Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
shark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http://security.gentoo.org/glsa/glsa-200712-23.xml - http://secunia.com/advisories/28304 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15036 - http://securitytracker.com/id?1018988 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00712.html - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.open
m/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9799 - http://www.vupen.com/english/advisories/2007/3956 - http://secunia.com/advisories/28197 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 - http://secunia.com/advisories/28207 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.html
CVE ID: CVE-2007-6117 State: PUBLISHED Published: 2007-11-23T20:00:00 Last Updated: 2024-08-07T15:54:26.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27777 - https://issues.rpath.com/browse/RPL-1975 - http://secunia.com/advisories/29048 - http://www.securityfocus.com/bid/26532 - http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/adv
ttp://www.securityfocus.com/bid/26532 - http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http://security.gentoo.org/glsa/glsa-200712-23.xml - http://www.redhat.com/support/errata/RHSA-2008-0059.html - http://secunia.com/advisories/28304 - http://www.wireshark.org/docs/relnotes/wireshark-0.99.7.html - http://securitytracker.com/id?1018988 - http://www.debian.org/security/2007/dsa-1414 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00712.html - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.ma
ml - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - https://bugzilla.redhat.com/show_bug.cgi?id=397331 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11508 - http://secunia.com/advisories/28583 - http://www.vupen.com/english/advisories/2007/3956 - http://secunia.com/advisories/28197 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Ad
es/2007/3956 - http://secunia.com/advisories/28197 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 - http://secunia.com/advisories/28207 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.html - http://secunia.com/advisories/27817
CVE ID: CVE-2007-6118 State: PUBLISHED Published: 2007-11-23T20:00:00 Last Updated: 2024-08-07T15:54:26.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27777 - https://issues.rpath.com/browse/RPL-1975 - http://secunia.com/advisories/29048 - http://www.securityfocus.com/bid/26532 - http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/
//www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http://security.gentoo.org/glsa/glsa-200712-23.xml - http://www.redhat.com/support/errata/RHSA-2008-0059.html - http://secunia.com/advisories/28304 - http://securitytracker.com/id?1018988 - http://www.debian.org/security/2007/dsa-1414 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00712.html - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.htm
ttp://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - http://secunia.com/advisories/28583 - http://www.vupen.com/english/advisories/2007/3956 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10659 - http://secunia.com/advisories/28197 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 - http://secunia.com/advisories/28207 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.html - http://secu
com/advisories/28207 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.html - http://secunia.com/advisories/27817
CVE ID: CVE-2007-6119 State: PUBLISHED Published: 2007-11-23T20:00:00 Last Updated: 2024-08-07T15:54:26.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27777 - https://issues.rpath.com/browse/RPL-1975 - http://secunia.com/advisories/29048 - http://www.securityfocus.com/bid/26532 - http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/
reshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http://security.gentoo.org/glsa/glsa-200712-23.xml - http://secunia.com/advisories/28304 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9880 - http://securitytracker.com/id?1018988 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00712.html - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.ope
om/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - http://www.vupen.com/english/advisories/2007/3956 - http://secunia.com/advisories/28197 - http://secunia.com/advisories/28288 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14721 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 - http://secunia.com/advisories/28207 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.html
CVE ID: CVE-2007-6120 State: PUBLISHED Published: 2007-11-23T20:00:00 Last Updated: 2024-08-07T15:54:26.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14802 - http://secunia.com/advisories/27777 - https://issues.rpath.com/browse/RPL-1975 - http://secunia.com/advisories/29048 - http://www.securityfocus.com/bid/26532 - http://www.wireshark.org/security/wnpa-sec-2007
/secunia.com/advisories/29048 - http://www.securityfocus.com/bid/26532 - http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http://security.gentoo.org/glsa/glsa-200712-23.xml - http://www.redhat.com/support/errata/RHSA-2008-0059.html - http://secunia.com/advisories/28304 - http://securitytracker.com/id?1018988 - http://www.debian.org/security/2007/dsa-1414 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00712.html - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.mandriva.com/security/advisories
ries/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9488 - http://secunia.com/advisories/28583 - http://www.vupen.com/english/advisories/2007/3956 - http://secunia.com/advisories/28197 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 - http://secunia.com/advisories/28207 - https://www.redhat.c
8288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 - http://secunia.com/advisories/28207 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.html - http://secunia.com/advisories/27817
CVE ID: CVE-2007-6121 State: PUBLISHED Published: 2007-11-23T20:00:00 Last Updated: 2024-08-07T15:54:26.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27777 - https://issues.rpath.com/browse/RPL-1975 - http://secunia.com/advisories/29048 - http://www.securityfocus.com/bid/26532 - http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http
2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http://security.gentoo.org/glsa/glsa-200712-23.xml - http://www.redhat.com/support/errata/RHSA-2008-0059.html - http://secunia.com/advisories/28304 - http://securitytracker.com/id?1018988 - http://www.debian.org/security/2007/dsa-1414 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00712.html - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11374 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001
search/definition/oval%3Aorg.mitre.oval%3Adef%3A11374 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - http://secunia.com/advisories/28583 - http://www.vupen.com/english/advisories/2007/3956 - http://secunia.com/advisories/28197 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 - http://secunia.com/advisories/28207 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00606.html - http://secunia.com/advisories/27817
