Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2885 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70.DLL in Microsoft Visual Database Tools (MSVDT) Database Designer 7.0 allows remote attackers to cause a denial of service (Internet Explorer 6 crash) via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38140 - http://downloads.securityfocus.com/vulnerabilities/exploits/24127.html - http://www.securityfocus.com/bid/24127
CVE ID: CVE-2007-2886 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service (card hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=58493 - http://www.vupen.com/english/advisories/2007/1927 - http://www.securitytracker.com/id?1018128 - http://osvdb.org/36525 - http://secunia.com/
/english/advisories/2007/1927 - http://www.securitytracker.com/id?1018128 - http://osvdb.org/36525 - http://secunia.com/advisories/25409 - http://www.securityfocus.com/bid/24131 - http://www116.nortelnetworks.com/pub/repository/CLARIFY/DOCUMENT/2007/21/022325-01.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/34480
CVE ID: CVE-2007-2887 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Web Icerik Yonetim Sistemi (WIYS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36329 - http://securityreason.com/securityalert/2742 - http://osvdb.org/38346 - http://secunia.com/advisories/25407 - http://www.securityfocus.com/archive/1/469500/100/0/threaded - http://www.securityfocus.com/bid/24117
CVE ID: CVE-2007-2888 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string (filename) in a .cue file, a related issue to CVE-2007-2761. NOTE: some details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34485 - http://osvdb.org/36570 - http://secunia.com/advisories/25384 - https://www.exploit-db.com/ex
com/vulnerabilities/34485 - http://osvdb.org/36570 - http://secunia.com/advisories/25384 - https://www.exploit-db.com/exploits/3978
CVE ID: CVE-2007-2889 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the scormcontopen parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34483 - https://www.exploit-db.com/exploits/3980 - http://osvdb.org/38061 - http://www.securityfocus.com/bid/24136
CVE ID: CVE-2007-2890 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in cpCommerce 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id_category parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3981 - http://secunia.com/advisories/25412 - http://www.vupen.com/english/advisories/2007/1956 - http://www.securityfocus.com/bid/24138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34484 - http://osvdb.org/36315
CVE ID: CVE-2007-2891 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in FirmWorX 0.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bank_data[root] parameter to modules/bank/includes/design/main.inc.php, or the (2) fm_data[root] parameter to (a) includes/config/master.inc.php or (b) includes/functions/master.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38059 - https://www.exploit-db.com/exploits/3983 - http://www.vupen.com/english/advisories/2007/1962 - https://exchange.
38059 - https://www.exploit-db.com/exploits/3983 - http://www.vupen.com/english/advisories/2007/1962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34488 - http://osvdb.org/38057 - http://www.securityfocus.com/bid/24143 - http://osvdb.org/38058
CVE ID: CVE-2007-2892 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34769 - http://www.securityfocus.com/bid/24135 - http://downloads.securityfocus.com/vulnerabilities/exploits/24135.htm
s/34769 - http://www.securityfocus.com/bid/24135 - http://downloads.securityfocus.com/vulnerabilities/exploits/24135.html
CVE ID: CVE-2007-2893 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the bx_ne2k_c::rx_frame function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register values to exceed the device memory size, aka "RX Frame heap overflow." Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=188148 - http://secunia.com/advisories/27715 - http://tavis
tainer: References: - http://bugs.gentoo.org/show_bug.cgi?id=188148 - http://secunia.com/advisories/27715 - http://taviso.decsystem.org/virtsec.pdf - http://secunia.com/advisories/26364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34508 - http://security.gentoo.org/glsa/glsa-200711-21.xml - http://osvdb.org/36799 - http://www.debian.org/security/2007/dsa-1351 - http://www.securityfocus.com/bid/24246 - http://www.vupen.com/english/advisories/2007/1936 - http://secunia.com/advisories/25470
CVE ID: CVE-2007-2894 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=188148 - http://secunia.com/advisories/27715 - http://taviso.decsystem.org/virtsec.pdf - http://osvdb.org/42119 - http://security.gentoo.org/glsa/glsa-200711-21.xml - http://www.securityfocus.com/bid/24246 - http://
