Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0638 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:54.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database contents) via a % (percent) character in the dbfieldv parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3226 - http://osvdb.org/33070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31976 - http://secunia.com/advisories/23962 - http://www.securityfocus.com/bid/22312 - http://www.vupen.com/english/advisories/2007/0429
CVE ID: CVE-2007-0639 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:54.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via (1) a REMOTE_ADDR cookie or (2) a cookie specifying an element of the msg array with an error number in the first dimension and 0 in the second dimension, as demonstrated by msg[999][0]. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31882
ontainer: References: - http://secunia.com/advisories/23914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31882 - http://securitytracker.com/id?1017569 - http://www.vupen.com/english/advisories/2007/0421 - http://retrogod.altervista.org/guppy_4516_cmd.html - https://www.exploit-db.com/exploits/3221 - http://osvdb.org/33016
CVE ID: CVE-2007-0640 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:53.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ZABBIX before 1.1.5 has unknown impact and attack vectors related to "SNMP IP addresses." Additional Analyst Notes: - CVE Program Container: References: - http://www.zabbix.com/rn1.1.5.php - http://www.vupen.com/english/advisories/2007/0416 - http://www.securityfocus.com/bid/22321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32038 - http://osvdb.org/33081 - http://secunia.com/advisories/24020
CVE ID: CVE-2007-0641 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:54.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions (SSC) DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22301 - http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c - http://osvdb.org/38119
CVE ID: CVE-2007-0642 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:54.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tForum 2.00 in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) pass to user_confirm.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22350 - http://www.securityfocus.com/archive/1/458495/100/0/threaded - http://forums.avenir-geopolitique.net/viewtopic.php?t=2607 - http://securityreason.com/securityalert/2201 - https://exchange.xforce.ibmcloud.com/vulnerabili
t/viewtopic.php?t=2607 - http://securityreason.com/securityalert/2201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31927 - http://www.osvdb.org/36040 - http://www.attrition.org/pipermail/vim/2007-January/001259.html - http://www.securityfocus.com/archive/1/458560/100/0/threaded
CVE ID: CVE-2007-0643 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:54.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long line in a .cpp file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38131 - http://www.securityfocus.com/bid/22315 - https://www.exploit-db.com/exploits/3229
CVE ID: CVE-2007-0644 State: PUBLISHED Published: 2007-02-01T00:00:00 Last Updated: 2024-08-07T12:26:54.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in filenames that are not properly handled when calling the (1) NSLog and (2) NSBeginAlertSheet Apple AppKit functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22326 - http://www.osvdb.org/32710 - http://www.digitalmunition.com/MOAB-30-01-2007.html
CVE ID: CVE-2007-0645 State: PUBLISHED Published: 2007-02-01T00:00:00 Last Updated: 2024-08-07T12:26:54.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling certain Apple AppKit functions. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/moab/MOAB-30-01-2007.html - http://www.securityfocus.com/bid/22326 - http://www.osvdb.org/32711 - http://www.digitalmunition.com/MOAB-30-01-2007.html
CVE ID: CVE-2007-0646 State: PUBLISHED Published: 2007-02-01T00:00:00 Last Updated: 2024-08-07T12:26:54.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling the NSRunCriticalAlertPanel Apple AppKit function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24966 - http://www.securityfocus.com/bid/26444 - http://www.securityfocus.com/bid/22326 - http://docs.info.apple.com/article.
- http://www.securityfocus.com/bid/26444 - http://www.securityfocus.com/bid/22326 - http://docs.info.apple.com/article.html?artnum=305391 - http://www.us-cert.gov/cas/techalerts/TA07-109A.html - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/27643 - http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html - http://www.vupen.com/english/advisories/2007/1470 - http://www.digitalmunition.com/MOAB-30-01-2007.html - http://www.us-cert.gov/cas/techalerts/TA07-319A.html
CVE ID: CVE-2007-0647 State: PUBLISHED Published: 2007-02-01T00:00:00 Last Updated: 2024-08-07T12:26:54.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling the NSBeginAlertSheet Apple AppKit function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22326 - http://www.osvdb.org/32707 - http://www.digitalmunition.com/MOAB-30-01-2007.html
CVE ID: CVE-2007-0648 State: PUBLISHED Published: 2007-02-01T01:00:00 Last Updated: 2024-08-07T12:26:54.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23978 - http://www.cisco.com/warp/public/707/cisco-sa-20070131-sip.shtml - http://securitytracker.com/id?1017575 - http://www.cisco.com/warp/public/707/cisco-air-20070131-sip.shtml - http://www.
