Weekly Vulnerabilities Reports > December 31, 2007 to January 6, 2008
Overview
75 new vulnerabilities reported during this period, including 4 critical vulnerabilities and 20 high severity vulnerabilities. This weekly summary report vulnerabilities in 57 products from 53 vendors including Joomla, Feng, Atlassian, Clam Anti Virus, and 2Z Project. Vulnerabilities are notably categorized as "SQL Injection", "Cross-site Scripting", "Path Traversal", "Permissions, Privileges, and Access Controls", and "Improper Restriction of Operations within the Bounds of a Memory Buffer".
- 74 reported vulnerabilities are remotely exploitables.
- 33 reported vulnerabilities have public exploit available.
- 34 reported vulnerabilities are related to weaknesses in OWASP Top Ten.
- 74 reported vulnerabilities are exploitable by an anonymous user.
- Joomla has the most reported vulnerabilities, with 5 reported vulnerabilities.
- Debian has the most reported critical vulnerabilities, with 1 reported vulnerabilities.
VULNERABILITIES
VULNERABILITIES
VULNERABILITIES
VULNERABILITIES
VULNERABILITIES
EXPLOITABLE
EXPLOITABLE
AVAILABLE
ANONYMOUSLY
WEB APPLICATION
Vulnerability Details
The following table list reported vulnerabilities for the period covered by this report:
4 Critical Vulnerabilities
DATE | CVE | VENDOR | VULNERABILITY | CVSS |
---|---|---|---|---|
2008-01-04 | CVE-2007-6638 | March Networks | Permissions, Privileges, and Access Controls vulnerability in March Networks 3204 DVR March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz. | 10.0 |
2008-01-03 | CVE-2007-6610 | Debian | Remote Arbitrary Shell Command Injection vulnerability in Debian UNP 1.0.12 unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument. | 10.0 |
2007-12-31 | CVE-2007-6337 | Gentoo Clam Anti Virus | Unspecified vulnerability in Clam Anti-Virus Clamav 0.91.2 Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vectors. | 10.0 |
2008-01-04 | CVE-2007-6654 | Macrovision | Buffer Errors vulnerability in Macrovision Update Service 5.1.10047363 Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows remote attackers to execute arbitrary code via a long string in the ProductCode argument (second argument) to the DownloadAndExecute method, a different vulnerability than CVE-2007-0321, CVE-2007-2419, and CVE-2007-5660. | 9.3 |
20 High Vulnerabilities
DATE | CVE | VENDOR | VULNERABILITY | CVSS |
---|---|---|---|---|
2008-01-04 | CVE-2007-6666 | Zenphoto | SQL Injection vulnerability in Zenphoto SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter. | 7.5 |
2008-01-04 | CVE-2007-6665 | Netchemia | SQL Injection vulnerability in Netchemia Oneschool SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL commands via the txtLoginID parameter. | 7.5 |
2008-01-04 | CVE-2007-6664 | Webportal | SQL Injection vulnerability in Webportal CMS SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter. | 7.5 |
2008-01-04 | CVE-2007-6663 | Pragmatic Utopia Joomla | SQL Injection vulnerability in Pragmatic Utopia PU Arcade 2.0.3/2.1.2/2.1.3 SQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU Arcade (com_puarcade) 2.0.3, 2.1.2, and 2.1.3 Beta component for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter to index.php. | 7.5 |
2008-01-04 | CVE-2007-6658 | Customcms | SQL Injection vulnerability in Customcms Ccms 3.1 SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbitrary SQL commands via the p parameter in the Console page. | 7.5 |
2008-01-04 | CVE-2007-6657 | Mihalism | Code Injection vulnerability in Mihalism Multi Host PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfh_root_path parameter. | 7.5 |
2008-01-04 | CVE-2007-6655 | Matpo Bilder Galerie | Code Injection vulnerability in Matpo Bilder Galerie Kontakt Formular 1.4 PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. | 7.5 |
2008-01-04 | CVE-2007-6652 | Xcms | Code Injection vulnerability in Xcms cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer). | 7.5 |
2008-01-04 | CVE-2007-6650 | Bitweaver | Permissions, Privileges, and Access Controls vulnerability in Bitweaver R2 CMS Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file. | 7.5 |
2008-01-04 | CVE-2007-6649 | Matpo Bilder Galerie | Code Injection vulnerability in Matpo Bilder Galerie Matpo Bilder Galerie 1.1 PHP remote file inclusion vulnerability in includes/tumbnail.php in MatPo Bilder Galerie 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter. | 7.5 |
2008-01-04 | CVE-2007-6647 | W Agora | SQL Injection vulnerability in W-Agora SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. | 7.5 |
2008-01-04 | CVE-2008-0089 | Clip Share | SQL Injection vulnerability in Clip-Share Clipshare SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via the UID parameter. | 7.5 |
