18426 matches found
CVE-2007-6145
Hitachi JP1/File Transmission Server/FTP (versions 01-00 to 08-10-01) contains an authentication bypass vulnerability that could allow remote attackers to view files in a directory. The issue is described across multiple sources (e.g., Hitachi JP1/FTP authentication bypass). The connected documen...
CVE-2007-6132
CVE-2007-6132 is rejected/not used and does not represent an active vulnerability entry.
CVE-2007-6142
The CVE affects ph03y3nk just another flat file (JAF) CMS 4.0 RC2. It describes reflected Cross‑Site Scripting via the index.php show parameter and the print.php print parameter, enabling injection of arbitrary web script/HTML. The root cause is input handling in these two parameters leading to s...
CVE-2007-6134
CVE-2007-6134 is an SQL injection vulnerability affecting PHPKIT 1.6.4pl1 where the contentid parameter in an article action to include.php (via pkinc/public/article.php) can allow remote attackers to execute arbitrary SQL. This is a separate vector from CVE-2006-1773. The connected sources confi...
CVE-2007-6138
CVE-2007-6138 affects VU Mass Mailer via the login flow: the redir.asp path is vulnerable to SQL injection in the password parameter to Default.asp (Login Page). The underlying cause is unsafely concatenated SQL in the login logic, enabling remote attackers to execute arbitrary SQL commands. Docu...
CVE-2007-6141
The CVE-2007-6141 entry documents a Cross-site scripting (XSS) vulnerability in vbTube.php of vBTube 1.1 Beta, where an attacker can inject arbitrary script/HTML via the search parameter. Affected component: vbTube.php in vBTube 1.1 Beta. Root cause: insufficient input sanitization on the search ...
CVE-2007-6146
Hitachi JP1/File Transmission Server/FTP (Windows) versions 01-00 through 08-10-02 may allow remote attackers to cause a denial of service (service stop) by supplying a crafted or certain file argument to an FTP command. The available sources describe the impact as a DoS but do not provide exploi...
[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1414-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...
PPStream 2.1.6.2916 PowerList.ocx SetBkImage Overwrite Exploit
No description provided by source. / PPStream PowerList.ocx 2.1.6.2916 描述: SetBkImage 堆和栈溢出, 还是以前的老问题。以前补的是PowerPlayer.dll中的 这里利用堆溢出和栈溢出，使用 CFindFile 对参数检查不严格，导致堆溢出。 在其析构时会导致异常，并且在析构之前发生了 strcat 导致栈溢出，覆盖掉 原来的 seh 处理程序 author: [email protected] 2007-11-11 / define CRTSECURENODEPRECATE include windows...
Unfixed XSS vulnerability at toendacms.com
Security researcher Hanno Boeck, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting toendacms.com, which at the time of submission ranked 979455 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...
Unfixed XSS vulnerability at www.roostertypes.com
Security researcher Genocide, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.roostertypes.com, which at the time of submission ranked 2340229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...
Unfixed XSS vulnerability at www.selfdefenseproducts.com
Security researcher Skunkfoot, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.selfdefenseproducts.com, which at the time of submission ranked 249843 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007...
Unfixed XSS vulnerability at www.black-ms.de
Security researcher BackDoor, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.black-ms.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...
Unfixed XSS vulnerability at www.gypsyrose.com
Security researcher sleaz, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.gypsyrose.com, which at the time of submission ranked 879473 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is current...
phpMyAdmin DB_Create.PHP多个输入验证漏洞
BUGTRAQ ID: 26512 CVE ID:CVE-2007-5976 CVE-2007-5977 CNCVE ID:CNCVE-20075977 phpMyAdmin是一款基于WEB的MySQL管理程序。 phpMyAdmin DBCreate.PHP存在多个输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是由于DBCreate.PHP对参数缺少充分过滤，提交恶意脚本代码作为参数数据，并诱使用户解析，可导致恶意脚本代码在目标用户浏览器上执行。 RedHat Fedora 7 0 phpMyAdmin phpMyAdmin 2.11.1 phpMyAdmi...
Unfixed XSS vulnerability at www.darkmonasteria.de
Security researcher BackDoor, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.darkmonasteria.de, which at the time of submission ranked 4359526 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...
pam security, bug fix, and enhancement update
0.77-66.23 - pamcracklib should count the last char when computing difference 267201 0.77-66.22 - add pamtally2 module 228044 - unset XAUTHORITY when appropriate 228980 - CVE-2007-1716 always decrement use count 230823 - reset priority only when specified in limits.conf 232407 - CVE-2007-3102...
Mozilla Foundation Security Advisory 2007-39
Mozilla Foundation Security Advisory 2007-39 Title: Referer-spoofing via window.location race condition Impact: High Announced: November 26, 2007 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.10 SeaMonkey 1.1.7 Description Gregory Fleischer demonstrated that it...
httpd security, bug fix, and enhancement update
2.0.52-38.ent.0.1 - use oracle index page oracleindex.html - updated string and distro in specfile 2.0.52-38.ent - fix server version string 236419 2.0.52-37.ent - add security fix for CVE-2007-3847 250760 2.0.52-36.ent - add modversion, load in default httpd.conf 248696 2.0.52-35.ent - add...