18426 matches found
CVE-2007-6550
PMOS Help Desk 2.4 and earlier is affected by CVE-2007-6550. form.php redirects without exiting, enabling remote attackers to perform eval injection and execute arbitrary PHP code via the options array parameter. Affected component: PMOS Help Desk’s PHP form handling. Root cause: missing exit aft...
CVE-2007-6546
CVE-2007-6546 affects RunCMS prior to 1.6.1. The issue is a predictable session ID that enables remote attackers to hijack a user session by modifying the session identifier. The available data states the vulnerability could allow such session hijacking, with a base severity of medium (CVSSv2 6.4...
CVE-2007-6543
The CVE-2007-6543 issue affects the eSyndiCat Link Exchange Script, specifically the suggest-link.php file. The underlying vulnerability is a SQL injection via the id parameter, enabling remote attackers to execute arbitrary SQL commands. This is evidenced by the description in the CVE records, i...
CVE-2007-6547
CVE-2007-6547 affects RunCMS prior to 1.6.1. The issue arises because the password-change flow does not require the entry of the old password, enabling a context-dependent attacker with temporary session access to change the password. The CVSSv2 base score listed is 6.8 (Medium) with network atta...
Unfixed XSS vulnerability at www.reason-gaming.net
Security researcher DerickTham, has submitted on 28/12/2007 a cross-site-scripting XSS vulnerability affecting www.reason-gaming.net, which at the time of submission ranked 710451 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It i...
CVE-2007-6557
CVE-2007-6557 affects MeGaCheatZ 1.1 and describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via the ItemID parameter in comments.php, view.php, and siteadmin/ViewItem.php (and other vectors). The cited metrics indicate a HIGH severity (CVSS v2 ba...
Trend Micro ServerProtect RPCFN_CMON_SetSvcImpersonateUser buffer overflow
Added: 12/28/2007 CVE: CVE-2007-4218 BID: 25395 OSVDB: 39752 Background Trend Micro ServerProtect is a virus scanner for servers. Problem A buffer overflow in the ServerProtect service allows remote attackers to execute arbitrary commands by sending a specially crafted RPC request which is...
CVE-2007-6533
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message...
CVE-2007-6538
SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6538
The CVE-2007-6538 entry describes a SQL injection in the MRBS plugin for Moodle, affecting the file ing/blocks/mrbs/code/web/view_entry.php. The underlying issue is an injectable id parameter that allows remote attackers to execute arbitrary SQL commands. This can compromise data integrity and po...
CVE-2007-6533
CVE-2007-6533 affects Zoom Player 6.00 beta 2 and earlier. A buffer overflow occurs in Unicode handling when processing a crafted ZPL file that references an HTTP-linked PLS file, allowing user-assisted remote code execution via an error-message generation path. The vulnerability status is based ...
CVE-2007-6534
CVE-2007-6534 involves multiple unspecified vulnerabilities in Microsoft Office Publisher that allow a user‑assisted remote attacker to cause an application crash by processing a crafted PUB file, potentially involving WordArt. Affected product: Microsoft Office Publisher. Vulnerable functionalit...
CVE-2007-6540
CVE-2007-6540: A SQL injection in neuron news 1.0 is triggered by the q parameter to the default URI in patch/. The vulnerability enables remote execution of arbitrary SQL commands. Root cause: improper handling of user input in the affected patch/ endpoint (no details on code path provided). Imp...
CVE-2007-6541
CVE-2007-6541 describes multiple cross-site scripting (XSS) vulnerabilities in the web application neuron news 1.0 . The flaw allows remote attackers to inject arbitrary web script or HTML via 1) the topic parameter in a viewtopic action, or 2) the newsyear or 3) the newsmonth parameter in a news...
CVE-2007-6537
CVE-2007-6537 affects WinUAE 1.4.4 and earlier. A stack-based buffer overflow in the zfile_gunzip function (zfile.c) can be triggered by a long filename inside a gzipped archive (gz/adz/roz/hdz) embedded in a compressed floppy disk image, permitting user-assisted remote code execution. The vulner...
CVE-2007-6542
CVE-2007-6542 affects Arcadem LE 2.04 and earlier. The vulnerability is a PHP remote file inclusion in admin/frontpage_right.php, allowing an attacker to execute arbitrary PHP code via the loadadminpage parameter. The NVD description and related records confirm the issue as a remote code executio...
CVE-2007-6536
The CVE-2007-6536 issue affects Google Toolbar 4 and 5 beta where the Custom Button Installer dialog may display domain names in the “Downloaded from” and “Privacy considerations” fields without validating them. The root cause is lack of domain verification, enabling remote attackers to spoof dom...
CVE-2007-6539
The CVE-2007-6539 entry concerns a PHP local file inclusion in the IDevspot iSupport 1.8 product. The vulnerability arises from index.php’s include_file parameter, enabling remote attackers to include local files. Documented impact is partial confidentiality, integrity, and availability, with a C...
CVE-2007-6535
CVE-2007-6535 describes a buffer overflow in Yahoo! Toolbar’s YShortcut ActiveX control (YShortcut.dll 2006.8.15.1). The overflow is triggered by a long string passed to the IsTaggedBM method, potentially allowing arbitrary code execution. Sources consistently identify this as a Yahoo! Toolbar Ac...
