CVE-2007-6552

Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/adminusers.php to bypass a protection...

CVE-2007-6561

Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDFloadimage function that results in an overflow in the pdcfsearchfopen function, and possibly other vectors...

Unfixed XSS vulnerability at allspeed.com.tw

Security researcher tweetycoaster, has submitted on 28/12/2007 a cross-site-scripting XSS vulnerability affecting allspeed.com.tw, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is...

CVE-2007-6551

SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6555

PHP remote file inclusion vulnerability in modules/modpxtlatest.php in the mosDirectory comdirectory 2.3.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...

CVE-2007-6545

CVE-2007-6545 concerns RunCMS pre-1.6.1, with multiple XSS vectors: (1) subject parameter in modules/news/submit.php, (2) PATH_INFO to modules/news/index.php (potentially related to XoopsPageNav), and (3) an avatar image to edituser.php. The connected documents do not provide exploitation details...

CVE-2007-6548

CVE-2007-6548 affects RunCMS up to version 1.6.1 and involves multiple direct static code injection vulnerabilities. Remote authenticated administrators can inject arbitrary PHP code via specific parameters in admin interfaces: header/footer (modules/system/admin.php), disclaimer (modules/system/...

CVE-2007-6549

Technical details (affected products, components, versions, impact, or fix) are not publicly available in the provided documents; monitor for updates.

CVE-2007-6551

The CVE-2007-6551 entry describes an SQL injection in showMsg.php affecting MailMachine Pro 2.2.4 and earlier versions up to 2.2.5 (before 2.2.6). The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter. The provided references confirm the flaw and general...

CVE-2007-6552

AuraCMS 2.2 contains a directory traversal vulnerability in index.php: remote authenticated users can include and execute arbitrary local files by supplying a .. (dot dot) in the act parameter, potentially involving the news pilih component. The example given is including admin/admin_users.php to...

CVE-2007-6553

The CVE-2007-6553 entries describe multiple PHP remote file inclusion vulnerabilities in TeamCal Pro (versions up to 3.1.000 and earlier) that allow remote attackers to execute arbitrary PHP code by supplying a URL in the CONF[app_root] parameter to various includes/modules (e.g., tcuser.class.ph...

CVE-2007-6554

CVE-2007-6554 affects TeamCal Pro 3.1.000 and earlier. A directory traversal flaw allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the lang parameter to index.php, register.php, login.php, or statistics.php. The vulnerability is rooted in imprope...

CVE-2007-6563

WinAce (by e-merge GmbH) is vulnerable to a heap-based buffer overflow in 2.65 and earlier (and possibly other versions before 2.69). A specially crafted long filename in a compressed UUE archive can cause a user-assisted remote attacker to execute arbitrary code with the user’s privileges. The J...

CVE-2007-6564

CVE-2007-6564 is a cross-site scripting (XSS) vulnerability in Limbo CMS 1.0.4.2, occurring in admin.php and exploitable via the com_option parameter. The affected component is the admin.php handler; the underlying cause is an input handling vulnerability that allows injection of arbitrary web sc...

Trend Micro ServerProtect RPCFN_CMON_SetSvcImpersonateUser buffer overflow

Added: 12/28/2007 CVE: CVE-2007-4218 BID: 25395 OSVDB: 39752 Background Trend Micro ServerProtect is a virus scanner for servers. Problem A buffer overflow in the ServerProtect service allows remote attackers to execute arbitrary commands by sending a specially crafted RPC request which is...

[Full-disclosure] [SECURITY] [DSA 1440-1] New inotify-tools packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1440-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28, 2007 http://www.debian.org/security/faq -...

CVE-2007-6562

TCPreen is affected prior to version 1.4.4. The vulnerability arises from multiple stack-based overflows in FD_SET handling that enable remote denial of service through many concurrent connections. Reported vulnerable components include SocketAddress::Connect (libsolve/sockprot.cpp) and monitor_b...

CVE-2007-6561

PDFlib contains multiple stack-based buffer overflows that can be triggered by a long filename argument to PDF_load_image, causing an overflow in pdc_fsearch_fopen and possibly other vectors. Impact is remote code execution under the privileges of the vulnerable application. The issue is document...

CVE-2007-6544

CVE-2007-6544 affects RunCMS

CVE-2007-6550

PMOS Help Desk 2.4 and earlier is affected by CVE-2007-6550. form.php redirects without exiting, enabling remote attackers to perform eval injection and execute arbitrary PHP code via the options array parameter. Affected component: PMOS Help Desk’s PHP form handling. Root cause: missing exit aft...