla ≤ 2.13 (pre-2.14). Root cause: bypass of group security checks via duplicate marki...

CVE-1999-1407

CVE-1999-1407 affects the ifdhcpc-done script used for configuring DHCP on Red Hat Linux 5. The vulnerability arises from a symlink attack against the dhcplog file, allowing local users to append text to arbitrary files. The provided sources describe the vulnerability and impact (local, partial i...