CVE-2007-2217

CVE-2007-2217 affects Kodak Image Viewer in Windows 2000 SP4 and, in some cases, XP SP2 and Server 2003 SP1/SP2. The issue is a memory-corruption/buffer overflow in TIFF handling that allows remote code execution when a user opens a specially crafted TIFF image. Microsoft issued MS07-055 with the...

CVE-2007-3899

A memory corruption vulnerability exists in Microsoft Word 2000 SP3 , Word 2002 SP3 , and Office 2004 for Mac . The flaw is triggered when a user is tricked into opening a specially crafted Word file containing a malformed string or a bug in the font parsing handler . Successful exploitation allo...

CVE-2007-3892

CVE-2007-3892 corresponds to an address bar spoofing vulnerability in Internet Explorer (IE 5.01–7). The issue allows spoofing of the Trust UI (address bar) after navigating from attacker-controlled content, with the content remaining that of the attacker’s page. Microsoft issued MS07-057 (Cumula...

CVE-2007-3893

CVE-2007-3893 involves a remote code execution vulnerability in Internet Explorer 5.01–7 caused by memory corruption from an unhandled error during certain operations. Exploitation requires a user to view a crafted Web page, with remote attackers potentially gaining the same privileges as the log...

CVE-2007-3897

CVE-2007-3897 corresponds to a heap-based buffer overflow in the NNTP handling of Microsoft Outlook Express (versions up to 6) and Windows Mail (Vista). The vulnerability arises when processing NNTP replies that return more data than requested, allowing attacker-controlled data to overflow the al...

CVE-2007-5321

CVE-2007-5321 affects Verlihub Control Panel (VHCP) versions 1.7 and earlier, where index.php is vulnerable to a directory traversal via the page parameter (..), allowing remote inclusion of arbitrary files. Root cause is improper sanitization of the page parameter, enabling directory traversal. ...

CVE-2007-5322

CVE-2007-5322 affects Microsoft Visual FoxPro 6.0 via the FPOLE.OCX 6.0.8450.0 ActiveX control. The vulnerability is an insecure method flaw that lets remote attackers run arbitrary programs by passing a command to the FoxDoCmd function. Public references indicate exploit availability (e.g., Expl...

CVE-2007-5314

PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PEARPATH parameter...

CVE-2007-5311

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter...

Immunity Canvas: LIVEALBUM_INCLUDE

Name| livealbuminclude ---|--- CVE| CVE-2007-5315 Exploit Pack| CANVAS Description| LiveAlbum remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: LiveAlbum CVE Url: https://vulners.com/cve/CVE-2007-5315 CVE Name: CVE-2007-5315...

CVE-2007-5317

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5292. Reason: This candidate is a duplicate of CVE-2007-5292. Notes: All CVE users should reference CVE-2007-5292 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5292. Reason: This candidate is a duplicate of CVE-2007-5292. Notes: All CVE users should reference CVE-2007-5292 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-5317

...

CVE-2007-5311

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter...

CVE-2007-5312

Cross-site scripting XSS vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the 1 color parameter to pjirc/css.php and the 2 cat parameter to browse.php...

CVE-2007-5315

PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the livealbumdir parameter...

CVE-2007-5314

PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PEARPATH parameter...

CVE-2007-5317

CVE-2007-5317 is rejected/not used; refer to CVE-2007-5292 instead.

CVE-2007-5315

LiveAlbum 0.9.0 is affected by a PHP remote file inclusion via the common.php handling when register_globals is enabled. Attackers can supply a URL to livealbum_dir to run arbitrary PHP code on the affected system. The vulnerability is documented in multiple sources (CVE-2007-5315) and is associa...

CVE-2007-5316

CVE-2007-5316 : SQL injection in browsecats.php of the Softbiz Jobs and Recruitment Script allows remote attackers to execute arbitrary SQL via the cid parameter. The vulnerability is evidenced by multiple sources (NVD/NIST entry and related references) describing an injection path in browsecats....