CVE-2007-0450

CVE-2007-0450 is a directory traversal vulnerability affecting Apache Tomcat (and Tomcat behind certain Apache proxies) where a crafted URI containing a dot-dot sequence and mixed separators (/, , and %5C) can cause unauthorized disclosure of arbitrary files. Affected products/versions include To...

CVE-2007-1420

MySQL 5.x before 5.0.36 allows local users to cause a denial of service database crash by performing informationschema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort...

Code injection

Unspecified vulnerability in the Nodefamily module for Drupal 5.x before 5.x-1.0 allows remote authenticated users to access and modify other users' profiles via unspecified URL parameters...

Design/Logic Flaw

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service stack exhaustion and PHP crash via deeply nested arrays, which trigger deep recursion in the variable destruction routines...

CVE-2007-1285

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service stack exhaustion and PHP crash via deeply nested arrays, which trigger deep recursion in the variable destruction routines...

Drupal < 5.1 (post comments) Remote Command Execution Exploit v2

No description provided by source. !/usr/bin/perl $Id: milw0rmdrupalv5.pl,v 0.2 2007/02/15 13:40:29 str0ke Exp $ milw0rmdrupalv5.pl - Drupal 5.1 Remote Command Execution Exploit Copyright c 2007 str0ke str0ke!milw0rm.com Description ----------- Previews on comments were not passed through normal...

[DRUPAL-SA-2007-005] Drupal 4.7.6 / 5.1 fixes arbitrary code execution issue

---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2007-005 ---------------------------------------------------------------------------- Project: Drupal core Version: 4.7.x, 5.x Date: 2007-Jan-29 Security risk: Highy critical Exploitabl...

CVE-2007-0349

Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. dot dot in the gateway parameter...

Directory traversal

Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. dot dot in the gateway parameter...

CVE-2007-0349

Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. dot dot in the gateway parameter...

CVE-2007-0349

CVE-2007-0349 affects nicecoder.com INDEXU 5.x via upgrade.php. The gateway parameter allows directory traversal (..), enabling remote attackers to include arbitrary local files. This is documented across NVD and CVE records as a directory traversal vulnerability in upgrade.php, with the impact l...

Ovidentia 5.6x Series Remote File İnclude

!--- Product : Ovidentia 5.6.x - Website : http://ovidentia.org - Author : H0tTurk-WebSiteVersion:1.x - Problem : Remote File-- includeonce $babInstallPath."utilit/mailincl.php";includeonce $babInstallPath."utilit/afincl.php"; includeonce $babInstallPath."utilit/topincl.php"; includeonce...

CVE-2006-7232

sqlselect.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service crash via an EXPLAIN SELECT FROM on the INFORMATIONSCHEMA table, as originally demonstrated using ORDER BY...

[SA22099] IBM AIX rdist Privlege Escalation Vulnerability

TITLE: IBM AIX rdist Privlege Escalation Vulnerability SECUNIA ADVISORY ID: SA22099 VERIFY ADVISORY: http://secunia.com/advisories/22099/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A vulnerability...

[SA22105] IBM AIX uucp Privilege Escalation Vulnerability

TITLE: IBM AIX uucp Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA22105 VERIFY ADVISORY: http://secunia.com/advisories/22105/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A vulnerability...

[SA22112] IBM AIX "cfgmgr" Privilege Escalation Vulnerability

TITLE: IBM AIX "cfgmgr" Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA22112 VERIFY ADVISORY: http://secunia.com/advisories/22112/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: Two...

[SA22119] IBM AIX "utape" Privilege Escalation Vulnerability

TITLE: IBM AIX "utape" Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA22119 VERIFY ADVISORY: http://secunia.com/advisories/22119/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: Two...

[SA22108] IBM AIX snappd Privilege Escalation Vulnerability

TITLE: IBM AIX snappd Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA22108 VERIFY ADVISORY: http://secunia.com/advisories/22108/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A vulnerabili...

IBM Lotus Notes DUNZIP32.dll Buffer Overflow Vulnerability

Networksecurity.fi Security Advisory 06-09-2006 Title: IBM Lotus Notes DUNZIP32.dll buffer overflow vulnerability Criticality: High 3/3 Affected software: IBM Lotus Notes versions 6.5.4, 5.0.10 and prior Author: Juha-Matti Laurio juha-matti.laurio at netti.fi Date: 6th September, 2006 Advisory ID...

[SA21535] Dolphin "dir[inc]" File Inclusion Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...