CVE-2007-5200

hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...

CVE-2007-5456

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...

CVE-2007-5195

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...

CVE-2007-5451

PHP remote file inclusion vulnerability in admin.color.php in the comcolorlab aka comcolor 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2007-5455

The CVE-2007-5455 entry describes a Cross-site Scripting (XSS) vulnerability in the wxis.exe component of WWWISIS 7.1 and earlier . The issue allows remote attackers to inject arbitrary script or HTML via the IsisScript code path (iah/iah.xis), potentially involving the lang or exprSearch paramet...

CVE-2007-5442

CVE-2007-5442 affects CMS Made Simple 1.1.3.1. The vulnerability is that the system does not check the permissions of users attempting uploads, allowing remote authenticated users to upload unspecified files via unknown vectors. The public description does not specify affected files, exploit meth...

CVE-2007-5200

hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...

CVE-2007-5196

CVE-2007-5196 affects SUSE Linux Enterprise Desktop 10 via the GroupWise client (novell-groupwise-client). The vulnerability lies in the SSL implementation and can allow remote attackers to obtain credentials through a man-in-the-middle attack. The issue is addressed by a SUSE security update (ZY...

CVE-2007-5200

CVE-2007-5200 affects hugin on multiple distros (e.g., openSUSE, Fedora, Gentoo). It enables a local user to overwrite arbitrary files via an insecurely created hugin_debug_optim_results.txt, through a symlink attack. Documented impacts: local access with possible file overwrite of privileges; no...

CVE-2007-5445

CVE-2007-5445 refers to a buffer overflow in the DB Software Laboratory’s VImpX ActiveX control (VImpX.ocx 4.7.3). The vulnerability allows remote execution of arbitrary code via a long RejectedRecordsFile parameter, representing a different vector from CVE-2007-2667. This description comes from ...

CVE-2007-5444

CMS Made Simple 1.1.3.1 is vulnerable to a path-disclosure issue: remote attackers can obtain the server’s full path by directly requesting unspecified files. This is a remote, unauthenticated weakness with partial confidentiality impact. No explicit fix/version is stated in the provided document...

CVE-2007-5456

CVE-2007-5456 describes a vulnerability in Microsoft Internet Explorer 7 and earlier where an attacker can bypass the File Download - Security Warning dialog and cause a download of arbitrary files by appending a '?' and a non-.exe filename after the .exe filename. The connected advisories and NV...

CVE-2007-5453

CVE-2007-5453 concerns Php-Stats 0.1.9.2, which contains multiple eval-injection vulnerabilities. The issue allows remote authenticated administrators to execute arbitrary code by injecting PHP sequences into the php-stats-options record in the _options table, which is subsequently evaluated via ...

CVE-2007-5447

CVE-2007-5447 affects ionCube Loader 6.5 for PHP 5.2.4. The ioncube_loader_win_5.2.dll does not enforce safe_mode or disable_functions, enabling context-dependent attackers to read arbitrary files via ioncube_read_file. This vulnerability is documented in the NVD entry for CVE-2007-5447 and is ec...

CVE-2007-5195

This CVE refers to an unspecified vulnerability in the SSL implementation of the GroupWise client (novell-groupwise-client) for SUSE Linux Enterprise Desktop 10 that allows remote attackers to obtain credentials via a man-in-the-middle attack (CVE-2007-5195 and related CVE-2007-5196). The connect...

CVE-2007-5451

PHP remote file inclusion vulnerability in admin.color.php in the comcolorlab aka comcolor 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2007-5451

CVE-2007-5451 concerns the Joomla! com_colorlab (aka com_color) 1.0 component. The issue is a PHP remote file inclusion vulnerability in admin.color.php exploitable via a URL in the mosConfig_live_site parameter, allowing an attacker to execute arbitrary PHP code on the server. The affected compo...

CVE-2007-5454

The CVE-2007-5454 entry describes a directory traversal in index.php of PHP File Sharing System 1.5.1, allowing remote attackers to list/create arbitrary directories or delete files by using a "cam" parameter with "..". Affected component: index.php in PHP File Sharing System 1.5.1. Root cause: i...

CVE-2007-5443

CVE-2007-5443 describes multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1. The description specifies remote attackers can inject arbitrary script or HTML via vectors related to (1) the anchor tag and (2) listtags, but the exact technical vectors are not detailed in th...

CVE-2007-5448

CVE-2007-5448 affects MadWifi 0.9.3.2 and earlier. A remote attacker can trigger a denial of service (kernel panic) by sending a beacon frame with a large length value in the extended supported rates (xrates) element, exploiting code in net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta...