CVE-2007-0607

W-Agora Web-Agora 4.2.1, when registerglobals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request...

CVE-2007-0607

CVE-2007-0607 concerns w-agora 4.2.1 where enabling PHP register_globals allows disclosure of the contents of globals.inc by direct requests to the web document root, leaking server paths. The vulnerability stems from insufficient access control around globals.inc, enabling information disclosure...

W-Agora 4.2.1 - profile.php?showuser Cross-Site Scripting

W-Agora 4.2.1 - profile.php?showuser Cross-Site Scripting source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize...

W-Agora 4.2.1 - 'search.php?search_user' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow a...

W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities

W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/23055/info w-Agora is prone to multiple arbitrary file-upload vulnerabilities. An attacker can exploit these vulnerabilities to upload PHP script code and execute it in the context of the...

W-Agora 4.2.1 - search.php?search_user Cross-Site Scripting

W-Agora 4.2.1 - search.php?searchuser Cross-Site Scripting source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitiz...

W-Agora 4.2.1 - change_password.php?userid Cross-Site Scripting

W-Agora 4.2.1 - changepassword.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently...

W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/23055/info w-Agora is prone to multiple arbitrary file-upload vulnerabilities. An attacker can exploit these vulnerabilities to upload PHP script code and execute it in the context of the webserver process. w-Agora 4.2.1 is vulnerable. ?php / Title...

W-Agora 4.2.1 - 'change_password.php?userid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow a...

W-Agora 4.2.1 - 'profile.php?showuser' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow a...

CVE-2007-0607: Undefined Security Weakness

W-Agora Web-Agora 4.2.1, when registerglobals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request...

w-agora version 4.2.1 Information Disclosure Vulnerability

netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...

CVE-2007-1223

Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service responder control processing halt by sending "data unexpectedly through the port"...

Design/Logic Flaw

Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service responder control processing halt by sending "data unexpectedly through the port"...

CVE-2007-1223

The CVE-2007-1223 entry affects the Hitachi OSAS/FT/W family (pre-20070223). An unspecified vulnerability allows an attacker to cause a denial of service (responder control processing halt) by sending data unexpectedly through the port. The available sources do not specify the root cause, affecte...

CVE-2007-1223: Undefined Security Weakness

Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service responder control processing halt by sending "data unexpectedly through the port"...

VulnCheck KEV: CVE-2007-0515

Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a...

Unfixed XSS vulnerability at www.w-hotspots.gr

Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.w-hotspots.gr, which at the time of submission ranked 4506952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.w-hotspots.gr

Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.w-hotspots.gr, which at the time of submission ranked 4506952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

CVE-2006-6835: Undefined Security Weakness

SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php...