CVE-2007-6239

CVE-2007-6239 affects Squid 2.x up to 2.6.STABLE17 and Squid 3.0. A flaw in cache update reply processing can cause denial of service by exhausting memory (array/memory leak) during requests for cached objects, via remote attackers. The issue is triggered by HTTP header handling and related array...

CVE-2007-6238

Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via unknown attack vectors, probably a different vulnerability than CVE-2007-6166. NOTE: this information is based upon a vague advisory by a vulnerability information sales organizati...

CVE-2007-6225

CVE-2007-6225 affects Sun Solaris 10 on x86 in 64-bit mode with a Linux lx branded zone, enabling local users to trigger a denial of service (panic) via unspecified vectors. Documents confirm the affected environment but do not provide a fix or remediation details. Related entries (e.g., CVE-2009...

CVE-2007-6234

CVE-2007-6234 : The vulnerability in FTP Admin 0.1.0 allows remote attackers to bypass authentication and gain administrative access by supplying a loggedin=true parameter, demonstrated by adding a user account. The issue affects the login/authentication check in index.php and has a high impact (...

CVE-2007-6236

The vulnerability CVE-2007-6236 affects Microsoft Windows Media Player. Description: WMP can be remotely triggered by processing a specially crafted AIFF file (kr.aiff) to cause an application crash via a divide-by-zero error. Impact is a remote denial of service on affected WMP instances. No spe...

CVE-2007-6237

cp.php in DeluxeBB 1.09 fails to verify that the membercookie matches the authenticated member during profile updates, enabling remote authenticated users to change e-mails for arbitrary accounts via a modified membercookie parameter (a different vector than CVE-2006-4078). This can be leveraged ...

CVE-2007-6222

The CheckCustomerAccess function in functions.php in CRM-CTT Interleave before 4.2.0 formerly CRM-CTT does not properly verify user privileges, which allows remote authenticated users with the LIMITTOCUSTOMERS privilege to bypass intended access restrictions and edit non-active user settings. NOT...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 level parameter to a installmodule.php and b uninstallmodule.php in upload/xax/admin/modules/, c upload/xax/admin/patch/index.php, and d...

CVE-2007-6220

typespeed before 0.6.4 allows remote attackers to cause a denial of service application crash via unspecified network behavior that triggers a divide-by-zero error...

CVE-2007-6218

Summary (CVE-2007-6218) : The provided documents describe multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1. The flaws allow remote attackers to execute arbitrary PHP code by supplying a URL to various parameters in the application, notably the level parameter to install...

CVE-2007-6220

CVE-2007-6220 affects the typespeed project prior to 0.6.4. The vulnerability allows remote attackers to cause an application crash (denial of service) through unspecified network behavior that triggers a divide-by-zero error. The provided documents consistently describe the flaw and its impact b...

CVE-2007-6222

The vulnerability CVE-2007-6222 affects CRM-CTT Interleave prior to 4.2.0 (formerly CRM-CTT). The CheckCustomerAccess function in functions.php does not properly verify user privileges, allowing remote authenticated users with the LIMITTOCUSTOMERS privilege to bypass access restrictions and edit ...

CVE-2007-6219

The CVE-2007-6219 entry concerns IBM Tivoli Netcool Security Manager 1.3.0 and describes a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the affected product/version and the XSS...

CVE-2007-6223

CVE-2007-6223 describes an SQL injection in garage.php of phpBB Garage 1.2.0 Beta3. The vulnerability allows remote attackers to manipulate the database by injecting SQL through the make_id parameter in a browse-mode search action, potentially impacting data confidentiality, integrity, and availa...

CVE-2007-6221

The vulnerability CVE-2007-6221 affects TuMusika Evolution 1.7R5. A direct request to phpinfo.php calls phpinfo, enabling remote attackers to disclose configuration information. No remediation details are provided in the connected documents. The exact root cause is exposure of PHP configuration d...

CVE-2007-6212

Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the layer parameter...

CVE-2007-6212

Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the layer parameter...

CVE-2007-6212

CVE-2007-6212: Directory traversal in region.php of KML share 1.1 lets remote attackers read arbitrary server files by passing ".." in the layer parameter. Affected: KML share 1.1 (region.php). Root cause: improper validation leading to directory traversal. Impact: partial confidentiality breach ...

CVE-2007-6217

CVE-2007-6217 describes multiple SQL injection vulnerabilities in login.asp of Irola My-Time (Timesheet) 3.5. The flaws allow remote attackers to execute arbitrary SQL commands via the login (Username) and password parameters. The provided documents do not specify affected versions beyond 3.5, no...

CVE-2007-6214

CVE-2007-6214 relates to a directory traversal vulnerability in LearnLoop 2.0 beta7. The flaw is in the include/file_download.php component, where an attacker can supply a".." sequence via the sFilePath parameter to read arbitrary files on the server. The vulnerability’s impact is described as re...