CVE-2007-6040

The CVE-2007-6040 entry concerns the Belkin F5D7230-4 Wireless G Router: a remote denial-of-service via a flood of TCP SYN packets, degrading networking and logging. The provided materials do not specify affected firmware versions, exact root cause details, exploit codes, or mitigations. Connecte...

CVE-2007-6042

The CVE-2007-6042 entry concerns SWSoft Confixx Professional 3.2.1, where a PHP remote file inclusion vulnerability exists in fehler.inc.php. An attacker can cause arbitrary PHP code execution by supplying a URL in an unspecified parameter, enabling potential remote control of affected systems. T...

CVE-2007-6039

PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in 1 the domain parameter to the dgettext function, the message parameter to the 2 dcgettext or 3 gettext function, the msgid1 parameter to the 4 dngettext or 5 ngettext...

CVE-2007-6039

CVE-2007-6039 affects PHP 5.2.5 and earlier. The vulnerability stems from context-dependent handling in string parameters passed to dgettext, dcgettext/gettext, dngettext/ngettext, and the stream_wrapper_register classname, enabling a local attacker to trigger a denial of service (application cra...

CVE-2007-6043

CVE-2007-6043 concerns the CryptGenRandom generator on Windows 2000, which produces predictable values. The description states this can let context-dependent attackers weaken cryptographic mechanisms, demonstrated via attacks on forward and backward security related to the use of eight RC4 instan...

CVE-2007-5899

CVE-2007-5899 affects PHP before 5.2.5. The vulnerability in output_add_rewrite_var rewrites local forms when the ACTION attribute references a non-local URL, enabling a remote attacker to read requests for that URL and potentially expose the user’s session information (e.g., session IDs) via a r...

CVE-2007-5898

The 1 htmlentities and 2 htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465...

CVE-2007-5900

CVE-2007-5900 : PHP before 5.2.5 allows local users to bypass protection mechanisms configured via php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables. This is a local-privilege-related bypass (no remote exploitation described in the provid...

CVE-2007-5898

CVE-2007-5898 affects PHP up to versions before 5.2.5, where htmlentities() and htmlspecialchars() may accept partial multibyte sequences. The initial description notes unknown impact/attack vectors; connected sources confirm this CVE is listed among PHP-related issues and, in some advisories, th...

Immunity Canvas: JOOMLAJUSER_INCLUDE

Name| joomlajuserinclude ---|--- CVE| CVE-2007-6038 Exploit Pack| CANVAS Description| Joomla JUser Component Remote File Inclusion Notes| CVE Name: CVE-2007-6038 VENDOR: Joomla Repeatability: Infinite References: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6038 CVE Url:...

CVE-2007-6035

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

CVE-2007-6034

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6062. Reason: This candidate is a duplicate of CVE-2007-6062. Notes: All CVE users should reference CVE-2007-6062 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6035

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6062. Reason: This candidate is a duplicate of CVE-2007-6062. Notes: All CVE users should reference CVE-2007-6062 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6034

...

CVE-2007-6037

CVE-2007-6037 corresponds to a cross-site scripting (XSS) vulnerability in Citrix NetScaler 8.0 build 47.8, specifically affecting the web management interface via ws/generic_api_call.pl and the standalone parameter (and other unspecified params). OpenVAS entries describe the NetScaler Web Manage...

CVE-2007-6038

The CVE-2007-6038 issue affects Joomla! JUser component (com_juser) v1.0.14. A PHP remote file inclusion occurs in xajax_functions.php via mosConfig_absolute_path, allowing an attacker to execute arbitrary PHP code by supplying a crafted URL. Connected documents corroborate the RFI nature and cit...

CVE-2007-6034

CVE-2007-6034 is rejected/not used; it is a duplicate of CVE-2007-6062 and does not represent an active vulnerability.

CVE-2007-6036

The CVE-2007-6036 vulnerability affects LIVE555 Media Server up to version 2007.11.01, where parseRTSPRequestString mishandles short RTSP queries, allowing remote actors to trigger a daemon crash (DoS) by causing a negative value during memory allocation. Affected product: LIVE555 Media Server (p...

CVE-2007-6035

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...