Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5463 State: PUBLISHED Published: 2007-10-15T22:00:00 Last Updated: 2024-08-07T15:31:58.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key files via an "iDEAL transaction", possibly involving fopen error messages for nonexistent files, a different issue than CVE-2007-5364. NOTE: this can be leveraged for reading certificate or key files if an installation places these files under the web document root. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/323
ument root. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3233 - http://www.securityfocus.com/archive/1/481978/100/0/threaded - http://www.viart.com/ideal_process_script_fix_for_release_32_and_33_beta.html - http://osvdb.org/40151 - http://secunia.com/advisories/27199 - http://www.securityfocus.com/bid/25998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37048
CVE ID: CVE-2007-5464 State: PUBLISHED Published: 2007-10-15T22:00:00 Last Updated: 2024-08-07T15:31:58.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Live for Speed 0.5X10 and earlier allows remote authenticated users to cause a denial of service (client crash) and possibly execute arbitrary code via a long skin name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26066 - http://www.securityfocus.com/archive/1/482249/100/0/threaded - http://securityreason.com/securityalert/3234 - http://secunia.com/advisories/27242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37191 - http://aluigi.al
34 - http://secunia.com/advisories/27242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37191 - http://aluigi.altervista.org/adv/lfscbof-adv.txt
CVE ID: CVE-2007-5465 State: PUBLISHED Published: 2007-10-15T23:00:00 Last Updated: 2024-08-07T15:31:58.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter to an unspecified component. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26075 - http://osvdb.org/37864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37205 - https://www.exploit-db.com/exploits/4536 - http://secunia.com/advisories/27255
CVE ID: CVE-2007-5466 State: PUBLISHED Published: 2007-10-15T23:00:00 Last Updated: 2024-08-07T15:31:58.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1
code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function. Additional Analyst Notes: - CVE Program Container: References: - http://www.digit-labs.org/files/exploits/extremail-v4.c - https://www.exploit-db.com/exploits/4533 - http://secunia.com/advisories/27220 - https://www.exploit-db.com/exploits/4535 - https://www.exploit-db.com/exploits/4534 - http://www.securityfocus.com/bid/26074 - http://www.digit-labs.org/files/exploits/extremail-v5.c - http://www.digit-labs.org/files/exploits/extremail-v8.pl - https://exchange.xforce.ibmcloud.com/vulnerabilities/37209 - http://www.digit-labs.org/files/exploits/extremail-v6.c - ht
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/37209 - http://www.digit-labs.org/files/exploits/extremail-v6.c - http://www.securityfocus.com/archive/1/482293
CVE ID: CVE-2007-5467 State: PUBLISHED Published: 2007-10-15T23:00:00 Last Updated: 2024-08-07T15:31:58.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long USER command containing "%s" sequences to the pop3 port (110/tcp), which are expanded to "%%s" before being used in the memmove function, possibly due to an incomplete fix for CVE-2001-1078. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27220 - http://www.digit-labs.org/files/exploits/extremail-v3.pl - http://www.securityfocus.com/
/secunia.com/advisories/27220 - http://www.digit-labs.org/files/exploits/extremail-v3.pl - http://www.securityfocus.com/bid/26074 - https://www.exploit-db.com/exploits/4532 - http://www.securityfocus.com/archive/1/482293
CVE ID: CVE-2007-5468 State: PUBLISHED Published: 2007-10-16T00:00:00 Last Updated: 2024-08-07T15:31:58.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack"). Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html - http://www.vupen.com/english/advisories/2007/3534 - http://secunia.com/advis
/full-disclosure/2007-October/066581.html - http://www.vupen.com/english/advisories/2007/3534 - http://secunia.com/advisories/27231 - http://www.securityfocus.com/bid/26057 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/37197 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html
CVE ID: CVE-2007-5469 State: PUBLISHED Published: 2007-10-16T00:00:00 Last Updated: 2024-08-07T15:31:58.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack"). NOTE: Debian disputes this issue, stating that "having the two URIs mismatch is allowed by the standard and happens in some setups for valid reasons. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/ad
in some setups for valid reasons. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27204 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html - http://www.securityfocus.com/bid/26057 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446956 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/37197 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html
CVE ID: CVE-2007-5470 State: PUBLISHED Published: 2007-10-16T00:00:00 Last Updated: 2024-08-07T15:31:59.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27144 - http://support.microsoft.com/kb/942109 - http://www.securityfocus.com/bid/25996 - http://osvdb.org/38486
CVE ID: CVE-2007-5471 State: PUBLISHED Published: 2007-10-16T00:00:00 Last Updated: 2024-08-07T15:31:58.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. NOTE: this issue probably affects other daemons that attempt to initialize this library within a chroot configuration or other invalid configuration. Additional Analyst Notes: - CVE Program Container: References: - https://secure-support.novell.com/KanisaPlatform/Publishing/936/3665923_f.
