CVE-2007-6578

SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6586

CVE-2007-6586 is a SQL injection in nicLOR-CMS (sezione_news.php) that allows remote attackers to inject arbitrary SQL via the id parameter in a sezione page action to index.php. Affected: nicLOR-CMS, sezione_news.php; impact per sources is partial confidentiality/integrity/availability. Exploit ...

CVE-2007-6583

CVE-2007-6583 is a SQL injection vulnerability in the 1024 CMS 1.3.1, specifically in the file path admin/ops/findip/ajax/search.php. The underlying issue allows remote attackers to inject SQL via the ip parameter and may enable partial confidentiality and integrity impact and partial availabilit...

CVE-2007-6576

CVE-2007-6576 affects Adult Script 1.6.5 and earlier. It describes multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via the id parameter to videolink_count.php or links.php. The entry lists CVSS2 base score 7.5 (HIGH) with network access, no authe...

CVE-2007-6582

CVE-2007-6582 : A directory traversal vulnerability in index.php of mBlog 1.2 allows remote attackers to read arbitrary files by supplying a .. sequence in the page parameter within a page mode action. This is tied to the vulnerable component/function (index.php, page mode) and enables partial co...

CVE-2007-6591

CVE-2007-6591 affects KDE Konqueror 3.5.5 and 3.95.00. When a user accepts an SSL certificate based on the CN in the DN, Konqueror also treats it as valid for all names in subjectAltName:dNSName, even though SANs cannot be examined in the product. This enables attackers to trick users into accept...

CVE-2007-6569

Sun Java System Web Proxy Server 4.x (and Web Server) are vulnerable to cross-site scripting in the View Error Log/related log-viewing function (BugID 6566246). The JVN entry confirms the issue is a client-side script injection via unspecified vectors, affecting the Web Server and Web Proxy Serve...

CVE-2007-6580

CVE-2007-6580 affects Wallpaper Site 1.0.09 and involves SQL injection in two parameters: (1) catid in category.php and (2) groupid in editadgroup.php. The vulnerability enables remote attackers to execute arbitrary SQL commands. The CVE's NVD entry lists a base score of 7.5 (HIGH) with network a...

CVE-2007-6584

1024 CMS 1.3.1 is affected by multiple directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files via ../ in specific parameters (lang, theme_dir, admin_theme_dir) across several pages (news.php, search.php, download.php, forum.php, etc.). The not...

CVE-2007-6581

CVE-2007-6581 : Multiple directory traversal vulnerabilities affect Social Engine 2.0. The issue allows remote attackers to include and execute arbitrary local files via a ".." in the global_lang parameter to header_album.php, header_blog.php, or header_group.php, and similarly to admin_header_al...

CVE-2007-6579

CVE-2007-6579 covers multiple SQL injection vulnerabilities in Ip Reg 0.3 (and later 0.4) that let remote attackers run arbitrary SQL commands via parameters such as vlan_id (to vlanview.php, vlanedit.php, vlandel.php), assetclassgroup_id (to assetclassgroupview.php), and subnet_id (to nodelist.p...

CVE-2007-6588

The provided records indicate a Cross-site scripting (XSS) vulnerability in PHCDownload 1.10, exploitable via the username field in an unspecified component. Affected software: PHCDownload 1.10. Root cause: inadequate sanitization of the username input leading to script/HTML injection. Impact: po...

[SECURITY] [DSA 1441-1] New peercast packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1441-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 28, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1439-1] New typo3-src packages fix SQL injection

------------------------------------------------------------------------ Debian Security Advisory DSA-1439-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 28, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1438-1] New tar packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1438-1 [email protected] http://www.debian.org/security/ Florian Weimer December 28, 2007 http://www.debian.org/security/faq -...

CVE-2007-6550

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter...

CVE-2007-6555

PHP remote file inclusion vulnerability in modules/modpxtlatest.php in the mosDirectory comdirectory 2.3.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...

CVE-2007-6552

Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/adminusers.php to bypass a protection...

CVE-2007-6551

SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6561

Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDFloadimage function that results in an overflow in the pdcfsearchfopen function, and possibly other vectors...