CVE-2007-3675

Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control kavwebscan.dll in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer...

Immunity Canvas: JOOMLAMP3_INCLUDE

Name| joomlamp3include ---|--- CVE| CVE-2007-5412 Exploit Pack| CANVAS Description| Joomla commp3allopass Component Remote File Inclusion Notes| CVE Name: CVE-2007-5412 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/2881 CVE Url:...

Immunity Canvas: JOOMLAJCS_INCLUDE

Name| joomlajcsinclude ---|--- CVE| CVE-2007-5407 Exploit Pack| CANVAS Description| Joomla jContentSubscription Component Remote File Inclusion Notes| CVE Name: CVE-2007-5407 VENDOR: Joomla Repeatability: Infinite References: http://www.milw0rm.com/exploits/4489 CVE Url:...

CVE-2007-5411

CVE-2007-5411 affects Linksys SPA941 VoIP Phone firmware 5.1.8. The vulnerability is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via the From header in a SIP message. The provided documents identify the affected device and the attack vect...

CVE-2007-5410

CVE-2007-5410 affects the Joomla! component com_wmtrssreader (admin.wmtrssreader.php) in the webmaster-tips.net Flash RSS Reader 1.0. The vulnerability is a PHP remote file inclusion that allows an attacker to supply a URL via mosConfig_live_site to cause remote code execution. The connected docu...

CVE-2007-5412

Concrete details found: CVE-2007-5412 affects Joomla! with the com_mp3_allopass 1.0 component. Vulnerable vector is a remote PHP file inclusion via the mosConfig_live_site parameter in (1) allopass.php and (2) allopass-error.php, enabling arbitrary code execution. References indicate public explo...

CVE-2007-5407

CVE-2007-5407 affects Joomla! with the JContentSubscription (com_jcs) 1.5.8 component. The vulnerability is a PHP Remote File Inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL via the mosConfig_absolute_path parameter to multiple component files under view/ and vi...

CVE-2007-5409

NuSEO PHP Enterprise 1.6 (NuSEO.PHP) is affected by CVE-2007-5409. The vulnerability is a PHP remote file inclusion in admin/nuseo_admin_d.php when register_globals is enabled. An attacker can supply a URL via the nuseo_dir parameter to execute arbitrary PHP code on the affected system. The conne...

CVE-2007-5386

Cross-site scripting XSS vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject arbitrary web script or HTML via the query string...

Immunity Canvas: WEBDESKTOP_INCLUDE

Name| webdesktopinclude ---|--- CVE| CVE-2007-5388 Exploit Pack| CANVAS Description| webDesktop remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: webDesktop CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5388 CVE Name: CVE-2007-5388...

CVE-2007-5386

CVE-2007-5386 : XSS in phpMyAdmin 2.11.1’s scripts/setup.php when a browser does not URL-encode requests, allowing remote injection of arbitrary script/HTML via the query string. OpenVAS entries (Fedora/Debian updates) confirm a publicly known vulnerability and list CVSS base 4.3 (I:P), with nota...

CVE-2007-5387

CVE-2007-5387 affects Pindorama 0.1. A PHP remote file inclusion vulnerability exists in active/components/xmlrpc/client.php where an attacker can inject a URL via c[components] to execute arbitrary PHP code. The NVD entry lists a base score of 6.8 (MEDIUM) with network access, partial confidenti...

CVE-2007-5388

CVE-2007-5388 affects WebDesktop 0.1 and describes PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by passing a URL to the app parameter (apps/apps.php) or the wsk parameter (wsk/wsk.php). The underlying cause is a remote file inclusion flaw in these...

CVE-2007-5391

Technical details for CVE-2007-5391 are not publicly available in the provided documents; monitor for updates.

CVE-2007-5389

The CVE-2007-5389 entry concerns the Joomla! swMenuFree (com_swmenufree) version 4.6 component, where a PHP remote file inclusion vulnerability exists in preview.php. The underlying issue allows an attacker to execute arbitrary PHP code by supplying a URL in the mosConfig_absolute_path parameter....

CVE-2007-5382

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine WLSE 4.1.91.0 and earlier to Cisco Wireless Control System WCS creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges...

CVE-2007-5383

The CVE-2007-5383 entry concerns Thomson/Alcatel SpeedTouch 7G routers (as used with BT Home Hub 6.2.6.B and earlier). The vulnerability allows remote attackers on an intranet to bypass authentication and gain administrative access by manipulating the PATH_INFO end character (notably a trailing s...

CVE-2007-5384

CVE-2007-5384 involves CSRF flaws in the Thomson/Alcatel SpeedTouch 7G router (used by BT Home Hub 6.2.6.B and earlier). The vulnerabilities allow remote attackers to perform administrator actions via unspecified POST requests, demonstrated by enabling an inbound remote‑assistance HTTPS session o...

CVE-2007-5381

Cisco IOS Line Printer Daemon (LPD) suffers a stack-based buffer overflow when processing a hostname longer than normal, enabling arbitrary code execution if an attacker connects to 515/tcp and triggers the error message (telnet session). Affected are IOS releases including 12.2(18)SXF11, 12.4(16...

CVE-2007-5378

CVE-2007-5378 affects Tk Toolkit GIF handling. A buffer overflow in Tk's animated GIF processing occurs when an initial subimage is smaller than subsequent subimages, triggering the overflow in ReadImage (tkImgGIF.c). Affected: Tk 8.4.12 and earlier, and 8.3.5 and earlier. Consequence: denial of ...