Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6472 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 allow (1) remote attackers to execute arbitrary SQL commands via the type parameter to search.php and (2) remote authenticated administrators to execute arbitrary SQL commands via the listing_updated_days parameter to admin/findlistings.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39122 - http://www.osvdb.org/39267
rogram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39122 - http://www.osvdb.org/39267 - https://www.exploit-db.com/exploits/4750 - http://www.securityfocus.com/bid/26932 - http://secunia.com/advisories/28155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39121
CVE ID: CVE-2007-6473 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4742 - http://www.securityfocus.com/bid/26935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39138 - http://secunia.com/advisories/28160
CVE ID: CVE-2007-6474 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web script or HTML via the newdir parameter to index_3x.php, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39125 - https://www.exploit-db.com/exploits/4738 - http://secunia.com/advisories/28164 - http://www.securityfocus.com/bid/26936
CVE ID: CVE-2007-6475 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang_sel parameter to (1) updater.php and (2) thumber.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4738 - http://www.securityfocus.com/bid/26936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39126
CVE ID: CVE-2007-6476 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39127 - http://secunia.com/advisories/28164
CVE ID: CVE-2007-6477 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019132 - http://www.vupen.com/english/advisories/2007/4254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39123 - http://www.securityfocus.com/bid/26933 - http://support.citrix.com/article/CTX115283 - http://secunia
rabilities/39123 - http://www.securityfocus.com/bid/26933 - http://support.citrix.com/article/CTX115283 - http://secunia.com/advisories/28150
CVE ID: CVE-2007-6478 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a .M3U file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3470 - http://www.osvdb.org/39501 - http://www.securityfocus.com/bid/26920 - http://www.securityfocus.com/archive/1/488131/100/2
ttp://www.osvdb.org/39501 - http://www.securityfocus.com/bid/26920 - http://www.securityfocus.com/archive/1/488131/100/200/threaded - http://www.vupen.com/english/advisories/2007/4259 - http://www.securityfocus.com/archive/1/485253/100/0/threaded - http://secunia.com/advisories/28144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39114 - https://www.exploit-db.com/exploits/5122
CVE ID: CVE-2007-6479 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php (aka the "My profile" page) in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI under main/upload/users/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39148 - http://secunia.com/advisories/28154 - h
cus.com/bid/26940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39148 - http://secunia.com/advisories/28154 - https://www.exploit-db.com/exploits/4753
CVE ID: CVE-2007-6480 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Oracle database component in Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1 has a default account, which allows remote attackers to obtain database access and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28151 - http://www.securitytracker.com/id?1019119 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103152-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201508-1 - http://www.securityfocus.com/bid/26948 - https://
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201508-1 - http://www.securityfocus.com/bid/26948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39137 - http://osvdb.org/39563 - http://www.vupen.com/english/advisories/2007/4268
CVE ID: CVE-2007-6481 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1 allows remote attackers to create or delete arbitrary directories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26944 - http://www.vupen.com/english/advisories/2007/4269 - http://www.securitytracker.com/id?1019118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39132 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-20
https://exchange.xforce.ibmcloud.com/vulnerabilities/39132 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201227-1 - http://secunia.com/advisories/28148 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103175-1 - http://osvdb.org/40845
CVE ID: CVE-2007-6482 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26944 - http://www.vupen.com/english/advisories/2007/4269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39133 - http://www.securitytracker.com/id?1019118 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-
rabilities/39133 - http://www.securitytracker.com/id?1019118 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201227-1 - http://osvdb.org/40846 - http://secunia.com/advisories/28148 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103175-1
CVE ID: CVE-2007-6483 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the query string. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-272-01 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38636 - http://www.securityfocus.com/archive/1/484224/100/200/threaded - http://safe
xforce.ibmcloud.com/vulnerabilities/38636 - http://www.securityfocus.com/archive/1/484224/100/200/threaded - http://safenet-inc.com/support/files/SPI740SecurityPatch.zip - http://securityreason.com/securityalert/3471 - http://www.securityfocus.com/bid/26583 - http://secunia.com/advisories/27811 - http://www.vupen.com/english/advisories/2007/4011 - http://www.securityfocus.com/archive/1/484201/100/200/threaded - http://www.securitytracker.com/id?1018992
CVE ID: CVE-2007-6484 State: PUBLISHED Published: 2007-12-20T20:00:00Z Last Updated: 2024-09-16T23:56:59.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27968
CVE ID: CVE-2007-6485 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to (1) MakeXML.php or (2) MakeXML4statusCounter.php in include/monitoring/engine/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/39227 - https://www.exploit-db.com/exploits/4735 - http://www.osvdb.org/39226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39065 - http://secunia.com/advisories/28112 - http:
