PT-2010-2962 · Microsoft · Sharepoint Services +4

Name of the Vulnerable Software and Affected Versions: Microsoft Office InfoPath versions 2003 SP3 through 2007 SP2 Office SharePoint Server versions 2007 SP1 through 2007 SP2 SharePoint Services versions 3.0 SP1 through 3.0 SP2 Internet Explorer version 8 Description: The issue is related to a...

CVE-2007-3137

creationtimestamp| type| source ---|---|--- 2010-06-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13739...

Sql injection

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...

CVE-2010-2132

Open Education System (OES) 0.1 beta is affected by multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to cause remote PHP code execution by supplying a crafted URL to the CONF_INCLUDE_PATH parameter in specific scripts: forum/admin.php and plotgraph/index.php under ...

CVE-2010-2133

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...

VMSA-2010-0009 : ESXi ntp and ESX Service Console third-party updates

a. Service Console update for COS kernel Updated COS package 'kernel' addresses the security issues that are fixed through versions 2.6.18-164.11.1. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286,...

S.A.R.L EL-MITHAK => Newsletter.php Xss & SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== S.A.R.L EL-MITHAK = Newsletter.php Xss & SQL Injection Vulnerability ===================================================================== Title: S.A.R.L EL-MITHAK...

Feds Indict 5 in Carson, CA Crimes

Five people were indicted this week on wire fraud and other criminal charges stemming from a 2007 cybertheft in which nearly $450,000 was stolen from the bank accounts of the city of Carson, California using credential-stealing spyware. Read the full article. Computerworld...

CVE-2010-2007

CVE-2010-2007 describes multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier. The issues allow remote attackers to hijack administrator authentication for requests to specific endpoints: op/op.EditUserData.php, op/op.UsrMgr.php, out/out.RemoveVe...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 : krb5 vulnerabilities (USN-940-1)

It was discovered that Kerberos did not correctly free memory in the GSSAPI and kdb libraries. If a remote attacker were able to manipulate an application using these libraries carefully, the service could crash, leading to a denial of service. Only Ubuntu 6.06 LTS was affected. CVE-2007-5902,...

Microsoft Excel Malformed Filter Records Handling Code Execution (MS07-023; CVE-2007-1214)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

CentOS Update for tetex CESA-2010:0401 centos3 i386

Check for the Version of tetex OpenVAS Vulnerability Test CentOS Update for tetex CESA-2010:0401 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for tetex CESA-2010:0401 centos3 i386

Check for the Version of tetex OpenVAS Vulnerability Test CentOS Update for tetex CESA-2010:0401 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2007-1683

creationtimestamp| type| source ---|---|--- 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12605...

Microsoft Visual Basic Remote Code Execution Vulnerability (978213)

This host is missing a critical security update according to Microsoft Bulletin MS10-031. OpenVAS Vulnerability Test $Id: secpodms10-031.nasl 6413 2017-06-23 09:16:58Z cfischer $ Microsoft Visual Basic Remote Code Execution Vulnerability 978213 Authors: Antu Sanadi Copyright: Copyright c 2010...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1935

CVE-2010-1935 affects OpenMairie Openpresse 1.01: a directory traversal/LFI in scr/soustab.php when register_globals is enabled, allowing remote inclusion/execution of local files via dsn[phptype]. Related to CVE-2007-2069. CVSS2 base score 6.8 (MEDIUM). Connected OpenVAS entries corroborate LFI ...

CVE-2010-1926

The CVE-2010-1926 entry applies to openMairie openCourrier 2.02 and 2.03 beta. It describes a directory traversal vulnerability in scr/soustab.php that, with register_globals enabled, allows remote attackers to include and execute arbitrary local files via traversal sequences in the dsn[phptype] ...