[SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 11th, 2007 http://www.debian.org/security/faq -...

XSS vulnerabilities

PMASA-2007-7 Announcement-ID: PMASA-2007-7 Date: 2007-11-11 Summary XSS vulnerabilities Description We received an advisory from Omer Singer, The DigiTrust Group, and we wish to thank him for his work. It was possible to create a malicious database name that contains XSS code. Our team fixed...

CVE-2007-5932

CVE-2007-5932 describes multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0, allowing remote attackers to inject arbitrary script or HTML via unspecified fields related to the search function and advanced search function (and possibly other components). Th...

CVE-2007-5931

The CVE-2007-5931 entry concerns OrangeHRM prior to 2.2.2, where the reDirect function in lib/controllers/RepViewController.php does not verify user privileges. This root cause allows remote attackers to obtain data via unspecified vectors. The NVD record assigns a MEDIUM severity (CVSSv2: AV:N/A...

CVE-2007-5930

CVE-2007-5930 is a Cross-site scripting (XSS) vulnerability in the Cerberus FTP Server web interface before version 2.46. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, impact is partial integrity with no confidentiality or avai...

DSquare Exploit Pack: D2SEC_LOTUS_MIF

Name| d2seclotusmif ---|--- CVE| CVE-2007-5909 Exploit Pack| D2ExploitPack Description| IBM Lotus Notes Client MIF Stack Overflow Notes|...

CVE-2007-5911

Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the 1 BroadcastKey, 2 BroadcastKeyFileURL, 3 Component, 4 ComponentClassID, 5...

CVE-2007-5915

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the whattodo parameter...

CVE-2007-5920

index.php in Domenico Mancini PicoFlat CMS before 0.4.18 allows remote attackers to include certain files via unspecified vectors, possibly due to a directory traversal vulnerability. NOTE: this can be leveraged to bypass authentication and upload files by including picoinsert.php or unspecified...

CVE-2007-5927

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

CVE-2007-5913

dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attackers to 1 delete auth.inc.php via the suppr parameter, and 2 re-create the auth.inc.php file with contents that specify a new account name and password for JBC Explorer via the...

CVE-2007-5914

Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows remote authenticated administrators to inject arbitrary PHP code via the DEBUG parameter, which can be executed by accessing config.inc.php. NOTE: this can be exploited by...

Information disclosure

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information hostnames, usernames, and shell history to a fixed address...

Directory traversal

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

Code injection

Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows remote authenticated administrators to inject arbitrary PHP code via the DEBUG parameter, which can be executed by accessing config.inc.php. NOTE: this can be exploited by...

CVE-2007-5923

The CVE-2007-5923 entry describes a Cross-site scripting (XSS) vulnerability in CA eTrust SiteMinder components, specifically in forms/smpwservices.fcc, exposed via the SMAUTHREASON parameter. The vulnerability affects the SiteMinder Agent/web components and could allow an attacker to inject arbi...

CVE-2007-5919

The CVE-2007-5919 entry concerns MyWebFTP (likely version 5.3.2) where sensitive data is stored under the web root with weak access controls, enabling remote retrieval of an MD5 password hash by directly requesting pass/pass.txt. This vulnerability is described across multiple sources (NVD, CVE l...

CVE-2007-5910

CVE-2007-5910 is a stack-based buffer overflow in Autonomy/Verity KeyView Viewer, Filter, and Export SDK prior to 9.2.0.12, exploited via crafted WordPerfect (WPD) attachments. It impacts Lotus Notes (wp6sr.dll) and other products (ActivePDF DocConverter, etc.), enabling remote code execution. Mi...

CVE-2007-5913

CVE-2007-5913 concerns dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier, where authentication is not required and remote attackers can (1) delete auth.inc.php via the suppr parameter and (2) re-create auth.inc.php to establish a new account/password using login and password parameters...

CVE-2007-5914

CVE-2007-5914 | Affects JBC Explorer 7.20 RC1 and earlier. Vulnerability in dirsys/modules/config/post.php allows direct static code injection if the DEBUG parameter is manipulated, enabling arbitrary PHP code execution via config.inc.php. The issue is tied to an upstream condition where an authe...