CVE-2007-5692

SiteBar 3.3.8 (and related releases) is affected by CVE-2007-5692 among several XSS issues. The vulnerabilities permit remote attackers to inject arbitrary scripts/HTML via multiple parameters (lang, token, nid_acl, uid, target) across integrator.php, New Password, Folder Properties, Modify User,...

CVE-2007-5693

SiteBar 3.3.8 contains an eval-injection vulnerability in the translation module (translator.php) that allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action (CVE-2007-5693). Evidence across multiple advisories (Debian DSA-1423-1, GLSA, and OSS...

CVE-2007-5696

CVE-2007-5696 describes a PHP remote file inclusion in includes.php of phpBasic that allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, potentially linked to the Music module. The CVSSv2 base score is 6.8 (NETWORK, MEDIUM, no authentication; partial impacts to ...

CVE-2007-5689

The Java Virtual Machine JVM in Sun Java Runtime Environment JRE in SDK and JRE 1.3.x through 1.3.120 and 1.4.x through 1.4.215, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via...

CVE-2007-5689

CVE-2007-5689 affects Sun JRE/JDK in multiple lines: JVM in JRE 1.3.x–1.4.x and JDK/JRE 5.x–6.x allows remote code execution or reading/modifying files via applets granted privileges. Connected docs indicate remediation via updated JRE/JDK packages (e.g., JVM/JRE updates to address these issues; ...

CVE-2007-5691

CVE-2007-5691 affects Mozilla Firefox 2.0.0.7, where ParseFTPList.cpp can be triggered by a crafted FTP server response to an unspecified listing command, leading to a denial of service via an application crash (reading from invalid pointer). The available connected documents corroborate Firefox ...

CVE-2007-5690

CVE-2007-5690 affects the Asterisk Zaptel component (zaptel 1.4.x). The vulnerability is a buffer overflow in sethdlc.c triggered by a long device name (ifr_name) and could allow local privilege escalation. OpenVAS/Nessus entries indicate affected Fedora packages updated to mitigate this issue (e...

CVE-2007-5688

CVE-2007-5688: Multiple SQL injection vulnerabilities in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3 for phpBB/IPB, in directory.php, allow remote attackers to execute arbitrary SQL via the (1) go and (2) cat parameters. Affected software is the Multi-Forums module version 1.3.3; roo...

[SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1388-3 [email protected] http://www.debian.org/security/ Noah Meyerhans October 29, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1388-3 [email protected] http://www.debian.org/security/ Noah Meyerhans October 29, 2007 http://www.debian.org/security/faq -...

Secunia Research: IBM Tivoli Storage Manager Client CAD Service Script Insertion

====================================================================== Secunia Research 29/10/2007 - IBM Tivoli Storage Manager Client CAD Service Script Insertion - ====================================================================== Table of Contents Affected...

SAXON version 5.4 SQL Injection Vulnerability

netVigilance Security Advisory 55 SAXON version 5.4 SQL Injection Vulnerability Description: SAXON is a simple accessible online news publishing system for personal and small corporate site owners. Publish news, using configurable templates, on any .php page on your site. Publish news on a 'per...

saxon-sql.txt

netVigilance Security Advisory 55 SAXON version 5.4 SQL Injection Vulnerability Description: SAXON is a simple accessible online news publishing system for personal and small corporate site owners. Publish news, using configurable templates, on any .php page on your site. Publish news on a 'per...

Unfixed XSS vulnerability at health.mytelus.com

Security researcher www.r3t.n3t.nl, has submitted on 29/10/2007 a cross-site-scripting XSS vulnerability affecting health.mytelus.com, which at the time of submission ranked 11981 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It i...

CVE-2007-5686

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging...

CVE-2007-5686

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging...

CVE-2007-5687

Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long 1 pard field or 2 font name in the fcharset0 field, which is not properly handled in a...

CVE-2007-3919

CVE-2007-3919 affects Xen 3.1 and earlier; the xenbaked and XenMon components allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm. This is a local-privilege issue that can enable data truncation. The MiracleLinux and OSV/OpenVAS/NASL entries corroborate Xen-related...

CVE-2007-5685

The CVE-2007-5685 issue affects the shttp project’s safe_path function, vulnerable before version 0.0.5. The function allows directory traversal when processing a sequence mixing ".." and sub-directories, resolving to a path at or below the web document root but located elsewhere in the tree. Thi...

CVE-2007-5686

CVE-2007-5686 affects initscripts on rPath Linux 1. It sets insecure permissions on /var/log/btmp, allowing local users to read sensitive information about authentication attempts. The advisory notes that sshd logging of failed remote authentication attempts may also be affected because SSHD dete...