Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3401 State: PUBLISHED Published: 2007-06-26T17:00:00 Last Updated: 2024-08-07T14:14:12.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary PHP code via a URL in the tfooter parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35035 - http://www.vupen.com/english/advisories/2007/2321 - http://www.securityfocus.com/bid/24624 - https://www.exploit-db.com/exploits/4102 - http://osvdb.org/36291
CVE ID: CVE-2007-3402 State: PUBLISHED Published: 2007-06-26T17:00:00 Last Updated: 2024-08-07T14:14:12.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the news_id parameter in a pagetool_news action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488742/100/0/threaded - http://www.securityfocus.com/archive/1/488724/100/0/threaded - https://www.exploit-db.com/exploits/4107 - http://www.securityfocus.com/bid/24640 - http://osvdb.org/38225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35056
CVE ID: CVE-2007-3403 State: PUBLISHED Published: 2007-06-26T17:00:00 Last Updated: 2024-08-07T14:14:12.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24639 - http://osvdb.org/45385 - https://www.exploit-db.com/exploits/4106 - http://www.vupen.com/english/advisories/2007/2326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35054
CVE ID: CVE-2007-3404 State: PUBLISHED Published: 2007-06-26T17:00:00 Last Updated: 2024-08-07T14:14:12.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35055 - http://osvdb.org/38603 - http://www.vupen.com/english/advisories/2007/2325 - http://www.securityfocus.com/bid/24635
CVE ID: CVE-2007-3405 State: PUBLISHED Published: 2007-06-26T17:00:00 Last Updated: 2024-08-07T14:14:12.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in defter_yaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ad and (2) konu parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25779 - http://osvdb.org/37529 - http://www.securityfocus.com/bid/24620 - https://exchange.xforce.ibmcloud.com/vulnerabilities
- http://osvdb.org/37529 - http://www.securityfocus.com/bid/24620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35159
CVE ID: CVE-2007-3406 State: PUBLISHED Published: 2007-06-26T18:00:00 Last Updated: 2024-08-07T14:14:12.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attackers to access arbitrary local files via the file: URI in the (1) src attribute of a (a) bgsound, (b) input, (c) EMBED, (d) img, or (e) script tag; (2) data attribute of an object tag; (3) value attribute of a param tag; (4) background attribute of a body tag; or (5) the background:url attribute declared in the BODY parameter of a STYLE tag. Additional Analyst Notes: - CVE Program Container: References: - http:
te declared in the BODY parameter of a STYLE tag. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45435 - http://www.securityfocus.com/bid/22621 - http://www.xdisclose.com/XD100099.txt
CVE ID: CVE-2007-3407 State: PUBLISHED Published: 2007-06-26T18:00:00 Last Updated: 2024-08-07T14:14:12.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) via a URL with a trailing encoded space (%20). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472190/100/0/threaded - http://www.securityfocus.com/bid/24618 - http://osvdb.org/37732 - http://securityreason.com/securityalert/2832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35038 - http://secunia.com/advisories/25809
CVE ID: CVE-2007-3408 State: PUBLISHED Published: 2007-06-26T18:00:00 Last Updated: 2024-08-07T14:14:13.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Dia before 0.96.1-6 have unspecified attack vectors and impact, probably involving the use of vulnerable FreeType libraries that contain CVE-2007-2754 and/or CVE-2007-1351. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=709959 - http://www.vupen.com/english/advisories/2007/2328 - http://secunia.com/advisories/25810
CVE ID: CVE-2007-3409 State: PUBLISHED Published: 2007-06-26T18:00:00 Last Updated: 2025-01-17T14:42:59.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/26231 - http://secunia.com/advisories/26417 - http://secunia.com/advisories/29354 - http://secunia.com/advisories/26014 - http://secunia.com/advisories/26012 - http://rt.cpan.org/Public/Bug/Display.h
54 - http://secunia.com/advisories/26014 - http://secunia.com/advisories/26012 - http://rt.cpan.org/Public/Bug/Display.html?id=27285 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10595 - http://www.debian.org/security/2008/dsa-1515 - http://www.net-dns.org/docs/Changes.html - http://www.securitytracker.com/id?1018376 - http://www.novell.com/linux/security/advisories/2007_17_sr.html - http://secunia.com/advisories/26543 - http://www.ubuntu.com/usn/usn-483-1 - http://www.trustix.org/errata/2007/0023/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:146 - http://www.redhat.com/support/errata/RHSA-2007-0674.html - http://secunia.com/advisor
y/advisories?name=MDKSA-2007:146 - http://www.redhat.com/support/errata/RHSA-2007-0674.html - http://secunia.com/advisories/26055 - http://secunia.com/advisories/26211 - http://secunia.com/advisories/26075 - http://www.securityfocus.com/bid/24669 - http://osvdb.org/37054 - ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc - http://secunia.com/advisories/25829 - http://www.gentoo.org/security/en/glsa/glsa-200708-06.xml - http://www.securityfocus.com/archive/1/473871/100/0/threaded
CVE ID: CVE-2007-3410 State: PUBLISHED Published: 2007-06-26T22:00:00 Last Updated: 2024-08-07T14:14:13.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/10252007_player/en/ - https://oval.cisecurity.org/repository/search/defin
- http://service.real.com/realplayer/security/10252007_player/en/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10554 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=547 - http://secunia.com/advisories/26463 - http://security.gentoo.org/glsa/glsa-200709-05.xml - http://www.securityfocus.com/bid/24658 - http://www.vupen.com/english/advisories/2007/2339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35088 - http://www.redhat.com/support/errata/RHSA-2007-0841.html - http://secunia.com/advisories/26828 - http://osvdb.org/38342 - http://www.kb.cert.org/vuls/id/770904 - http://www.redhat.com/support/errata/RHSA-2007-0605.ht
http://osvdb.org/38342 - http://www.kb.cert.org/vuls/id/770904 - http://www.redhat.com/support/errata/RHSA-2007-0605.html - http://secunia.com/advisories/25859 - http://osvdb.org/37374 - http://www.attrition.org/pipermail/vim/2007-October/001841.html - http://www.vupen.com/english/advisories/2007/3628 - http://secunia.com/advisories/25819 - http://securitytracker.com/id?1018297 - http://secunia.com/advisories/27361 - http://securitytracker.com/id?1018299
CVE ID: CVE-2007-3411 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:12.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the image_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35023 - http://secunia.com/advisories/25805 - http://osvdb.org/36370 - http://pridels-team.blogspot.com/2007/06/clickgallery-server-vuln.html
CVE ID: CVE-2007-3412 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:12.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35024 - http://osvdb.org/36371 - http://secunia.com/advisories/25805 - http://pridels-team.blogspot.com/2007/06/clickgallery-server-vuln.html
CVE ID: CVE-2007-3413 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:12.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in bosDataGrid 2.50 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) GridSearch, (2) gsearch, or (3) ParentID parameter to an unspecified component. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35026 - http://pridels-team.blogspot.com/2007/06/bosdatagrid-xss-vuln.html - http://osvdb.org/38226
CVE ID: CVE-2007-3414 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:13.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in access2asp 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) od and (2) search parameters to (a) suppliersList.asp and (b) contactsList.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35025 - http://pridels-team.blogspot.com/2007/06/access2asp-xss-vuln.html - http://secunia.com/advisories/25807 - http://www.osvdb.org/37751 - http://www.vupen.com/english/adviso
p-xss-vuln.html - http://secunia.com/advisories/25807 - http://www.osvdb.org/37751 - http://www.vupen.com/english/advisories/2007/2371 - http://www.osvdb.org/37750
CVE ID: CVE-2007-3415 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:12.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in phpRaider 1.0.0 rc8 allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35004 - http://osvdb.org/38222 - http://www.securityfocus.com/bid/24593 - http://pridels-team.blogspot.com/2007/06/phpraider-sql-vuln.html
CVE ID: CVE-2007-3416 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:12.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (3) IP bans, and (4) forums in (a) web-app.org WebAPP 0.8 through 0.9.9.6; and (b) web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35929 - http://www.attrition.org/pipermail/vim/2007-June/001687.html - http://www.web-app.org/downloads/WebA
erabilities/35929 - http://www.attrition.org/pipermail/vim/2007-June/001687.html - http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
CVE ID: CVE-2007-3417 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:13.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow remote attackers to inject arbitrary web script or HTML via a search string, which is not sanitized when an HREF attribute is printed by the (1) process_search or (2) show_recent_searches function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45398 - http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to
http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
CVE ID: CVE-2007-3418 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:12.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames in conjunction with real names, which makes it easier for remote authenticated users to impersonate other users. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45399 - http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
CVE ID: CVE-2007-3419 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:12.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=displa
