CVE-2007-5342

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...

CVE-2007-6528

Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbitrary files via a .. dot dot and modified filename in the movie parameter...

CVE-2007-6526

Cross-site scripting XSS vulnerability in tiki-specialchars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via the areaname parameter...

DSquare Exploit Pack: D2SEC_XUPLOAD

Name| d2secxupload ---|--- CVE| CVE-2007-6530 Exploit Pack| D2ExploitPack Description| Persits Software XUpload ActiveX Stack Overflow Notes|...

CVE-2007-6526

Cross-site scripting XSS vulnerability in tiki-specialchars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via the areaname parameter...

CVE-2007-4474

CVE-2007-4474 involves multiple stack-based buffer overflows in IBM Lotus Domino Web Access ActiveX controls (inotes6.dll, inotes6w.dll, dwa7.dll, dwa7w.dll) used by Domino 6.x/7.x. The root cause is a boundary/overflow vulnerability when handling a long General_ServerName property value in the U...

CVE-2007-6526

CVE-2007-6526 is an XSS vulnerability in TikiWiki before 1.9.9, caused by improper sanitization of the area_name parameter in tiki-special_chars.php. An attacker can inject arbitrary script/HTML via area_name, potentially affecting users’ sessions on the affected site. Public sources in the conne...

CVE-2007-6529

TikiWiki before 1.9.9 is affected by multiple vulnerabilities (CVE-2007-6526, CVE-2007-6528, CVE-2007-6529) involving tiki-edit_css.php, tiki-list_games.php, and tiki-g-admin_shared_source.php due to insufficient input sanitization. The Gentoo GLSA and OpenVAS entries describe a remote impact inc...

CVE-2007-6530

CVE-2007-6530 : Buffer overflow in Persits Software XUpload ActiveX control (AddFolder method) allows remote code execution via a long argument. Affected: XUpload 2.1.0.1 and likely earlier versions (pre-3.0). Products listed in description include HP Mercury LoadRunner and Groove Virtual Office....

CVE-2007-6525

CVE-2007-6525 affects IBM DB2 Content Manager (CM) Toolkit 8.3 for z/OS, specifically the eClient component. The vulnerability type is unspecified; impact and attack vectors are not detailed in the provided documents, which reference “scripting” but do not describe exploitability. The description...

CVE-2007-5342

CVE-2007-5342 affects Apache Tomcat versions 5.5.9–5.5.25 and 6.0.0–6.0.15 where the default catalina.policy for the JULI logging component fails to restrict permissions for web applications. The underly­ing issue is that untrusted web apps can modify logging configuration options and overwrite a...

CVE-2007-6527

CVE-2007-6527 affects PunBB’s Automatic Image Upload with Thumbnails (imgUpload) module 1.3.2. The issue arises because the upload handler only verifies the Content-Type of uploaded files, allowing remote attackers to upload and execute arbitrary content by crafting a file with a (1) JPG, (2) GIF...

[SECURITY] [DSA 1405-3] New zope-cmfplone packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 1st, 2007 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.zula.com

Security researcher tweetycoaster, has submitted on 27/12/2007 a cross-site-scripting XSS vulnerability affecting www.zula.com, which at the time of submission ranked 287435 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is...

SOL8186 - Cross-site scripting vulnerability in Apache mod_imap CVE-2007-5000

F5 Product Development has determined the likelihood of exploitation is low for the cross-site scripting XSS vulnerability disclosed in CVE-2007-5000. Exploiting this vulnerability would require an administrator of an F5 device to interact with a web page crafted by an attacker. Possible attacks...

Groove Virtual Office XUpload ActiveX控件缓冲区溢出漏洞

Groove Virtual Office是一款协同办公处理文档的应用程序。 Groove Virtual Office包含的XUpload ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 XUpload ActiveX控件对"AddFolder"方法缺少正确的边界错误，构建恶意的WEB页，诱使用户访问，可触发缓冲区溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 Groove Virtual Office 3.x Office Groove 2007不受此漏洞影响：...

[SECURITY] [DSA 1437-1] New cupsys packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1437-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 26, 2007 http://www.debian.org/security/faq -...

Apache Tomcat JULI日志组件默认安全策略漏洞

BUGTRAQ ID: 27006 CVECAN ID: CVE-2007-5342 Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Apache Tomcat的JULI日志组件允许Web应用提供自己的日志配置，默认的安全策略没有限制这种配置，允许不可信任的Web应用添加文件，或覆盖Tomcat进程拥有权限的已有文件。 Apache Group Tomcat 6.0.0 - 6.0.15 Apache Group Tomcat 5.5.9 - 5.5.25 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS...

Unfixed XSS vulnerability at www.ocala.com

Security researcher DerickTham, has submitted on 26/12/2007 a cross-site-scripting XSS vulnerability affecting www.ocala.com, which at the time of submission ranked 108368 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/02/2008. It is...