Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1787 State: PUBLISHED Published: 2007-03-31T10:00:00 Last Updated: 2024-08-07T13:06:26.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) inc_dir or (2) lib_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.echo.or.id/adv/adv80-K-159-2007.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/33327 - http://secunia.com/advisories/24729 - http://www.securityfocus.com/bid/23203 - http://
cloud.com/vulnerabilities/33327 - http://secunia.com/advisories/24729 - http://www.securityfocus.com/bid/23203 - http://osvdb.org/34626 - http://www.securityfocus.com/archive/1/464281/100/0/threaded - http://www.vupen.com/english/advisories/2007/1193 - https://www.exploit-db.com/exploits/3600
CVE ID: CVE-2007-1788 State: PUBLISHED Published: 2007-03-31T10:00:00 Last Updated: 2024-08-07T13:06:26.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flyspray 0.9.9, when output_buffering is disabled or "set to a low value," allows remote attackers to bypass authentication via a crafted post request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23214 - http://secunia.com/advisories/24702 - http://www.flyspray.org/fsa:1 - http://www.vupen.com/english/advisories/2007/1181
CVE ID: CVE-2007-1789 State: PUBLISHED Published: 2007-03-31T10:00:00 Last Updated: 2024-08-07T13:06:26.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flyspray 0.9.9 allows remote attackers to obtain sensitive information (private project summaries) via direct requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23214 - http://osvdb.org/34591 - http://secunia.com/advisories/24702 - http://www.flyspray.org/changelog - http://www.vupen.com/english/advisories/2007/1181
CVE ID: CVE-2007-1790 State: PUBLISHED Published: 2007-03-31T10:00:00 Last Updated: 2024-08-07T13:06:26.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to execute arbitrary PHP code via a URL in the install_root parameter to (1) support.inc.php, (2) function.inc.php, (3) rdal_object.inc.php, (4) rdal_editor.inc.php. (5) login.inc.php, (6) request.inc.php, and (7) categories.inc.php in include/core/; (8) save.inc.php, (9) preview.inc.php, (10) edit_item.inc.php, (11) new_item.inc.php, and (12) item_info.inc.php in include/display/item/; (13) search.inc.php, (14) ite
_item.inc.php, (11) new_item.inc.php, and (12) item_info.inc.php in include/display/item/; (13) search.inc.php, (14) item_edit.inc.php, (15) register_succsess.inc.php, (16) context_menu.inc.php, (17) item_repost.inc.php, (18) balance.inc.php, (19) featured.inc.php, (20) user.inc.php, (21) buynow.inc.php, (22) install_complete.inc.php, (23) fees_info.inc.php, (24) user_feedback.inc.php, (25) admin_balance.inc.php, (26) activate.inc.php, (27) user_info.inc.php, (28) member.inc.php, (29) add_bid.inc.php, (30) items_filter.inc.php, (31) my_info.inc.php, (32) register.inc.php, (33) leave_feedback.inc.php, and (34) user_auctions.inc.php in include/display/; and (35) design/form.inc.php, (36) proce
33) leave_feedback.inc.php, and (34) user_auctions.inc.php in include/display/; and (35) design/form.inc.php, (36) processor.inc.php, (37) interfaces.inc.php (38) left_menu.inc.php, (39) login.inc.php, and (40) categories.inc.php in include/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34582 - http://www.vupen.com/english/advisories/2007/1180 - http://www.osvdb.org/34551 - http://www.osvdb.org/34548 - http://www.osvdb.org/34558 - http://www.osvdb.org/34572 - http://www.osvdb.org/34578 - http://www.osvdb.org/34553 - http://www.osvdb.org/34573 - http://www.osvdb.org/34584 - http://www.osvdb.org/34564 - https://www.exploit-db.com/exploits/3607 - http://
org/34573 - http://www.osvdb.org/34584 - http://www.osvdb.org/34564 - https://www.exploit-db.com/exploits/3607 - http://www.osvdb.org/34556 - http://www.osvdb.org/34575 - http://www.osvdb.org/34568 - http://www.osvdb.org/34554 - http://www.osvdb.org/34563 - http://www.osvdb.org/34571 - http://www.osvdb.org/34570 - http://www.osvdb.org/34560 - http://www.osvdb.org/34557 - http://www.osvdb.org/34583 - http://www.osvdb.org/34547 - http://www.osvdb.org/34552 - http://www.osvdb.org/34545 - http://www.osvdb.org/34561 - http://www.osvdb.org/34581 - http://www.osvdb.org/34580 - http://www.osvdb.org/34567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33335 - http://www.osvdb.org/34579 - http
