Design/Logic Flaw

The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information memory contents via JavaScript...

Immunity Canvas: PHPFFL_INCLUDE

Name| phpfflinclude ---|--- CVE| CVE-2007-4934 Exploit Pack| CANVAS Description| phpFFL 1.24 Remote file inclusion Notes| CVSS: 4.6 Repeatability: Infinite VENDOR: phpffl CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4934 CVE Name: CVE-2007-4934...

Immunity Canvas: AJAXFB_INCLUDE

Name| ajaxfbinclude ---|--- CVE| CVE-2007-4921 Exploit Pack| CANVAS Description| Ajax File Browser 3 Beta Remote File Inclusion Notes| CVE Name: CVE-2007-4921 VENDOR: Ajax File Browser Notes: None Repeatability: Infinite References: http://securityreason.com/exploitalert/2767 CVE Url:...

Immunity Canvas: JOOMLARADIOV5_INCLUDE

Name| joomlaradiov5include ---|--- CVE| CVE-2007-4923 Exploit Pack| CANVAS Description| Joomla Radio v5 Component Remote File Inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2007-4923 CVE Name: CVE-2007-4923...

Immunity Canvas: NUCLEARBB_INCLUDE

Name| nuclearbbinclude ---|--- CVE| CVE-2007-4906 Exploit Pack| CANVAS Description| NuclearBB Alpha 2 Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: nuclearbb.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4906 CVE Name: CVE-2007-4906...

Immunity Canvas: PHPREALTY_INCLUDE

Name| phprealtyinclude ---|--- CVE| CVE-2007-4834 Exploit Pack| CANVAS Description| PHPrealty Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: budissy.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4834 CVE Name: CVE-2007-4834...

Immunity Canvas: MS07_051

Name| ms07051 ---|--- CVE| CVE-2007-3040 Exploit Pack| CANVAS Description| Microsoft Agent URL Overflow Notes| CVE Name: CVE-2007-3040 VENDOR: Microsoft MSADV: MS07-051 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/ms07-051.mspx CVE Url:...

Immunity Canvas: TXXCMS_INCLUDE

Name| txxcmsinclude ---|--- CVE| CVE-2007-4818 Exploit Pack| CANVAS Description| TxxCMS 0.2 Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Txx CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4818 CVE Name: CVE-2007-4818...

Immunity Canvas: WEBED_INCLUDE

Name| webedinclude ---|--- CVE| CVE-2007-4815 Exploit Pack| CANVAS Description| WebEd Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: ed-engine CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4815 CVE Name: CVE-2007-4815...

Immunity Canvas: OFFL_INCLUDE

Name| offlinclude ---|--- CVE| CVE-2007-4809 Exploit Pack| CANVAS Description| Online Fantasy Football League 0.2.6 Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Online Fantasy Football League CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4809 CVE...

Immunity Canvas: PHPMYTOURNEY_INCLUDE

Name| phpmytourneyinclude ---|--- CVE| CVE-2007-4757 Exploit Pack| CANVAS Description| phpMytourney Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: vanta.ru CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4757 CVE Name: CVE-2007-4757...

Immunity Canvas: ANYINVENTORY_INCLUDE

Name| anyinventoryinclude ---|--- CVE| CVE-2007-4744 Exploit Pack| CANVAS Description| AnyInventory = 2.0 Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Ramapo.edu CVE Url: https://vulners.com/cve/CVE-2007-4744 CVE Name: CVE-2007-4744...

Immunity Canvas: ENETMAN_INCLUDE

Name| enetmaninclude ---|--- CVE| CVE-2007-4712 Exploit Pack| CANVAS Description| eNetman Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: eNetman CVE Url: https://vulners.com/cve/CVE-2007-4712 CVE Name: CVE-2007-4712...

Joomla! CMS com_search Component 'searchword' Parameter RCE

The version of Joomla! running on the remote host is affected by a remote code execution vulnerability within the comsearch/views/search/tmpl/defaultresults.php script due to improper sanitization of user-supplied input to the 'searchword' parameter before passing it to the eval function. An...

Immunity Canvas: PHPBG_INCLUDE

Name| phpbginclude ---|--- CVE| CVE-2007-4636 Exploit Pack| CANVAS Description| phpBG Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: phpbg CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4636 CVE Name: CVE-2007-4636...

Immunity Canvas: NWSPOOL_B

Name| nwspoolb ---|--- CVE| CVE-2007-2954 Exploit Pack| CANVAS Description| Novell Netware Client for Windows Notes| CVE Name: CVE-2007-2954 VENDOR: Novell Notes: Platforms Tested: References: http://www.zerodayinitiative.com/advisories/ZDI-07-045.html CVE Url:...

Immunity Canvas: NCASTER_INCLUDE

Name| ncasterinclude ---|--- CVE| CVE-2007-4320 Exploit Pack| CANVAS Description| Ncaster Remote Include Notes| CVE Name: CVE-2007-4320 VENDOR: ncastercms.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4320 Repeatability: Infinite CVSS: 7.5...

Immunity Canvas: PBD_INCLUDE

Name| pbdinclude ---|--- CVE| CVE-2007-4313 Exploit Pack| CANVAS Description| Php Blue Dragon CMS Remote Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpbluedragon.pl CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4313 CVE Name: CVE-2007-4313...

Immunity Canvas: FRONTACCOUNT_INCLUDE

Name| frontaccountinclude ---|--- CVE| CVE-2007-4279 Exploit Pack| CANVAS Description| FrontAccounting Remote Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Front Accounting CVE Url: https://vulners.com/cve/CVE-2007-4279 CVE Name: CVE-2007-4279...

Immunity Canvas: PHPNEWS_INCLUDE

Name| phpnewsinclude ---|--- CVE| CVE-2007-4232 Exploit Pack| CANVAS Description| PHPNews 0.93 Remote Include Notes| Repeatability: Infinite VENDOR: crear.de CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4232 CVE Name: CVE-2007-4232...