CVE-2007-4913

CVE-2007-4913 concerns Invision Power Board (IPB/IP.Board) 2.3.1 up to 20070912. The vulnerability lies in ips_kernel/class_upload.php, where remote attackers can upload arbitrary script files using crafted image filenames to the uploads/ directory. The uploaded files are saved with a .txt extens...

CVE-2007-4923

CVE-2007-4923: Joomla Radio 5 (com_joomlaradiov5) on Joomla! is affected by a PHP Remote File Inclusion in admin.joomlaradiov5.php. The vulnerability allows an attacker to execute arbitrary PHP code by manipulating the mosConfig_live_site URL parameter. The connected documents confirm the vulnera...

CVE-2007-3379

CVE-2007-3379 affects Red Hat Enterprise Linux 4 on x86_64 where the kernel may allow a local user to trigger a denial of service (OOPS). The description attributes the issue to vectors related to get_gate_vma and the fuser command, with the root cause details not explicitly provided in the sourc...

CVE-2007-3731

CVE-2007-3731 affects the Linux kernel 2.6.20/2.6.21. The vulnerability arises from handling an invalid LDT segment selector in %cs during ptrace single-step operations, enabling a local user to trigger a NULL pointer dereference and an OOPS, via PTRACE_SETREGS and PTRACE_SINGLESTEP (TRACE_IRQS_O...

Immunity Canvas: NUCLEARBB_INCLUDE

Name| nuclearbbinclude ---|--- CVE| CVE-2007-4906 Exploit Pack| CANVAS Description| NuclearBB Alpha 2 Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: nuclearbb.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4906 CVE Name: CVE-2007-4906...

CVE-2007-4904

RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 FC6 and possibly other platforms, allow user-assisted remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error...

CVE-2007-4906

CVE-2007-4906 affects NuclearBB Alpha 2 and its file tasks/send_queued_emails.php . The vulnerability is a PHP remote file inclusion triggered when register_globals is enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the root_path parameter. The connected document...

CVE-2007-4904

RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 (noted on Fedora Core 6) are affected by CVE-2007-4904. The flaw allows user-assisted remote attackers to cause a denial of service (application crash) by feeding a malformed .au file that triggers a divide-by-zero error....

CVE-2007-4902

CVE-2007-4902 describes an absolute path traversal in an ActiveX control within CryptoX.dll (versions ≤ 2.0) and the Ultra Crypto Component. The flaw allows remote attackers to write to arbitrary files by supplying a full pathname to the SaveToFile method, enabling overwriting of files on the aff...

CVE-2007-4908

CVE-2007-4908: Affected software is AuraCMS 2.1 and earlier. The vulnerability is a directory traversal in index.php exploitable via a crafted pilih parameter (.. dot dot), allowing remote inclusion and execution of arbitrary local files. This permits partial impact to confidentiality, integrity,...

CVE-2007-4907

CVE-2007-4907 documents multiple PHP remote file inclusion vulnerabilities in X-Cart . An attacker can exploit the flaw by supplying a URL in the xcart_dir parameter to any of six PHP entry points: (1) config.php, (2) prepare.php, (3) smarty.php, (4) customer/product.php, (5) provider/auth.php, a...

Unfixed XSS vulnerability at billgates.com

Security researcher x2Fusion, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting billgates.com, which at the time of submission ranked 743216 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currentl...

Unfixed XSS vulnerability at www.travelserver.net

Security researcher BackDoor, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting www.travelserver.net, which at the time of submission ranked 348130 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at ekart.logindream.com

Security researcher Narcoticxs, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting ekart.logindream.com, which at the time of submission ranked 994951 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed Redirect vulnerability at searchina.ne.jp

Security researcher Narcoticxs, has submitted on 17/09/2007 a Redirect vulnerability affecting searchina.ne.jp, which at the time of submission ranked 9436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixed. If...

Unfixed XSS vulnerability at hackbloc.org

Security researcher kusomiso.com, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting hackbloc.org, which at the time of submission ranked 655075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at zakka-zakka.net

Security researcher kusomiso.com, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting zakka-zakka.net, which at the time of submission ranked 774951 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Fixed XSS vulnerability at www.cs.chalmers.se

Security researcher Norehem, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting www.cs.chalmers.se, which at the time of submission ranked 30640 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at cccccccccccccccccccccccc.com

Security researcher kusomiso.com, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting cccccccccccccccccccccccc.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. ...

Unfixed XSS vulnerability at jp.caribbeancomgirl.com

Security researcher kusomiso.com, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting jp.caribbeancomgirl.com, which at the time of submission ranked 26783 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2007. I...