Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4586 State: PUBLISHED Published: 2007-08-29T01:00:00 Last Updated: 2024-08-07T15:01:09.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iis_getservicestate function, related to the ServiceId argument to the (1) fnStartService, (2) fnGetServiceState, (3) fnStopService, and possibly other functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25452 - https://
ions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25452 - https://www.exploit-db.com/exploits/4318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36262
CVE ID: CVE-2007-4587 State: PUBLISHED Published: 2007-08-29T01:00:00 Last Updated: 2024-08-07T15:01:09.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Easy Software Cafeteria escafeWeb (aka Tuigwaa) 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the setting of option.nopage.create in tuigwaa.properties. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36264 - http://www.escafe.org/main/Security - http://osvdb.org/37147 - http://secunia.com/advisories/26577 - http://jvn.jp/jp/JVN%2382276
w.escafe.org/main/Security - http://osvdb.org/37147 - http://secunia.com/advisories/26577 - http://jvn.jp/jp/JVN%2382276964/index.html - http://www.securityfocus.com/bid/25447
CVE ID: CVE-2007-4588 State: PUBLISHED Published: 2007-08-29T01:00:00 Last Updated: 2024-08-07T15:01:09.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Server Admin Level (NodeWorx) 3.0.2 (1) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php; and allow remote authenticated users to inject arbitrary web script or HTML via the PATH_INFO to (2) nodeworx.php, (3) users.php, (4) lang.php, (5) themes.php, (6) setup.php, (7) siteworx.php, (8) packages.php, (9) backup.php, (10) import.php, (11) scriptworx.php, (12) resellers.php, (13) resell
7) siteworx.php, (8) packages.php, (9) backup.php, (10) import.php, (11) scriptworx.php, (12) resellers.php, (13) reseller-packages.php, (14) http.php, (15) mail.php, (16) ftp.php, (17) mysql.php, (18) sshd.php, (19) nfs.php, (20) cron.php, (21) ip.php, (22) firewall.php, (23) updates.php, (24) rrd.php, or (25) cluster.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36762 - http://osvdb.org/36743 - http://www.securityfocus.com/bid/25451 - http://securityreason.com/securityalert/3070 - http://osvdb.org/36740 - http://interworx.com/forums/showthread.php?t=2501 - http://osvdb.org/36765 - http://osvdb.org/36761 - http://osvdb.org/36750 - http://osvdb.org/36
s/showthread.php?t=2501 - http://osvdb.org/36765 - http://osvdb.org/36761 - http://osvdb.org/36750 - http://osvdb.org/36759 - http://osvdb.org/36766 - http://osvdb.org/36746 - http://osvdb.org/36744 - http://osvdb.org/36758 - http://osvdb.org/36751 - http://osvdb.org/36757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36301 - http://www.hackerscenter.com/archive/view.asp?id=27884 - http://osvdb.org/36756 - http://secunia.com/advisories/26586 - http://www.securityfocus.com/archive/1/477848/100/0/threaded - http://osvdb.org/36739 - http://osvdb.org/36747 - http://osvdb.org/36764 - http://osvdb.org/36753 - http://osvdb.org/36745 - http://osvdb.org/36742 - http://osvdb.org/36748 - http:
db.org/36764 - http://osvdb.org/36753 - http://osvdb.org/36745 - http://osvdb.org/36742 - http://osvdb.org/36748 - http://osvdb.org/36763 - http://osvdb.org/36749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36297 - http://osvdb.org/36752 - http://osvdb.org/36755
CVE ID: CVE-2007-4589 State: PUBLISHED Published: 2007-08-29T01:00:00 Last Updated: 2024-08-07T15:01:09.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Webmaster Level (SiteWorx) 3.0.2 (1) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php; and allow remote authenticated users to inject arbitrary web script or HTML via the PATH_INFO to (2) siteworx.php, (3) users.php, (4) ftp.php, (5) mysql.php, (6) domains.php, (7) htaccess.php, (8) scriptworx.php, (9) stats.php, (10) backup.php, (11) restore.php, and (12) httpd.php; and unspecified
htaccess.php, (8) scriptworx.php, (9) stats.php, (10) backup.php, (11) restore.php, and (12) httpd.php; and unspecified vectors to (13) cron.php and (14) prefs.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36778 - http://www.securityfocus.com/bid/25451 - http://securityreason.com/securityalert/3070 - http://interworx.com/forums/showthread.php?t=2501 - http://osvdb.org/36772 - http://osvdb.org/36775 - http://osvdb.org/36771 - http://osvdb.org/36776 - http://osvdb.org/36773 - http://osvdb.org/36780 - http://osvdb.org/36779 - http://osvdb.org/36768 - http://osvdb.org/36774 - http://www.hackerscenter.com/archive/view.asp?id=27884 - http://secunia.com/advi
db.org/36768 - http://osvdb.org/36774 - http://www.hackerscenter.com/archive/view.asp?id=27884 - http://secunia.com/advisories/26586 - http://www.securityfocus.com/archive/1/477848/100/0/threaded - http://osvdb.org/36777 - http://osvdb.org/36769 - http://osvdb.org/36767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36297 - http://osvdb.org/36770
CVE ID: CVE-2007-4590 State: PUBLISHED Published: 2007-08-29T01:00:00 Last Updated: 2024-08-07T15:01:09.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26599 - http://osvdb.org/37563 - http://securitytracker.com/id?1018607 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118367 - http://h
ritytracker.com/id?1018607 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118367 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118367 - http://www.vupen.com/english/advisories/2007/2985 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5515 - http://www.securityfocus.com/bid/25469