p://www.osvdb.org/34567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33335 - http://www.osvdb.org/34579 - http://www.osvdb.org/34569 - http://www.osvdb.org/34559 - http://www.osvdb.org/34576 - http://www.osvdb.org/34550 - http://www.osvdb.org/34577 - http://secunia.com/advisories/24696 - http://www.osvdb.org/34549 - http://www.osvdb.org/34566 - http://www.osvdb.org/34574 - http://www.osvdb.org/34562 - http://www.securityfocus.com/bid/23211 - http://www.osvdb.org/34565 - http://www.osvdb.org/34555 - http://www.osvdb.org/34546
CVE ID: CVE-2007-1791 State: PUBLISHED Published: 2007-03-31T10:00:00 Last Updated: 2024-08-07T13:06:26.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33325 - http://www.securityfocus.com/bid/23205 - https://www.exploit-db.com/exploits/3605 - http://osvdb.org/34936
CVE ID: CVE-2007-1792 State: PUBLISHED Published: 2007-06-27T17:00:00 Last Updated: 2024-08-07T13:06:26.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: libdayzero.dll in the Filter Hub Service (filter-hub.exe) in Symantec Mail Security for SMTP before 5.0.1 Patch 181 and Mail Security Appliance before 5.0.0-36 allows remote attackers to cause a denial of service (crash) via a crafted executable attachment in an e-mail, involving the detection of "PE-Shield v0.2" and "ASPack v1.00-1.08.02". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35105 - http://www.vupen.com/engl
://secunia.com/advisories/24632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35105 - http://www.vupen.com/english/advisories/2007/2335 - http://securityresponse.symantec.com/avcenter/security/Content/2007.06.26.html - http://secunia.com/secunia_research/2007-48/advisory/ - http://www.securitytracker.com/id?1018301 - http://www.securityfocus.com/archive/1/472440/100/0/threaded - http://osvdb.org/36110 - http://www.securityfocus.com/bid/24625
CVE ID: CVE-2007-1793 State: PUBLISHED Published: 2007-04-02T22:00:00 Last Updated: 2024-08-07T13:06:26.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected. Additional Analyst Notes: - CVE Program Container: Refe
60, and possibly other versions back to 2006, are also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1192 - http://www.matousec.com/info/advisories/Norton-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php - http://www.securityfocus.com/archive/1/464456/100/0/threaded - http://www.securitytracker.com/id?1021386 - http://www.securitytracker.com/id?1017837 - http://www.securityfocus.com/bid/23241 - http://www.securitytracker.com/id?1021388 - http://www.securitytracker.com/id?1021389 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://securityresponse.symantec.com
- http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://securityresponse.symantec.com/avcenter/security/Content/2008.12.12.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33352 - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://osvdb.org/34692 - http://www.securitytracker.com/id?1017838 - http://www.securitytracker.com/id?1021387 - http://secunia.com/advisories/24677 - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2007-1794 State: PUBLISHED Published: 2007-04-02T22:00:00 Last Updated: 2024-08-07T13:06:26.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used. NOTE: this issue might be related to CVE-2006-3805. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1 - http://secunia.com/advisories/24624 - http://www.vupen.com/english/advisories/2007/1178
CVE ID: CVE-2007-1795 State: PUBLISHED Published: 2007-04-02T22:00:00 Last Updated: 2024-08-07T13:06:26.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33320 - http://www.securityfocus.com/bid/23217 - http://developers.jccorp.net/modules/newbb/viewtopic.php?topic_id=33&forum=8
CVE ID: CVE-2007-1796 State: PUBLISHED Published: 2007-04-02T22:00:00 Last Updated: 2024-08-07T13:06:26.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact. Additional Analyst Notes: - CVE Program Container: References: - http://developers.jccorp.net/modules/newbb/viewtopic.php?topic_id=33&forum=8 - http://osvdb.org/34988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33320
