CVE-2007-3675

CVE-2007-3675 concerns the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) used by Kaspersky Online Scanner. Public records state that this ActiveX contains a format string vulnerability in multiple string formatting functions, which can trigger a heap-based buffer overflow and allow remo...

CVE-2007-3675

Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control kavwebscan.dll in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer...

Immunity Canvas: JOOMLAMP3_INCLUDE

Name| joomlamp3include ---|--- CVE| CVE-2007-5412 Exploit Pack| CANVAS Description| Joomla commp3allopass Component Remote File Inclusion Notes| CVE Name: CVE-2007-5412 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/2881 CVE Url:...

Immunity Canvas: JOOMLAJCS_INCLUDE

Name| joomlajcsinclude ---|--- CVE| CVE-2007-5407 Exploit Pack| CANVAS Description| Joomla jContentSubscription Component Remote File Inclusion Notes| CVE Name: CVE-2007-5407 VENDOR: Joomla Repeatability: Infinite References: http://www.milw0rm.com/exploits/4489 CVE Url:...

CVE-2007-5411

CVE-2007-5411 affects Linksys SPA941 VoIP Phone firmware 5.1.8. The vulnerability is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via the From header in a SIP message. The provided documents identify the affected device and the attack vect...

CVE-2007-5409

NuSEO PHP Enterprise 1.6 (NuSEO.PHP) is affected by CVE-2007-5409. The vulnerability is a PHP remote file inclusion in admin/nuseo_admin_d.php when register_globals is enabled. An attacker can supply a URL via the nuseo_dir parameter to execute arbitrary PHP code on the affected system. The conne...

CVE-2007-5407

CVE-2007-5407 affects Joomla! with the JContentSubscription (com_jcs) 1.5.8 component. The vulnerability is a PHP Remote File Inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL via the mosConfig_absolute_path parameter to multiple component files under view/ and vi...

CVE-2007-5412

Concrete details found: CVE-2007-5412 affects Joomla! with the com_mp3_allopass 1.0 component. Vulnerable vector is a remote PHP file inclusion via the mosConfig_live_site parameter in (1) allopass.php and (2) allopass-error.php, enabling arbitrary code execution. References indicate public explo...

CVE-2007-5410

CVE-2007-5410 affects the Joomla! component com_wmtrssreader (admin.wmtrssreader.php) in the webmaster-tips.net Flash RSS Reader 1.0. The vulnerability is a PHP remote file inclusion that allows an attacker to supply a URL via mosConfig_live_site to cause remote code execution. The connected docu...

CVE-2007-5386

Cross-site scripting XSS vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string...

Immunity Canvas: WEBDESKTOP_INCLUDE

Name| webdesktopinclude ---|--- CVE| CVE-2007-5388 Exploit Pack| CANVAS Description| webDesktop remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: webDesktop CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5388 CVE Name: CVE-2007-5388...

CVE-2007-5391

Technical details for CVE-2007-5391 are not publicly available in the provided documents; monitor for updates.

CVE-2007-5387

CVE-2007-5387 affects Pindorama 0.1. A PHP remote file inclusion vulnerability exists in active/components/xmlrpc/client.php where an attacker can inject a URL via c[components] to execute arbitrary PHP code. The NVD entry lists a base score of 6.8 (MEDIUM) with network access, partial confidenti...

CVE-2007-5389

The CVE-2007-5389 entry concerns the Joomla! swMenuFree (com_swmenufree) version 4.6 component, where a PHP remote file inclusion vulnerability exists in preview.php. The underlying issue allows an attacker to execute arbitrary PHP code by supplying a URL in the mosConfig_absolute_path parameter....

CVE-2007-5386

CVE-2007-5386 : XSS in phpMyAdmin 2.11.1’s scripts/setup.php when a browser does not URL-encode requests, allowing remote injection of arbitrary script/HTML via the query string. OpenVAS entries (Fedora/Debian updates) confirm a publicly known vulnerability and list CVSS base 4.3 (I:P), with nota...

CVE-2007-5388

CVE-2007-5388 affects WebDesktop 0.1 and describes PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by passing a URL to the app parameter (apps/apps.php) or the wsk parameter (wsk/wsk.php). The underlying cause is a remote file inclusion flaw in these...

CVE-2007-5382

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine WLSE 4.1.91.0 and earlier to Cisco Wireless Control System WCS creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges...

CVE-2007-5385

Technical details about CVE-2007-5385 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2007-5383

The CVE-2007-5383 entry concerns Thomson/Alcatel SpeedTouch 7G routers (as used with BT Home Hub 6.2.6.B and earlier). The vulnerability allows remote attackers on an intranet to bypass authentication and gain administrative access by manipulating the PATH_INFO end character (notably a trailing s...

CVE-2007-5382

The CVE-2007-5382 entry concerns the CiscoWorks WLSE conversion utility (versions 4.1.91.0 and earlier) that converts to Cisco WCS. The underlying issue is that the conversion process creates administrator accounts with default usernames and passwords, enabling remote attackers to gain privileges...