.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458 - http://osvdb.org/45400
CVE ID: CVE-2007-3420 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:12.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 does not clear the (1) username, (2) password, (3) usertheme, and (4) userlang cookies for unauthorized users, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45401 - http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
CVE ID: CVE-2007-3421 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:13.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) login, (2) admin profile edit, (3) reminder, (4) edit profile, (5) profile view, (6) gallery view, (7) gallery comment, and (8) gallery feedback capabilities in web-app.org WebAPP before 0.9.9.7 do not verify presence of users in memberlist.dat, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45402 - http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=
pp.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
CVE ID: CVE-2007-3422 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:13.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to parse query strings that contain (1) non-printing characters, (2) certain printing characters that do not commonly occur in URLs, or (3) invalid URL encoding sequences, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45408 - http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=d
//www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
CVE ID: CVE-2007-3423 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:12.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant message as the beginning of the .dat file name when the (1) imview2 or (2) imview3 function reads (a) an internal IM, or a message from a (b) guest or (c) removed member, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=945
org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458 - http://osvdb.org/45409
CVE ID: CVE-2007-3424 State: PUBLISHED Published: 2007-06-26T23:00:00 Last Updated: 2024-08-07T14:14:13.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory name when moving an instant message, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45410 - http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip - http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
CVE ID: CVE-2007-3425 State: PUBLISHED Published: 2007-06-27T00:00:00 Last Updated: 2024-08-07T14:14:13.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbitrary local files via the lang parameter, a different vector and version than CVE-2007-1076.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472211/100/0/threaded - http://www.vupen.com/english/advisories/2007/2311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35014 - http://www.attrition.org/pipermail/vim/2007-June/001684.html - http://osvdb.o
force.ibmcloud.com/vulnerabilities/35014 - http://www.attrition.org/pipermail/vim/2007-June/001684.html - http://osvdb.org/37474 - http://soft.zoneo.net/phpTrafficA/Files/get.php?phpTrafficA-1.4.3.tgz - http://secunia.com/advisories/25773 - https://www.exploit-db.com/exploits/4100
CVE ID: CVE-2007-3426 State: PUBLISHED Published: 2007-06-27T00:00:00 Last Updated: 2024-08-07T14:14:12.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472211/100/0/threaded - http://osvdb.org/37475 - http://www.attrition.org/pipermail/vim/2007-June/001684.html - http://soft.zoneo.net/phpTrafficA/Files/get.php?phpTrafficA-1.4.3.tgz - http://secunia.com/advisories/25773 - https://www.exploit-db.com/explo
phpTrafficA/Files/get.php?phpTrafficA-1.4.3.tgz - http://secunia.com/advisories/25773 - https://www.exploit-db.com/exploits/4100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35013
CVE ID: CVE-2007-3427 State: PUBLISHED Published: 2007-06-27T00:00:00 Last Updated: 2024-08-07T14:14:13.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472211/100/0/threaded - http://www.vupen.com/english/advisories/2007/2311 - http://www.attrition.org/pipermail/vim/2007-June/001684.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35012 - http://soft.zoneo.net/phpTrafficA/Files/get.php?phpT
html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35012 - http://soft.zoneo.net/phpTrafficA/Files/get.php?phpTrafficA-1.4.3.tgz - http://secunia.com/advisories/25773 - http://osvdb.org/37476 - https://www.exploit-db.com/exploits/4100
CVE ID: CVE-2007-3428 State: PUBLISHED Published: 2007-06-27T00:00:00 Last Updated: 2024-08-07T14:14:12.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via the file parameter to (1) plotStatBar.php or (2) plotStatPie.php, different vectors than CVE-2007-1076. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43469 - http://soft.zoneo.net/phpTrafficA/news.php - http://osvdb.org/43470
CVE ID: CVE-2007-3429 State: PUBLISHED Published: 2007-06-27T00:00:00 Last Updated: 2024-08-07T14:14:13.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg. Additional Analyst Notes: - CVE Program Container: References: - http://www.g00ns-forum.net/showthread.php?t=9388 - http://osvdb.org/45426 - http://www.securityfocus.com/bid/24609 - https://www.exploit-db.com/exploits/4099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35022