CVE-2007-6348

CVE-2007-6348 affects SquirrelMail 1.4.11 and 1.4.12 as distributed on SourceForge before 2007-12-13, where an external modification introduced a PHP remote file inclusion vulnerability allowing remote code execution. The vulnerability is categorized with CVSS v2 base score 6.8 (Network attack ve...

Intel Wireless WiFi Link驱动空指针引用漏洞

BUGTRAQ ID: 26842 CVECAN ID: CVE-2007-5938 Wireless WiFi Link是很多笔记本都在使用的无线网卡。 Wireless WiFi Link网卡驱动的实现上存在漏洞，远程攻击者可能利用此漏洞导致用户系统不可用。 Wireless WiFi Link网卡的iwlwifi驱动中compatible/iwl3945-base.c文件的iwlsetrate函数存在空指针引用漏洞： static void iwlsetratestruct iwlpriv priv const struct ieee80211hwmode hw = NULL;...

Microsoft DirectX SAMI parsing buffer overflow

Overview Microsoft DirectX is vulnerable to a stack-based buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft DirectX is a feature of the Microsoft Windows operating system used for streaming...

Unfixed XSS vulnerability at www.arb.com.my

Security researcher DerickTham, has submitted on 14/12/2007 a cross-site-scripting XSS vulnerability affecting www.arb.com.my, which at the time of submission ranked 664436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

CVE-2007-6347

CVE-2007-6347 describes a PHP remote file inclusion in blocks/block_site_map.php affecting ViArt CMS/HelpDesk/Shop Evaluation/Shop Free 3.3.2. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the root_folder_path parameter. Documented impact is remote code execution...

CVE-2007-6344

The CVE-2007-6344 issue affects Mcms Easy Web Make 1.3, where a directory traversal vulnerability in modules/cms/index.php allows remote inclusion and execution of local files via a .. in the template parameter. This enables an attacker to trigger arbitrary local file reads/executes on affected i...

CVE-2007-6346

CVE-2007-6346 affects Rainboard before 2.10 and is described in JVN as a cross-site scripting (XSS) vulnerability that allows a remote attacker to execute arbitrary script or HTML in a user’s browser via unspecified vectors. The JVN entry notes impact on the user interface (arbitrary script execu...

CVE-2007-6343

CVE-2007-6343 is an XSS vulnerability in HP OpenView Network Node Manager (OV NNM) affecting OV NNM versions 6.41, 7.01, and 7.51. The impact is remote injection of arbitrary web script or HTML via unspecified vectors. The provided documents do not specify the exact exploit path or affected compo...

CVE-2007-6345

CVE-2007-6345: A SQL injection vulnerability in the aurora framework (before 20071208) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially through the value parameter to pack_var in module/db.lib/db_mysql.lib. The issue is rooted in improper input handli...

CVE-2007-6342

SQL injection vulnerability in the David Castro AuthCAS module AuthCAS.pm 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSIONCOOKIENAME session ID in a cookie...

CVE-2007-6204

CVE-2007-6204 is a stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) affecting 6.41, 7.01, and 7.51. The flaw allows remote attackers to execute arbitrary code by sending overly long arguments to CGI programs, including ovlogin.exe, OpenView5.exe, snmpviewer.exe, and webapp...

CVE-2007-6342

CVE-2007-6342 affects the Apache::AuthCAS module (AuthCAS.pm) version 0.4 used with the Apache HTTP Server. The root cause is an SQL injection: the session ID obtained from the cookie named by SESSION_COOKIE_NAME is directly interpolated into an SQL query (SELECT last_accessed, uid, pgtiou FROM …...

CVE-2007-5989

The CVE-2007-5989 issue affects Skype

CVE-2007-6342

SQL injection vulnerability in the David Castro AuthCAS module AuthCAS.pm 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSIONCOOKIENAME session ID in a cookie...

CVE-2007-6015

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

DSquare Exploit Pack: D2SEC_HPINFO

Name| d2sechpinfo ---|--- CVE| CVE-2007-6331 Exploit Pack| D2ExploitPack Description| HP Info Center HPInfoDLL.DLL ActiveX Arbitrary Code Execution Vulnerability Notes|...

CVE-2007-6329

Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML OOXML documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the 1 LastModifiedBy and 2 creator fields in docProps/core.xml in the OOXML...

Design/Logic Flaw

Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML OOXML documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the 1 LastModifiedBy and 2 creator fields in docProps/core.xml in the OOXML...

CVE-2007-6328

DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem...

CVE-2007-6330

Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a 1 cleartext or 2 weakly encrypted format to support client-side login authentication, which makes it easier for remote attackers to obtain database access by capturing credentials via a...