2008-01-04 | CVE-2007-6645 | Joomla | Permissions, Privileges, and Access Controls vulnerability in Joomla 1.5Rc4 Unspecified vulnerability in Joomla! before 1.5 RC4 allows remote authenticated users to gain privileges via unspecified vectors, aka "registered user privilege escalation vulnerability." | 7.5 |
2008-01-04 | CVE-2007-6639 | Iptbb Team | SQL Injection vulnerability in Iptbb Team Iptbb 0.5.4 SQL injection vulnerability in index.php in IPTBB 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewdir action. | 7.5 |
2008-01-04 | CVE-2007-6631 | Lscube | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Lscube Libnemesi Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote attackers to execute arbitrary code via (1) a reply that begins with a long version string, which triggers an overflow in handle_rtsp_pkt in rtsp_handlers.c; long headers that trigger overflows in (2) send_pause_request, (3) send_play_request, (4) send_setup_request, or (5) send_teardown_request in rtsp_send.c, as demonstrated by the Content-Base header; or a long Transport header, which triggers an overflow in (6) get_transport_str_sctp, (7) get_transport_str_tcp, or (8) get_transport_str_udp in rtsp_transport.c. | 7.5 |
2008-01-04 | CVE-2007-6627 | Feng | Numeric Errors vulnerability in Feng Integer overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an RTP packet with a size value of 0xffff. | 7.5 |
2008-01-04 | CVE-2007-6626 | Feng | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Feng Multiple buffer overflows in the RTSP_valid_response_msg function in RTSP_state_machine.c in LScube Feng 0.1.15 and earlier allow remote attackers to execute arbitrary code via (1) a long first line of a response, as demonstrated by a long VER line; or (2) a long second line of a response, as demonstrated by a message that follows a RETURN line. | 7.5 |
2008-01-04 | CVE-2007-6622 | Zeuscms | SQL Injection vulnerability in Zeuscms SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header. | 7.5 |
2008-01-03 | CVE-2007-6619 | Atlassian | Permissions, Privileges, and Access Controls vulnerability in Atlassian Jira The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to change the default language. | 7.5 |
2007-12-31 | CVE-2007-6602 | Noserub | SQL Injection vulnerability in Noserub SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script. | 7.5 |
50 Medium Vulnerabilities
DATE | CVE | VENDOR | VULNERABILITY | CVSS |
---|---|---|---|---|
2008-01-04 | CVE-2007-6667 | Myphp | SQL Injection vulnerability in Myphp Forum 1.0/2.0 SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | 6.8 |
2008-01-04 | CVE-2007-6598 | Dovecot | Permissions, Privileges, and Access Controls vulnerability in Dovecot Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password. | 6.8 |
2008-01-04 | CVE-2007-6642 | Joomla | Cross-Site Request Forgery (CSRF) vulnerability in Joomla 1.5Rc4 Multiple cross-site request forgery (CSRF) vulnerabilities in Joomla! before 1.5 RC4 allow remote attackers to (1) add a Super Admin, (2) upload an extension containing arbitrary PHP code, and (3) modify the configuration as administrators via unspecified vectors. | 6.8 |
2008-01-04 | CVE-2007-6634 | Netbizcity | SQL Injection vulnerability in Netbizcity Faqmasterflexplus Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to execute arbitrary SQL commands via the category_id parameter to faq.php, and unspecified other vectors involving additional scripts. | 6.8 |
2008-01-04 | CVE-2007-6632 | Xml2Owl | Code Injection vulnerability in Xml2Owl 0.1.1 showCode.php in xml2owl 0.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter. | 6.8 |
2008-01-04 | CVE-2007-6624 | Pnphpbb | Path Traversal vulnerability in Pnphpbb 1.2.0I Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. | 6.8 |
2008-01-03 | CVE-2007-6615 | Agares Media | Code Injection vulnerability in Agares Media PHPautovideo 2.21 Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the selected_provider parameter. | 6.8 |
2008-01-03 | CVE-2007-6614 | Agares Media | Code Injection vulnerability in Agares Media PHPautovideo 2.21 PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542. | 6.8 |
2008-01-04 | CVE-2007-6644 | Joomla | Permissions, Privileges, and Access Controls vulnerability in Joomla 1.5Rc4 Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model. | 6.5 |
2008-01-04 | CVE-2007-6661 | 2Z Project | Credentials Management vulnerability in 2Z Project 2Z Project 0.9.6.1 2z project 0.9.6.1 allows attackers to change the password without supplying the old password. | 6.4 |
2008-01-04 | CVE-2008-0091 | Agency4Net | Path Traversal vulnerability in Agency4Net Webftp 1 Directory traversal vulnerability in download2.php in AGENCY4NET WEBFTP 1 allows remote attackers to read and delete arbitrary files via a .. | 6.4 |
