Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5663 State: PUBLISHED Published: 2008-02-12T18:00:00 Last Updated: 2024-08-07T15:39:13.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in. NOTE: this issue might be subsumed by CVE-2008-0655. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-043A.html - http://www.adobe.com/support/security/bulletins/apsb08-13.html - http://www.vupen.com/english/advisories/2008/1966/references - http://labs.idefense.com/intelligence/vulnerab
-13.html - http://www.vupen.com/english/advisories/2008/1966/references - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=656 - http://www.kb.cert.org/vuls/id/140129 - http://www.adobe.com/support/security/advisories/apsa08-01.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 - http://security.gentoo.org/glsa/glsa-200803-01.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9928 - http://secunia.com/advisories/29065 - http://secunia.com/advisories/30840 - http://secunia.com/advisories/29205 - http://www.redhat.com/support/errata/RHSA-2008-0144.html
CVE ID: CVE-2007-5664 State: PUBLISHED Published: 2008-04-16T18:00:00 Last Updated: 2024-08-07T15:39:13.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=688 - http://www.securitytracker.com/id?1019852 - http://secunia.com/advisories/29784 - http://www.vupen.com/english/advisories/2008/1237/referenc
racker.com/id?1019852 - http://secunia.com/advisories/29784 - http://www.vupen.com/english/advisories/2008/1237/references - http://www.securityfocus.com/bid/27870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41848
CVE ID: CVE-2007-5665 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T15:39:13.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management (ESM) 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe binary in the diagnostic report directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27146 - http://www.securitytracker.com/id?1019155 - http://secunia.com/advisories/28351 - htt
/www.securityfocus.com/bid/27146 - http://www.securitytracker.com/id?1019155 - http://secunia.com/advisories/28351 - http://www.vupen.com/english/advisories/2008/0044 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=635
CVE ID: CVE-2007-5666 State: PUBLISHED Published: 2008-02-12T18:00:00 Last Updated: 2024-08-07T15:39:13.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory. NOTE: this issue might be subsumed by CVE-2008-0655. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-043A.html - http://www.adobe.com/support/security/bulletins/apsb08-13.html - http://www.vupen.com/english/advisories/2008/1966/references - https://oval.cisecu
t/security/bulletins/apsb08-13.html - http://www.vupen.com/english/advisories/2008/1966/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11161 - http://www.adobe.com/support/security/advisories/apsa08-01.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 - http://security.gentoo.org/glsa/glsa-200803-01.xml - http://secunia.com/advisories/29065 - http://secunia.com/advisories/30840 - http://secunia.com/advisories/29205 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=655 - http://www.redhat.com/support/errata/RHSA-2008-0144.html
CVE ID: CVE-2007-5667 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:39:13.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes the \.\nwfilter device available for arbitrary user-mode input via METHOD_NEITHER IOCTLs, which allows local users to gain privileges by passing a kernel address as an argument and overwriting kernel memory locations. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38434 - http://www.securitytracker.com/id?1018943 - https://s
678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38434 - http://www.securitytracker.com/id?1018943 - https://secure-support.novell.com/KanisaPlatform/Publishing/98/3260263_f.SAL_Public.html - http://www.vupen.com/english/advisories/2007/3846 - http://www.securityfocus.com/bid/26420 - http://osvdb.org/40867 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=626
CVE ID: CVE-2007-5670 State: REJECTED Published: 2007-11-20T01:00:00Z Last Updated: 2024-09-17T00:51:33.601Z Description: No description available.
