Design/Logic Flaw

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

CVE-2007-5270

Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attackers to create or overwrite arbitrary files, and conduct cross-site scripting attacks XSS via unspecified vectors...

DB Manager XSS vuln.

Sunday, 7 October 2007 DB Manager XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://www.moderndayworld.com/Scripts/Products/?id=S-DM2.0 affected versions:DB Manager 2.0 other versions also can be affected. DB Manager contains a flaw that allows a remote Cross-Site Scripting...

CVE-2004-2725

CVE-2004-2725 affects Aztek Forum 4.0, with XSS vulnerabilities in multiple entry points: search.php (search parameter), subscribe.php (email parameter), and forum_2.php (return and title parameters). The underlying issue is improper handling/sanitization of user-supplied input, allowing remote a...

CVE-2007-5261

CVE-2007-5261 affects MultiCart 1.0 with SQL injection via the catid parameter in categorydetail.php and the ddlCategory parameter in search.php, enabling remote arbitrary SQL execution. CVSS v2 base score 6.4 (Medium) with network access and low complexity; no remediation details are provided in...

CVE-2007-5179

CVE-2007-5179 describes multiple XSS vulnerabilities in iletisim.asp of Y&K Iletisim Formu. The impact is injection of arbitrary web script/HTML via the parameters ad, sehir, yas, cins, tel, mail, and mesaj, with the note that provenance is from third-party information. Connected documents confir...

CVE-2007-5030

Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service daemon crash via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by 1 the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the 2...

CVE-2007-5029

Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a buffer over-read and cause a denial of service daemon crash, as demonstrated by incorrect behavior of the TSrvMsg constructor in SrvMessages/SrvMsg.cpp when 1...

Directory traversal

Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of space characters in a filename within a 1 .IMG or 2 .ISO file. NOTE: this can be leveraged with a separate directory traversal vulnerability to trick a caref...

CVE-2007-4966

SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...

DirectAdmin <= v1.30.2 XSS vuln.

DirectAdmin = v1.30.2 XSS vuln. Vuln. discovered by : r0t Date: 10 September 2007 vendor:http://www.directadmin.com/ orginal advisory: http://pridels-team.blogspot.com/2007/09/directadmin-v1302-xss-vuln.html affected versions:v1.30.2 and previous DirectAdmin contains a flaw that allows a remote...

TxX CMS doc_root远程文件包含漏洞

TxX CMS是一款基于PHP的WEB应用程序。 TxX CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于脚本对用户提交的'docroot'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 txx cms TxX CMS public 0.2a txx cms TxX CMS public 0.2 目前没有详细解决方案提供： https://sourceforge.net/projects/txx/...

CVE-2007-4726

Web Oddity 0.09b contains a directory traversal vulnerability that lets remote attackers read arbitrary files via a .. in the request URI. The available documents identify the affected product and the vulnerability class but do not provide remediation steps. Exploitation details or patches are no...

Integer overflow

Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information memory contents or cause a denial of service thread crash via a large len value to the 1 strspn or 2 strcspn function, which triggers an out-of-bounds read. NOTE: this...

CVE-2007-4626

Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service daemon crash via certain network traffic associated with entities larger than 2 Gb...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in InterWorx Hosting Control Panel InterWorx-CP Server Admin Level NodeWorx 3.0.2 1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php; and allow remote authenticated users to inject arbitrary web script or...

Unreal Commander畸形压缩文档多个远程漏洞

BUGTRAQ ID: 25419 Unreal Commander是一款免费的Windows平台文件管理器。 Unreal Commander在解压文件时存在多个安全漏洞，攻击者可能通过诱使用户处理恶意文件控制用户系统。 如果用户使用Unreal Commander解压了文件名包含有类似于以下目录遍历序列的ZIP或RAR文档的话： Something/../../../../../../Program Files/Something/ws232.dll 就会导致在指定目录中创建ws232.dll文件。 ZIP文档中包含有两处写入文件名的位置：Local文件头和Central...

CVE-2007-4494

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

CVE-2007-4455

The SIP channel driver chansip in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i Asterisk Appliance 1.x before 1.0.3 allows remote attackers to cause a denial of service memory exhaustion via a SIP dialog that cause...

CVE-2007-4464

CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...