Unfixed XSS vulnerability at www.azmoon.net

Security researcher Persian Fox, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.azmoon.net, which at the time of submission ranked 10286 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...

Unfixed XSS vulnerability at newsville.com

Security researcher www.r3t.n3t.nl, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting newsville.com, which at the time of submission ranked 479191 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...

Unfixed XSS vulnerability at www.professioneacqua.it

Security researcher iNs uNkn0wn.eu CreW, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.professioneacqua.it, which at the time of submission ranked 2413738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed Redirect vulnerability at www.bartinmesem.k12.tr

Security researcher Narcoticxs, has submitted on 27/09/2007 a Redirect vulnerability affecting www.bartinmesem.k12.tr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently unfixed...

Information disclosure

Unspecified vulnerability in IAC Search & Media ask.com toolbar has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has...

CVE-2007-5109

Cross-site request forgery CSRF vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified 1 regpass and 2 level parameters in a noneLogin action, as demonstrated by using...

CVE-2007-5108

Unspecified vulnerability in IAC Search & Media ask.com toolbar has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has...

Authentication flaw

report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information web server logs via certain modified query parameters, as demonstrated using the profile, rid, prefs, n, vid, bd, ed, dt, and gtype parameters, a different vulnerability than CVE-2007-511...

CVE-2007-5107

Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar 4.0.2.53 and earlier allows remote attackers to execute arbitrary code via a long ShortFormat property value. NOTE: some of these details are obtained from...

CVE-2007-5108

CVE-2007-5107 and CVE-2007-5108 describe a stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control (askBar.dll) in IAC Search & Media Ask Toolbar 4.0.2.53 and earlier. The vulnerability is triggered by a long ShortFormat property value, enabling remote arbitrary code ...

CVE-2007-5113

CVE-2007-5113 affects Google Urchin 5 (<= 5.7.03) where report.cgi allows remote attackers to bypass authentication and access sensitive information (web server logs) by modifying query parameters such as profile, rid, prefs, n, vid, bd, ed, dt, and gtype. The vulnerability is related to an au...

CVE-2007-5114

PHP remote file inclusion vulnerability in include/plugin/block.t.php in Peter Schmidt phpmyProfiler 0.9.6b allows remote attackers to execute arbitrary PHP code via a URL in the pmprelpath parameter. NOTE: this issue is disputed by CVE because the applicable requireonce is in a function that is...

CVE-2007-5110

CVE-2007-5110 describes an absolute path traversal in the EB Design ebCrypt ActiveX control (EbCrypt.eb_c_PRNGenerator.1) within EBCRYPT.DLL 2.0.0.2087 and earlier. The vulnerability allows remote attackers to create or overwrite arbitrary files by passing a full pathname to the SaveToFile method...

CVE-2007-5107

The CVE-2007-5107 entry describes a stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control (askBar.dll) used by the IAC/Ask Toolbar on Windows. A long ShortFormat property value allows remote code execution. Related CVE-2007-5108 is suspected to be the same issue, bu...

CVE-2007-5109

Cross-site request forgery (CSRF) in index.php of FlatNuke 2.6 (and possibly 3) allows remote attackers to change user password and privilege level by manipulating the user, regpass, and level parameters in a none_Login action, demonstrated via a Flash object. No explicit remediation is provided ...

CVE-2007-5114

PHP remote file inclusion vulnerability in include/plugin/block.t.php of phpmyProfiler 0.9.6b could allow remote code execution via a URL in the pmp_rel_path parameter. The issue stems from the include path logic in block.t.php; CVE notes that the applicable require_once is in a function not call...

CVE-2007-5115

CVE-2007-5115 describes multiple PHP remote file inclusion vulnerabilities in Ekke Doerre Contenido 42VariablVersion (42VV10) used with contenido_hacks in Mods 4 Xoops Contenido eZ publish (pdf4cms). The flaw allows an attacker to force the inclusion of remote PHP code by supplying a URL in param...

CVE-2007-5108

Unspecified vulnerability in IAC Search & Media ask.com toolbar has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has...

CVE-2007-5112

CVE-2007-5112 is an XSS vulnerability in Google Urchin 5 (versions up to 5.7.03 and earlier) affecting the session.cgi (login page). The weakness allows remote attackers to inject arbitrary script/HTML via the query string, as described in the NVD entry. The impact noted includes potential creden...

Immunity Canvas: HELPLINK_INCLUDE

Name| helplinkinclude ---|--- CVE| CVE-2007-5099 Exploit Pack| CANVAS Description| HelpLink Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: HelpLink CVE Url: https://vulners.com/cve/CVE-2007-5099 CVE Name: CVE-2007-5099...