CVE ID: CVE-2007-1797 State: PUBLISHED Published: 2007-04-02T22:00:00 Last Updated: 2024-08-07T13:06:26.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23347 - http://secunia.com/advisories/29857 - http://sec
ogram Container: References: - http://www.securityfocus.com/bid/23347 - http://secunia.com/advisories/29857 - http://security.gentoo.org/glsa/glsa-200705-13.xml - http://www.redhat.com/support/errata/RHSA-2008-0145.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9254 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=496 - https://issues.foresightlinux.org/browse/FL-222 - http://secunia.com/advisories/24739 - http://secunia.com/advisories/29786 - http://www.securitytracker.com/id?1017839 - https://issues.rpath.com/browse/RPL-1205 - http://www.ubuntu.com/usn/usn-481-1 - http://www.securityfocus.com/bid/23252 - http://secunia.co
h.com/browse/RPL-1205 - http://www.ubuntu.com/usn/usn-481-1 - http://www.securityfocus.com/bid/23252 - http://secunia.com/advisories/25992 - http://secunia.com/advisories/26177 - http://www.redhat.com/support/errata/RHSA-2008-0165.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33377 - http://www.vupen.com/english/advisories/2007/1200 - http://www.novell.com/linux/security/advisories/2007_8_sr.html - http://www.debian.org/security/2009/dsa-1858 - http://www.imagemagick.org/script/changelog.php - http://www.mandriva.com/security/advisories?name=MDKSA-2007:147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33376 - http://secunia.com/advisories/24721 - http://secunia.com/adv
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/33376 - http://secunia.com/advisories/24721 - http://secunia.com/advisories/25072 - http://secunia.com/advisories/25206 - http://secunia.com/advisories/36260
CVE ID: CVE-2007-1798 State: PUBLISHED Published: 2007-04-02T22:00:00 Last Updated: 2024-08-07T13:06:26.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33354 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY96772 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12575 - http://www.vupen.com/english/advis
val.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12575 - http://www.vupen.com/english/advisories/2007/1186 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY95054 - http://osvdb.org/34981 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY96753
CVE ID: CVE-2007-1799 State: PUBLISHED Published: 2007-04-02T22:00:00 Last Updated: 2024-08-07T13:06:26.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/show_bug.cgi?id=170303 - http://www.novell.com/linux/security/advisories/2007_007_suse.html - http://secunia.com/advisories/24995 - http://secunia
ttp://www.novell.com/linux/security/advisories/2007_007_suse.html - http://secunia.com/advisories/24995 - http://secunia.com/advisories/26773 - http://secunia.com/advisories/25097 - http://bugs.kde.org/show_bug.cgi?id=143637 - http://www.debian.org/security/2007/dsa-1373 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:095 - http://security.gentoo.org/glsa/glsa-200705-01.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/33566 - http://www.securityfocus.com/bid/23745 - http://www.ubuntu.com/usn/usn-436-2
CVE ID: CVE-2007-1800 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attackers to gain network access via a spoofed Network Endpoint Assessment posture, aka "NACATTACK." NOTE: this attack might be limited to authenticated users and devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Dror - http://osvdb.org/34123 - http://www.cisco.com/en/US/products/products_security_response09
/bh-eu-07-speakers.html#Dror - http://osvdb.org/34123 - http://www.cisco.com/en/US/products/products_security_response09186a00808110da.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33557
CVE ID: CVE-2007-1801 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conf_lang_default parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by inc/lang.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33326 - http://osvdb.org/35458 - https://www.exploit-db.com/exploits/3601 - http://www.securityfocus
com/vulnerabilities/33326 - http://osvdb.org/35458 - https://www.exploit-db.com/exploits/3601 - http://www.securityfocus.com/bid/23206
