270691
|
- |
|
watchtower
|
watchtower
|
Unspecified vulnerability in Watchtower (WT) before 0.12 has unknown impact and attack vectors, related to "unauthorized accounts."
|
NVD-CWE-noinfo
|
CVE-2007-1134
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270692
|
- |
|
watchtower
|
watchtower
|
Watchtower is prone to an unspecified authentication-bypass vulnerability.
An attacker can exploit this issue to gain unauthorized access to the application.
Versions prior to 0.12 are vulnerab…
|
NVD-CWE-noinfo
|
CVE-2007-1134
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270693
|
- |
|
watchtower
|
watchtower
|
The vendor has released version 0.12 to address this issue.
Download: http://downloads.sourceforge.net/wtelements/wt0.12.tar.gz?modtime=1171 460836&big_mirror=0
|
NVD-CWE-noinfo
|
CVE-2007-1134
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270694
|
- |
|
sourceforge
|
webmplayer
|
Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the (1) strid parameter to index.php and the (2) id[0] or other id…
|
NVD-CWE-Other
|
CVE-2007-1135
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270695
|
- |
|
webmplayer
|
webmplayer
|
index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injec…
|
CWE-20
Improper Input Validation
|
CVE-2007-1136
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270696
|
- |
|
trend_micro
|
serverprotect
|
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_in…
|
NVD-CWE-Other
|
CVE-2007-1168
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270697
|
- |
|
web-app.org
|
webapp
|
Cross-site scripting (XSS) vulnerability in an admin feature in WebAPP before 20070209 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2007-1175
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270698
|
- |
|
web-app.org
|
webapp
|
WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum Post icon field, (4) the Edit Profile, and (5) the Gallery, …
|
NVD-CWE-Other
|
CVE-2007-1177
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270699
|
- |
|
web-app.org
|
webapp
|
WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and a…
|
NVD-CWE-Other
|
CVE-2007-1178
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270700
|
- |
|
web-app.org
|
webapp
|
WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to (1) the Recommend feature, Email Article (2) senders and (3) recipients, (4) New User Approval, (5) Edit…
|
NVD-CWE-Other
|
CVE-2007-1179
|
2011-03-8 11:51 |
2007-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|