2008-01-04 | CVE-2007-6640 | Sourceforge | Permissions, Privileges, and Access Controls vulnerability in Sourceforge Creammonkey and Greasekit Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the (1) GM_addStyle, (2) GM_log, (3) GM_openInTab, (4) GM_setValue, (5) GM_getValue, or (6) GM_xmlhttpRequest function within a web page on which a userscript is configured. | 6.4 |
2008-01-04 | CVE-2007-6635 | Netbizcity | Cryptographic Issues vulnerability in Netbizcity Faqmasterflexplus FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a database, which might allow context-dependent attackers to obtain the password via unspecified database access. | 6.4 |
2008-01-04 | CVE-2007-6621 | Joovili | Path Traversal vulnerability in Joovili Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. | 6.4 |
2008-01-04 | CVE-2007-6620 | Joovili | Path Traversal vulnerability in Joovili Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary files via a .. | 6.4 |
2008-01-03 | CVE-2007-6612 | Mongrel | Path Traversal vulnerability in Mongrel 1.0.4/1.1.1/1.1.2 Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e"). | 6.4 |
2008-01-04 | CVE-2007-6662 | Cutephp | Path Traversal vulnerability in Cutephp Cutenews 2.6 Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. | 5.8 |
2008-01-04 | CVE-2007-6636 | Bitflu | Permissions, Privileges, and Access Controls vulnerability in Bitflu Unspecified vulnerability in the StorageFarabDb module in Bitflu before 0.42 allows user-assisted remote attackers to create or append data to arbitrary files via a crafted .torrent file. | 5.8 |
2007-12-31 | CVE-2007-6605 | Skyfex | Buffer Errors vulnerability in Skyfex Client 1.0.2.77 Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0 allows remote attackers to execute arbitrary code via long strings in the first four arguments to the Start method. | 5.8 |
2008-01-04 | CVE-2007-6660 | 2Z Project | Information Exposure vulnerability in 2Z Project 2Z Project 0.9.6.1 2z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid template or (2) a request to the default URI with certain year and month parameters, which reveals the path in various error messages. | 5.0 |
2008-01-04 | CVE-2007-6653 | Mihalism | Path Traversal vulnerability in Mihalism Multi Host 2.07 Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a .. | 5.0 |
2008-01-04 | CVE-2007-6651 | Bitweaver | Path Traversal vulnerability in Bitweaver 2.0.0 Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive information (script source code) via a .. | 5.0 |
2008-01-04 | CVE-2007-6648 | Sanybee Gallery | Path Traversal vulnerability in Sanybee Gallery Sanybee Gallery 0.1.1 Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter. | 5.0 |
2008-01-04 | CVE-2008-0090 | Divx Microsoft | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method. | 5.0 |
2008-01-04 | CVE-2007-6630 | Feng | Remote Buffer Overflow and Denial of Service vulnerability in Feng The Url_init function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a malformed URI containing a "/:" sequence, as demonstrated by a "DESCRIBE /: RTSP/1.0" request. | 5.0 |
2008-01-04 | CVE-2007-6629 | Feng | Remote Buffer Overflow and Denial of Service vulnerability in Feng Interpretation conflict in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a User-Agent header line that contains a carriage-return character, which is considered a line delimiter when the header is split into individual lines, but not when log_user_agent in RTSP_utils.c parses the content of the User-Agent line. | 5.0 |
2008-01-04 | CVE-2007-6628 | Feng | Remote Buffer Overflow and Denial of Service vulnerability in Feng LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via (1) a malformed Transport header, which triggers misparsing in parse_transport_header in RTSP_setup.c, as demonstrated by a Transport header that contains only a "RTP/AVP;unicast;client_port" sequence; or (2) a malformed Range header, which triggers misparsing in parse_play_time_range in RTSP_Play, as demonstrated by an empty Range header. | 5.0 |
2008-01-04 | CVE-2007-6625 | Novell | USE of Externally-Controlled Format String vulnerability in Novell Identity Manager 3.5.1 The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as demonstrated by a Nessus scan. | 5.0 |
2008-01-04 | CVE-2007-6623 | Zeuscms | Path Traversal vulnerability in Zeuscms Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directories via a full pathname in the dir parameter. | 5.0 |
2008-01-03 | CVE-2007-6618 | Atlassian | Security Bypass Weaknesses in Atlassian JIRA JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified filter ID. | 5.0 |
2008-01-03 | CVE-2008-0061 | Maradns | Remote Denial of Service vulnerability in MaraDNS Malformed Packet MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name (CNAME) record from resolving, aka "improper rotation of resource records." | 5.0 |
2008-01-03 | CVE-2007-6613 | GNU | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in GNU Libcdio Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name. | 5.0 |
