18185 matches found
CVE-2007-4863
SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter...
CVE-2007-5726
CVE-2007-5726 affects Sun Solaris 10 SCTP: when a LISTEN socket exists, remote denial of service (panic) can occur via INIT processing. Remediation is patch 127716-01 (SPARC) or 127717-01 (x86); see SunAlerts 1000936.1. No exploitation details are provided in the supplied documents.
CVE-2007-4862
CVE-2007-4862 is a documented XSS vulnerability affecting SAXON 5.4 in admin/menu.php via config[news_url]. Exploitation requires register_globals On and magic_quotes_gpc Off; the NVD/NVD-derived reports list a Medium impact (I/P) and network access with no confidentiality or availability impact,...
CVE-2007-4863
The CVE-2007-4863 entry concerns SAXON version 5.4, where a SQL injection vulnerability exists in example.php via the template parameter. The vulnerability arises when PHP magic_quotes_gpc is Off, allowing remote attackers to execute arbitrary SQL commands, potentially exposing data or altering i...
CVE-2007-4861
SAXON 5.4 is affected by multiple path disclosure flaws when display_errors is enabled. Exploitation vectors include direct requests to news.php, improper handling of newsid in admin/edit-item.php, and other scripts under admin/, rss/, and the installation root, which reveal server paths in error...
CVE-2007-5717
Technical details for CVE-2007-5717 are not publicly available in the provided documents. The materials mention an unspecified remote code execution in Sun Fire X2100/X2200 ELOM but do not specify affected versions, vectors, or fixes. Monitor for updates.
CVE-2007-5728
CVE-2007-5728 : The connected template for phpPgAdmin
CVE-2007-5720
CVE-2007-5720 : Affected product: ProfileCMS 1.0. The vulnerability is an unrestricted file upload in the profiles script that allows remote attackers to upload and execute arbitrary PHP code via profile creation. The NVD entry lists a CVSS v2 base score of 6.8 (NETWORK, MEDIUM) with partial impa...
CVE-2007-5718
CVE-2007-5718 affects vobcopy up to version 0.5.14. A local attacker can exploit insecure temporary file handling (creating/appending to /tmp/vobcopy.bla or /tmp/vobcopy_0.5.14.log) via a symlink attack to write to arbitrary files with the privileges of the running user. The vulnerability arises ...
CVE-2007-5725
CVE-2007-5725: Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via (1) the email parameter to index.php or (2) the command parameter to index.php in the default home page action, (3) a currencies action, or (4) a bask...
CVE-2007-5723
CVE-2007-5723 describes a heap-based buffer overflow in the samp_send function of NuFW (nuauth/sasl.c) prior to version 2.2.7. An attacker could remotely trigger DoS by providing input on which base64 encoding is performed. The vulnerability is exploitable over the network (no authentication requ...
CVE-2007-1323
CVE-2007-1323 is rejected/not used per the initial description.
CVE-2007-5717
Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM on x86 before firmware 2.70 allows remote attackers to execute arbitrary commands as root on the Service Processor SP via unspecified vectors, a different vulnerability than CVE-2007-5170...
CVE-2007-5727
CVE-2007-5727 describes an incomplete blacklist vulnerability in OneOrZero Helpdesk (common.php, stripScripts) that allows remote XSS via the description parameter to tcreate.php or tupdate.php (e.g., using an onmouseover event in a tag). Affected versions include 1.6.5.4 and 1.6.4.2, with poten...
CVE-2007-5722
CVE-2007-5722 describes a stack-based buffer overflow in the GLChat.ocx ActiveX control (GLChat.ctrl.1) used by GlobalLink 2.7.0.8 (Ourgame GLWorld). The vulnerability is triggered by a long first argument to the ConnectAndEnterRoom method, allowing remote code execution. The issue is linked to t...
CVE-2007-5716
CVE-2007-5716 affects the Internet Protocol (IP) functionality in Sun Solaris 10 . The vulnerability is described as an unspecified local DoS (panic) caused by vectors likely related to a UDP packet. The exact component/file, root cause, and affected versions beyond Solaris 10 are not detailed in...
CVE-2007-5719
CVE-2007-5719 affects miniBB 2.1, with a vulnerability in bb_func_search.php allowing SQL injection via the table parameter to index.php. This enables remote attackers to execute arbitrary SQL commands. The provided documents do not include a confirmed remediation or patch details.
CVE-2007-5710
Cross-site scripting XSS vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the postscolumns array parameter...
