CVE-2007-6407

CVE-2007-6407 covers multiple XSS flaws in IBM Tivoli Provisioning Manager Express. Remote attackers can inject arbitrary script/HTML via the /tpmx URI by manipulating fields such as the (1) “assess modification” and (2) user-id, plus other unspecified vectors related to “error processing.” The N...

CVE-2007-6405

CVE-2007-6405 affects Sergey Lyubka’s Simple HTTPD (shttpd) 1.38 and earlier on Windows. The issue allows remote attackers to obtain or download arbitrary CGI programs/scripts by sending a URI with special trailing characters: a plus sign (+), a dot (.), %2e (hex-encoded dot), or a hex-encoded ch...

CVE-2007-6391

The CVE-2007-6391 entry concerns an SQL injection in SH-News 3.0, specifically in patch/comments.php where the id parameter is vulnerable. Multiple connected documents confirm this: remote attackers can inject arbitrary SQL commands via id, indicating a server-side query construction flaw in SH-N...

CVE-2007-6404

Affected software: Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows. The vulnerability is a directory traversal in the URI (..) that enables remote attackers to read arbitrary files. The underlying issue is improper normalization of path traversal in shttpd’s request handling. Impa...

CVE-2007-6402

CVE-2007-6402 is a stack-based buffer overflow affecting Media Player Classic (MPC) up to version 6.4.9 when used with the 3ivx 4.5.1 or 5.0.1 codec. The flaw resides in the mplayerc.exe component and enables a remote attacker to execute arbitrary code via a crafted .mp4 file. Related entry: CVE-...

CVE-2007-6395

Flat PHP Board 1.2 and earlier stores credentials under the web root with insufficient access control. The vulnerability allows remote attackers to obtain credentials by directly requesting the username.php file for any user account in users/. The CVE is documented with an access-control bypass i...

CVE-2007-6412

Direct static code injection vulnerability in Bitweaver wiki/index.php (versions 2.0.0 and earlier) when comments are enabled. Remote attackers can inject arbitrary PHP code via the editcomments action. Evidence from multiple sources confirms the affected component, condition, and exact impact; n...

CVE-2007-6394

Content Injector 1.53 is affected by a SQL injection in index.php via the id parameter in the expand action. The vulnerability allows remote attackers to execute arbitrary SQL commands and could lead to data compromise or corruption. The entry is supported by multiple sources (NVD/NVD entry) and ...

CVE-2007-6402

Stack-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401...

CVE-2007-6398

CVE-2007-6398 affects Flat PHP Board 1.2 and earlier. The issue allows remote attackers to bypass authentication and obtain limited access to an arbitrary user account by manipulating the fpb_username cookie. The description, as reported in multiple sources (NVD/NVT CVE entry and related database...

CVE-2007-6401

CVE-2007-6401/6402 describe a stack-based buffer overflow in Media Player Classic components (mplayer2.exe/mplayerc.exe) when used with the 3ivx MPEG-4 codec (versions 4.5.1/5.0.1). The vulnerability allows remote arbitrary code execution via crafted MP4 files; affected product version cited in p...

CVE-2007-6390

Cross-site request forgery CSRF vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting XSS attacks on the blog page...

CVE-2007-6411

CVE-2007-6411 affects the GG Client (Gadu-Gadu) 7.7 Build 3669. The vulnerability arises from multiple buffer overflows in the HandleEmotsConfig function, enabling a user-assisted remote attacker to execute arbitrary code or cause a denial of service (gg.exe process crash) via a long string in an...

CVE-2007-6408

IBM Tivoli Provisioning Manager Express is affected by a vulnerability where error messages disclose information during username duplication or login with a valid username, enabling remote attackers to enumerate usernames. The connected documents do not provide concrete exploit details or a remed...

CVE-2007-6403

CVE-2007-6403 involves a stack-based buffer overflow in Nullsoft Winamp 5.32 related to its handling of crafted Unicode in MP4 files, with the issue exploitable when the target opens a crafted MP4 contained in a .rar archive. The vulnerability enables user-assisted remote code execution on the af...

CVE-2007-6406

CVE-2007-6406 describes multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console. The flaws let remote attackers inject arbitrary web script or HTML through the IP Address field and other unspecified inputs, potentially enabling scr...

CVE-2007-6399

CVE-2007-6399 affects Flat PHP Board 1.2 and earlier. The vulnerability allows remote authenticated users to obtain the current user’s password by reading the password parameter value in the HTML source of the page generated by a profile action. The underlying cause is exposure of the password pa...

CVE-2007-6390

CVE-2007-6390 affects the Serendipity mycalendar plugin (pre-0.13). The vulnerability is a CSRF flaw that could allow an attacker to perform actions as a blog administrator, which could be leveraged to enable or facilitate XSS on the blog page. Affected component: mycalendar plugin for Serendipit...

CVE-2007-6410

CVE-2007-6410 affects Gadu-Gadu where improper protocol handling enables cross-site request forgery (CSRF) via an unspecified crafted link, allowing an attacker to add arbitrary user accounts or cause a denial of service for administrators. The provided documents reiterate CSRF risk tied to the g...

CVE-2007-6397

CVE-2007-6397 affects Flat PHP Board 1.2 and earlier. The vulnerability arises from directory traversal in index.php, enabling remote attackers to (1) create arbitrary files via .. in the username during user registration, and (2) read arbitrary PHP files via .. in (a) the topic parameter for a t...