CVE-2007-5018

CVE-2007-5018 describes a stack-based buffer overflow in Mercury/32 IMAPD (Mercury Mail) version around 4.52, exploitable by sending a long argument in a SEARCH ON command by an authenticated remote user, allowing arbitrary code execution. The entry notes overlap with CVE-2004-1211. Public refere...

CVE-2007-5017

CVE-2007-5017 describes an absolute path traversal vulnerability in a specific ActiveX control (the CYFT object in ft60.dll) used by Yahoo! Messenger 8.1.0.421. An attacker could supply a full pathname to the GetFile method to force a download or create/overwrite arbitrary files on the affected s...

CVE-2007-5010

The CVE-2007-5010 issue is a Cross-site scripting (XSS) vulnerability in WebBatch that allows remote attackers to inject arbitrary web script or HTML via the URL to webbatch.exe. The vulnerability is exploitable over network without authentication and grants at least partial impact to integrity; ...

CVE-2007-5012

Affected software: PhpWebGallery 1.7.0. Vulnerable component: picture.php. Issue: cross-site scripting (XSS) via the author parameter when Comments for all is enabled. Impact: remote attackers can inject arbitrary web script or HTML. Root cause details are not deeper than the description provided...

CVE-2007-5014

CVE-2007-5014 concerns pSlash 0.70 with multiple PHP remote file inclusion vulnerabilities. The reported vectors allow an attacker to specify a URL for PHP code execution via (1) lvc_admin_dir in modules/visitors2/admin/view-archiver.inc.php and (2) lvc_include_dir in modules/visitors2/include/me...

CVE-2007-5008

HP-UX vulnerability CVE-2007-5008 affects logins(1M) on HP-UX B.11.31, B.11.23, and B.11.11 where the command incorrectly reports password status, allowing remote attackers to obtain privileges when certain password issues are not detected. Impact is remote unauthorized access / potential privile...

CVE-2007-5013

CVE-2007-5013 corresponds to multiple XSS vulnerabilities in Phormer 3.31, specifically in index.php where the (1) u, (2) p, (3) c, and (4) s parameters (and other vectors) can be exploited to inject arbitrary script/HTML. The connected documents corroborate the presence of XSS via these input po...

CVE-2007-5011

CVE-2007-5011 affects WebBatch; the vulnerable component is webbatch.exe in WebBatch. It allows remote attackers to obtain sensitive information through the dumpinputdata parameter, leading to information disclosure with partial confidentiality impact. The public record notes a network attack vec...

CVE-2007-5007

CVE-2007-5007 concerns a stack-based buffer overflow in the ir_fetch_seq function of Balsa (GNOME mail client) prior to version 2.3.20. A long IMAP FETCH response could allow a remote attacker to execute arbitrary code on the affected host. Gentoo GLSA 200710-17 (and related advisories) specify t...

php security update

CentOS Errata and Security Advisory CESA-2007:0890 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

Moderate: php security update

5.1.6-15.el5 - improve fix for CVE-2007-3997 278411 5.1.6-14.el5 - fix backport for CVE-2007-3996 278411 5.1.6-13.el5 - add security fixes for CVE-2007-2756, CVE-2007-2872, CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658, CVE-2007-4670 278411...

Unfixed XSS vulnerability at ascii.techhappens.com

Security researcher RoMeO, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting ascii.techhappens.com, which at the time of submission ranked 1215439 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is...

Unfixed XSS vulnerability at www.arabtimesonline.com

Security researcher www.r3t.n3t.nl, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting www.arabtimesonline.com, which at the time of submission ranked 12170 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007...

Unfixed XSS vulnerability at www.totalvid.com

Security researcher Pouyaserver, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting www.totalvid.com, which at the time of submission ranked 34334 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is...

Fixed XSS vulnerability at actifpub.com

Security researcher Pouyaserver, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting actifpub.com, which at the time of submission ranked 792770 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is...

Unfixed XSS vulnerability at dsa.com

Security researcher Narcoticxs, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting dsa.com, which at the time of submission ranked 1589095 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is currently...

CVE-2007-4984

CVE-2007-4984 affects the Ktauber.com StylesDemo mod for phpBB 2.0.x. Vulnerable component: index.php; vulnerable via the s parameter causing SQL injection. Root cause: improper handling of input leading to arbitrary SQL execution by remote attackers. Impact, per CVSS: AV:N/AC:L/Au:N/C:P/I:P/A:P ...

CVE-2007-4983

Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ dot dot backslash in the second argument to the DownloadFromMusicStore method. NOTE:...

CVE-2007-4983

CVE-2007-4983 describes a directory-traversal in the JetAudio.Interface.1 ActiveX control (JetFlExt.dll) used by JetAudio 7.0.3 Basic and 7.0.3.3016. By sending a .\ to the second argument of the DownloadFromMusicStore method, an attacker can create or overwrite arbitrary local files. The note in...

CVE-2007-4976

CVE-2007-4976 involves a directory traversal in Coppermine Photo Gallery (CPG) prior to or including 1.4.12. The flaw is in viewlog.php: an unsafely handled log parameter can be exploited to include and execute arbitrary local files by using ".." (dot dot). The vulnerability requires authenticati...