Unfixed XSS vulnerability at www.afdream.com

Security researcher 0ssi3, has submitted on 11/02/2007 a cross-site-scripting XSS vulnerability affecting www.afdream.com, which at the time of submission ranked 205968 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is currently...

CVE-2007-5793

CVE-2007-5793 affects Stonesoft StoneGate IPS before 4.0, where the product fails to properly decode Fullwidth/Halfwidth Unicode encoded data. This vulnerability could allow remote attackers to scan or penetrate systems and avoid detection, per the NVD description. No explicit exploit details or ...

Immunity Canvas: GOMPLAYER

Name| gomplayer ---|--- CVE| CVE-2007-5779 Exploit Pack| CANVAS Description| GOMPlayer 2.1.6.3499 OpenURL Buffer Overflow Notes| CVE Name: CVE-2007-5779 VENDOR: Gomlab Repeatability: Infinite client side - no crash CVE Url: https://vulners.com/cve/CVE-2007-5779 Date public: 10/29/2007 CVSS: 7.5...

Immunity Canvas: SIGE_INCLUDE

Name| sigeinclude ---|--- CVE| CVE-2007-5781 Exploit Pack| CANVAS Description| SIGE remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: pfadmin CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5781 CVE Name: CVE-2007-5781...

CVE-2007-5791

The CVE-2007-5791 entry concerns the Vonage Motorola Phone Adapter VT 2142-VD failing to verify that SIP INVITE messages originate from a legitimate server, enabling remote attackers to spoof INVITEs. This can trigger a flood of messages causing a denial of service and may facilitate calls with m...

CVE-2007-5774

CVE-2007-5774 affects the File Manager module of Flatnuke 3. An error condition triggered by an invalid argumentname in a disc op action allows remote attackers to disclose the server path via an error message. The provided connected resources confirm the vulnerability description but do not spec...

CVE-2007-5775

A buffer overflow vulnerability exists in the BitDefender Online Scanner ActiveX control (OScan8.ocx / OScan81.ocx ). The flaw is caused by a double decoding issue when the InitX function fails to properly validate Unicode values passed as a domain key. An attacker can exploit this by tricking a ...

CVE-2007-5777

CVE-2007-5777 affects Blue-Collar Productions i-Gallery 3.4. The vendor’s application stores sensitive information under the web root with insufficient access control, permitting remote attackers to download a file (igallery.mdb) containing a base64-encoded password via a direct request. The NVD ...

CVE-2007-5773

CSRF in the File Manager module (index.php) of Flatnuke 3 allows remote attackers to perform administrative actions via forged requests that include the dir parameter (pathname) and the ffile parameter (filename). The vulnerability originates from the module’s index.php handling of these paramete...

CVE-2007-5771

CVE-2007-5771 affects Flatnuke 3 (aka FlatnuX). The issue allows remote attackers to obtain administrative access by manipulating a myforum%00 cookie. The description in multiple sources confirms remote exploitation without user interaction, enabling elevation of privileges to an admin level. No ...

CVE-2007-5781

CVE-2007-5781 is a PHP remote file inclusion vulnerability in inc/sige_init.php of Sige 0.1 that allows remote attackers to execute arbitrary PHP code via a URL in the SYS_PATH parameter. Affected component: sige_init.php (Sige 0.1). The vulnerability enables arbitrary code execution with network...

CVE-2007-5786

CVE-2007-5786 documents multiple PHP remote file inclusion (RFI) vulnerabilities in GoSamba 1.0.1. The affected component is GoSamba’s PHP code, where the include_path parameter can be controlled to influence file inclusion in a set of files located under include/ (and including: HTML_oben.php, i...

CVE-2007-5788

CVE-2007-5788 affects Grandstream HT-488 (firmware 0.1) with a buffer overflow in the SIP parser. A crafted SIP INVITE message can cause a remote denial of service (device crash). Connected records confirm the same vulnerability across multiple sources, but do not provide additional technical det...

CVE-2007-5789

The CVE-2007-5789 entry describes the Grandstream HT-488 0.1 as vulnerable to a denial-of-service via a flood of fragmented packets sent to UDP/TCP port 5060. The underlying fault is not elaborated in the provided materials beyond the consumer-facing impact (device crash) and remote exploitabilit...

CVE-2007-5785

CVE-2007-5785 describes an SQL injection in JobSite Professional 2.0, affecting the vulnerable component: file.php. The flaw allows remote attackers to execute arbitrary SQL commands via the id parameter, with a CVSS v2 base score of 7.5 (HIGH) and impacts to confidentiality, integrity, and avail...

CVE-2007-5772

CVE-2007-5772 describes a direct static code injection in the Flatnuke 3 download module. The vulnerability allows remote authenticated administrators to inject arbitrary PHP code into a file named description.it.php under a subdirectory of Download/ by saving a description and setting fneditmode...

CVE-2007-5779

Gretech Online Movie Player (GOM Player) version 2.1.6.3499 is vulnerable to a stack buffer overflow in the GomManager (GomWeb Control) ActiveX control located in GomWeb3.dll 1.0.0.12 . A remote attacker can exploit this by providing an overly long argument to the OpenUrl method, potentially lead...

CVE-2007-5776

The CVE-2007-5776 issue affects Blue-Collar Productions i-Gallery 3.4, where a directory traversal flaw in igallery.asp allows remote attackers to read arbitrary files by supplying encoded backslash sequences via the d parameter (example: %5c../../%5c). Multiple sources (NVD, CVE listings) confir...

CVE-2007-5787

CVE-2007-5787 affects Micro Login System 1.0. The vulnerability is due to insufficient access control that allows files containing passwords to be accessed from the web root. Specifically, an attacker can download a password file (userpwd.txt) by directly requesting it, enabling unauthorized disc...

CVE-2007-5782

CVE-2007-5782 affects FireConfig 0.5, where a vulnerability in the dl.php file parameter enables directory traversal via a .. (dot dot) path. The root cause is insufficient validation of the file parameter, allowing an attacker to read arbitrary server files. Documented impact is read access to f...