http://securitytracker.com/id?1017575 - http://www.cisco.com/warp/public/707/cisco-air-20070131-sip.shtml - http://www.securityfocus.com/bid/22330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31990 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5138 - http://www.vupen.com/english/advisories/2007/0428 - http://www.kb.cert.org/vuls/id/438176
CVE ID: CVE-2007-0649 State: PUBLISHED Published: 2007-02-01T01:00:00 Last Updated: 2024-08-07T12:26:53.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct (a) remote file inclusion attacks via the srcdir parameter in custom/import_xml.php or (b) cross-site scripting (XSS) attacks via the rootdir parameter in interface/login/login_frame.php, via vectors associated with extract operations on the (1) POST and (2) GET superglobal arrays. NOTE: this issue was originally disput
ssociated with extract operations on the (1) POST and (2) GET superglobal arrays. NOTE: this issue was originally disputed before the extract behavior was identified in post-disclosure analysis. Also, the original report identified "Open Conference Systems," but this was an error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458565/100/0/threaded - http://attrition.org/pipermail/vim/2007-January/001254.html - http://www.securityfocus.com/archive/1/458456/100/0/threaded - http://osvdb.org/33603 - http://www.securityfocus.com/bid/22348 - http://www.securityfocus.com/archive/1/458476/100/0/threaded - http://www.securityfocus.com/bid/223
ocus.com/bid/22348 - http://www.securityfocus.com/archive/1/458476/100/0/threaded - http://www.securityfocus.com/bid/22346 - http://osvdb.org/33609 - http://securityreason.com/securityalert/2202 - http://www.securityfocus.com/archive/1/458306/100/0/threaded - http://www.securityfocus.com/archive/1/458486/100/0/threaded - http://www.securityfocus.com/archive/1/458426/100/0/threaded - http://attrition.org/pipermail/vim/2007-January/001258.html
CVE ID: CVE-2007-0650 State: PUBLISHED Published: 2007-02-01T19:00:00 Last Updated: 2024-08-07T12:26:54.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attackers to overwrite files and possibly execute arbitrary code via a long filename. NOTE: other overflows exist but might not be exploitable, such as a heap-based overflow in the check_idx function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26982 - http://www.securityfocus.com/bid/23872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32284 - http://securi
82 - http://www.securityfocus.com/bid/23872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32284 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://secunia.com/advisories/30168 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=225491 - http://security.gentoo.org/glsa/glsa-200709-17.xml - http://www.vupen.com/english/advisories/2007/1706 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:109 - http://security.gentoo.org/glsa/glsa-200711-34.xml - https://issues.rpath.com/browse/RPL-1036
CVE ID: CVE-2007-0651 State: PUBLISHED Published: 2007-02-15T23:00:00 Last Updated: 2024-08-07T12:26:54.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2258 - http://secunia.com/advisories/23998 - http://www.mailenable.com/Professional20-ReleaseNotes.txt - http://osvdb.org
258 - http://secunia.com/advisories/23998 - http://www.mailenable.com/Professional20-ReleaseNotes.txt - http://osvdb.org/33189 - http://osvdb.org/33190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32480 - http://www.securityfocus.com/archive/1/460063/100/0/threaded - http://osvdb.org/33188 - http://www.vupen.com/english/advisories/2007/0595 - http://secunia.com/secunia_research/2007-38/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/32476 - http://www.securityfocus.com/bid/22554
CVE ID: CVE-2007-0652 State: PUBLISHED Published: 2007-02-15T23:00:00 Last Updated: 2024-08-07T12:26:54.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2258 - http://secunia.com/advisories/23998 - http://www.securityfocus.com/archive/1/460063/100/0/threaded - http://osvdb.org/33191 - http://www.vupen.com/english/advisories/2007/0595 - http://secunia.com/se
0063/100/0/threaded - http://osvdb.org/33191 - http://www.vupen.com/english/advisories/2007/0595 - http://secunia.com/secunia_research/2007-38/advisory/ - http://www.securityfocus.com/bid/22554
CVE ID: CVE-2007-0653 State: PUBLISHED Published: 2007-03-21T22:00:00 Last Updated: 2024-08-07T12:26:54.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in X MultiMedia System (xmms) 1.2.10, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23078 - http://secunia.com/advisories/23986 - http://secunia.com/advisories/24889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33205 - http://www.ubuntu.com/usn/usn-445-1 - http://www.nov
4889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33205 - http://www.ubuntu.com/usn/usn-445-1 - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:071 - http://www.debian.org/security/2007/dsa-1277 - http://secunia.com/advisories/24804 - http://www.vupen.com/english/advisories/2007/1057 - http://www.securityfocus.com/archive/1/463408/100/0/threaded - http://secunia.com/secunia_research/2007-47/advisory/ - http://secunia.com/advisories/24645
CVE ID: CVE-2007-0654 State: PUBLISHED Published: 2007-03-21T22:00:00 Last Updated: 2024-08-07T12:26:53.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in X MultiMedia System (xmms) 1.2.10 allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which results in a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23078 - http://secunia.com/advisories/23986 - http://secunia.com/advisories/24889 - http://www.ubuntu.com/usn/usn-445-1 - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://www.mandriva.com/s