CVE ID: CVE-2007-1802 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MailDwarf 3.01 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1166 - http://secunia.com/advisories/24681 - http://www.securityfocus.com/bid/23207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33322 - http://jvn.jp/jp/JVN%2340511721/index.html
CVE ID: CVE-2007-1803 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MailDwarf 3.01 and earlier allows remote attackers to send e-mail to addresses different from the configured addresses. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33324 - http://www.vupen.com/english/advisories/2007/1166 - http://secunia.com/advisories/24681 - http://www.securityfocus.com/bid/23207 - http://jvn.jp/jp/JVN%2308951968/index.html
CVE ID: CVE-2007-1804 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LENGTH value of FRAME_SIZE_MAX_ALLOW sent on TCP port 9875, which triggers a p->export assertion failure in do_read; (2) a PA_PSTREAM_DESCRIPTOR_LENGTH value of 0 sent on TCP port 9875, which triggers a length assertion failure in pa_memblock_new; or (3) an empty packet on UDP port 9875, which triggers a t assertion failure in pa_sdp_parse; and allows remote authenticated users to cause a denial of service (daem
triggers a t assertion failure in pa_sdp_parse; and allows remote authenticated users to cause a denial of service (daemon crash) via a crafted packet on TCP port 9875 that (4) triggers a maxlength assertion failure in pa_memblockq_new, (5) triggers a size assertion failure in pa_xmalloc, or (6) plays a certain sound file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25431 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:065 - http://www.vupen.com/english/advisories/2007/1214 - http://aluigi.altervista.org/adv/pulsex-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/33315 - http://www.novell.com/linux/security/adviso
ulsex-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/33315 - http://www.novell.com/linux/security/advisories/2007_13_sr.html - http://www.securityfocus.com/bid/23240 - http://www.ubuntu.com/usn/usn-465-1 - http://aluigi.org/poc/pulsex.zip - http://secunia.com/advisories/25787
CVE ID: CVE-2007-1805 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3630 - http://www.securityfocus.com/bid/23253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33372 - http://osvdb.org/34466
CVE ID: CVE-2007-1806 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the idcat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33370 - http://www.securityfocus.com/bid/23250 - http://secunia.com/advisories/24709
CVE ID: CVE-2007-1807 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23229 - http://www.vupen.com/english/advisories/2007/1202 - http://osvdb.org/34465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33371 - https://www.exploit-db.com/exploits/3632
CVE ID: CVE-2007-1808 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the camid parameter in a showcam action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3629 - http://osvdb.org/34456 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33373 - http://www.vupen.com/english/advisories/2007/1201 - http://www.securityfocus.com/bid/23245 - http://secunia.com/advisories/24748
CVE ID: CVE-2007-1809 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter to (1) cls_headline_prod.php, (2) cls_listorders.php, or (3) cls_viewpastorders.php in include/, different vectors than CVE-2007-1513. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33351 - http://www.attrition.org/pipermail/vim/2007-April/00148
8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33351 - http://www.attrition.org/pipermail/vim/2007-April/001482.html - http://www.securityfocus.com/bid/23242 - http://osvdb.org/35226 - https://www.exploit-db.com/exploits/3628 - http://osvdb.org/35227
CVE ID: CVE-2007-1810 State: PUBLISHED Published: 2007-04-02T23:00:00 Last Updated: 2024-08-07T13:06:26.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_details.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23272 - http://osvdb.org/34455 - http://secunia.com/advisories/24749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33374 - https://www.exploit-db.com/exploits/3626 - http://www.vupen.com/english/advisories/2007/1211