CVE ID: CVE-2007-4591 State: PUBLISHED Published: 2007-08-29T15:00:00 Last Updated: 2024-08-07T15:01:09.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018609 - http://secunia.com/advisories/26606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36277 - http://www.securityfocus.com/bid/25441 - http://tarr
6606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36277 - http://www.securityfocus.com/bid/25441 - http://tarrysingh.blogspot.com/2007/08/security-vmware-workstation-6.html - http://www.vupen.com/english/advisories/2007/2992 - http://marc.info/?l=bugtraq&m=118805138626360&w=2
CVE ID: CVE-2007-4592 State: PUBLISHED Published: 2008-03-20T00:00:00 Last Updated: 2024-08-07T15:01:09.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 Patch 2008A, 7.0.0.2_iFix01, and 7.0.1.1_iFix01 allow remote attackers to inject arbitrary web script or HTML via the (1) contextid, (2) username, (3) userNameVal, and (4) schema parameters to the login component. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489861/100/0/threaded - http://www.vupen.com/english/advisories/2008/0952/references - http://w
urityfocus.com/archive/1/489861/100/0/threaded - http://www.vupen.com/english/advisories/2008/0952/references - http://www.securitytracker.com/id?1019685 - http://securityreason.com/securityalert/3753 - http://www.securityfocus.com/bid/28296 - http://secunia.com/advisories/29467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41328
CVE ID: CVE-2007-4593 State: PUBLISHED Published: 2007-08-29T22:00:00 Last Updated: 2024-08-07T15:01:09.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) via unspecified vectors, as demonstrated by the DC2 test suite, possibly a related issue to CVE-2007-4591. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40087 - http://secunia.com/advisories/26606
CVE ID: CVE-2007-4594 State: PUBLISHED Published: 2007-08-29T22:00:00 Last Updated: 2024-08-07T15:01:09.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Entrust Entelligence Security Provider (ESP) 8 does not properly validate certificates in certain circumstances involving (1) a chain that omits the root Certification Authority (CA) certificate, or an application that specifies disregarding (2) unknown revocation statuses during path validation or (3) certain errors in the certification path, which might allow context-dependent attackers to spoof certificate authentication. NOTE: the provenance of this information is unknown; the details are obtained solely from third party i
authentication. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26630 - http://www.securityfocus.com/bid/25471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36331
CVE ID: CVE-2007-4595 State: PUBLISHED Published: 2007-08-29T22:00:00 Last Updated: 2024-08-07T15:01:09.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.12 allows remote attackers to inject arbitrary web script or HTML in certain circumstances involving (1) lack of charset specification within a META element or (2) a META element that specifies an unrecognized charset, which trigger automatic character set recognition by the web browser, as demonstrated by improper handling of UTF-7 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25443 - http://secunia.com/advis
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25443 - http://secunia.com/advisories/26597 - http://jvn.jp/jp/JVN%2338199598/index.html - http://mayaa.seasar.org/news/vulnerability20070816.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36269 - http://osvdb.org/36655
CVE ID: CVE-2007-4596 State: PUBLISHED Published: 2007-08-30T17:00:00 Last Updated: 2024-08-07T15:01:09.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerability in limited environments. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4314
CVE ID: CVE-2007-4597 State: PUBLISHED Published: 2007-08-30T17:00:00 Last Updated: 2024-08-07T15:01:09.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL commands via the s[cid] parameter in a search_list action, a different vector than CVE-2007-2549. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4313 - http://www.securityfocus.com/bid/25445 - http://osvdb.org/38440
CVE ID: CVE-2007-4598 State: PUBLISHED Published: 2007-08-30T17:00:00 Last Updated: 2024-08-07T15:01:09.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SurePOS 500 has (1) a default password of "12345" for the manager and (2) blank default passwords for operator accounts. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45835 - http://isc.sans.org/diary.html?storyid=3323 - http://www.collegeid.com/SurePOS%20500%20Manual.pdf - http://www.hackerfactor.com/papers/cc-pos-20.pdf
CVE ID: CVE-2007-4599 State: PUBLISHED Published: 2007-10-31T17:00:00 Last Updated: 2024-08-07T15:01:10.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary code via a crafted playlist (PLS) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-07-062.html - http://www.securityfocus.com/archive/1/483112/100/0/threaded - http://service.real.com/realplayer/security/10252007_player/en/ - http://securitytracker.com/id?1018866 - https://exchange.xforce.ibmcloud.c
com/realplayer/security/10252007_player/en/ - http://securitytracker.com/id?1018866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37438 - http://www.attrition.org/pipermail/vim/2007-October/001841.html - http://www.vupen.com/english/advisories/2007/3628 - http://secunia.com/advisories/27361 - http://osvdb.org/38341 - http://www.securityfocus.com/bid/26214