2007-12-31 | CVE-2007-6609 | Coolplayer | Buffer Errors vulnerability in Coolplayer 217 Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue field in an OGG Vorbis file. | 5.0 |
2007-12-31 | CVE-2007-6607 | Openbiblio | Information Exposure vulnerability in Openbiblio OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) shared/footer.php, (2) circ/mbr_fields.php, or (3) admin/custom_marc_form_fields.php, which reveals the path in various error messages. | 5.0 |
2007-12-31 | CVE-2007-6606 | Openbiblio | Information Exposure vulnerability in Openbiblio OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. | 5.0 |
2007-12-31 | CVE-2007-6604 | Xcms | Path Traversal vulnerability in Xcms 1.82 Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to read arbitrary files via a .. | 5.0 |
2007-12-31 | CVE-2007-6603 | Hotscripts | Permissions, Privileges, and Access Controls vulnerability in Hotscripts HOT OR NOT Clone Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php. | 5.0 |
2007-12-31 | CVE-2007-6596 | Clam Anti Virus | Improper Input Validation vulnerability in Clam Anti-Virus Clamav 0.92 ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file. | 5.0 |
2008-01-04 | CVE-2007-6659 | 2Z Project | Cross-Site Scripting vulnerability in 2Z Project 2Z Project 0.9.6.1 Multiple cross-site scripting (XSS) vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) contentshort or (2) contentfull parameter in an addnews action to the default URI; (3) the content parameter in a pm write action to 2z/admin.php; (4) the referer parameter to templates/default/usermenu.tpl, accessed through index.php; or the (5) newavatar or (6) newphoto parameter in a profile action to the default URI under 2z/. | 4.3 |
2008-01-04 | CVE-2007-6599 | Openafs Debian | Race Condition vulnerability in multiple products Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service (daemon crash) by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list operations without the host_glock lock. | 4.3 |
2008-01-04 | CVE-2008-0092 | Phpwebsite | Cross-Site Scripting vulnerability in PHPwebsite 1.4.0 Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. | 4.3 |
2008-01-04 | CVE-2007-6646 | Integry Systems | Cross-Site Scripting vulnerability in Integry Systems Livecart 1.0.1 Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow remote attackers to inject arbitrary web script or HTML via (1) the return parameter to user/remindPassword, (2) the q parameter to the category script, (3) the return parameter to the order script, or (4) the email parameter to user/remindComplete. | 4.3 |
2008-01-04 | CVE-2007-6643 | Joomla | Cross-Site Scripting vulnerability in Joomla 1.5Rc4 Cross-site scripting (XSS) vulnerability in the com_poll component in Joomla! before 1.5 RC4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
2008-01-04 | CVE-2007-6641 | Milliscripts | Cross-Site Scripting vulnerability in Milliscripts Cross-site scripting (XSS) vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a browse action. | 4.3 |
2008-01-04 | CVE-2007-6637 | Adobe | Cross-Site Scripting vulnerability in Adobe Flash Player Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. | 4.3 |
2008-01-04 | CVE-2007-6633 | Netbizcity | Cross-Site Scripting vulnerability in Netbizcity Faqmasterflexplus Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to inject arbitrary web script or HTML via (1) the cat_name parameter to faq.php; and unspecified parameters to the (2) add categories, (3) edit categories, (4) delete categories, (5) add faq, (6) edit faq, and (7) delete faq Admin scripts. | 4.3 |
2008-01-03 | CVE-2007-6617 | Atlassian | Cross-Site Scripting vulnerability in Atlassian Jira Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attackers to inject arbitrary web script or HTML, which is not properly handled when generating error messages, as demonstrated by input originally sent in the URI to secure/CreateIssue. | 4.3 |
2008-01-03 | CVE-2007-6616 | Simpleforum | Cross-Site Scripting vulnerability in Simpleforum Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchkey parameter in a search action. | 4.3 |
2008-01-03 | CVE-2007-6611 | Mantis | Cross-Site Scripting vulnerability in Mantis Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bug_report.php. | 4.3 |
2007-12-31 | CVE-2007-6608 | Openbiblio | Cross-Site Scripting vulnerability in Openbiblio Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.php, (3) the name parameter to admin/theme_del_confirm.php, or (4) the themeName parameter to admin/theme_preview.php. | 4.3 |
1 Low Vulnerabilities
DATE | CVE | VENDOR | VULNERABILITY | CVSS |
---|---|---|---|---|
2007-12-31 | CVE-2007-6595 | Clam Anti Virus | Link Following vulnerability in Clam Anti-Virus Clamav 0.92 ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled. | 2.1 |