CVE-2007-6585

PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the output parameter...

CVE-2007-6569

Cross-site scripting XSS vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246...

CVE-2007-6579

Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlanid parameter to 1 vlanview.php, 2 vlanedit.php, and 3 vlandel.php; the 4 assetclassgroupid parameter to assetclassgroupview.php; the 5 subnetid parameter to nodelist.php; and...

CVE-2007-6590

CVE-2007-6590 is rejected/not used; duplicate of CVE-2008-2809; references removed.

CVE-2007-6589

CVE-2007-6589 affects Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7. The jar protocol handler fails to update the origin when an inner URL parameter yields an HTTP redirect, enabling remote XSS via a jar: URI. No exploitation details are provided in the documents. Remediation: upgrad...

CVE-2007-6577

CVE-2007-6577 affects zBlog 1.2, with multiple SQL injection vulnerabilities in index.php. The flaws allow remote attackers to manipulate the database via the categ action (categ parameter) or the articles action (article parameter). Root cause is improper handling/sanitization of user input in i...

CVE-2007-6566

CVE-2007-6566 describes an SQL injection in post.php of XZero Community Classifieds 4.95.11 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php. The NVD entry lists a CVSS v2 base score of 7.5 (High). No exploitation det...

CVE-2007-6573

QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...

CVE-2007-6578

The CVE-2007-6578 entry documents a SQL injection in the PHP ZLink 0.3 application, specifically in go.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, as described in multiple sources (e.g., NVD entry). No mitigation, patch, or affected versi...

CVE-2007-6585

The CVE-2007-6585 entry describes a PHP remote file inclusion vulnerability in NmnNewsletter 1.0.7, where an attacker can execute arbitrary PHP code by supplying a URL in the output parameter of confirmUnsubscription.php. This is a remote exploit with medium severity (CVSS v2 base score 6.8) and ...

CVE-2007-6571

CVE-2007-6571 describes a cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product/version: Sun Java System Web Proxy Server 3.6 prior to SP11...

CVE-2007-6568

CVE-2007-6568 describes a PHP remote file inclusion vulnerability in the config.inc.php file of XZero Community Classifieds 4.95.11 and earlier . The issue allows remote attackers to execute arbitrary PHP code via a URL supplied in the path_escape parameter. The NVD metrics indicate a base score ...

CVE-2007-6590

...

CVE-2007-6587

Plogger 1.0 Beta 3.0 is affected by a SQL injection in plog-rss.php via the id parameter. The issue allows remote attackers to manipulate the database and potentially read/modify data. The vulnerability is confirmed across CVE-2007-6587 entries in NVD/NIST and corroborated by Nessus plugin covera...

CVE-2007-6593

CVE-2007-6593 is a buffer overflow in Autonomy KeyView (l123sr.dll) used by IBM Lotus Notes (versions 5.x–8.x) when viewing Lotus 1-2-3 (.123) Worksheet files. The vulnerability arises from a boundary/stack-based overflow in SRANGE handling, enabling user‑assisted remote code execution if a malic...

CVE-2007-6586

CVE-2007-6586 is a SQL injection in nicLOR-CMS (sezione_news.php) that allows remote attackers to inject arbitrary SQL via the id parameter in a sezione page action to index.php. Affected: nicLOR-CMS, sezione_news.php; impact per sources is partial confidentiality/integrity/availability. Exploit ...

CVE-2007-6583

CVE-2007-6583 is a SQL injection vulnerability in the 1024 CMS 1.3.1, specifically in the file path admin/ops/findip/ajax/search.php. The underlying issue allows remote attackers to inject SQL via the ip parameter and may enable partial confidentiality and integrity impact and partial availabilit...

CVE-2007-6567

CVE-2007-6567 affects XZero Community Classifieds up to version 4.95.11. The vulnerability resides in the script index.php where a directory traversal can be triggered via a pagename parameter in a page view action, allowing an attacker to include and execute arbitrary local files. This can impac...

CVE-2007-6592

Apple Safari 2 accepts a certificate if the CN matches the requested domain and also treats SAN:dNSName entries as valid for the same certificate, enabling a spoofed site to trick a user into accepting an invalid certificate. Root cause involves how certificate trust is evaluated across CN and SA...

CVE-2007-6576

CVE-2007-6576 affects Adult Script 1.6.5 and earlier. It describes multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via the id parameter to videolink_count.php or links.php. The entry lists CVSS2 base score 7.5 (HIGH) with network access, no authe...