Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6629 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a User-Agent header line that contains a carriage-return character, which is considered a line delimiter when the header is split into individual lines, but not when log_user_agent in RTSP_utils.c parses the content of the User-Agent line. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40537 - http://www.securityfocus.com/archive/1/485574/100/0
tes: - CVE Program Container: References: - http://osvdb.org/40537 - http://www.securityfocus.com/archive/1/485574/100/0/threaded - http://www.securityfocus.com/bid/27049 - http://www.vupen.com/english/advisories/2008/0011 - http://aluigi.org/poc/fengulo.zip - http://aluigi.altervista.org/adv/fengulo-adv.txt - http://securityreason.com/securityalert/3507 - http://secunia.com/advisories/28229
CVE ID: CVE-2007-6630 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Url_init function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a malformed URI containing a "/:" sequence, as demonstrated by a "DESCRIBE /: RTSP/1.0" request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0012 - http://www.securityfocus.com/archive/1/485574/100/0/threaded - http://secunia.com/advisories/28253 - http://www.securityfocus.com/bid/27049 -
us.com/archive/1/485574/100/0/threaded - http://secunia.com/advisories/28253 - http://www.securityfocus.com/bid/27049 - http://aluigi.org/poc/fengulo.zip - http://aluigi.altervista.org/adv/fengulo-adv.txt - http://securityreason.com/securityalert/3507 - http://osvdb.org/40158
CVE ID: CVE-2007-6631 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote attackers to execute arbitrary code via (1) a reply that begins with a long version string, which triggers an overflow in handle_rtsp_pkt in rtsp_handlers.c; long headers that trigger overflows in (2) send_pause_request, (3) send_play_request, (4) send_setup_request, or (5) send_teardown_request in rtsp_send.c, as demonstrated by the Content-Base header; or a long Transport header, which triggers an overflow in (6) get_transport_str_sctp, (7) get_
the Content-Base header; or a long Transport header, which triggers an overflow in (6) get_transport_str_sctp, (7) get_transport_str_tcp, or (8) get_transport_str_udp in rtsp_transport.c. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42820 - http://www.securityfocus.com/archive/1/485575/100/0/threaded - http://securityreason.com/securityalert/3513 - http://osvdb.org/42822 - http://www.vupen.com/english/advisories/2008/0010 - http://www.securityfocus.com/bid/27048 - http://osvdb.org/42821 - http://aluigi.altervista.org/adv/libnemesibof-adv.txt - http://aluigi.org/poc/libnemesibof.zip
CVE ID: CVE-2007-6632 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: showCode.php in xml2owl 0.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.inj3ct-it.org/exploit/xml2owl-0.1.1.rce.txt - https://www.exploit-db.com/exploits/4800 - http://www.securityfocus.com/bid/27050 - http://osvdb.org/39880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39327
CVE ID: CVE-2007-6633 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to inject arbitrary web script or HTML via (1) the cat_name parameter to faq.php; and unspecified parameters to the (2) add categories, (3) edit categories, (4) delete categories, (5) add faq, (6) edit faq, and (7) delete faq Admin scripts. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html - http://secunia.com/advisorie
eferences: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html - http://secunia.com/advisories/28248 - http://www.securityfocus.com/archive/1/485589/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39287 - http://osvdb.org/39664 - http://www.securityfocus.com/bid/27051
CVE ID: CVE-2007-6634 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to execute arbitrary SQL commands via the category_id parameter to faq.php, and unspecified other vectors involving additional scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27052 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39286 - http://secunia.com/advisories/28248 - http:/
/059318.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39286 - http://secunia.com/advisories/28248 - http://osvdb.org/39665 - http://www.securityfocus.com/archive/1/485589/100/0/threaded
CVE ID: CVE-2007-6635 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a database, which might allow context-dependent attackers to obtain the password via unspecified database access. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059318.html - http://www.securityfocus.com/archive/1/485589/100/0/threaded
CVE ID: CVE-2007-6636 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the StorageFarabDb module in Bitflu before 0.42 allows user-assisted remote attackers to create or append data to arbitrary files via a crafted .torrent file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27043 - http://osvdb.org/39892 - http://bitflu.workaround.ch/ChangeLog.txt - http://secunia.com/advisories/28238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39269