CVE ID: CVE-2007-4600 State: PUBLISHED Published: 2007-10-18T20:00:00 Last Updated: 2024-08-07T15:01:09.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Protect Worksheet" functionality in Mathsoft Mathcad 12 through 13.1, and PTC Mathcad 14, implements file access restrictions via a protection element in a gzipped XML file, which allows attackers to bypass these restrictions by removing this element. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43764 - http://securityreason.com/securityalert/3248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37263 - http://www.securityfocus.com/archive/1/482341/100/0/threaded
CVE ID: CVE-2007-4601 State: PUBLISHED Published: 2007-08-30T22:00:00 Last Updated: 2024-08-07T15:01:09.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to bypass intended access restrictions when a service uses libwrap but does not specify server connection information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36364 - http://secunia.com/advisories/26567 - http://osvdb.org/40140 - http://bugs.debian.org/405342 - https://launchpad.net/bugs/135332 - http://www.ubuntu.com/usn/usn-507-1
CVE ID: CVE-2007-4602 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS (Micro-CMS) 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4329 - http://osvdb.org/36684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36291 - http://secunia.com/advisories/26638
CVE ID: CVE-2007-4603 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter in a showarticle action or (2) the catid parameter in a showcat action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25466 - http://www.osvdb.org/36691 - https://www.exploit-db.com/exploits/4330 - http://14house.blogspot.com/2007/08/acg-news-sql-injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36293 - http
use.blogspot.com/2007/08/acg-news-sql-injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36293 - http://www.osvdb.org/36690 - http://secunia.com/advisories/26637
CVE ID: CVE-2007-4604 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25477 - http://osvdb.org/38329 - https://www.exploit-db.com/exploits/4331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36323
CVE ID: CVE-2007-4605 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in convert/mvcw.php in Virtual War (VWar) 1.5.0 R15 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter, a different vector than CVE-2006-1503, CVE-2006-1636, and CVE-2006-1747. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36316
CVE ID: CVE-2007-4606 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (PNC) 4.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter, a different vector than CVE-2006-1602. NOTE: it is possible that this issue stems from a problem in VWar itself. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36317 - https://www.exploit-db.com/exploits/4333
CVE ID: CVE-2007-4607 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25467 - http://www.kb.cert.org/vuls/id/281977 - http://secunia.c
ntainer: References: - http://www.securityfocus.com/bid/25467 - http://www.kb.cert.org/vuls/id/281977 - http://secunia.com/advisories/24199 - http://secunia.com/advisories/26639 - http://retrogod.altervista.org/postcast-emsmtp_bof.html - https://community.ivanti.com/docs/DOC-50988 - http://osvdb.org/38335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36307 - https://www.exploit-db.com/exploits/4328 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0220.html
CVE ID: CVE-2007-4608 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in protection.php in ePersonnel RC_2004_02 allows remote attackers to execute arbitrary PHP code via a URL in the logout_page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36279 - http://osvdb.org/38439 - http://www.securityfocus.com/archive/1/477867/100/0/threaded - http://securityreason.com/securityalert/3077
CVE ID: CVE-2007-4609 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessing valid parameter values. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45836 - http://securityreason.com/securityalert/3081 - http://www.securityfocus.com/archive/1/477866/100/0/threaded
CVE ID: CVE-2007-4610 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25455 - http://securityreason.com/securityalert/3079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36288 - http://secunia.com/advisories/26633 - http://www.securityfocus.com/archive/1/477851/100/0/threaded
CVE ID: CVE-2007-4611 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewevent.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36289 - http://www.securityfocus.com/bid/25456 - http://securityreason.com/securityalert/3079 - http://osvdb.org/38438 - http://www.securityfocus.com/archive/1/477851/100/0/threaded
CVE ID: CVE-2007-4612 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3079 - http://www.securityfocus.com/bid/25457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36290 - http://www.securityfocus.com/archive/1/477851/100/0/threaded
CVE ID: CVE-2007-4613 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle attack that injects crafted data and measures the elapsed time before an error response, a different vulnerability than CVE-2006-2461. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22082 - http://dev2dev.bea.com/pub/advisory/201 - http://osvdb.org/45838