vdb.org/39226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39065 - http://secunia.com/advisories/28112 - http://www.securityfocus.com/archive/1/485152/100/0/threaded - http://securityreason.com/securityalert/3472 - http://www.securityfocus.com/bid/26883
CVE ID: CVE-2007-6486 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in shout.php (aka the shoutbox) in LineShout 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username (nickname) or (2) message parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28137 - http://www.securityfocus.com/bid/26906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39090 - http://davidsopas.com/blog/2007/12/
tyfocus.com/bid/26906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39090 - http://davidsopas.com/blog/2007/12/17/lineshout-v10-software-html-injection/
CVE ID: CVE-2007-6487 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Secondary Admin privileges to create Admin accounts, a different vulnerability than CVE-2006-0680. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42632 - http://www.plainblack.com/bugs/tracker/secondary-admin-can-create-user-with-admin-privilege - http://secunia.com/advisories/28059 - http://www.plainblack.com/getwebgui/advisories/webgui-7_4_18-stable-released/ - https://exchange.xforce
visories/28059 - http://www.plainblack.com/getwebgui/advisories/webgui-7_4_18-stable-released/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/39041
CVE ID: CVE-2007-6488 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the dir[classes] parameter to sitemap.xml.php or (2) the error parameter to errors.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4173 - http://osvdb.org/40986 - http://secunia.com/advisories/28047 - https://www.exploit-db.com/exploits/4712 - http://osvdb.org/40985
CVE ID: CVE-2007-6489 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gb_mail, (2) gb_name, and (3) gb_text parameters in a guestbook action to index.php, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4173 - http://secunia.com/advisories/28047 - https://www.exploit-db.com/exploits/4712 - http://osvdb.org/40987
CVE ID: CVE-2007-6490 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Falcon Series One CMS 1.4.3 allows remote attackers to change a password via a certain changepass action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4173 - http://osvdb.org/40988 - http://secunia.com/advisories/28047 - https://www.exploit-db.com/exploits/4712
CVE ID: CVE-2007-6491 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Kvaliitti WebDoc 3.0 CMS allow remote attackers to execute arbitrary SQL commands via (1) the cat_id parameter to categories.asp; and probably (2) the document_id parameter to categories.asp, and the (3) cat_id and (4) document_id parameters to subcategory.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3473 - http://www.securityfocus.com/archive/1/484758/100/100/threaded - http://osvdb.org/43709 - http://osvdb.org/43710
CVE ID: CVE-2007-6492 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via an empty string in the argument to the ProcessRequestEx method. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40240 - http://www.vupen.com/english/advisories/2007/4240 - http://www.securityfocus.com/archive/1/485261/100/0/threaded - http://secunia.com/advisories/28134 - http://retrogod.a
- http://www.securityfocus.com/archive/1/485261/100/0/threaded - http://secunia.com/advisories/28134 - http://retrogod.altervista.org/rgod_imesh.html
CVE ID: CVE-2007-6493 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to the SetHandler method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4240 - http://www.securityfocus.com/archive/1/485261/100/0/threaded - http://secunia.com/advisories/28134 - http://osvdb.org/40239 - http://retrogod.altervista.org/rgod_imesh.html
CVE ID: CVE-2007-6494 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:05.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request to AdminSettings/displays.asp with the DecideAction and ChangeSkin parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26
//securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222 - http://osvdb.org/44186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39038
CVE ID: CVE-2007-6495 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, and (4) log at arbitrary locations under the web root via a modified Dirroot parameter in an AddUser action to accounts/AccountActions.asp. NOTE: this can be leveraged for remote code execution by changing the permissions of \Forum\db, which is configured for execution of ASP scripts with administrative privileges, and then uploading a script to \Forum\
which is configured for execution of ASP scripts with administrative privileges, and then uploading a script to \Forum\db. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44184 - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222
CVE ID: CVE-2007-6496 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to CVE-2005-1654. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-
ttp://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39038
CVE ID: CVE-2007-6497 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and (2) allows remote authenticated users to change a credit amount and increase a discount via an UpdateUser action to Accounts/AccountActions.asp with modified UserName, FullName, CreditLimit, and DefaultDiscount parameters, a related issue to CVE-2005-2219. Additional Analyst Notes: - CVE Program Container: References: - http://sec
arameters, a related issue to CVE-2005-2219. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222
CVE ID: CVE-2007-6498 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) email and (2) loginname parameters to Hosting/Addreseller.asp, (3) the sortfield parameter to accounts/accountmanager.asp, (4) the GateWayID parameter to OpenApi/GatewayVariables.asp, and possibly (5) unspecified vectors to IIS/iibind.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485028/100/0/threade
tional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39036
CVE ID: CVE-2007-6499 State: PUBLISHED Published: 2007-12-20T20:00:00 Last Updated: 2024-08-07T16:11:06.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a request to fp2002/UNINSTAL.asp with a "host id (IIS) value." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert
hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://securityreason.com/securityalert/3474 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://securitytracker.com/id?1019222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39038