CVE-2007-6137

Content Injector 1.52 has a SQL injection in news.php via the cat parameter to index.php, allowing remote attackers to execute arbitrary SQL. Root cause: unsafe query construction in the affected script. Impact: confidentiality, integrity, and availability partially affected; CVSS v2 base score 7...

CVE-2007-6147

CVE-2007-6147 affects IAPR COMMENCE 1.3 and describes multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the php_root_path (and sometimes privilege_root_path) parameter to various PHP scripts under admin/incl...

CVE-2007-6132

CVE-2007-6132 is rejected/not used and does not represent an active vulnerability entry.

CVE-2007-6144

CVE-2007-6144 describes a heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control (pplayer.dll_1_work) used by Xunlei Thunder 5.7.4.401. An attacker can trigger arbitrary code execution by supplying a long string to the FlvPlayerUrl property. The vulnerability is tied to a heap overf...

[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1414-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.darkmonasteria.de

Security researcher BackDoor, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.darkmonasteria.de, which at the time of submission ranked 4359526 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Mozilla Foundation Security Advisory 2007-39

Mozilla Foundation Security Advisory 2007-39 Title: Referer-spoofing via window.location race condition Impact: High Announced: November 26, 2007 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.10 SeaMonkey 1.1.7 Description Gregory Fleischer demonstrated that it...

pam security, bug fix, and enhancement update

0.77-66.23 - pamcracklib should count the last char when computing difference 267201 0.77-66.22 - add pamtally2 module 228044 - unset XAUTHORITY when appropriate 228980 - CVE-2007-1716 always decrement use count 230823 - reset priority only when specified in limits.conf 232407 - CVE-2007-3102...

Unfixed XSS vulnerability at toendacms.com

Security researcher Hanno Boeck, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting toendacms.com, which at the time of submission ranked 979455 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.gypsyrose.com

Security researcher sleaz, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.gypsyrose.com, which at the time of submission ranked 879473 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is current...

Unfixed XSS vulnerability at www.roostertypes.com

Security researcher Genocide, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.roostertypes.com, which at the time of submission ranked 2340229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.selfdefenseproducts.com

Security researcher Skunkfoot, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.selfdefenseproducts.com, which at the time of submission ranked 249843 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007...

httpd security, bug fix, and enhancement update

2.0.52-38.ent.0.1 - use oracle index page oracleindex.html - updated string and distro in specfile 2.0.52-38.ent - fix server version string 236419 2.0.52-37.ent - add security fix for CVE-2007-3847 250760 2.0.52-36.ent - add modversion, load in default httpd.conf 248696 2.0.52-35.ent - add...

openssh security and bug fix update

3.9p1-8.RHEL4.24 - return correct exit status on failed write on sftp batch mode 247802 3.9p1-8.RHEL4.23 - some more mem leaks fix in sftp 240909 3.9p1-8.RHEL4.22 - CVE-2007-3102 escape account name to prevent audit log injection 248058 3.9p1-8.RHEL4.21 - move pam session calls so pamclosesession...

phpMyAdmin DB_Create.PHP多个输入验证漏洞

BUGTRAQ ID: 26512 CVE ID:CVE-2007-5976 CVE-2007-5977 CNCVE ID:CNCVE-20075977 phpMyAdmin是一款基于WEB的MySQL管理程序。 phpMyAdmin DBCreate.PHP存在多个输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是由于DBCreate.PHP对参数缺少充分过滤，提交恶意脚本代码作为参数数据，并诱使用户解析，可导致恶意脚本代码在目标用户浏览器上执行。 RedHat Fedora 7 0 phpMyAdmin phpMyAdmin 2.11.1 phpMyAdmi...

PPStream 2.1.6.2916 PowerList.ocx SetBkImage Overwrite Exploit

No description provided by source. / PPStream PowerList.ocx 2.1.6.2916 描述: SetBkImage 堆和栈溢出, 还是以前的老问题。以前补的是PowerPlayer.dll中的 这里利用堆溢出和栈溢出，使用 CFindFile 对参数检查不严格，导致堆溢出。 在其析构时会导致异常，并且在析构之前发生了 strcat 导致栈溢出，覆盖掉 原来的 seh 处理程序 author: [email protected] 2007-11-11 / define CRTSECURENODEPRECATE include windows...

Unfixed XSS vulnerability at www.black-ms.de

Security researcher BackDoor, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.black-ms.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

CVE-2007-6183 ruby-gnome2: format string vulnerability

Format string vulnerability in the mdiaginitialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 aka Ruby/Gnome2 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter...

CVE-2007-5960

Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protecti...

CVE-2007-5960

CVE-2007-5960 affects SeaMonkey (and Firefox) where the Referer header is set to the script window/frame instead of the content initiator, enabling spoofing of Referer-based CSRF protections. The vulnerability arises from a race condition when window.location is set, potentially causing a CSRF at...