CVE-2007-3652

FaName 1.0 (FaScript) is affected by a SQL injection vulnerability in the page handling modules (class/page.php / page.php) that allows remote attackers to alter the database via the id parameter. This is documented across multiple sources (NVD, Red Hat CVE, PRION, CVE lists) as CVE-2007-3652, wi...

CVE-2007-3650

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via 1 an invalid year parameter to calendar.php, reached through index.php; 2 a direct request to common.php; and 3 a mode array parameter in the query string to login.php, which reveal the installation path in vario...

CVE-2007-3653

CVE-2007-3653 concerns multiple XSS vulnerabilities in FaName 1.0 (FaScript/Farsi Script). The affected component is FaName 1.0’s web front end (index.php and page.php) where user-controlled inputs in the key, desc, and name parameters can be injected with arbitrary HTML/JS. The root cause is ins...

CVE-2007-1899

CVE-2007-1899 affects myWebland myBloggie 2.1.6. It describes multiple SQL injection vulnerabilities: remote attackers can exploit user_id in viewuser (index.php) and post_id in edit (admin.php) to run arbitrary SQL commands; also note that authenticated administrators can abuse the post_id path....

Security fix for the ALT Linux 10 package apache2 version 2.2.9-alt1

July 8, 2008 Aleksey Avdeev 2.2.9-alt1 - 2.2.9 - Security fixes CVE-2008-2364, CVE-2007-6420...

Fedora 8 : jetty-5.1.14-1jpp.1.fc8 (2008-6164)

Fri Jul 4 2008 Jeff Johnston 5.1.14-1jpp.1 - Security patch - Resolves 417401, 417411, 417391 - Upgrade to 5.1.14 source tarball for Fedora Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

GLSA-200807-01 : Python: Multiple integer overflows

The remote host is affected by the vulnerability described in GLSA-200807-01 Python: Multiple integer overflows Multiple vulnerabilities were discovered in Python: David Remahl reported multiple integer overflows in the file imageop.c, leading to a heap-based buffer overflow CVE-2008-1679. This...

Fedora 9 : jetty-5.1.14-1jpp.2.fc9 (2008-6141)

Bug 417411 - CVE-2007-5615: jetty CRLF injection - Bug 417391 - CVE-2007-5613: jetty cross site scripting - Bug 417401 - CVE-2007-5614: jetty session hijacking issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Security fix for the ALT Linux 8 package apache2 version 2.2.9-alt1

July 8, 2008 Aleksey Avdeev 2.2.9-alt1 - 2.2.9 - Security fixes CVE-2008-2364, CVE-2007-6420...

Debian DSA-1601-1 : wordpress - several vulnerabilities

Several remote vulnerabilities have been discovered in Wordpress, the weblog manager. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1599 WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain...

Security fix for the ALT Linux 9 package apache2 version 2.2.9-alt1

July 8, 2008 Aleksey Avdeev 2.2.9-alt1 - 2.2.9 - Security fixes CVE-2008-2364, CVE-2007-6420...

Design/Logic Flaw

Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List CRL checks by using an arbitrary URL from a certificate embedded in a 1 S/MIME e-mail message or 2 signed document, which allows remote attackers to obtai...

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List CRL checks by using an arbitrary URL from a certificate embedded in a 1 S/MIME e-mail message or 2 signed document, which allows remote attackers to obtai...

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List CRL checks by using an arbitrary URL from a certificate embedded in a 1 S/MIME e-mail message or 2 signed document, which allows remote attackers to obtai...

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0 (used in Outlook, Windows Live Mail, and Office 2007) performs CRL checks by using an arbitrary URL from a certificate embedded in an S/MIME email or a signed document via the Authority Information Access (AIA) extension. This allows remote attacke...

CVE-2007-6166

creationtimestamp| type| source ---|---|--- 2008-07-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6013 2010-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11027 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16424 2010-10-09...

Crack Office 2 0 0 7 The Simplified Chinese version of method-vulnerability warning-the black bar safety net

Online streaming, the icech test this method really available! 1. Install Office 2 0 0 7 Ultimate do not enter the serial number; 2. The installation is complete, do not run Word, Excell and any other Office program components; 3. Into the directory: C:\Program Files\Common Files\Microsoft...

Joomla! Component DBQuery 1.4.1.1 - Remote File Inclusion

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@...

Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.1 security and enhancement update

Red Hat Application Stack v2.1 is now available. This update fixes various security issues and adds several enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Red Hat Application Stack is an integrated open source application...

mybloggie-sql.txt

netVigilance Security Advisory 40 myBloggie version 2.1.6 Multiple SQL Injection Vulnerability Description: myBloggie http://mywebland.com/mybloggie/ is considered one of the most simple, user-friendliest yet packed with features Weblog system available to date. Built using PHP & mySQL, web most...