CVE ID: CVE-2007-6122 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:26.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default_encrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attackers to cause a denial of service (daemon crash) via a long password. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38591 - http://www.ircservices.za.net/Changes.txt - http://www.securityfocus.com/bid/26517 - http://bugs.gentoo.org/sho
/38591 - http://www.ircservices.za.net/Changes.txt - http://www.securityfocus.com/bid/26517 - http://bugs.gentoo.org/show_bug.cgi?id=199897 - http://lists.ircservices.za.net/pipermail/ircservices/2007/005558.html - http://www.vupen.com/english/advisories/2007/3959 - http://security.gentoo.org/glsa/glsa-200712-12.xml - http://lists.ircservices.za.net/pipermail/ircservices/2007/005564.html - http://secunia.com/advisories/27761
CVE ID: CVE-2007-6123 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:26.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ircservices.za.net/Changes.txt - http://www.securityfocus.com/bid/26517 - http://lists.ircservices.za.net/pipermail/ircservices/2007/005560.html - http://www.vupen.com/english/advisories/2007/3959 - http://secunia.com/advisories/27761
CVE ID: CVE-2007-6124 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:26.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38615 - http://www.securityfocus.com/bid/26569 - http://secunia.com/advisories/27808
CVE ID: CVE-2007-6125 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:26.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via the sb_protype parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4660 - http://osvdb.org/38908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38616 - http://www.securityfocus.com/bid/26569 - http://secunia.com/advisories/27808
CVE ID: CVE-2007-6126 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:26.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to (1) xml/index.php; or (2) the year parameter to view.page.inc.php, which is reachable through a view action to the top-level index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38621 - https://www.exploit-db.com/exploits/4655 - http://www.securityfocus.com/bid/26565 - http://www
m/vulnerabilities/38621 - https://www.exploit-db.com/exploits/4655 - http://www.securityfocus.com/bid/26565 - http://www.vupen.com/english/advisories/2007/3999 - http://secunia.com/advisories/27820
CVE ID: CVE-2007-6127 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:26.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the year parameter to (1) view.page.inc.php, which is reachable through a view action to index.php; or (2) the year parameter to news.page.inc.php, which is reachable through a news action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4655 - http://www.securityfocus.com/bid/26564 - https://exchange.xforce.ibmcloud.com/vulnera
www.exploit-db.com/exploits/4655 - http://www.securityfocus.com/bid/26564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38620 - http://www.vupen.com/english/advisories/2007/3999 - http://secunia.com/advisories/27820
CVE ID: CVE-2007-6128 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:26.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL commands via the idevent parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38612 - http://www.securityfocus.com/bid/26563 - https://www.exploit-db.com/exploits/4653
CVE ID: CVE-2007-6129 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:27.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4652 - http://www.securityfocus.com/archive/1/484154/100/0/threaded - http://secunia.com/ad
/www.exploit-db.com/exploits/4652 - http://www.securityfocus.com/archive/1/484154/100/0/threaded - http://secunia.com/advisories/27815 - http://osvdb.org/38814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38617 - http://www.vupen.com/english/advisories/2007/3993 - http://www.securityfocus.com/bid/26561
CVE ID: CVE-2007-6130 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:26.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27965 - http://www.securityfocus.com/bid/26618 - https://bugs.gentoo.org/show_bug.cgi?id=193132 - http://secunia.com/advisories/27848 - http://www.novell.com/linux/security/advisories/2007_25_sr.html - http://www.vupen.com/english/advisories/2007/4039 - http://www.gnu.org/software/gnump3d/Chan
dvisories/2007_25_sr.html - http://www.vupen.com/english/advisories/2007/4039 - http://www.gnu.org/software/gnump3d/ChangeLog
CVE ID: CVE-2007-6131 State: PUBLISHED Published: 2007-11-26T22:00:00 Last Updated: 2024-08-07T15:54:26.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26617 - http://secunia.com/advisories/27847 - http://osvdb.org/42422 - https://bugzilla.redhat.com/show_bug.cgi?id=383131 - http://securitytracker.com/id?1019007 - http://www.vupen.com/english/advisories/2007/4024
CVE ID: CVE-2007-6132 State: REJECTED Published: 2007-11-27T19:00:00Z Last Updated: 2024-09-16T17:57:54.368Z Description: No description available.
CVE ID: CVE-2007-6133 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfm_base_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38609 - http://www.securityfocus.com/bid/26538 - http://osvdb.org/38809 - http://www.vupen.com/english/advisories/2007/3981 - http://secunia.com/advisories/27765
CVE ID: CVE-2007-6134 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the contentid parameter in an article action to include.php, a different vector than CVE-2006-1773. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38619 - https://www.exploit-db.com/exploits/4646 - http://www.vupen.com/english/advisories/2007/3995 - http://www.securityfocus.com/bid/26546 - http://secunia.com/advisories/277
/www.vupen.com/english/advisories/2007/3995 - http://www.securityfocus.com/bid/26546 - http://secunia.com/advisories/27791
CVE ID: CVE-2007-6135 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpslideshow.php in PHPSlideShow 0.9.9.2, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the directory parameter. NOTE: this issue was originally reported for toonchapter8.php, but this is probably a site-specific name, since the PHPSlideShow distribution does not contain that file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27809 - http://www.packetstormsecurity.org/0711-exploits/phpslidesh
ntainer: References: - http://secunia.com/advisories/27809 - http://www.packetstormsecurity.org/0711-exploits/phpslideshow-xss.txt - http://www.securityfocus.com/archive/1/484192/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38638 - http://www.securityfocus.com/archive/1/484289/100/0/threaded - http://www.securityfocus.com/bid/26575 - http://www.securityfocus.com/archive/1/490968/100/0/threaded - http://www.securityfocus.com/bid/26576 - http://www.vupen.com/english/advisories/2007/3992
CVE ID: CVE-2007-6136 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:27.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) intro, and (3) question parameters, and (4) unspecified answer parameters, in a create_new action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484073/100/0/threaded - http://osvdb.org/38800 - https://exchange.
References: - http://www.securityfocus.com/archive/1/484073/100/0/threaded - http://osvdb.org/38800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38633 - http://www.securityfocus.com/bid/26544 - http://secunia.com/advisories/27778