CVE-2007-5224

The CVE-2007-5224 entry affects Original Photo Gallery 0.11.2 and earlier. Affected file: inc/exif.inc.php; the exif_prog parameter is used inside an exec() call without proper sanitization, allowing remote attackers to execute arbitrary commands on the server. This is described in multiple sourc...

VMware Workstation < 5.5.5 and Server < 1.0.4 Multiple Vulnerabilities

The version of VMware Workstation/Server installed on the remote host is affected by multiple vulnerabilities, including a privelege elevation vulnerability that allows a guest to take over a host and a buffer overflow vulnerability in the DHCP daemon. The buffer overlflow in the DHCP server may...

CVE-2007-4873

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc...

Improper access control

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc...

CVE-2007-4873

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Ekke Doerre Contenido 42VariablVersion 42VV10 in contenidohacks in Mods 4 Xoops Contenido eZ publish pdf4cms allow remote attackers to execute arbitrary PHP code via a URL in the cfgPathInc parameter to 1 mainupl.php, 2 mainconeditside.php, 3...

DDIVRT-2007-04 NetSupport Manager Authentication Bypass

Title ----- NetSupport Manager Authentication Bypass Severity -------- High Date Discovered --------------- 9/4/2007 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Additional Discovered By Digital Defense, Inc. Credit: sxkeebler and r@b13s Vulnerability Description...

webbatch-xss.txt

HSC WebBatch Applications Cross Site Scripting Vulrnability This issue is due to a failure in the application to properly sanitize user-supplied input. Attackers may exploit this issue via a web client. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

iTunes 7.3.x - Heap overflow in album cover parsing

iSEC Partners Security Advisory - 2007-005-itunes https://www.isecpartners.com -------------------------------------------- iTunes 7.3.x - Heap overflow in album cover parsing Vendor: Apple, Inc. Vendor URL: http://www.apple.com Versions affected: Confirmed in iTunes 7.3.2 Systems Affected:...

Joomla! CMS com_search Component 'searchword' Parameter RCE

The version of Joomla! running on the remote host is affected by a remote code execution vulnerability within the comsearch/views/search/tmpl/defaultresults.php script due to improper sanitization of user-supplied input to the 'searchword' parameter before passing it to the eval function. An...

MIT Kerberos 5 kadmind privilege escalation vulnerability

Overview MIT Kerberos kadmind contains a privilege escalation vulnerability that may allow an authenticated attacker to execute code with root privileges. Description Kerberos is a network authentication system that uses a trusted third party to authenticate clients and servers to each other. It ...

Remote file inclusion

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

SPIP v1.7 Remote File Inclusion Bug

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++...

PT-2007-5696 · Spip · Spip

Name of the Vulnerable Software and Affected Versions: SPIP version 1.7.2 Description: A remote file inclusion issue in SPIP allows remote attackers to potentially execute arbitrary PHP code. The issue is related to the squelette cache parameter in the inc-calcul.php3 file. However, it has been...

spip-rfi.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++...

JobLister3 SQL injection vulnerabilities

JobLister3 by SkilMatch Staffing Systems, Inc. Multiple SQL injection vulnerabilities http://www.dubdubdub.com/ http://www.skilmatch.com/ The search form filed doesnt strip special characters that have special meanings. A single quote makes the application spit out a number of errors. This is not...

phpnews093-rfi.txt

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

msvisual-overflow.txt

jojo = String380,"A" getEIP = unescape"%EB%AA%D7%77" GM = String92,"A" nop = unescape"%90%90%90%90%90%90%90%90%90%90" shellcode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...

PHPNews 0.93 (format_menue) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHPNews 0.93 formatmenue Remote File Inclusion Vulnerability =============================================================== ?????????? ??????????????? ???????????????????...

Microsoft Visual 6 - 'VDT70.dll NotSafe' Remote Stack Overflow

jojo = String380,"A" getEIP = unescape"%EB%AA%D7%77" GM = String92,"A" nop = unescape"%90%90%90%90%90%90%90%90%90%90" shellcode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" &...