CVE-2007-5570

CVE-2007-5570 concerns Cisco Firewall Services Module (FWSM) versions 3.2(1), and 3.1(5) and earlier. The vulnerability allows remote attackers to cause a denial-of-service (device reload) by sending a crafted HTTPS request (aka CSCsi77844). The available connected documents confirm the affected ...

CVE-2007-5574

CVE-2007-5574 affects PHPDJ 0.5. A vulnerability in the djpage.php script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter (remote file inclusion). CVSS base score 6.8 (Medium) per NVD; exploitation details beyond a reference exist in linked sources, but no re...

CVE-2007-5566

CVE-2007-5566 concerns PHPBlog 0.1 Alpha with multiple PHP remote file inclusion vulnerabilities: a URL in the blog_localpath parameter to includes/functions.php or includes/email.php can allow remote code execution. The CVE note explicitly says the issue is disputed because the code is in functi...

CVE-2007-5576

BEA Tuxedo 8.0 prior to RP392 and 8.1 prior to RP293, and WebLogic Enterprise 5.1 prior to RP174, disclose passwords in cleartext via local commands (cnsbind, cnsunbind, cnsls), enabling physically proximate attackers to obtain sensitive information. Affected components: password handling in the ...

CVE-2007-5569

Cisco PIX/ASA appliances running 7.1–7.2 are affected by a denial-of-service that can cause a device reload when processing MGCP or TLS traffic. The issue manifests when handling crafted packets to the appliance, with the root cause described as a flaw in processing certain MGCP/TLS data sequence...

CVE-2007-5572

The provided records identify CVE-2007-5572 as CSRF vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9. The affected component is the blog’s admin-facing functionality, where remote attackers could trigger delete actions by supplying (1) block_id to add_block.php or (2) link_id to add_link.php. ...

CVE-2007-5573

CVE-2007-5573 affects LimeSurvey versions 1.5.2 and earlier, where a PHP remote file inclusion vulnerability exists in classes/core/language.php . The rootdir parameter can be supplied via the URL to remotely execute arbitrary PHP code, representing a remote code execution via an RFI flaw. The pr...

CVE-2007-5577

CVE-2007-5577 affects Joomla! (pre-1.0.13, aka Sunglow). The vulnerability allows remote XSS via the Section Manager’s Title/Section Name fields and multiple fields in New Menu Item, enabling injection of arbitrary script/HTML. Affected component/versions are stated; impact is client-side script ...

CVE-2007-5575

The CVE-2007-5575 entry concerns CSRF in 1024 CMS 1.2.5 that lets remote attackers perform administrator actions. The available details illustrate two examples: an action that creates a file containing PHP code and an action involving the forum component. The documents do not provide concrete exp...

CVE-2007-5568

Cisco PIX/ASA appliances running 7.0–8.0 and Cisco FWSM 3.1(5) and earlier are affected by CVE-2007-5568, where remote attackers can cause a denial of service (device reload) through crafted MGCP packets. The root cause is improper handling of MGCP traffic (and related TLS/traffic handling per PT...

CVE-2007-5565

The software phpSCMS version 0.0.1-Alpha1 is affected by a PHP remote file inclusion vulnerability in the includes/functions.php file. The root cause allows remote attackers to execute arbitrary PHP code by providing a URL via the dir parameter. It is noted that the identified code is located in ...

CVE-2007-5567

CVE-2007-5567 describes a PHP remote file inclusion vulnerability in _lib/fckeditor/upload_config.php in Galmeta Post 0.11, allowing remote code execution via a URL in the DDS parameter. Affected: Galmeta Post 0.11; vulnerability caused by RFI in upload_config.php. Exploitation and remediation de...

CVE-2007-5548

Multiple stack-based buffer overflows in Command EXEC in Cisco IOS allow local users to gain privileges via unspecified vectors, aka 1 PSIRT-0474975756 and 2 PSIRT-0388256465. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is fr...

CVE-2007-5561

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...

CVE-2007-5553

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-4158. Reason: This candidate is a duplicate of CVE-2007-4158. It was based on a vague pre-advisory, so the duplicate was not detected until more details were provided. Notes: All CVE users should reference CVE-2007-4158 inste...

Code injection

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-4158. Reason: This candidate is a duplicate of CVE-2007-4158. It was based on a vague pre-advisory, so the duplicate was not detected until more details were provided. Notes: All CVE users should reference CVE-2007-4158 inste...

CVE-2007-5551

Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, i...

Format string

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...

CVE-2007-5548

Cisco IOS Multiple Vulnerabilities (CVE-2007-5548) involve multiple stack-based buffer overflows in the Command EXEC facility that allow a local user to gain privileges. The underlying cause and vectors are not specified in the report, and the disclosure originated from a vague pre-advisory. The ...

CVE-2007-5558

CVE-2007-5558 is an integer overflow vulnerability affecting the LG Mobile handset. The description states that remote attackers can cause a denial-of-service reboot via a crafted HTTP packet. The entry notes that disclosure as of 2007-10-16 was vague and pre-advisory, but the CVE was assigned fo...