ww.ubuntu.com/usn/usn-445-1 - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:071 - http://www.debian.org/security/2007/dsa-1277 - http://secunia.com/advisories/24804 - http://www.vupen.com/english/advisories/2007/1057 - http://www.securityfocus.com/archive/1/463408/100/0/threaded - http://secunia.com/secunia_research/2007-47/advisory/ - http://secunia.com/advisories/24645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33203
CVE ID: CVE-2007-0655 State: PUBLISHED Published: 2007-05-02T18:00:00 Last Updated: 2024-08-07T12:26:54.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, allows remote or local attackers to gain privileges and execute arbitrary commands by connecting directly to TCP port 2222. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34009 - http://www.vupen.com/english/advisories/2007/1609 - http://www.securityfocus.com/bid/23759 - http://osvdb.org/35732 - http://secunia.com/advisories/23809 - http://sec
609 - http://www.securityfocus.com/bid/23759 - http://osvdb.org/35732 - http://secunia.com/advisories/23809 - http://secunia.com/secunia_research/2007-45/advisory/ - http://www.securitytracker.com/id?1018007
CVE ID: CVE-2007-0656 State: PUBLISHED Published: 2007-02-01T22:00:00 Last Updated: 2024-08-07T12:26:54.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31985 - https://www.exploit-db.com/exploits/3231 - http://www.vupen.com/english/advisories/2007/0422 - http://osvdb.org/36018
CVE ID: CVE-2007-0657 State: PUBLISHED Published: 2007-02-01T22:00:00 Last Updated: 2024-08-07T12:26:54.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Nexuiz 2.2.2 allows remote attackers to read and overwrite arbitrary files via the gamedir command. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33018 - http://www.securityfocus.com/bid/22332 - http://www.vupen.com/english/advisories/2007/0427 - http://www.alientrap.org/devwiki/index.php?n=Nexuiz.Patch - http://secunia.com/advisories/23963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32040
CVE ID: CVE-2007-0658 State: PUBLISHED Published: 2007-02-01T22:00:00 Last Updated: 2024-08-07T12:26:54.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal allow remote attackers to bypass the CAPTCHA test via an empty captcha element in $_SESSION. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.drupal.org/viewcvs/drupal/contributions/modules/textimage/captcha.inc?r1=1.1&r2=1.1.2.1 - http://osvdb.org/32137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31994 - http://secunia.com/adviso
.1.2.1 - http://osvdb.org/32137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31994 - http://secunia.com/advisories/23983 - http://drupal.org/node/114519 - http://secunia.com/advisories/23985 - http://drupal.org/node/114364 - http://www.securityfocus.com/bid/22329 - http://www.vupen.com/english/advisories/2007/0431 - http://osvdb.org/32138 - http://cvs.drupal.org/viewcvs/drupal/contributions/modules/captcha/captcha.module?r1=1.25.2.1&r2=1.25.2.2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31984
CVE ID: CVE-2007-0659 State: PUBLISHED Published: 2007-02-01T22:00:00 Last Updated: 2024-08-07T12:26:54.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0426 - http://secunia.com/advisories/23953 - http://modxcms.com/forums/index.php/topic%2C10470.0.html - http://www.muddydogpaws.com/Home.html - http://www.securityfocus.com/bid/22327
CVE ID: CVE-2007-0660 State: PUBLISHED Published: 2007-02-01T22:00:00 Last Updated: 2024-08-07T12:26:54.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32037 - http://www.dotnetnuke.com/Default.aspx?tabid=825&EntryID=1278 - http://www.securityfocus.com/bid/22334 - http://osvdb.org/36476 - http://www.vupen.com/english/advisories/2007/0433
CVE ID: CVE-2007-0661 State: PUBLISHED Published: 2007-02-01T22:00:00 Last Updated: 2024-08-07T12:26:54.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC), Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management Interface (IPMI) is enabled, allow remote attackers to connect and issue arbitrary IPMI commands, possibly triggering a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33044 - http://w
a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33044 - http://www.securityfocus.com/bid/22341 - http://secunia.com/advisories/23989 - http://lz1.intel.com/psirt/advisory.aspx?intelid=INTEL-SA-00012&languageid=en-fr - http://www.vupen.com/english/advisories/2007/0432
CVE ID: CVE-2007-0662 State: PUBLISHED Published: 2007-02-01T22:00:00 Last Updated: 2024-08-07T12:26:54.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/usercp_viewprofile.php in Hailboards 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24002 - https://www.exploit-db.com/exploits/3236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31997 - http://osvdb.org/33078 - http://www.securityfocus.com/bid/22333 - http://www.vupen.com/english/advisories/2007/0450
CVE ID: CVE-2007-0663 State: PUBLISHED Published: 2007-02-01T22:00:00 Last Updated: 2024-08-07T12:26:54.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter, a different vector than CVE-2007-0631. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0424
CVE ID: CVE-2007-0664 State: PUBLISHED Published: 2007-02-02T00:00:00 Last Updated: 2024-08-07T12:26:54.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=142047 - http://secunia.com/advisories/24018 - http://osvdb.org/31965 - http://www.securityfocus.com/bid/22349 - http://www.gentoo.org/security/en/glsa/glsa-200701-28.xml - http://seclists.org/fulldisclosure/2023/Nov/13 - http://packetstormsecurit
too.org/security/en/glsa/glsa-200701-28.xml - http://seclists.org/fulldisclosure/2023/Nov/13 - http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html