Path traversal

Absolute path traversal vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to read arbitrary files via an absolute path in the dir parameter, a different vulnerability than CVE-2007-5491...

CVE-2007-5693

Eval injection vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action, a different vulnerability than CVE-2007-5492...

CVE-2007-5693

Eval injection vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action, a different vulnerability than CVE-2007-5492...

CVE-2007-5694

Absolute path traversal vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to read arbitrary files via an absolute path in the dir parameter, a different vulnerability than CVE-2007-5491...

CVE-2007-5693

SiteBar 3.3.8 contains an eval-injection vulnerability in the translation module (translator.php) that allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action (CVE-2007-5693). Evidence across multiple advisories (Debian DSA-1423-1, GLSA, and OSS...

CVE-2007-5693

Eval injection vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action, a different vulnerability than CVE-2007-5492...

NDSA20071016.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nth Dimension Security Advisory NDSA20071016 Date: 16th October 2007 Author: Tim Brown URL: / Product: SiteBar 3.3.8 Vendor: Ondřej Brablc, David Szego and SiteBar Team Risk: High Summary This advisory comes in 4 related parts: 1 SiteBar application h...

Code injection

Static code injection vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the value parameter...

CVE-2007-5492

Static code injection vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the value parameter...

Directory traversal

Directory traversal vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to chmod arbitrary files to 0777 via ".." sequences in the lang parameter...

CVE-2007-5491

Directory traversal vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to chmod arbitrary files to 0777 via ".." sequences in the lang parameter...

CVE-2007-5492

Static code injection vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the value parameter...

Microsoft Windows Vista Teredo接口防火墙绕过漏洞

Vista Windows Firewall是一款微软提供的Vista系统下的防火墙解决方案。 Vista Windows Firewall存在设计问题，远程攻击者可以利用漏洞发送恶意网络数据报文绕过防火墙规则获得敏感信息。 Teredo接口是面向IPv6的IPv4 NAT网络地址转换穿越，是一项IPv6 / IPv4过渡技术。默认设计中，Windows防火墙阻止所有对Teredo接口的访问，除了通过在防火墙规则中设置"Edge...

CVE-2007-2676

PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine OTE 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the otehome parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine OTE 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the otehome parameter...

CVE-2007-2676

PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine OTE 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the otehome parameter...

CVE-2007-2676

CVE-2007-2676 is a remote file inclusion vulnerability in Open Translation Engine (OTE) 0.7.8 affecting skins/header.php, where an attacker can supply a URL via the ote_home parameter to PHP code execution on the server. The issue is exploitable remotely and is supported by multiple sources, incl...

CVE-2007-2444

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...

CVE-2007-2444

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...

Code injection

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...