/osvdb.org/42119 - http://security.gentoo.org/glsa/glsa-200711-21.xml - http://www.securityfocus.com/bid/24246 - http://www.vupen.com/english/advisories/2007/1936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34513 - http://secunia.com/advisories/25470
CVE ID: CVE-2007-2895 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25381 - http://shinnai.altervista.org/viewtopic.php?id=42&t_id=27 - http://osvdb.org/36035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34478 - http://www.securityfocus.com/bid/24133 - http://moaxb.blogspot.com/2007/05/moaxb-24-le
cloud.com/vulnerabilities/34478 - http://www.securityfocus.com/bid/24133 - http://moaxb.blogspot.com/2007/05/moaxb-24-leadtools-raster-dialog-file.html - http://www.shinnai.altervista.org/moaxb/20070524/leaddfotxt.html
CVE ID: CVE-2007-2896 State: PUBLISHED Published: 2007-05-30T01:00:00 Last Updated: 2024-08-07T13:57:54.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Symantec Enterprise Security Manager (ESM) 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service (CPU consumption and application hang) via certain network scans to ESM ports. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2007.05.24b.html - http://www.securitytracker.com/id?1018120 - http://www.vupen.com/english/advisories/2007/1940 - http://www.securityfocus.com/bid/24123
ritytracker.com/id?1018120 - http://www.vupen.com/english/advisories/2007/1940 - http://www.securityfocus.com/bid/24123 - http://securityresponse.symantec.com/avcenter/security/Content/2007.05.24a.html - http://secunia.com/advisories/25390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34507 - http://osvdb.org/35077
CVE ID: CVE-2007-2897 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang), and possibly obtain sensitive information (device communication traffic); and might allow attackers with physical access to execute arbitrary code after connecting a data stream to a device COM port; via requests for a URI containing a '/' immediately before and after the name of a DOS device, as demonstrated by the /AUX/.aspx URI, which bypasses a blacklist for DOS device requests. Additi
name of a DOS device, as demonstrated by the /AUX/.aspx URI, which bypasses a blacklist for DOS device requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34418 - http://archives.neohapsis.com/archives/fulldisclosure/2007-05/0419.html - http://seclists.org/fulldisclosure/2007/May/0378.html
CVE ID: CVE-2007-2898 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2752 - http://www.waraxe.us/advisory-51.html - http://secunia.com/advisories/25336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34471 - http://www.vupen.com/english/advisories/2007/1923 - http://www.securityfocus.com/archive/1/469351/100/0/threaded
4471 - http://www.vupen.com/english/advisories/2007/1923 - http://www.securityfocus.com/archive/1/469351/100/0/threaded - http://osvdb.org/36569
CVE ID: CVE-2007-2899 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in admin_config.php in NavBoard 2.6.0 allows remote attackers to inject arbitrary PHP code into data/config.php via multiple parameters, as demonstrated via the threadperpage parameter in an editconfig action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34472 - https://www.exploit-db.com/exploits/3971 - http://www.securityfocus.com/bid/24120
CVE ID: CVE-2007-2900 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Scallywag 2005-04-25 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to template.php in (1) skin/dark/, (2) skin/gold/, or (3) skin/original/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38143 - https://www.exploit-db.com/exploits/3972 - http://www.vupen.com/english/advisories/2007/1933 - http://osvdb.org/38144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34469 - http://osvdb.org/38142
CVE ID: CVE-2007-2901 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the img parameter to main/inc/lib/fckeditor/editor/plugins/ImageManager/editor.php and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3974 - http://secunia.com/advisories/25397 - http://www.vupen.com/english/advisories/2007/1934 - http://osvdb.org/36521 - https://exchange.xforce.ibmcloud.com/vulnerabilit
/www.vupen.com/english/advisories/2007/1934 - http://osvdb.org/36521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34733 - http://www.securityfocus.com/bid/24125
CVE ID: CVE-2007-2902 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3974 - http://osvdb.org/38145 - http://www.vupen.com/english/advisories/2007/1934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34468 - http://www.securityfocus.com/bid/24125