Notes: - CVE Program Container: References: - https://secure-support.novell.com/KanisaPlatform/Publishing/936/3665923_f.SAL_Public.html - http://osvdb.org/40935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37233 - http://secunia.com/advisories/27189 - http://www.securityfocus.com/bid/26076
CVE ID: CVE-2007-5472 State: PUBLISHED Published: 2007-10-22T19:00:00 Last Updated: 2024-08-07T15:31:59.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482536/100/0/threaded - http://supportconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.asp - http://securitytracker.com/id?1018839 - https://exchange.
tconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.asp - http://securitytracker.com/id?1018839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37285 - http://www.vupen.com/english/advisories/2007/3547 - http://osvdb.org/37998 - http://www.securityfocus.com/bid/26134 - http://secunia.com/advisories/27301
CVE ID: CVE-2007-5473 State: PUBLISHED Published: 2007-10-18T18:00:00 Last Updated: 2024-08-07T15:31:58.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing (1) space or (2) dot, which is not properly handled by XSP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26166 - http://osvdb.org/41871 - http://secunia.com/advisories/27349 - http://anonsvn.mono-project.com/viewcvs/trunk/mcs/class/System.Web/System.Web/StaticFileHandler.cs - https://exchange.
- http://anonsvn.mono-project.com/viewcvs/trunk/mcs/class/System.Web/System.Web/StaticFileHandler.cs - https://exchange.xforce.ibmcloud.com/vulnerabilities/37341
CVE ID: CVE-2007-5474 State: PUBLISHED Published: 2008-09-05T16:00:00 Last Updated: 2024-08-07T15:31:58.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via an Atheros information element with an invalid length, as demonstrated by an element that is too long. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfoc
by an element that is too long. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31012 - http://securityreason.com/securityalert/4226 - http://www.securityfocus.com/archive/1/495984/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44921
CVE ID: CVE-2007-5475 State: PUBLISHED Published: 2009-11-12T23:00:00 Last Updated: 2024-08-07T15:31:58.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Marvell wireless driver, as used in Linksys WAP4400N Wi-Fi access point with firmware 1.2.17 on the Marvell 88W8361P-BEM1 chipset, and other products, allow remote 802.11-authenticated users to cause a denial of service (wireless access point crash) and possibly execute arbitrary code via an association request with long (1) rates, (2) extended rates, and unspecified other information elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisor
ormation elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3239 - http://www.securityfocus.com/archive/1/507781/100/0/threaded - http://secunia.com/advisories/37345
CVE ID: CVE-2007-5476 State: PUBLISHED Published: 2007-10-18T00:00:00 Last Updated: 2024-08-07T15:31:58.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37250 - http://www.vupen.com/english/advisories/2007/4238 - http://secunia.com/advisories/30507 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/28136 - http://www.vupen.com/english/advisories/200
rt.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/28136 - http://www.vupen.com/english/advisories/2008/1724/references - http://www.us-cert.gov/cas/techalerts/TA07-355A.html - http://www.securitytracker.com/id?1018830 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://www.adobe.com/support/security/advisories/apsa07-05.html - http://secunia.com/advisories/28161 - http://docs.info.apple.com/article.html?artnum=307179 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.vupen.com/english/advisories/2007/4258 - http://www.opera.com/support/search/view/868/ - http://www.securityfocus.com/bid/26274 - http://www.adobe.
