CVE-2007-6369

Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow remote attackers to read arbitrary files via a .. dot dot in the 1 size or 2 path parameter...

CVE-2007-6367

CVE-2007-6367 describes multiple XSS vulnerabilities in SineCMS 2.3.4 and earlier in the guestbook, exploitable via the username (user) or commento fields. The description specifies different vectors from CVE-2007-2357 but does not provide concrete root-cause code or affected subcomponents beyond...

CVE-2007-6362

Summary: CVE-2007-6362 is a SQL injection in the RSGallery component (com_rsgallery) for Mambo/Joomla! up to 2.0 beta5. Vulnerable component: index.php handling inline page actions. Root cause: SQL commands are injectable via the catid parameter. Impact: Remote attackers could potentially execute...

CVE-2007-6249

CVE-2007-6249 concerns Portage (Gentoo) = 2.1.3.11 (or apply equivalent patches) to mitigate the risk. If upgrading is not immediately possible, be aware that the description and related GLSAs/Nessus entries consistently describe an information-disclosure impact due to insecure temporary files du...

CVE-2007-6366

CVE-2007-6366 affects SineCMS 2.3.4 and earlier . Multiple SQL injection flaws allow remote attackers to execute arbitrary SQL via: (1) the id parameter to mods/Calendar/index.php (Calendar info action), (2) the id parameter to admin/mods_adm.php for a Guestbook modification action, (3) the id pa...

CVE-2007-6377

This CVE describes a stack-based buffer overflow in the PassThru functionality of ext.dll in BadBlue 2.72b and earlier. The root cause is a overflow triggered by a long query string, allowing remote attackers to execute arbitrary code. Public exploit references exist (e.g., Metasploit module BadB...

CVE-2007-6359

CVE-2007-6359 affects the Apple XNU kernel (bsd/kern/ubc_subr.c) in Mac OS X 10.5.1 and earlier. A local user can trigger a null pointer dereference in the kernel’s handling of code signatures in cs_validate_page, allowing a crafted signed Mach-O binary to cause a denial of service (failed assert...

CVE-2007-6369

The CVE-2007-6369 entry concerns the WordPress PictPress plugin (versions up to 0.91). The vulnerability is a directory traversal in resize.php, where the attack succeeds by providing a dot-dot in the size or path parameter, allowing an attacker to read arbitrary server files. Impacts are file di...

CVE-2007-6378

CVE-2007-6378 is a directory-traversal vulnerability in BadBlue 2.72b and earlier, affecting the upload.dll component. An attacker can supply a filename with ".." to create or overwrite arbitrary files remotely. The provided documents specify only the vulnerability description and do not include ...

CVE-2007-4707

CVE-2007-4707 concerns Apple QuickTime before 7.3.1, where the Flash media handler contains multiple vulnerabilities that can be exploited by a crafted QuickTime movie to remotely execute arbitrary code. Affected product: QuickTime (Windows and Mac OS X) prior to 7.3.1; vulnerability class is des...

CVE-2007-6367

Multiple cross-site scripting XSS vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username user or 2 comment commento field, different vectors than CVE-2007-2357...

CVE-2007-6364

Cross-site scripting XSS vulnerability in modificarPerfil.php in JLMForo System allows remote authenticated users to inject arbitrary web script or HTML via a signature...

CVE-2007-6364

CVE-2007-6364 describes a cross-site scripting (XSS) vulnerability in the modificarPerfil.php component of the JLMForo System. The issue allows remote authenticated users to inject arbitrary web script or HTML via a signature field. According to the CVE entry, the affected product is JLMForo Syst...

CVE-2007-4706

Apple QuickTime prior to version 7.3.1 is affected by a heap-based buffer overflow in the QTL file parsing that can allow a remote attacker to execute arbitrary code. This vulnerability affects QuickTime on multiple platforms referenced in CVE-2007-4706, with an impact described as potential remo...

CVE-2007-6375

CVE-2007-6375 affects Bitweaver 2.0.0 and earlier. The vulnerability comprises multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via (1) the sort_mode parameter to wiki/list_pages.php and (2) the highlight parameter to search/index.php. A report also menti...

CVE-2007-6380

CVE-2007-6380 describes multiple SQL injection vulnerabilities in e-Xoops (exoops) versions 1.08 and 1.05 Rev 1–3. The flaws allow remote attackers to execute arbitrary SQL commands via the parameter lid targeting various scripts under modules/ (mylinks/ratelink.php, adresses/ratefile.php, mydown...

Unfixed XSS vulnerability at www.chicosonline.com

Security researcher TreX, has submitted on 15/12/2007 a cross-site-scripting XSS vulnerability affecting www.chicosonline.com, which at the time of submission ranked 131321 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...

CVE-2007-6350

scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including 1 unison, 2 rsync, 3 svn, and 4 svnserve, as originally demonstrated by creating a Subversion SVN repository with malicious hooks, then using svn ...

CVE-2007-6350

CVE-2007-6350 affects scponly 4.6 and earlier, where remote authenticated users could bypass restrictions and execute code by abusing certain subcommands (unison, rsync, svn, svnserve) via a malicious SVN repository and hooks to trigger execution. Public references show Fedora advisories (2008-17...