SQL injection vulnerability in index.php in Comicsense allows remote attackers to execute arbitrary SQL commands via the epi parameter. Date published : 2007-06-06 http://www.securityfocus.com/bid/24329 http://www.securityfocus.com/archive/1/470598/100/0/threaded
Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information. Date published : 2007-06-06 http://www.securityfocus.com/archive/1/470455/100/0/threaded http://osvdb.org/42055
Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service (system hang) by capturing the outpost_ipc_hdr mutex. Date published : 2007-06-06 http://www.securityfocus.com/bid/24284...
Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpath parameter to (a) useronline.php, (b) ucp.php, (c) setcookie.php, (d) sendpm.php, (e)...
PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter, a different vector than CVE-2006-5441. Date published...
Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb. Date published : 2007-06-06 http://www.securityfocus.com/archive/1/470238/100/0/threaded http://osvdb.org/39739
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sc_language parameter. Date published : 2007-06-06 http://www.securityfocus.com/bid/24308...
PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. Date published : 2007-06-06 http://www.securityfocus.com/archive/1/470435/100/0/threaded http://osvdb.org/38362
SQL injection vulnerability in haberoku.asp in Hunkaray Okul Portaly 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained...
listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path. Date published : 2007-06-06 http://marc.info/?l=full-disclosure&m=118093304724372&w=2 http://osvdb.org/38363
Multiple cross-site scripting (XSS) vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter (Authors and Publication titles) to (1) authoractions.php or (2) publicationactions.php. Date...
SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter. Date published : 2007-06-06 http://www.securityfocus.com/bid/24294 https://www.exploit-db.com/exploits/4030
A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function. Date published : 2007-06-06 http://www.securityfocus.com/bid/24377 http://moaxb.blogspot.com/2007/05/moaxb-30-zenturi-programchecker-activex.html
Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal sequences in a URI with a certain scheme, possibly related to "..%5C" (encoded backslash) sequences. Date published...