CVE-2007-5582

CiscoWorks Server/XSS in the Common Services login page (CS) affects CS 3.0.x and 3.1, possibly earlier 2.6, allowing remote injection of arbitrary script or HTML via unspecified vectors. The vulnerability is documented as a cross-site scripting issue in the login page; the provided sources do no...

CVE-2007-6374

CVE-2007-6374 concerns multiple XSS flaws in Bitweaver 2.0.0 and earlier, exploitable via PATH_INFO in four endpoints: /users/register.php, /search/index.php, /wiki/index.php (editcomments action), and /forums/index.php. The vulnerability allows remote attackers to inject arbitrary script or HTML...

CVE-2007-6369

The CVE-2007-6369 entry concerns the WordPress PictPress plugin (versions up to 0.91). The vulnerability is a directory traversal in resize.php, where the attack succeeds by providing a dot-dot in the size or path parameter, allowing an attacker to read arbitrary server files. Impacts are file di...

CVE-2007-6376

CVE-2007-6376 describes a directory traversal vulnerability in the PHP-Nuke 8.0 AutoHTML module (autohtml.php). The root cause is that the filename parameter can be manipulated with a …/ path, enabling local file inclusion and arbitrary code execution on the server. The vulnerability affects PHP-...

CVE-2007-6372

Technical details for CVE-2007-6372 are not provided in the connected documents. Public information in the Initial Description is high-level. Monitor for updates from official advisories to obtain affected products, vectors, and fixes.

CVE-2007-6362

Summary: CVE-2007-6362 is a SQL injection in the RSGallery component (com_rsgallery) for Mambo/Joomla! up to 2.0 beta5. Vulnerable component: index.php handling inline page actions. Root cause: SQL commands are injectable via the catid parameter. Impact: Remote attackers could potentially execute...

CVE-2007-6377

This CVE describes a stack-based buffer overflow in the PassThru functionality of ext.dll in BadBlue 2.72b and earlier. The root cause is a overflow triggered by a long query string, allowing remote attackers to execute arbitrary code. Public exploit references exist (e.g., Metasploit module BadB...

CVE-2007-6249

CVE-2007-6249 concerns Portage (Gentoo) = 2.1.3.11 (or apply equivalent patches) to mitigate the risk. If upgrading is not immediately possible, be aware that the description and related GLSAs/Nessus entries consistently describe an information-disclosure impact due to insecure temporary files du...

CVE-2007-6358

CVE-2007-6358 affects the Common UNIX Printing System (cupsys). The flaw is in pdftops.pl (pdftops filter) where insecure handling of a temporary file created when reading PDFs from stdin can be exploited via a symlink to overwrite arbitrary files, enabling local access/denial of service. Public ...

CVE-2007-6364

Cross-site scripting XSS vulnerability in modificarPerfil.php in JLMForo System allows remote authenticated users to inject arbitrary web script or HTML via a signature...

CVE-2007-6367

Multiple cross-site scripting XSS vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username user or 2 comment commento field, different vectors than CVE-2007-2357...

CVE-2007-6369

Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow remote attackers to read arbitrary files via a .. dot dot in the 1 size or 2 path parameter...

CVE-2007-6375

CVE-2007-6375 affects Bitweaver 2.0.0 and earlier. The vulnerability comprises multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via (1) the sort_mode parameter to wiki/list_pages.php and (2) the highlight parameter to search/index.php. A report also menti...

CVE-2007-4706

Apple QuickTime prior to version 7.3.1 is affected by a heap-based buffer overflow in the QTL file parsing that can allow a remote attacker to execute arbitrary code. This vulnerability affects QuickTime on multiple platforms referenced in CVE-2007-4706, with an impact described as potential remo...

CVE-2007-6364

CVE-2007-6364 describes a cross-site scripting (XSS) vulnerability in the modificarPerfil.php component of the JLMForo System. The issue allows remote authenticated users to inject arbitrary web script or HTML via a signature field. According to the CVE entry, the affected product is JLMForo Syst...

Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...

Unfixed XSS vulnerability at www.chicosonline.com

Security researcher TreX, has submitted on 15/12/2007 a cross-site-scripting XSS vulnerability affecting www.chicosonline.com, which at the time of submission ranked 131321 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

CVE-2007-6350

scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including 1 unison, 2 rsync, 3 svn, and 4 svnserve, as originally demonstrated by creating a Subversion SVN repository with malicious hooks, then using svn ...

CVE-2007-6350

CVE-2007-6350 affects scponly 4.6 and earlier, where remote authenticated users could bypass restrictions and execute code by abusing certain subcommands (unison, rsync, svn, svnserve) via a malicious SVN repository and hooks to trigger execution. Public references show Fedora advisories (2008-17...

CVE-2007-6348

SquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been externally modified to create a Trojan Horse that introduces a PHP remote file inclusion vulnerability, which allows remote attackers to execute arbitrary code...