CVE ID: CVE-2007-6637 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by CVE-2007-6244.1. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29865 - http://secunia.com/advisories/30507 - http://www.adobe.com/support/security/bulletins/apsb08-11.html - http://ww
29865 - http://secunia.com/advisories/30507 - http://www.adobe.com/support/security/bulletins/apsb08-11.html - http://www.vupen.com/english/advisories/2008/1724/references - http://www.redhat.com/support/errata/RHSA-2008-0221.html - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://www.securityfocus.com/bid/27034 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html - http://secunia.com/advisories/29763 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
m/search/document.do?assetkey=1-26-238305-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9828 - http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml - http://www.vupen.com/english/advisories/2008/1697 - http://securitytracker.com/id?1019141 - http://www.adobe.com/support/security/advisories/apsa07-06.html - http://www.us-cert.gov/cas/techalerts/TA08-100A.html
CVE ID: CVE-2007-6638 State: PUBLISHED Published: 2008-01-04T00:00:00 Last Updated: 2024-08-07T16:11:06.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4797 - http://www.sybsecurity.com/pages/advisors/static/dvr3204_exp.txt - http://www.securityfocus.com/bid/27054 - http://www.sybsecurity.com/advisors/SYBSEC-ADV14-March_Networks_DVR
4_exp.txt - http://www.securityfocus.com/bid/27054 - http://www.sybsecurity.com/advisors/SYBSEC-ADV14-March_Networks_DVR_3204_Logfile_Information_Disclosure - http://osvdb.org/39726 - http://www.milw0rm.com/papers/190 - http://secunia.com/advisories/28211 - http://www.sybsecurity.com/resources/static/An_Insecurity_Overview_of_the_March_Networks_DVR-CCTV_3204.pdf
CVE ID: CVE-2007-6639 State: PUBLISHED Published: 2008-01-04T01:00:00 Last Updated: 2024-08-07T16:11:06.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in IPTBB 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewdir action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39340 - http://www.securityfocus.com/bid/27082 - http://osvdb.org/39881 - https://www.exploit-db.com/exploits/4821
CVE ID: CVE-2007-6640 State: PUBLISHED Published: 2008-01-04T01:00:00 Last Updated: 2024-08-07T16:11:06.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the (1) GM_addStyle, (2) GM_log, (3) GM_openInTab, (4) GM_setValue, (5) GM_getValue, or (6) GM_xmlhttpRequest function within a web page on which a userscript is configured. Additional Analyst Notes: - CVE Program Container: References: - http://8-p.info/greasekit/vuln/20071226-en.html - http://secunia.co
nalyst Notes: - CVE Program Container: References: - http://8-p.info/greasekit/vuln/20071226-en.html - http://secunia.com/advisories/28241 - http://osvdb.org/42819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39272
CVE ID: CVE-2007-6641 State: PUBLISHED Published: 2008-01-04T01:00:00 Last Updated: 2024-08-07T16:11:06.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a browse action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485653/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39306 - http://osvdb.org/39882 - http://securityreason.com/securityalert/3508 - http://secunia.com/advisories/28306 - http://www.securityfocus.com/bid/27078
CVE ID: CVE-2007-6642 State: PUBLISHED Published: 2008-01-04T01:00:00 Last Updated: 2024-08-07T16:11:06.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Joomla! before 1.5 RC4 allow remote attackers to (1) add a Super Admin, (2) upload an extension containing arbitrary PHP code, and (3) modify the configuration as administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28111 - http://secunia.com/advisories/29257 - http://securitytracker.com/id?1019145 - http://www.joomla.org/content/view/4335/116/ - http://www.securityfocus.com/archive
p://securitytracker.com/id?1019145 - http://www.joomla.org/content/view/4335/116/ - http://www.securityfocus.com/archive/1/485676/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2008:060 - http://securityreason.com/securityalert/3505 - http://osvdb.org/41263
CVE ID: CVE-2007-6643 State: PUBLISHED Published: 2008-01-04T01:00:00 Last Updated: 2024-08-07T16:11:06.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the com_poll component in Joomla! before 1.5 RC4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28111 - http://secunia.com/advisories/29257 - http://www.joomla.org/content/view/4335/116/ - http://securitytracker.com/id?1019145 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:060 - http://osvdb.org/39979
CVE ID: CVE-2007-6644 State: PUBLISHED Published: 2008-01-04T01:00:00 Last Updated: 2024-08-07T16:11:06.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28111 - http://secunia.com/advisories/29257 - http://www.joomla.org/content/view/4335/116/ - http://securitytracker.com/id?1019145 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:060 - http://osvdb.org/43277
CVE ID: CVE-2007-6645 State: PUBLISHED Published: 2008-01-04T01:00:00 Last Updated: 2024-08-07T16:11:06.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Joomla! before 1.5 RC4 allows remote authenticated users to gain privileges via unspecified vectors, aka "registered user privilege escalation vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28111 - http://osvdb.org/43276 - http://secunia.com/advisories/29257 - http://www.joomla.org/content/view/4335/116/ - http://securitytracker.com/id?1019145 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:060