CVE ID: CVE-2007-2903 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument. NOTE: it is not clear whether this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://shinnai.altervista.org/viewtopic.php?id=42&t_id=26 - http://moaxb.blogspot.com/2007/05/moaxb-23-microsoft-office-2000.html - https://exchan
org/viewtopic.php?id=42&t_id=26 - http://moaxb.blogspot.com/2007/05/moaxb-23-microsoft-office-2000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34473 - http://www.securitytracker.com/id?1018107 - http://www.securityfocus.com/bid/24118 - http://osvdb.org/36034 - http://www.shinnai.altervista.org/moaxb/20070523/ouactrltxt.html
CVE ID: CVE-2007-2904 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018106 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102909-1 - http://osvdb.org/38146
CVE ID: CVE-2007-2905 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the post_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2752 - http://www.waraxe.us/advisory-51.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34471 - http://www.vupen.com/english/advisories/2007/192
-51.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34471 - http://www.vupen.com/english/advisories/2007/1923 - http://www.securityfocus.com/archive/1/469351/100/0/threaded - http://osvdb.org/36569
CVE ID: CVE-2007-2906 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:53.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service (browser crash) via a Thread subclass that calls super.run from its run method. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=107955&release_id=501861 - http://osvdb.org/40925
CVE ID: CVE-2007-2907 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36913 - http://secunia.com/advisories/25512 - http://sourceforge.net/forum/forum.php?forum_id=690648 - http://www.vupen.com/english/adv
secunia.com/advisories/25512 - http://sourceforge.net/forum/forum.php?forum_id=690648 - http://www.vupen.com/english/advisories/2007/2057 - http://www.securityfocus.com/bid/24319 - http://osvdb.org/36915
CVE ID: CVE-2007-2908 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468731/100/0/threaded - http://www.securityfocus.com/bid/24020 - http://osvdb.org/35155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34333 - http://secunia.com/advisories/25309 - http://securityreason.com/securityalert/2
rce.ibmcloud.com/vulnerabilities/34333 - http://secunia.com/advisories/25309 - http://securityreason.com/securityalert/2751
CVE ID: CVE-2007-2909 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_calendar366_xss_fix_plugin.xml update. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35156 - http://www.vbulletin.com/forum/showthread.php?postid=1355012
CVE ID: CVE-2007-2910 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_367_xss_fix_plugin.xml update, a related issue to CVE-2007-2909. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35157 - http://www.vbulletin.com/forum/showthread.php?postid=1355012
CVE ID: CVE-2007-2911 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached After" field (GPC['search']['datelineafter'] variable), a related issue to CVE-2007-1573. Additional Analyst Notes: - CVE Program Container: References: - http://www.vbulletin.com/forum/project.php?issueid=21615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34784 - http://osvdb.org/38147
CVE ID: CVE-2007-2912 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction Permissions is disabled, allows remote attackers to see the infraction "red flag" for a deleted user. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38616 - http://www.vbulletin.com/forum/project.php?issueid=21481
CVE ID: CVE-2007-2913 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34438 - http://www.securityfocus.com/archive/1/469230/100/0/threaded - http://securityreason.com/securityalert/2749
CVE ID: CVE-2007-2914 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) awards.php, (2) login.php, (3) register.php, (4) weapons.php, and possibly other unspecified files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36640 - http://osvdb.org/36641 - http://osvdb.org/36642 - http://www.securityfocus.com/archive/1/469260/100/0/threaded - http://securityreason.com/securityalert/2750 - https://exchange.xfor
securityfocus.com/archive/1/469260/100/0/threaded - http://securityreason.com/securityalert/2750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34439 - http://secunia.com/advisories/25387 - http://redlevel.org/wp-content/uploads/psychostats.txt - http://osvdb.org/36639
CVE ID: CVE-2007-2915 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RM EasyMail Plus allows remote attackers to inject arbitrary web script or HTML via the title field in an email. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34449 - http://www.securityfocus.com/archive/1/469216/100/0/threaded - http://osvdb.org/36255 - http://securityreason.com/securityalert/2746