CVE-2007-6105

TalkBack 2.2.7 is affected by multiple PHP remote file inclusion vulnerabilities. The flaws allow remote attackers to execute arbitrary PHP code via a URL parameter in (1) language_file for comments-display-tpl.php and addons/separate-comments-mod/my-comments-display-tpl.php, and (2) config[comme...

CVE-2007-6100

CVE-2007-6100 is a cross-site scripting (XSS) vulnerability in phpMyAdmin prior to 2.11.2.2. The flaw occurs in libraries/auth/cookie.auth.lib.php where, when logins use cookie auth_type, an attacker can inject script via the convcharset parameter to index.php. The issue affects phpMyAdmin versio...

CVE-2007-6113

Integer signedness error in the DNP3 dissector in Wireshark formerly Ethereal 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service long loop via a malformed DNP3 packet...

CVE-2007-6115

CVE-2007-6115 describes a buffer overflow in Wireshark’s ANSI MAP dissector affecting 0.99.5–0.99.6 on unspecified platforms. This flaw can be triggered by malformed input packets, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. Public advisories ref...

CVE-2007-6112

Wireshark 0.99.6 is affected by CVE-2007-6112 (buffer overflow in the PPP dissector) that could be triggered remotely to crash the application and potentially execute arbitrary code. Public advisories (e.g., RHSA-2008:0058, CESA-2008:0058, and related NASL summaries) indicate fixes in subsequent ...

CVE-2007-6104

Cross-site scripting XSS vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8, and Developer 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-6106

SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action...

CVE-2007-6111

Summary: CVE-2007-6111 pertains to multiple vulnerabilities in Wireshark (Eth­er­eal) with remote DoS possibilities. Related connected advisories indicate several CVEs (e.g., 2007-6111, 2007-6112, 2007-6113, 2007-6114, 2007-6115, 2007-6116, 2007-6117, 2007-6118, 2007-6119, 2007-6120, 2007-6121, 2...

CVE-2007-6101

CVE-2007-6101 affects Ability Mail Server up to version 2.61 (i.e., before 2.61). The vulnerability arises in two areas: (1) IMAP commands with malformed number list ranges and (2) messages containing a blank string. Both issues can be exploited by remote authenticated users to cause a denial of ...

CVE-2007-6121

Wireshark (formerly Ethereal) versions 0.8.16 through 0.99.6 are affected by CVE-2007-6121 due to a malformed RPC Portmap packet that could crash the process (denial of service). Severity is shown as MEDIUM with network vector and no authentication required in the CVE entry; the impact is a crash...

CVE-2007-6113

CVE-2007-6113 is a vulnerability in Wireshark's DNP3 dissector where an integer signedness error in the 0.10.12–0.99.6 range can cause a denial of service (long loop) by processing a malformed DNP3 packet. Connected advisories confirm the issue was fixed by upgrading to Wireshark 0.99.7 (and late...

CVE-2007-6119

CVE-2007-6119:Wireshark (formerly Ethereal) before 0.99.7 is affected; the DCP ETSI dissector in 0.99.6 can cause denial of service (long loop/resource consumption) via unknown vectors. Public advisories (RHSA/CESA/MDA etc.) indicate upgrading to Wireshark 0.99.7 or later mitigates the issue. Oth...

CVE-2007-6116

CVE-2007-6116 : The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 is susceptible to remote denial of service (infinite loop or crash) via unknown vectors. The provided documents do not specify the exact exploit vectors or a remediation version. Monitor for official fixes an...

CVE-2007-6106

AlstraSoft E-Friends up to version 4.98 and earlier is affected by an SQL injection in index.php via the seid parameter in the viewevent action, allowing remote attackers to execute arbitrary SQL commands. The connected documents provide the affected product/version and the vulnerable parameter, ...

CVE-2007-6118

Wireshark’s MEGACO dissector (CVE-2007-6118) is vulnerable to resource exhaustion through crafted network packets, causing a long loop and denial of service. Reports across multiple advisories indicate the MEGACO dissector could loop or consume excessive resources when parsing certain input. The ...

CVE-2007-6117

Wireshark (formerly Ethereal) HTTP dissector vulnerability CVE-2007-6117 affects Wireshark versions 0.10.14 through 0.99.6. The issue allows remote attackers to crash the dissector and potentially execute arbitrary code via crafted chunked messages. Connected advisories confirm affected product i...

CVE-2007-6103

CVE-2007-6103 affects I Hear U (IHU) 0.5.6 and earlier. The vulnerability allows remote attackers to cause denial of service: (1) an infinite loop by sending a packet with zero in the size field, handled by Receiver::processPacket; and (2) a daemon crash by IHU_INFO_INIT or IHU_INFO_RING packets ...

VigileCMS <= 1.8 Stealth Remote Command Execution Exploit

No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/10/2007...

Unfixed XSS vulnerability at www.der-dirigent.de

Security researcher bate, has submitted on 23/11/2007 a cross-site-scripting XSS vulnerability affecting www.der-dirigent.de, which at the time of submission ranked 384238 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Important: openldap security and enhancement update

2.3.27-8.1 - fix security issue CVE-2007-5707 360001 - fix manual bind timeout 368231 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://oss.oracle.com/pipermail/el-errata/attachments/20071123/279499e3/attachment-0001.html...