[CLOSE] OSVDB ID : 42391 - Disclosed: 2007-11-25

Description:

IAPR COMMENCE System contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'includes/page_includes/pagebase.php' script not properly sanitizing user input supplied to the 'php_root_path' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 44156 - Disclosed: 2007-11-25

Description:

(Description Provided by CVE) : The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack.

[CLOSE] OSVDB ID : 44155 - Disclosed: 2007-11-25

Description:

(Description Provided by CVE) : The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attackers to obtain sensitive network configuration information if this address is not the same as the address being used by the web interface.

[CLOSE] OSVDB ID : 51212 - Disclosed: 2007-11-25

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 82762 - Disclosed: 2007-11-25

Description:

Anti Spam Image Plugin for WordPress contains a flaw that may allow an attacker to bypass the anti-automated CAPTCHA test. This flaw is triggered when an attacker supplies the same value for the 'securitycode' parameter on multiple pages, allowing an attacker to bypass CAPTCHA testing.

[CLOSE] OSVDB ID : 41230 - Disclosed: 2007-11-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 45765 - Disclosed: 2007-11-24

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

[CLOSE] OSVDB ID : 52796 - Disclosed: 2007-11-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 43176 - Disclosed: 2007-11-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 38814 - Disclosed: 2007-11-24

Description:

(Description Provided by CVE) : Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.

[CLOSE] OSVDB ID : 38817 - Disclosed: 2007-11-24

Description:

Project Alumni contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'year' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 38818 - Disclosed: 2007-11-24

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to (1) xml/index.php; or (2) the year parameter to view.page.inc.php, which is reachable through a view action to the top-level index.php.

[CLOSE] OSVDB ID : 38819 - Disclosed: 2007-11-24

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to (1) xml/index.php; or (2) the year parameter to view.page.inc.php, which is reachable through a view action to the top-level index.php.

[CLOSE] OSVDB ID : 38824 - Disclosed: 2007-11-24

Description:

E-Lite POS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'default.asp' script not properly sanitizing user-supplied input to the 'username' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 38825 - Disclosed: 2007-11-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 38872 - Disclosed: 2007-11-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 38885 - Disclosed: 2007-11-24

Description:

vBTube Module for vBulletin contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'search' variables upon submission to the 'vBTube.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 39278 - Disclosed: 2007-11-24

Description:

WorkingOnWeb contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the events.php script not properly sanitizing user-supplied input to the idevent variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 43714 - Disclosed: 2007-11-24

Description:

(Description Provided by CVE) : Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby causes scp.exe on this machine to execute, and then overwrite heap memory with characters from the filename. NOTE: it is also reported that a related issue might exist in 1.5.7 through 1.5.19.

[CLOSE] OSVDB ID : 48703 - Disclosed: 2007-11-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 41261 - Disclosed: 2007-11-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 40876 - Disclosed: 2007-11-23

Description:

A buffer overflow exists in Quicktime. Quicktime fails to validate RTSP stream Content-Type headers resulting in a stack overflow. With a specially crafted RTSP stream, a context-dependent attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 82761 - Disclosed: 2007-11-23

Description:

Math Comment Spam Protection Plugin for Wordpress contains a flaw that may allow an attacker to bypass the anti-automated CAPTCHA test. This flaw is triggered when an attacker supplies the same value for the 'mcspvalue' and 'mcspinfo' parameters on multiple pages, allowing an attacker to bypass CAPTCHA testing.

[CLOSE] OSVDB ID : 42676 - Disclosed: 2007-11-23

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php.

[CLOSE] OSVDB ID : 42618 - Disclosed: 2007-11-23

Description:

(Description Provided by CVE) : Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php.

[CLOSE] OSVDB ID : 38800 - Disclosed: 2007-11-23

Description:

(Description Provided by CVE) : Multiplce cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) intro, and (3) question parameters, and (4) unspecified answer parameters, in a create_new action. NOTE: some of these details are obtained from third party information.

[CLOSE] OSVDB ID : 38813 - Disclosed: 2007-11-23

Description:

(Description Provided by CVE) : Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to execute arbitrary SQL commands via the (1) login (aka Username) and (2) password parameters. NOTE: some of these details are obtained from third party information.

[CLOSE] OSVDB ID : 39681 - Disclosed: 2007-11-23

Description:

Mp3 Toolbox contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'index.php' script not properly sanitizing user input supplied to the 'skin_file' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 50920 - Disclosed: 2007-11-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 58755 - Disclosed: 2007-11-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 40583 - Disclosed: 2007-11-22

Description:

(Description Provided by CVE) : Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.

[CLOSE] OSVDB ID : 42353 - Disclosed: 2007-11-22

Description:

(Description Provided by CVE) : Unspecified vulnerability in Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-01 allows remote attackers to bypass authentication and "view files" via unspecified vectors.

[CLOSE] OSVDB ID : 42354 - Disclosed: 2007-11-22

Description:

(Description Provided by CVE) : Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service (service stop) via a "specific file" argument to an FTP command.

[CLOSE] OSVDB ID : 40911 - Disclosed: 2007-11-22

Description:

(Description Provided by CVE) : The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL pointer dereference.

[CLOSE] OSVDB ID : 39579 - Disclosed: 2007-11-22

Description:

(Description Provided by CVE) : Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.

[CLOSE] OSVDB ID : 39580 - Disclosed: 2007-11-22

Description:

(Description Provided by CVE) : Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.

[CLOSE] OSVDB ID : 51240 - Disclosed: 2007-11-22

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 52731 - Disclosed: 2007-11-22

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 52732 - Disclosed: 2007-11-22

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 38801 - Disclosed: 2007-11-22

Description:

(Description Provided by CVE) : SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. NOTE: some of these details are obtained from third party information.