CVE-2007-6396

CVE-2007-6396 is a direct static code injection vulnerability in index.php of Flat PHP Board 1.2 and earlier. It allows remote attackers to inject arbitrary PHP code through the (1) username, (2) password, and (3) email parameters when registering a user account, with code execution possible via ...

CVE-2007-6397

CVE-2007-6397 affects Flat PHP Board 1.2 and earlier. The vulnerability arises from directory traversal in index.php, enabling remote attackers to (1) create arbitrary files via .. in the username during user registration, and (2) read arbitrary PHP files via .. in (a) the topic parameter for a t...

CVE-2007-6399

CVE-2007-6399 affects Flat PHP Board 1.2 and earlier. The vulnerability allows remote authenticated users to obtain the current user’s password by reading the password parameter value in the HTML source of the page generated by a profile action. The underlying cause is exposure of the password pa...

CVE-2007-6402

CVE-2007-6402 is a stack-based buffer overflow affecting Media Player Classic (MPC) up to version 6.4.9 when used with the 3ivx 4.5.1 or 5.0.1 codec. The flaw resides in the mplayerc.exe component and enables a remote attacker to execute arbitrary code via a crafted .mp4 file. Related entry: CVE-...

CVE-2007-6404

Affected software: Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows. The vulnerability is a directory traversal in the URI (..) that enables remote attackers to read arbitrary files. The underlying issue is improper normalization of path traversal in shttpd’s request handling. Impa...

CVE-2007-6406

CVE-2007-6406 describes multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console. The flaws let remote attackers inject arbitrary web script or HTML through the IP Address field and other unspecified inputs, potentially enabling scr...

CVE-2007-6409

The CVE-2007-6409 entry concerns the gg protocol handler in Gadu-Gadu. When installed but not running, it does not properly handle the skin attribute, allowing remote attackers to cause a denial of service through unspecified network traffic, resulting in resource consumption. The vulnerability a...

CVE-2007-6391

The CVE-2007-6391 entry concerns an SQL injection in SH-News 3.0, specifically in patch/comments.php where the id parameter is vulnerable. Multiple connected documents confirm this: remote attackers can inject arbitrary SQL commands via id, indicating a server-side query construction flaw in SH-N...

CVE-2007-6401

CVE-2007-6401/6402 describe a stack-based buffer overflow in Media Player Classic components (mplayer2.exe/mplayerc.exe) when used with the 3ivx MPEG-4 codec (versions 4.5.1/5.0.1). The vulnerability allows remote arbitrary code execution via crafted MP4 files; affected product version cited in p...

CVE-2007-6411

CVE-2007-6411 affects the GG Client (Gadu-Gadu) 7.7 Build 3669. The vulnerability arises from multiple buffer overflows in the HandleEmotsConfig function, enabling a user-assisted remote attacker to execute arbitrary code or cause a denial of service (gg.exe process crash) via a long string in an...

CVE-2007-6408

IBM Tivoli Provisioning Manager Express is affected by a vulnerability where error messages disclose information during username duplication or login with a valid username, enabling remote attackers to enumerate usernames. The connected documents do not provide concrete exploit details or a remed...

CVE-2007-6407

CVE-2007-6407 covers multiple XSS flaws in IBM Tivoli Provisioning Manager Express. Remote attackers can inject arbitrary script/HTML via the /tpmx URI by manipulating fields such as the (1) “assess modification” and (2) user-id, plus other unspecified vectors related to “error processing.” The N...

CVE-2007-6405

CVE-2007-6405 affects Sergey Lyubka’s Simple HTTPD (shttpd) 1.38 and earlier on Windows. The issue allows remote attackers to obtain or download arbitrary CGI programs/scripts by sending a URI with special trailing characters: a plus sign (+), a dot (.), %2e (hex-encoded dot), or a hex-encoded ch...

CVE-2007-6412

Direct static code injection vulnerability in Bitweaver wiki/index.php (versions 2.0.0 and earlier) when comments are enabled. Remote attackers can inject arbitrary PHP code via the editcomments action. Evidence from multiple sources confirms the affected component, condition, and exact impact; n...

CVE-2007-6410

CVE-2007-6410 affects Gadu-Gadu where improper protocol handling enables cross-site request forgery (CSRF) via an unspecified crafted link, allowing an attacker to add arbitrary user accounts or cause a denial of service for administrators. The provided documents reiterate CSRF risk tied to the g...

CVE-2007-6403

CVE-2007-6403 involves a stack-based buffer overflow in Nullsoft Winamp 5.32 related to its handling of crafted Unicode in MP4 files, with the issue exploitable when the target opens a crafted MP4 contained in a .rar archive. The vulnerability enables user-assisted remote code execution on the af...

CVE-2007-6394

Content Injector 1.53 is affected by a SQL injection in index.php via the id parameter in the expand action. The vulnerability allows remote attackers to execute arbitrary SQL commands and could lead to data compromise or corruption. The entry is supported by multiple sources (NVD/NVD entry) and ...

CVE-2007-6390

Cross-site request forgery CSRF vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting XSS attacks on the blog page...

CVE-2007-6401

Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player WMP 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402...

CVE-2007-6392

CVE-2007-6392 is an SQL injection vulnerability in DWdirectory 2.1 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI. The connected documents confirm affected software (DWdirectory 2.1 and earlier) and the underlying cause ...