s/2007/4258 - http://www.opera.com/support/search/view/868/ - http://www.securityfocus.com/bid/26274 - http://www.adobe.com/support/security/bulletins/apsb07-20.html
CVE ID: CVE-2007-5477 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:58.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37833 - http://sla.ckers.org/forum/read.php?3%2C44%2C11482#msg-11482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37220 - http://secunia.com/advisories/27245 - http://www.attrition.org/pipermail/vim/2007-October/001833.html - http://www.secur
http://secunia.com/advisories/27245 - http://www.attrition.org/pipermail/vim/2007-October/001833.html - http://www.securityfocus.com/bid/26087
CVE ID: CVE-2007-5478 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:58.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in projects in Nabh Stringbeans Portal (sbportal) 3.2 allows remote attackers to inject arbitrary web script or HTML via the project_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482303/100/0/threaded - http://www.securityfocus.com/bid/26082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37266 - http://osvdb.org/40165 - http://securityreason.com/securityalert/3240
CVE ID: CVE-2007-5479 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:58.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Search.asp in Xcomputer allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37217 - http://www.securityfocus.com/archive/1/482307/100/0/threaded
CVE ID: CVE-2007-5480 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:58.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to msg.jsp, and the (2) contentid parameter to tc/contents/home001.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=119248056804520&w=2 - http://osvdb.org/37927 - http://secunia.com/advisories/27225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37273 - http://osvdb.org/37928 - http://www.securityfocus.com/b
5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37273 - http://osvdb.org/37928 - http://www.securityfocus.com/bid/26084
CVE ID: CVE-2007-5481 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:58.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Distributed Checksum Clearinghouse (DCC) 1.3.65 allows remote attackers to cause a denial of service (crash) via a "SOCKS flood." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26088 - http://secunia.com/advisories/27262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37224 - http://www.rhyolite.com/anti-spam/dcc/CHANGES
CVE ID: CVE-2007-5482 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:58.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a denial of service (I/O request timeout and device hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37221 - http://www.securitytracker.com/id?1018819 - http://www.vupen.com/english/advisories/2007/
ud.com/vulnerabilities/37221 - http://www.securitytracker.com/id?1018819 - http://www.vupen.com/english/advisories/2007/3507 - http://osvdb.org/40168 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103106-1 - http://www.securityfocus.com/bid/26086 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201253-1
CVE ID: CVE-2007-5483 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:58.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Administrative Scripting Tools (such as wsadmin or ANT) in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37203 - http://www.securityfocus.com/bid/26078 - http://secunia.com/advisories/27249 - http://www.securitytracker.com/id?1018820 - http://www-1.ibm.com/support/docview.wss?uid=swg27006876#60223 - http://www-1.ibm.com/support/docview.wss
m/id?1018820 - http://www-1.ibm.com/support/docview.wss?uid=swg27006876#60223 - http://www-1.ibm.com/support/docview.wss?uid=swg27006879#51116 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK45726&apar=only - http://www.vupen.com/english/advisories/2007/3506
CVE ID: CVE-2007-5484 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:59.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wxis.exe in WWWISIS 7.1 allows local users to read arbitrary files via a .. (dot dot) in the IsisScript parameter to iah. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27198 - http://osvdb.org/40170 - http://www.securityfocus.com/archive/1/482356/100/0/threaded - https://www.exploit-db.com/exploits/4529 - http://www.securityfocus.com/bid/26079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37215
CVE ID: CVE-2007-5485 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:59.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3496 - http://www.securityfocus.com/bid/26083 - https://www.exploit-db.com/exploits/4528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37196
CVE ID: CVE-2007-5486 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:58.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotProject before 2.1 does not properly check privileges when invoking the Companies module, which allows remote attackers to access this module via a crafted URL. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26080 - http://secunia.com/advisories/27191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37202 - http://bugs.dotproject.net/view.php?id=1910 - http://docs.dotproject.net/index.php/Closed_Is
com/vulnerabilities/37202 - http://bugs.dotproject.net/view.php?id=1910 - http://docs.dotproject.net/index.php/Closed_Issues_/_Feature_Requests_-_2.1
CVE ID: CVE-2007-5487 State: PUBLISHED Published: 2007-10-16T23:00:00 Last Updated: 2024-08-07T15:31:58.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a long URL in an EXTM3U section of a .m3u file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3489 - https://www.exploit-db.com/exploits/4531 - http://secunia.com/advisories/27149 - http://www.securityfocus.com/bid/26069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37204
CVE ID: CVE-2007-5488 State: PUBLISHED Published: 2007-10-17T23:00:00 Last Updated: 2024-08-07T15:31:58.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allow remote attackers to execute arbitrary SQL commands via the (1) source and (2) destination numbers, and probably (3) SIP URI, when inserting a record. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37235 - http://www.securitytracker.com/id?1018824 - http://secunia.com/advisories/27278 - http://downloads.digium.com/
s/37235 - http://www.securitytracker.com/id?1018824 - http://secunia.com/advisories/27278 - http://downloads.digium.com/pub/security/AST-2007-023.html - http://www.securityfocus.com/bid/26095 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066744.html
CVE ID: CVE-2007-5489 State: PUBLISHED Published: 2007-10-17T18:00:00 Last Updated: 2024-08-07T15:31:58.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37240 - http://www.securityfocus.com/bid/26090 - https://www.exploit-db.com/exploits/4538 - http://secunia.com/advisories/27269