CVE ID: CVE-2007-6646 State: PUBLISHED Published: 2008-01-04T01:00:00 Last Updated: 2024-08-07T16:11:06.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow remote attackers to inject arbitrary web script or HTML via (1) the return parameter to user/remindPassword, (2) the q parameter to the category script, (3) the return parameter to the order script, or (4) the email parameter to user/remindComplete. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27087 - http://securityreason.com/securityalert/3512 - http://osv
tainer: References: - http://www.securityfocus.com/bid/27087 - http://securityreason.com/securityalert/3512 - http://osvdb.org/39756 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0003.html - http://osvdb.org/39758 - http://www.securityfocus.com/archive/1/485654/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39305 - http://osvdb.org/39757 - http://livecart.com/news/Major-update-LiveCart-1-1-0.8 - http://secunia.com/advisories/28017 - http://www.hackerscenter.com/archive/view.asp?id=28144 - http://www.securitytracker.com/id?1019151
CVE ID: CVE-2007-6647 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:11:06.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4817 - http://www.securityfocus.com/bid/27070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39308 - http://osvdb.org/39883
CVE ID: CVE-2007-6648 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:11:06.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28270 - http://www.securityfocus.com/bid/27072 - http://osvdb.org/39784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39392 - https://www.exploit-db.com/exploits/4816
CVE ID: CVE-2007-6649 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:11:06.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/tumbnail.php in MatPo Bilder Galerie 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4815 - http://osvdb.org/39916 - http://www.securityfocus.com/bid/27073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39314
CVE ID: CVE-2007-6650 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:11:06.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485642/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39321 - http://www.bugreport.ir/?/24 - http://osvdb.org/40155 - http://www.securityfocus
ce.ibmcloud.com/vulnerabilities/39321 - http://www.bugreport.ir/?/24 - http://osvdb.org/40155 - http://www.securityfocus.com/bid/27079 - https://www.exploit-db.com/exploits/4814
CVE ID: CVE-2007-6651 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive information (script source code) via a .. (dot dot) in the suck_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485642/100/0/threaded - http://www.securityfocus.com/bid/27081 - http://secunia.com/advisories/28300 - http://osvdb.org/39915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39322 - http://www.bugreport.ir/?/24 - https://www.ex
b.org/39915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39322 - http://www.bugreport.ir/?/24 - https://www.exploit-db.com/exploits/4814
CVE ID: CVE-2007-6652 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39346 - http://secunia.com/advisories/28256 - http
/exploits/4813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39346 - http://secunia.com/advisories/28256 - http://osvdb.org/40277
CVE ID: CVE-2007-6653 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39330 - http://www.securityfocus.com/bid/27076 - http://osvdb.org/39884
CVE ID: CVE-2007-6654 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows remote attackers to execute arbitrary code via a long string in the ProductCode argument (second argument) to the DownloadAndExecute method, a different vulnerability than CVE-2007-0321, CVE-2007-2419, and CVE-2007-5660. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4819 - http://osvdb.org/39980 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-De
//www.exploit-db.com/exploits/4819 - http://osvdb.org/39980 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059288.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39204
CVE ID: CVE-2007-6655 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27075 - http://secunia.com/advisories/28296 - http://osvdb.org/39836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39310 - https://www.exploit-db.com/exploits/4811
CVE ID: CVE-2007-6656 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forum.cmsmadesimple.org/index.php/topic%2C18240.0.html - http://osvdb.org/39788 - http://www.securityfocus.com/bid/27074 - http://blog.cmsmadesimple.org/2008/01/02/announcing-cms-made-simple-123/ - https://www.exploit-db.com/exploits/4810 - http://secunia.com/advis
ple.org/2008/01/02/announcing-cms-made-simple-123/ - https://www.exploit-db.com/exploits/4810 - http://secunia.com/advisories/28285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39311
CVE ID: CVE-2007-6657 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfh_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39316 - http://osvdb.org/39895