767 matches found
CVE-2007-1688
The CVE-2007-1688 entry concerns a buffer overflow in the PhPInfo ActiveX control (PhPCtrl.dll) used by Callisto PhotoParade Player. The vulnerability affects the PhPInfo ActiveX control and its FileVersionOf property, enabling remote code execution when a user opens a specially crafted page, per...
CVE-2007-1688
Buffer overflow in the PhPInfo ActiveX control in PhPCtrl.dll in Callisto PhotoParade Player allows remote attackers to execute arbitrary code via the FileVersionof property...
PhotoParade Player PhPInfo ActiveX (PhPCtrl.dll) FileVersionof Property Overflow
The remote host contains the PhPInfo ActiveX control, included with the PhotoParade Player software for creating slideshows of digital pictures. The version of this control installed on the remote host reportedly contains an unspecified overflow in its 'FileVersionOf' property that could lead to...
Callisto PhotoParade Player PhPInfo ActiveX control buffer overflow
Overview The Callisto PhotoParade Player PhPInfo ActiveX control contains a buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Callisto PhotoParade Player includes an ActiveX control called PhPinfo. The ActiveX control...
Unfixed XSS vulnerability at samua.s58.xrea.com
Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting samua.s58.xrea.com, which at the time of submission ranked 521 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...
Unfixed XSS vulnerability at www.dinix.com
Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.dinix.com, which at the time of submission ranked 1239216 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...
Unfixed XSS vulnerability at catfish.dnsvelocity.com
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting catfish.dnsvelocity.com, which at the time of submission ranked 1059728 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. I...
Unfixed XSS vulnerability at www.isdn.net
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.isdn.net, which at the time of submission ranked 1365685 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...
Unfixed XSS vulnerability at www.mijnwebserver.nl
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.mijnwebserver.nl, which at the time of submission ranked 1836382 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It i...
Unfixed XSS vulnerability at azuregenesis.com
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting azuregenesis.com, which at the time of submission ranked 910713 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...
Information Disclosure from phpmyadmin
An information disclosure issue has been found in the phpmyadmin extension of TYPO3 that may give access to phpinfo information in special cases. The standalone version of phpmyadmin is not affected. Component Type: Third party extension. This extension is not part of the TYPO3 default...
CVE-2007-3525
Ripe Website Manager 0.8.9 and earlier suffers an information disclosure vulnerability where an unauthenticated remote attacker can access includes/phpinfo.php, which calls phpinfo and reveals configuration information. Root cause: direct request to a file that executes phpinfo. Impact: disclosur...
CVE-2007-3525
Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3191
Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...
Information disclosure
Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...
CVE-2007-3191
Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...
CVE-2007-3191
The vulnerability CVE-2007-3191 affects Just For Fun Network Management System (JFFNMS) version 0.8.3, where a direct request to admin/adm/test.php triggers phpinfo and exposes configuration information. Public sources among connected documents cite Debian’s DSA-1374-1 and the related Nessus/Open...
CVE-2007-3191
Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...
FreeBSD : php -- multiple vulnerabilities (f5e52bf5-fc77-11db-8163-000e0c2e438a)
The PHP development team reports : Security Enhancements and Fixes in PHP 5.2.2 and PHP 4.4.7 : - Fixed CVE-2007-1001, GD wbmp used with invalid image size - Fixed asciiz byte truncation inside mail - Fixed a bug in mbparsestr that can be used to activate registerglobals - Fixed unallocated memor...
