CVE-2007-4942: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 addons/plugin.php, 2 addons/sidebar.php, 3 mail/index.php, or 4 mail/mailbox.php in modules/...

CVE-2007-4818

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 addons/plugin.php, 2 addons/sidebar.php, 3 mail/index.php, or 4 mail/mailbox.php in modules/...

CVE-2007-4818

CVE-2007-4818 concerns multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 . The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the doc_root parameter to particular module files: (1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php, and...

CVE-2007-4807: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to 1 modules/Discipline/CategoryBreakdownTime.php or 2 modules/Discipline/StudentFieldBreakdown.php...

Code injection

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

CVE-2007-4789

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

CVE-2007-4788

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

Design/Logic Flaw

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

CVE-2007-4789

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

CVE-2007-4789: Undefined Security Weakness

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

CVE-2007-4788: Undefined Security Weakness

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

Txx CMS 0.2 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | //...

Txx CMS 0.2 - Multiple Remote File Inclusions

Txx CMS 0.2 - Multiple Remote File Inclusions :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || |||...

Txx CMS 0.2 - Multiple Remote File Inclusions

:::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | // :::::::::::::::::::::::::::::We...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to 1 rename items, 2 read and modify item properties, or 3 lock and replace items via unknown vectors in a the WebDAV module; and 4 edit unspecified data files using "linked items" in WebDAV and b Reupload modules...

CVE-2007-4650

Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to 1 rename items, 2 read and modify item properties, or 3 lock and replace items via unknown vectors in a the WebDAV module; and 4 edit unspecified data files using "linked items" in WebDAV and b Reupload modules...

CVE-2007-4650: Undefined Security Weakness

Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to 1 rename items, 2 read and modify item properties, or 3 lock and replace items via unknown vectors in a the WebDAV module; and 4 edit unspecified data files using "linked items" in WebDAV and b Reupload modules...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Olate Download od 3.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the PHPSELF variable in modules/core/uim.php and 2 url tags in a comment in modules/core/fldm.php...

CVE-2007-4541: Cross-Site Request Forgery (CSRF)

Multiple cross-site scripting XSS vulnerabilities in Olate Download od 3.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the PHPSELF variable in modules/core/uim.php and 2 url tags in a comment in modules/core/fldm.php...