CVE ID: CVE-2007-5671 State: PUBLISHED Published: 2008-06-05T20:21:00 Last Updated: 2024-08-07T15:39:13.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \\.\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://security.gento
ernel memory and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.vupen.com/english/advisories/2008/1744 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5688 - http://www.vmware.com/security/advisories/VMSA-2008-0009.html - http://secunia.com/advisories/30556 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=712 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5358 - http://www.securityfocus.com/archive/1/493172/100/0/threaded - http://www.securityfocus.com/archive/1/493080/100/0/threaded - http:
securityfocus.com/archive/1/493172/100/0/threaded - http://www.securityfocus.com/archive/1/493080/100/0/threaded - http://securitytracker.com/id?1020197 - http://www.securityfocus.com/archive/1/493148/100/0/threaded - http://securityreason.com/securityalert/3922
CVE ID: CVE-2007-5673 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-07T15:39:13.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/webif.exe in ifnet WebIf allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066947.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/37367 - http://secunia.com/advisories/27365 - http://www.securityfocus.com/bid/26164 - http://marc.info/?l=full-disclosure&m=119308642708935&w=2
CVE ID: CVE-2007-5674 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-07T15:39:13.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PageName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4558 - http://www.securityfocus.com/bid/26170 - http://secunia.com/advisories/27305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37383
CVE ID: CVE-2007-5675 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-07T15:39:13.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the DebugPrint function in MultiXTpm Application Server before 4.0.2d allows remote attackers to execute arbitrary code via a long string argument. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=548209&group_id=196021 - http://secunia.com/advisories/27323 - http://osvdb.org/40386 - http://www.securityfocus.com/bid/26173
CVE ID: CVE-2007-5676 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-07T15:39:13.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nuke_bb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4563 - http://www.securityfocus.com/bid/26183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37387
CVE ID: CVE-2007-5677 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-07T15:39:13.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the go_shout parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26167 - http://www.securityfocus.com/archive/1/482615/100/0/threaded - http://securityreason.com/securityalert/3308 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37366
CVE ID: CVE-2007-5678 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-07T15:39:13.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Music module in phpBasic allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482680/100/0/threaded - http://securityreason.com/securityalert/3305
CVE ID: CVE-2007-5679 State: PUBLISHED Published: 2007-10-25T00:00:00 Last Updated: 2024-08-07T15:39:13.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page (build_media_content.php). NOTE: it was later reported that 0.7.4 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26169/info - http://archives.neohapsis.com/archives/bugtraq/2007-10/0315.html - https://www.exploit-db.com/exploits/6250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4450
2007-10/0315.html - https://www.exploit-db.com/exploits/6250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37337 - http://www.vupen.com/english/advisories/2008/2411
CVE ID: CVE-2007-5682 State: PUBLISHED Published: 2007-10-26T18:00:00 Last Updated: 2024-08-07T15:39:13.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in tiki-graph_formula.php in TikiWiki before 1.9.8.2 allows remote attackers to execute arbitrary code by using variable functions and variable variables to write variables whose names match the whitelist, a different vulnerability than CVE-2007-5423. Additional Analyst Notes: - CVE Program Container: References: - http://www.sektioneins.de/advisories/SE-2007-01.txt - http://info.tikiwiki.org/tiki-read_article.php?articleId=15 - http://www.securityfocus.com/archive/1/482908 - http://osvdb.org
/info.tikiwiki.org/tiki-read_article.php?articleId=15 - http://www.securityfocus.com/archive/1/482908 - http://osvdb.org/43610 - http://www.securityfocus.com/bid/26220
CVE ID: CVE-2007-5683 State: PUBLISHED Published: 2007-10-26T18:00:00 Last Updated: 2024-08-07T15:39:13.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to the password reminder page (tiki-remind_password.php), (2) IMG tags in wiki pages, and (3) the local_php parameter to db/tiki-db.php. Additional Analyst Notes: - CVE Program Container: References: - http://info.tikiwiki.org/tiki-read_article.php?articleId=15 - http://www.securityfocus.com/archive/1/482801/30/0/threaded
CVE ID: CVE-2007-5684 State: PUBLISHED Published: 2007-10-26T18:00:00 Last Updated: 2024-08-07T15:39:13.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute pathname in (1) error_handler_file and (2) local_php parameters to (a) tiki-index.php, or (3) encoded "..%2F" sequences in the imp_language parameter to tiki-imexport_languages.php. Additional Analyst Notes: - CVE Program Container: References: - http://info.tikiwiki.org/tiki-read_article.php?articleId=15 - http://www.securityfocus.com/archive/1/482801/30/0/threaded
CVE ID: CVE-2007-5685 State: PUBLISHED Published: 2007-10-28T16:00:00 Last Updated: 2024-08-07T15:39:13.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The safe_path function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or below the same level as the web document root, but in a different part of the directory tree. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482797/100/0/threaded - http://serverkit.org/modules/contrib/shttp/shttp-0.0.5.tar.gz - https://exchange.xforce.ibm
ve/1/482797/100/0/threaded - http://serverkit.org/modules/contrib/shttp/shttp-0.0.5.tar.gz - https://exchange.xforce.ibmcloud.com/vulnerabilities/37455 - http://osvdb.org/43607 - http://www.digineo.co.uk/shttp_directory_traversal - http://www.securityfocus.com/bid/26212
CVE ID: CVE-2007-5686 State: PUBLISHED Published: 2007-10-28T16:00:00 Last Updated: 2024-08-07T15:39:13.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482857/100/0/threaded - https://issues.rpath.com/browse/RPL-1825 - http://www.s
- http://www.securityfocus.com/archive/1/482857/100/0/threaded - https://issues.rpath.com/browse/RPL-1825 - http://www.securityfocus.com/archive/1/482129/100/100/threaded - http://www.vupen.com/english/advisories/2007/3474 - http://www.securityfocus.com/bid/26048 - http://secunia.com/advisories/27215
CVE ID: CVE-2007-5687 State: PUBLISHED Published: 2007-10-28T16:00:00 Last Updated: 2024-08-07T15:39:13.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38130 - http://www.securityfocus.
Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38130 - http://www.securityfocus.com/bid/26206 - http://secunia.com/advisories/27393 - http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-2 - http://jvn.jp/jp/JVN%2350495547/index.html - http://jvn.jp/jp/JVN%2329211062/index.html - http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-3 - http://osvdb.org/39394 - http://www.justsystems.com/jp/info/pd7004.html - http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38129 - http://www.vupen.com/english/advisories/2007/3623 - http://jvn.jp/jp/JVN%2332981509/index.html
m/vulnerabilities/38129 - http://www.vupen.com/english/advisories/2007/3623 - http://jvn.jp/jp/JVN%2332981509/index.html - http://www.ipa.go.jp/security/vuln/200710_Ichitaro.html
CVE ID: CVE-2007-5688 State: PUBLISHED Published: 2007-10-29T19:00:00 Last Updated: 2024-08-07T15:39:13.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to execute arbitrary SQL commands via the (1) go and (2) cat parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37461 - http://secunia.com/advisories/27406 - http://www.inj3ct-it.org/exploit/Multi_Host.txt - http://www
lnerabilities/37461 - http://secunia.com/advisories/27406 - http://www.inj3ct-it.org/exploit/Multi_Host.txt - http://www.securityfocus.com/archive/1/482838/100/0/threaded
CVE ID: CVE-2007-5689 State: PUBLISHED Published: 2007-10-29T19:00:00 Last Updated: 2024-08-07T15:39:13.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-480.htm - http://www.vupen.com/english/advisories/2007/3895 - http://s
p://support.avaya.com/elmodocs2/security/ASA-2007-480.htm - http://www.vupen.com/english/advisories/2007/3895 - http://secunia.com/advisories/30676 - http://secunia.com/advisories/29042 - http://secunia.com/advisories/27693 - http://www.securitytracker.com/id?1018847 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103112-1 - http://secunia.com/advisories/27320 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://secunia.com/advisories/29858 - http://www.vupen.com/english/advisories/2008/0609 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://dev2dev.
dvisories/2008/0609 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://dev2dev.bea.com/pub/advisory/272 - http://www.securityfocus.com/bid/26185 - http://secunia.com/advisories/30780 - http://www.vupen.com/english/advisories/2008/1856/references - http://www.vmware.com/security/advisories/VMSA-2008-0010.html - http://osvdb.org/40834 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9898 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.vupen.com/english/advisories/2007/3589 - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
CVE ID: CVE-2007-5690 State: PUBLISHED Published: 2007-10-29T19:00:00 Last Updated: 2024-08-07T15:39:13.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue, stating that the application requires root access, so privilege boundaries are not crossed Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482597/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/37335 - http://downloads.digium.com/pub/asa/AST-2007-024
threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/37335 - http://downloads.digium.com/pub/asa/AST-2007-024.html - http://www.securityfocus.com/archive/1/483481/100/0/threaded - http://www.securityfocus.com/bid/26160 - http://www.securitytracker.com/id?1018885 - http://www.eleytt.com/advisories/eleytt_ZAPTEL.pdf - http://securityreason.com/securityalert/3319
CVE ID: CVE-2007-5691 State: PUBLISHED Published: 2007-10-29T19:00:00 Last Updated: 2024-08-07T15:39:13.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) via a crafted reply to an unspecified listing command, related to "reading from invalid pointer." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482597/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/37334 - http://www.securityfocus.com/bid/26159 - http://www.eleytt.com/advisories/eleytt_FFPARSEFTPLIST.pdf - http://osvdb.org/43609 -
/www.securityfocus.com/bid/26159 - http://www.eleytt.com/advisories/eleytt_FFPARSEFTPLIST.pdf - http://osvdb.org/43609 - http://securityreason.com/securityalert/3319
CVE ID: CVE-2007-5692 State: PUBLISHED Published: 2007-10-29T20:00:00 Last Updated: 2024-08-07T15:39:13.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to integrator.php; (2) the token parameter in a New Password action, (3) the nid_acl parameter in a Folder Properties action, or (4) the uid parameter in a Modify User action to command.php; or (5) the target parameter to index.php, different vectors than CVE-2006-3320. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41356 - http://osvdb.
n CVE-2006-3320. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41356 - http://osvdb.org/41357 - http://secunia.com/advisories/27503 - http://securityreason.com/securityalert/3318 - http://www.securityfocus.com/archive/1/482499/100/0/threaded - http://osvdb.org/41355 - http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml - http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup - http://www.securityfocus.com/bid/26126 - http://osvdb.org/41358 - http://secunia.com/advisories/28008 - http://www.debian.org/security/2007/dsa-1423 - http://www.vupen.com/english/advisories/2007/3768 - http://osvdb.org/41359