CVE-2007-5071

Incomplete blacklist vulnerability in uploadimgcgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upload dangerous files and execute arbitrary code, as demonstrated by a filename ending in .php. or a .htaccess file, a different vector than CVE-2005-2733. NOTE: the vulnerability wa...

CVE-2007-5072

CVE-2007-5072 affects the Simple PHP Blog (SPHPBlog) prior to version 0.5.1. The root cause is cross-site scripting (XSS) vulnerabilities that occur when register_globals is enabled, allowing remote attackers to inject arbitrary web script or HTML via certain user_colors array parameters to files...

CVE-2007-5069

CVE-2007-5069 : A directory traversal flaw in the Nuke Mobile Entertainment 1 addon for PHP-Nuke affects the file data/compatible.php. The vulnerability allows remote attackers to perform local file inclusion by supplying a .. (dot dot) in the module_name parameter, enabling the execution of arbi...

Immunity Canvas: OPENREALTY_EXEC

Name| openrealtyexec ---|--- CVE| CVE-2007-5056 Exploit Pack| CANVAS Description| Open-Realty = 2.4.3 Remote Code Execution Notes| CVE Name: CVE-2007-5056 VENDOR: Open-realty.org Repeatability: Infinite References: http://securityreason.com/exploitalert/3360 CVE Url:...

Immunity Canvas: JOOMLASLIDESHOW_INCLUDE

Name| joomlaslideshowinclude ---|--- CVE| CVE-2007-5065 Exploit Pack| CANVAS Description| Joomla Slideshow Component Remote File Inclusion Notes| CVE Name: CVE-2007-5065 VENDOR: Joomla Repeatability: Infinite References: http://www.securityfocus.com/bid/25760/exploit CVE Url:...

CVE-2007-4987

Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address...

CVE-2007-5056

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the lastmodule parameter...

Immunity Canvas: IZICONTENTS_INCLUDE

Name| izicontentsinclude ---|--- CVE| CVE-2007-5054 Exploit Pack| CANVAS Description| iziContents Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: iziContents CVE Url: https://vulners.com/cve/CVE-2007-5054 CVE Name: CVE-2007-5054...

CVE-2007-4988

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow...

CVE-2007-5062

The CVE-2007-5062 entry relates to the Flip 3.0 (and earlier) web application by Adam Scheinberg, where the vulnerable component is account.php. The underlying issue allows remote attackers to create administrative accounts via the un parameter in a register action, enabling privilege escalation ...

CVE-2007-5057

NetSupport Manager Client vulnerability (CVE-2007-5057) affects versions 10.20 and earlier. The issue is an authentication bypass: remote attackers can spoof the NetSupport Manager, bypassing both the basic and authentication schemes to pose as the legitimate client and potentially gain control. ...

CVE-2007-4987

ImageMagick is affected by CVE-2007-4987 due to an off-by-one error in ReadBlobString (blob.c) that can allow context-dependent attackers to execute arbitrary code via a crafted image file. Impact arises from writing a NULL character ('\0') to an out-of-bounds address. The vulnerability is descri...

CVE-2007-5062

account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the un parameter in a register action...

CVE-2007-5053

CVE-2007-5053 affects iziContents 1 RC6 and earlier. The vulnerability consists of multiple incomplete blacklist flaws that allow remote attackers to execute arbitrary PHP code via crafted URLs in various parameters across modules (e.g., admin_home in modules/poll/poll_summary.php; rootdp in incl...

CVE-2007-5065

CVE-2007-5065 : A PHP remote file inclusion vulnerability exists in Joomla!’s Flash Slide Show (com_slideshow) component, specifically in admin.slideshow1.php, where an attacker can abuse the mosConfig_live_site parameter to execute arbitrary PHP code remotely. This vulnerability affects the Joom...

CVE-2007-5055

CVE-2007-5055 affects iziContents 1 RC6 and earlier. The vulnerability is a directory traversal that allows remote attackers to include and execute arbitrary local files via a .. in the admin_home parameter to modules/poll/poll_summary.php or the rootdp parameter to include/db.php. Connected reco...

CVE-2007-5058

The CVE-2007-5058 issue affects the Barracuda Spam Firewall web administration interface. Affected component: login handling in the Web UI where the username field can inject arbitrary script/HTML when the Monitor Web Syslog screen is open. Root cause: improper handling of input in the login cont...

CVE-2007-5060

CVE-2007-5060 describes a CSRF vulnerability in XCMS within the admin action for index.php, affecting the cpass functionality. It allows remote attackers to change arbitrary passwords by submitting certain password_ and rpassword_ parameters, possibly related to timestamp values. The issue stems ...

CVE-2007-5064

Affects Xunlei Web Thunder 5.6.9.344 via a buffer overflow in an ActiveX control (likely DapPlayer_Now.dll’s DapPlayer ActiveX) exposed through DownURL2. This allows remote code execution by sending a long first argument to DownURL2. Descriptions come from CVE-2007-5064 and corroborating sources;...

CVE-2007-4985

CVE-2007-4985 affects ImageMagick. Multiple connected sources confirm the issue is a denial-of-service risk from crafted images that trigger infinite loops in ReadDCMImage and ReadXCFImage (via ReadBlobByte/ReadBlobMSBLong). The provided documents do not specify a concrete patched version or exac...