CVE-2007-5237

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."...

CVE-2007-5240

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner...

CVE-2007-5240

CVE-2007-5240: Visual truncation vulnerability in Sun JDK/JRE (Java Runtime Environment) affecting JRE/JDK 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, SDK/JRE 1.4.2_15 and earlier, and SDK/JRE 1.3.1_20 and earlier. An attacker could bypass the display of the untrusted-code warning ...

CVE-2007-5239

The CVE-2007-5239 issue affects Sun Java Web Start / JRE components. Affected products include JDK/JRE 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, J2SE 1.4.2_15 and earlier, and J2SE 1.3.1_20 and earlier. The root cause is that Java Web Start/applets do not properly enforce access ...

CVE-2007-5238

CVE-2007-5238 affects Sun JDK/JRE: Java Web Start in Sun JDK/JRE 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, and SDK/JRE 1.4.2_15 and earlier. The vulnerability does not properly enforce access restrictions for untrusted applications, allowing a user‑assisted remote attacker to obt...

CVE-2007-5236: Undefined Security Weakness

Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.215 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application...

CVE-2007-5237: Undefined Security Weakness

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read and modify local files via an untrusted application, aka "two vulnerabilities."...

CVE-2007-5240: Undefined Security Weakness

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner...

CVE-2007-5237

CVE-2007-5237 affects Sun Java Web Start in JDK/JRE 6 Update 2 and earlier. The issue arises from insufficient access restriction enforcement for untrusted applications, enabling user-assisted remote attackers to read and modify local files via an untrusted application. In the provided documents,...

CVE-2007-5236

CVE-2007-5236 affects Sun Java Web Start/JRE/JDK on Windows. The issue is improper enforcement of access restrictions for untrusted applications, enabling a user‑assisted remote attacker to read local files via an untrusted application. Affected products include Sun JDK/JRE 5.0 Update 12 and earl...

CVE-2007-5238

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.215 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information the Java Web...

CVE-2007-5239: Undefined Security Weakness

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier does not properly enforce access restrictions for untrusted 1 applications and 2 applets, which allows user-assisted remote attacke...

CVE-2007-5238: Undefined Security Weakness

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.215 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information the Java Web...

CVE-2007-5232

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound...

CVE-2007-5232

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound...

PHP Webquest 2.5 - 'id_actividad' SQL Injection

/ script name : phpwebquest script version : 2.5 script website : http://phpwebquest.org Bug Finder : D4realTeaM 'unkn0wnX','n3t-mapper','ToxiC350'; injected file : webquest/soportederechaw.php Variable : idactividad Contact : n3t-mapp3r At hotmail dot com,is14m At hotmail dot com,ushermehdi350 A...

PHP Webquest 2.5 - id_actividad SQL Injection

PHP Webquest 2.5 - idactividad SQL Injection / script name : phpwebquest script version : 2.5 script website : http://phpwebquest.org Bug Finder : D4realTeaM 'unkn0wnX','n3t-mapper','ToxiC350'; injected file : webquest/soportederechaw.php Variable : idactividad Contact : n3t-mapp3r At hotmail dot...

Sun JavaDoc工具跨站脚本漏洞

BUGTRAQ ID: 24690 CVECAN ID: CVE-2007-3503 Solaris系统的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 Javadoc工具处理用户请求数据时存在跨站脚本执行漏洞，远程攻击者可能利用此漏洞在用户浏览器中执行恶意代码。 Javadoc工具可以生成包含有跨站脚本（XSS）漏洞的HTML文档页面，远程攻击者可以利用这个漏洞注入任意Web脚本或HTML。如果用户受骗访问了该页面的话，就可能从承载所生成文档的站点访问cookies。 Sun JDK = 5.0 Update 11 Sun JDK 6 BEA Systems...

Sun Java运行时环境字体解析Applet权限提升漏洞

Sun的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 JRE字体解析代码的实现上存在漏洞，可能导致非授权的Applet以提升后的权限执行操作。 JRE字体解析代码中的漏洞可能允许不可信任的applet提升权限，例如，Applet可能给予其本身读写本地文件的权限，或者运行了不可信任Applet用户可以执行所能访问到的本地应用程序。 Sun JDK = 5.0 Update 9 Sun JRE = 5.0 Update 9 Sun JRE = 1.4.214 Sun SDK = 1.4.214...

Design/Logic Flaw

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...