18185 matches found
CVE-2007-5451
PHP remote file inclusion vulnerability in admin.color.php in the comcolorlab aka comcolor 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...
CVE-2007-5195
Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...
CVE-2007-5200
hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...
Buffer overflow
Buffer overflow in the DB Software Laboratory VImpX VImpAX1 ActiveX control in VImpX.ocx 4.7.3.0 allows remote attackers to execute arbitrary code via a long RejectedRecordsFile parameter, a different vector than CVE-2007-2667...
CVE-2007-5456
Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...
Immunity Canvas: JOOMLACOLORLAB_INCLUDE
Name| joomlacolorlabinclude ---|--- CVE| CVE-2007-5451 Exploit Pack| CANVAS Description| Joomla comcolorlab Component Remote File Inclusion Notes| CVE Name: CVE-2007-5451 VENDOR: Joomla Repeatability: Infinite References: http://www.osvdb.net/show/osvdb/40609 CVE Url:...
CVE-2007-5455
The CVE-2007-5455 entry describes a Cross-site Scripting (XSS) vulnerability in the wxis.exe component of WWWISIS 7.1 and earlier . The issue allows remote attackers to inject arbitrary script or HTML via the IsisScript code path (iah/iah.xis), potentially involving the lang or exprSearch paramet...
CVE-2007-5444
CMS Made Simple 1.1.3.1 is vulnerable to a path-disclosure issue: remote attackers can obtain the server’s full path by directly requesting unspecified files. This is a remote, unauthenticated weakness with partial confidentiality impact. No explicit fix/version is stated in the provided document...
CVE-2007-5443
CVE-2007-5443 describes multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1. The description specifies remote attackers can inject arbitrary script or HTML via vectors related to (1) the anchor tag and (2) listtags, but the exact technical vectors are not detailed in th...
CVE-2007-5451
CVE-2007-5451 concerns the Joomla! com_colorlab (aka com_color) 1.0 component. The issue is a PHP remote file inclusion vulnerability in admin.color.php exploitable via a URL in the mosConfig_live_site parameter, allowing an attacker to execute arbitrary PHP code on the server. The affected compo...
CVE-2007-5195
This CVE refers to an unspecified vulnerability in the SSL implementation of the GroupWise client (novell-groupwise-client) for SUSE Linux Enterprise Desktop 10 that allows remote attackers to obtain credentials via a man-in-the-middle attack (CVE-2007-5195 and related CVE-2007-5196). The connect...
CVE-2007-5200
hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...
CVE-2007-5454
The CVE-2007-5454 entry describes a directory traversal in index.php of PHP File Sharing System 1.5.1, allowing remote attackers to list/create arbitrary directories or delete files by using a "cam" parameter with "..". Affected component: index.php in PHP File Sharing System 1.5.1. Root cause: i...
CVE-2007-5445
CVE-2007-5445 refers to a buffer overflow in the DB Software Laboratory’s VImpX ActiveX control (VImpX.ocx 4.7.3). The vulnerability allows remote execution of arbitrary code via a long RejectedRecordsFile parameter, representing a different vector from CVE-2007-2667. This description comes from ...
CVE-2007-5449
CVE-2007-5449 is an SQL injection vulnerability in the searchresult.php of Softbiz Recipes Portal Script (and related Softbiz Link Directory Script entries). The underlying issue, via the sbcat_id parameter, allows remote attackers to construct and execute arbitrary SQL commands. This yields pote...
CVE-2007-5451
PHP remote file inclusion vulnerability in admin.color.php in the comcolorlab aka comcolor 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...
CVE-2007-5196
CVE-2007-5196 affects SUSE Linux Enterprise Desktop 10 via the GroupWise client (novell-groupwise-client). The vulnerability lies in the SSL implementation and can allow remote attackers to obtain credentials through a man-in-the-middle attack. The issue is addressed by a SUSE security update (ZY...
CVE-2007-5442
CVE-2007-5442 affects CMS Made Simple 1.1.3.1. The vulnerability is that the system does not check the permissions of users attempting uploads, allowing remote authenticated users to upload unspecified files via unknown vectors. The public description does not specify affected files, exploit meth...
CVE-2007-5450
CVE-2007-5450 affects Safari on Apple iPod touch and iPhone (v1.1.1). The vulnerability allows user-assisted remote attackers to crash the application and enable local filesystem browsing by processing a crafted TIFF file, exposing a denial-of-service risk and local data exposure. The PT-2007-648...
CVE-2007-5456
CVE-2007-5456 describes a vulnerability in Microsoft Internet Explorer 7 and earlier where an attacker can bypass the File Download - Security Warning dialog and cause a download of arbitrary files by appending a '?' and a non-.exe filename after the .exe filename. The connected advisories and NV...