CVE-2007-5175

CVE-2007-5175 : PHP remote file inclusion in actSite 1.991 Beta (lib/base.php) allows an attacker to execute arbitrary PHP code via a URL in the BaseCfg[BaseDir] parameter. Root cause: unsafely using a user-controlled file path in an include operation. Impact: remote code execution on the affecte...

CVE-2007-5163

PHP remote file inclusion vulnerability in includes/functions/layout.php in Nexty 1.01.A Beta allows remote attackers to execute arbitrary PHP code via a URL in the rel parameter. NOTE: this issue is disputed by CVE because the applicable include is in a function that is not called on a direct...

CVE-2007-5163

The CVE concerns Nexty 1.01.A Beta and a PHP remote file inclusion in includes/functions/layout.php exploited via the rel parameter to run arbitrary PHP. The issue is disputed by CVE because the include occurs in a function not called on direct request. Connected sources corroborate the vulnerabi...

Remote file inclusion

PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter...

Sql injection

SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2007-5138

CVE-2007-5138 is a PHP remote file inclusion vulnerability affecting lustig.cms BETA 2.5, reported as a flaw in forum/forum.php where an attacker could trigger arbitrary PHP code execution by supplying a URL in the view parameter. The vulnerability is documented across multiple sources (NVD and C...

CVE-2007-5138

PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter...

CVE-2007-5121

Cross-site scripting XSS vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components...

PT-2007-5001 · Apple · Iphone +1

Name of the Vulnerable Software and Affected Versions: Safari versions 3 before Beta Update 3.0.4 Safari in Apple iPhone version 1.1.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via frame tags. Recommendations: For Safari versions 3...

lustig.cms Beta 2.5 - forum.php?view Remote File Inclusion

lustig.cms Beta 2.5 - forum.php?view Remote File Inclusion lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC :...

lustig.cms Beta 2.5 - 'forum.php?view' Remote File Inclusion

lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC : /forum/forum.php?view=Shell milw0rm.com 2007-09-27...

JSPWiki Multiple Vulnerabilities

Application: JSPWiki Multiple Vulnerabilities Version: 2.4.103 and 2.5.139 Credit: Jason Kratzer Date: 9/24/2007 Background ------------------------------------------------------------ JSPWiki is wiki software built around the standard J2EE components of Java, servlets and JSP. It was written by...

JSPWiki 2.5.139 - edit.jsp?edittime Cross-Site Scripting

JSPWiki 2.5.139 - edit.jsp?edittime Cross-Site Scripting source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately...

JSPWiki 2.5.139 - NewGroup.jsp Multiple Cross-Site Scripting Vulnerabilities

JSPWiki 2.5.139 - NewGroup.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fail...

JSPWiki 2.5.139 - 'NewGroup.jsp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied input. Attacker-supplied HTML and scri...

CVE-2007-5039

CVE-2007-5039 : Ghost Security Suite beta 1.110 contains improper validation of parameters to System Service Descriptor Table (SSDT) function handlers. This allows local users to trigger a crash (DoS) and potentially gain privileges via kernel SSDT hooks for (1) NtCreateKey, (2) NtDeleteValueKey,...

Code injection

ProSecurity 1.40 Beta 2 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including 1 NtCreateKey,...

CVE-2007-1865

The CVE-2007-1865 entry concerns the Linux kernel used in Red Hat Enterprise Linux (RHEL) Beta 5.1.0, where the ipv6_getsockopt_sticky function may allow local users to read sensitive kernel memory contents via a negative len value. Multiple connected sources reiterate this, noting that the issue...

PT-2007-3212 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux RHEL Beta version 5.1.0 Description: The issue allows local users to potentially obtain sensitive information, specifically kernel memory contents. This is achieved through the ipv6 getsockopt sticky function in the...

CVE-2007-4921

Concretely, CVE-2007-4921 affects Ajax File Browser 3 Beta and is a PHP remote file inclusion in _includes/settings.inc.php via the approot parameter, allowing remote code execution. Connected advisories note a lack of input sanitization; an Immunity CANVAS entry references an AJAXFB_INCLUDE expl...