18185 matches found
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SERWEBconfigdir parameter to loadlang.php, 2 SERWEBfunctionsdir parameter to mainprepend.php, and the 3 PHPLIBlibdir parameter to...
Moderate: Red Hat Security Advisory: python security update
Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An...
CVE-2007-6296
PHP remote file inclusion vulnerability in userspopupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter...
CVE-2007-6287
CVE-2007-6287 is a cross-site scripting (XSS) vulnerability in the login page of HyperVM 2.0 by Lxlabs, where an attacker can inject arbitrary script via the frm_emessage parameter. This entry describes a different vector than CVE-2006-6649 and notes the provenance of the information as unknown a...
CVE-2007-6298
CVE-2007-6298 : A cross-site scripting (XSS) vulnerability exists in the Shoutbox module for Drupal 5.x through 5.x-1.1, allowing remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages. Impact is limited to pages rendering the affected block; the issue is du...
CVE-2007-6291
CVE-2007-6291 affects Xigla Absolute Banner Manager .NET 4.0. The vulnerability is a SQL injection in abm.aspx accessible via the z parameter, enabling remote attackers to execute arbitrary SQL commands. The entry is rated CVSS v2 base score 7.5 (HIGH) with network access and low complexity. Expl...
CVE-2007-6289
CVE-2007-6289 describes multiple PHP remote file inclusion vulnerabilities in SerWeb (versions 0.9.6 and later, and 2.0.0 dev1 and earlier). The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in parameters such as _SERWEB[configdir] to load_lang.php, _SERWEB[functionsdir...
CVE-2007-6300
The CVE-2007-6300 entry describes a Cross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0. Affected software: Fusion News 3.9.0 (web application). What is vulnerable: CSRF vulnerability that could allow remote attackers to perform unauthorized actions via unspecified vectors. Conse...
CVE-2007-6293
CVE-2007-6293 affects IBM Hardware Management Console (HMC) 6 R1.3. The connected records describe multiple unspecified vulnerabilities within HMC that allow attackers to gain privileges via certain HMC commands. The documents do not specify the root cause, exact vulnerable components, bug detail...
CVE-2007-6292
CVE-2007-6292: SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary SQL via the id parameter. Affected software: MWOpen 1.4 and earlier. Root cause: improper handling of user-supplied id value in the SQL query. Impact: potential ...
CVE-2007-6298
Cross-site scripting XSS vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages...
CVE-2007-6287
Cross-site scripting XSS vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frmemessage parameter, a different vector than CVE-2006-6649. NOTE: the provenance of this information is unknown; the details are obtained solely...
CVE-2007-6295
The documents confirm CVE-2007-6295 is an XSS vulnerability in IBM Lotus Sametime prior to version 8.0, affecting the WebRunMenuFrame page of the online meeting center template. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the URI, with attack vector over n...
CVE-2007-6288
CVE-2007-6288 affects TCExam prior to 5.1.000 and involves multiple SQL injection vulnerabilities. The underlying issue is injection in SQL queries, allowing remote attackers to run arbitrary SQL via unspecified vectors. Reported impact per the entry indicates partial confidentiality, integrity, ...
CVE-2007-6301
CVE-2007-6301 describes a cross-site scripting (XSS) vulnerability in the OpenNewsletter project, specifically in compose.php for version 2.5 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted value to the type parameter. The available sou...
CVE-2007-6297
CVE-2007-6297 details multiple XSS vulnerabilities in PHPMyChat (0.14.5/0.14.6) that allow remote attackers to inject arbitrary script/html via parameters: LIMIT (chat/deluser.php3), Link (chat/edituser.php3), and LastCheck or B (chat/users_popupL.php3). The entry notes related vectors (FontName ...
CVE-2007-6294
Technical details for CVE-2007-6294 are not publicly available in the provided documents. No specifics on affected models, vulnerable components, root cause, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2007-6290
SERWeb 2.0.0 dev1 and earlier are affected by directory traversal in js/get_js.php. The vulnerability allows remote attackers to read arbitrary files by supplying .. in the (1) mod and (2) js parameters, due to underlying path traversal. Documented impact is reading files; no exploitation status ...
Moderate: Red Hat Security Advisory: python security update
Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An integer...
Critical: Red Hat Security Advisory: samba security and bug fix update
Updated samba packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...