3346 matches found
CVE-2007-3838
CVE-2007-3838 describes an XSS in takeprofedit.php for TBDev.NET DR 11-10-05-BETA-SF1:111005 and earlier. The vulnerability allows remote attackers to inject arbitrary script via the SRC attribute of a SCRIPT element in the avatar parameter. The affected component is takeprofedit.php; the issue i...
CVE-2007-3813
PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbitrary PHP code via a URL in the MKPATH parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbitrary PHP code via a URL in the MKPATH parameter...
CVE-2007-3813
The CVE-2007-3813 entry concerns PHP remote file inclusion in MKPortal’s NoBoard BETA module, specifically in include/user.php, exploitable via a URL parameter MK_PATH to execute arbitrary PHP. Connected docs confirm exploitability: MKNOBOARD_INCLUDE notes an Immunity Canvas exploit pack for MKNo...
CVE-2007-3813
PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbitrary PHP code via a URL in the MKPATH parameter...
MKPortal NoBoard Module (BETA) Remote File Inclusion Vulnerability
No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title MKPortal NoBoard BETA Script Download...
MKPortal NoBoard Module (Beta) - Remote File Inclusion
MKPortal NoBoard Module Beta - Remote File Inclusion / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title MKPortal NoBoard BETA Script Download...
MKP-NoBoard.txt
/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title MKPortal NoBoard BETA Script Download http://www.mkportal.it/index.php?ind=downloads&op=entryview&iden=804 d0rk "Powered by MK noboard" Spl0it http:// site...
CVE-2007-3718
Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact. NOTE: this issue contains no actionable information, but it was released by a reliable researcher...
CVE-2007-3726
Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...
CVE-2007-3726
Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...
Integer overflow
Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...
CVE-2007-3726
Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...
PT-2007-3733 · Apple · Safari
Name of the Vulnerable Software and Affected Versions: Apple Safari versions 3 Beta through 3.0.2 Apple Safari on iPhone version prior to 1.0.1 Description: The issue allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain, conducting...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 modulekey parameter to a kb/kb.php, b quiz/runquiz.php, c quiz/quiz.php, d forum/forum.php, e forum/byname.php, and f journal/journalview.php in modules...
CVE-2007-3328
Multiple cross-site scripting XSS vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 modulekey parameter to a kb/kb.php, b quiz/runquiz.php, c quiz/quiz.php, d forum/forum.php, e forum/byname.php, and f journal/journalview.php in modules...
CVE-2007-3328
Multiple cross-site scripting XSS vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 modulekey parameter to a kb/kb.php, b quiz/runquiz.php, c quiz/quiz.php, d forum/forum.php, e forum/byname.php, and f journal/journalview.php in modules...
CVE-2007-3328
CVE-2007-3328 affects Interact 2.4 beta 1 and is described as multiple XSS vulnerabilities. The vulnerable components are in Interact modules: (1) module_key parameter used by kb/kb.php, quiz/runquiz.php, quiz/quiz.php, forum/forum.php, forum/byname.php, journal/journalview.php; (2) tag_key param...
CVE-2007-2398
CVE-2007-2398 concerns Apple Safari 3.0.1 beta (522.12.12) on Windows. The flaw allows remote attackers to spoof the window title and address bar by manipulating the location bar and using setTimeout() to trigger an event that changes the main window content, potentially enabling phishing. This i...
CVE-2007-3186
Apple Safari Beta 3.0.1 for Windows is affected by a vulnerability where remote attackers can execute arbitrary commands via shell metacharacters in a URI found in the SRC attribute of an IFRAME, demonstrated with a gopher URI. The issue allows command execution through crafted URIs loaded in an ...