CVE-2007-6497

CVE-2007-6497 affects Hosting Controller 6.1 Hotfix 3.3 and earlier. The vulnerability allows an unprivileged remote attacker to change arbitrary user profiles via Hosting/Addreseller.asp by supplying modified loginname and email, and allows remote authenticated users to modify account attributes...

CVE-2007-6484

CVE-2007-6484 describes an SQL injection vulnerability in phpRPG 0.8, exploitable via the password parameter in index.php. Multiple sources (NVD, Red Hat, CVE lists) corroborate the issue, with provenance noted as originating from third-party information. The exploitation status is not detailed i...

CVE-2007-6477

Technical details for CVE-2007-6477 are not publicly available in the provided documents. No concrete information on affected products, root cause, or remediation is provided here. Monitor for updates.

CVE-2007-6496

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to...

CVE-2007-6490

The CVE-2007-6490 entry describes a CSRF vulnerability in Falcon Series One CMS 1.4.3 that allows remote attackers to change a user password via a specific changepass action to index.php. Public records confirm the affected software version (Falcon Series One CMS 1.4.3) and the vulnerability’s cr...

CVE-2007-6501

The CVE affects Hosting Controller 6.1 Hotfix 3.3 and earlier. It describes an unspecified vulnerability that allows remote authenticated users to enable or disable the "pay type" via a request to adminsettings/choosetranstype.asp. The connected documents provide this basic impact but do not spec...

CVE-2007-6492

The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service Internet Explorer 7 crash via an empty string in the argument to the ProcessRequestEx method...

CVE-2007-6480

CVE-2007-6480 affects Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1, where a default account in the Oracle database component allows remote attackers to obtain database access and execute arbitrary code. The connected patch advisories show Solaris 8/9/10 patches (e.g., 127380-01, 12...

CVE-2007-6502

CVE-2007-6502 affects Hosting Controller 6.1 Hotfix 3.3 and earlier. The vulnerability exposes sensitive information through: (1) AdminName and AdminLevel parameters in fp2000/NEWSRVR.asp that disclose usernames; (2) certain XML HTTP requests to hosting/css.asp via Microsoft.XMLHTTP/MSXML2.XMLHTT...

CVE-2007-6488

Falcon Series One CMS 1.4.3 is affected by multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by providing a URL in (1) dir[classes] to sitemap.xml.php or (2) error to errors.php. The underlying issue is insecure handling of user-supplied URLs l...

CVE-2007-6496

CVE-2007-6496 affects Hosting Controller 6.1 Hotfix 3.3 and earlier. The vulnerability allows remote attackers to register arbitrary users via addsubsite.asp with loginname and password parameters, after certain requests to default.asp and selectdomain.asp; it is a related issue to CVE-2005-1654....

CVE-2007-6483

CVE-2007-6483 covers a directory traversal flaw affecting SafeNet Sentinel Protection Server (7.0.0–7.4.0) and Sentinel Keys Server (1.0.3–1.0.4). The issue allows remote attackers to read arbitrary files via a .. in the URI/query, potentially impacting ICONICS GENESIS32/64 deployments that use S...

CVE-2007-6489

CVE-2007-6489 describes multiple XSS vulnerabilities in Falcon Series One CMS 1.4.3, exploitable via the guestbook action to index.php through the parameters gb_mail, gb_name, and gb_text (and unspecified other vectors). The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with network attack...

CVE-2007-6493

The CVE-2007-6493 issue concerns the IMWeb.IMWebControl.1 ActiveX control (IMWeb.dll 7.0.0.x and possibly IMWebControl.dll in iMesh 7.1.0.x and earlier) that allows remote code execution via a crafted argument to the SetHandler method. The vulnerability is triggered when a user visits a specially...

CVE-2007-6504

The CVE-2007-6504 issue affects Hosting Controller 6.1, specifically IIS/iibind.asp, where remote authenticated users can alter the headers of arbitrary hosts via an unspecified parameter. Root cause: an unspecified parameter in iibind.asp enables header modification. Impact: header changes acros...

CVE-2007-6484

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6499

The CVE-2007-6499 entry concerns Hosting Controller 6.1 Hotfix 3.3 and earlier. Affected component: the FrontPage extensions uninstall feature via the fp2002/UNINSTAL.asp endpoint, where a remote authenticated user could trigger uninstall of FrontPage extensions for an arbitrary account by supply...

CVE-2007-6485

CVE-2007-6485 affects Centreon/Oreon 1.4.1. It enables remote PHP code execution via the fileOreonConf parameter in MakeXML.php and MakeXML4statusCounter.php under include/monitoring/engine/, exploitable by unauthenticated attackers over the network. The root cause is improper handling/sanitizati...

CVE-2007-6492

CVE-2007-6492 affects iMesh versions 7.1.0.x and earlier. The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll (7.0.0.x) and possibly IMWebControl.dll in iMesh enables remote DoS by sending an empty string to the ProcessRequestEx method, causing Internet Explorer 7 to crash. Root cause: improper...

Important: Red Hat Security Advisory: autofs security update

Updated autofs packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which automatically mounts...