 |
|
|
|
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: |  | 28.05.2007 | | Source: |  | | | SecurityVulns ID: |  | 7752 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Affected: |  | WORDPRESS : WordPress 2,0 | | |  | OTRS : Open Ticket Request System 2.0 | | |  | FLASHCHAT : FlashChat 4.79 | | CVE: |  | CVE-2007-2524 (Cross-site scripting (XSS) vulnerability in index.pl in OTRS (Open Ticket Request System) 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, but the proper identifier for the ipsec-tools issue is CVE-2007-1841.) |
| OpenOffice Writer DoS | | Published: |  | 28.05.2007 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 7753 | | Type: |  | client | | Level: |  | 3/10 | | Description: |  | Crash on .otp files parocessing. |
Avira Antivir integer overflow updated since 28.05.2007 | | Published: |  | 31.05.2007 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 7754 | | Type: |  | remote | | Level: |  | 6/10 | | Description: |  | Integer overflow during .LZH archive parsing leads to buffer overflow. Devision by zero on UPX decoding. Infinite loop on TAR parsing. |
|
|
|
|
|
|
|
|