Computer Security
[EN] no-pyccku

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
SecurityVulns ID:7252
Threat Level:
Description:PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.
Affected:WORDPRESS : WordPress 2.0
 CEDSTAT : CedStat 1.31
 TURUNCU : Turuncu Portal 1.0
 MEGANOIDE : Meganoide's news 1.1
 CVE-2007-1046 (Dem_trac allows remote attackers to read log file contents via a direct request for /anc_sit.txt.)
 CVE-2007-1044 (Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js.")
 CVE-2007-1024 (PHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter.)
 CVE-2007-1022 (SQL injection vulnerability in h_goster.asp in Turuncu Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.)
 CVE-2007-1020 (Cross-site scripting (XSS) vulnerability in index.php in CedStat 1.31 allows remote attackers to inject arbitrary web script or HTML via the hier parameter.)
Original documentdocumentk4rtal_(at), Meganoide's news v1.1.1 < = RFi Vulnerabilities (16.02.2007)
 documentsn0oPy.team_(at), Dem_trac acces to log file wihtout authentification (16.02.2007)
 documentchernobiLe, Turuncu Portal v1.0 == SQL Injection Vulnerability (16.02.2007)
 documentsn0oPy.team_(at), CedStat v1.31 XSS (16.02.2007)
 documentMustLive, Vulnerabilities в WordPress 2.0 (16.02.2007)

EasyMail ActiveX buffer overflow
SecurityVulns ID:7253
Threat Level:
Description:Buffer overflow in IMAP4 object's Connect method.
Affected:QUIKSOFT : EasyMail Objects 6.5
CVE:CVE-2007-1029 (Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows remote attackers to execute arbitrary code via a long host name.)
Original documentdocumentPaul Craig, EasyMail Objects v6.5 Connect Method Stack Overflow (16.02.2007)

Microsoft Word 2000 / XP 0-day vulnerability
SecurityVulns ID:7254
Threat Level:
Description:Vulnerability is used in-the-wild for malware trojan installation.
Affected:MICROSOFT : Office 2000
CVE:CVE-2007-0870 (Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service (crash) via unknown vectors, a different vulnerability than CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, and CVE-2007-0515, a variant of Exploit-MS06-027.)
Original documentdocumentMICROSOFT, Microsoft Security Advisory (933052) Vulnerability in Microsoft Word Could Allow Remote Code Executio (16.02.2007)
Files:Microsoft Security Advisory (933052) Vulnerability in Microsoft Word Could Allow Remote Code Execution

ActSoft DVD-Tools ActiveX buffer overflow
updated since 16.02.2007
SecurityVulns ID:7251
Threat Level:
Description:Stack buffer overrun in OpenDVD method within dvdtools.ocx ActiveX class library.
CVE:CVE-2007-0976 (Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary code via a long DVD_TOOLS.OpenDVD property value.)
Files:Exploits ActSoft DVD-Tools (dvdtools.ocx) Buffer Overflow
 ActSoft DVD-Tools (dvdtools.ocx) Buffer Overflow Exploit

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod