CVE-2007-5797

SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database...

Immunity Canvas: WPBACKUP_INCLUDE

Name| wpbackupinclude ---|--- CVE| CVE-2007-5800 Exploit Pack| CANVAS Description| WordPress plugin BackUpWordPress = 0.4.2b Remote File Inclusion Notes| CVE Name: CVE-2007-5800 VENDOR: WordPress Repeatability: Infinite References:...

CVE-2007-5801

Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...

Unfixed XSS vulnerability at www.trustnet.co.uk

Security researcher MaXWeL, has submitted on 11/03/2007 a cross-site-scripting XSS vulnerability affecting www.trustnet.co.uk, which at the time of submission ranked 74686 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is...

CVE-2007-5797

SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database...

CVE-2007-5796

The CVE-2007-5796 entry describes an XSS flaw in the Blue Coat ProxySG management console, exploitable by modifying the URL used to load Certificate Revocation Lists. Affected versions are ProxySG < 4.2.6.1 and 5.x

CVE-2007-5800

The CVE-2007-5800 entry describes multiple PHP remote file inclusion flaws in the WordPress BackUpWordPress plugin (versions

Unfixed XSS vulnerability at www.wwillie.com

Security researcher cyberthiief, has submitted on 11/03/2007 a cross-site-scripting XSS vulnerability affecting www.wwillie.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is currentl...

CVE-2007-5799

CVE-2007-5799 involves multiple cross-site request forgery (CSRF) flaws in the uddigui/navigateTree.do component of IBM WebSphere Application Server’s UDDI user console. The issue allows unauthenticated or remote attackers to perform actions on behalf of UDDI users via the keyField, nameField, va...

CVE-2007-5798

IBM WebSphere Application Server 6.1.x before Fix Pack 13 (6.1.0.13) is affected by multiple XSS vulnerabilities in uddigui/navigateTree.do of the UDDI user console. The issue allows remote attackers to inject arbitrary web script or HTML via the keyField, nameField, valueField, and frameReturn p...

Unfixed XSS vulnerability at www.izfas.com.tr

Security researcher MaXWeL, has submitted on 11/03/2007 a cross-site-scripting XSS vulnerability affecting www.izfas.com.tr, which at the time of submission ranked 606674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is current...

CVE-2007-5797

Apache Geronimo 2.0–2.1 is affected by CVE-2007-5797 due to a SQLLoginModule/LoginModule path that does not throw an exception for a nonexistent username. This results in remote authentication bypass, permitting a login attempt with any username not in the database to succeed. The concrete descri...

CVE-2007-5767

CVE-2007-5767 concerns a heap-based buffer overflow in Novell BorderManager 3.8’s Client Trust (clntrust.exe) that listens on UDP 3024. During a validation request, copying of the Novell tree name does not stop at a wide-character backslash or NULL, allowing overflow of a static buffer via wsprin...

CVE-2007-5795

The CVE-2007-5795 issue affects Emacs 22 prior to 22.2 where the hack-local-variables handling, when enable-local-variables is set to :safe, fails to properly search unsafe variable lists. This can allow a user-assisted attacker to modify critical program variables via a Local variables declarati...

CVE-2007-5197

Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods...

CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

CVE-2007-5660

CVE-2007-5660 affects Macrovision InstallShield Update Service ActiveX (Isusweb.dll). The connected sources describe a stack/remote buffer overflow in Isusweb.dll (Isusweb.dll 6.0.100.54472) exploited by passing an overly long ProductCode string to the DownloadAndExecute method, enabling arbitrar...

CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

CVE-2007-4829

The CVE-2007-4829 entry concerns a directory-traversal flaw in the Archive::Tar Perl module (versions

CVE-2007-5197

This CVE (CVE-2007-5197) affects Mono up to version 1.2.5.1, where a buffer overflow in Mono.Math.BigInteger (Reduce in Montgomery-based Pow methods) can allow context-dependent attackers to execute arbitrary code. The OpenVAS/Mandriva, Fedora, Ubuntu advisories indicate patches were released for...