Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4792 State: PUBLISHED Published: 2007-09-10T21:00:00 Last Updated: 2024-08-07T15:08:33.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ibstat in devices.common.IBM.ib.rte in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3845 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY97233 - http://secunia.com/advisories/26715 - http://www.vupen.com/english/advisories/2007/3059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36446 - http://www.securityfocus.com/bid/25557
CVE ID: CVE-2007-4793 State: PUBLISHED Published: 2007-09-10T21:00:00 Last Updated: 2024-08-07T15:08:33.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xlplm in plm.server.rte in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3853 - http://secunia.com/advisories/26715 - http://www.vupen.com/english/advisories/2007/3059 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3854 - http://www.securityfocus.com/bid/25560 - http://osvdb.org/40398 - http://www-1.ibm.c
criptions/pqvcmjd?mode=18&ID=3854 - http://www.securityfocus.com/bid/25560 - http://osvdb.org/40398 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00997
CVE ID: CVE-2007-4794 State: PUBLISHED Published: 2007-09-10T21:00:00 Last Updated: 2024-08-07T15:08:33.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in fcstat in devices.common.IBM.fc.rte in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long input parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=isg1IY94739 - http://secunia.com/advisories/26715 - http://osvdb.org/40397 - http://www.vupen.com/english/advisories/2007/3059 - http://www.securityfocus.com/bid/25555 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY94761 - http://www14.software.ibm.com/webapp/set2/subscri
bid/25555 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY94761 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3844 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36445
CVE ID: CVE-2007-4795 State: PUBLISHED Published: 2007-09-10T21:00:00 Last Updated: 2024-08-07T15:08:33.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mkpath in bos.rte.methods in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long ODM name. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3848 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY91132 - http://www.securityfocus.com/bid/25558 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3849 - http://secunia.com/advisories/26715 - http://www.vupen.com/english/advisorie
et2/subscriptions/pqvcmjd?mode=18&ID=3849 - http://secunia.com/advisories/26715 - http://www.vupen.com/english/advisories/2007/3059 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY91145
CVE ID: CVE-2007-4796 State: PUBLISHED Published: 2007-09-10T21:00:00 Last Updated: 2024-08-07T15:08:33.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in uucp in bos.net.uucp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=isg1IY95852 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY97215 - http://secunia.com/advisories/26715 - http://www.vupen.com/english/advisories/2007/3059 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3851 - http://www14.software.ibm.com/webapp/set2/subscript
software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3851 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3852 - http://www.securityfocus.com/bid/25563
CVE ID: CVE-2007-4797 State: PUBLISHED Published: 2007-09-10T21:00:00 Last Updated: 2024-08-07T15:08:33.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in unspecified svprint (System V print) commands in bos.svprint.rte in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40394 - http://www.securityfocus.com/bid/25561 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ02718 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ02717 - http://secunia.com/advisories/26715 - http://www.vupen.com/english/advisories/2007/3059 - http://www14.s
d=isg1IZ02717 - http://secunia.com/advisories/26715 - http://www.vupen.com/english/advisories/2007/3059 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3838 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3837
CVE ID: CVE-2007-4798 State: PUBLISHED Published: 2007-09-10T21:00:00 Last Updated: 2024-08-07T15:08:33.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26715 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3847 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3846 - http://www.vup
vcmjd?mode=18&ID=3847 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3846 - http://www.vupen.com/english/advisories/2007/3059 - http://osvdb.org/40393 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY98506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36447 - http://www.securityfocus.com/bid/25556
CVE ID: CVE-2007-4799 State: PUBLISHED Published: 2007-09-10T21:00:00 Last Updated: 2024-08-07T15:08:33.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, which allows local users to cause a denial of service (system hang or crash) via unspecified SET operations. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26715 - http://www.vupen.com/english/advisories/2007/3059 - http://osvdb.org/40392 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3850 - http://www-1.ibm.com/support/docview.wss?uid
/www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3850 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY97309 - http://www.securityfocus.com/bid/25554
CVE ID: CVE-2007-4802 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or (2) a long second argument to the SetClientInfo method in a certain ActiveX control in glitemflat.dll. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45886 - http://www.securityfocus.com/bid/25586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36501 - https://www.exploit-db.com/
w.securityfocus.com/bid/25586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36501 - https://www.exploit-db.com/exploits/4366 - http://www.securityfocus.com/bid/25565 - https://www.exploit-db.com/exploits/4372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36470 - http://osvdb.org/45887
CVE ID: CVE-2007-4803 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the (1) File1 and (2) Title1 fields, different vectors than CVE-2006-6287 and CVE-2007-2487. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45889 - https://www.exploit-db.com/exploits/4364 - http://www.securityfocus.com/bid/25546
CVE ID: CVE-2007-4804 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) hal.php, (2) cetak.php, (3) lihat.php, (4) pesan.php, and (5) teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to the product's top-level default URI, using the pilih parameter, in some circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36519 - http://osvdb.
Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36519 - http://osvdb.org/38411 - http://osvdb.org/38412 - http://osvdb.org/38413 - http://www.securityfocus.com/bid/25614 - http://osvdb.org/38409 - http://osvdb.org/38410 - https://www.exploit-db.com/exploits/4385
CVE ID: CVE-2007-4805 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in getgalldata.php in fuzzylime (cms) 3.0 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36520 - http://secunia.com/advisories/26740 - https://www.exploit-db.com/exploits/4378 - http://www.vupen.com/english/advisories/2007/3135 - http://www.securityfocus.com/bid/25604 - http://www.attrition.org/pipermail/vim/2007-Sept
english/advisories/2007/3135 - http://www.securityfocus.com/bid/25604 - http://www.attrition.org/pipermail/vim/2007-September/001780.html - http://osvdb.org/36996
CVE ID: CVE-2007-4806 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36521 - http://www.osvdb.org/36952 - http://www.attrition.org/pipermail/vim/2007-September/001788.html - http://www.vupen.com/english/advisories/2007/3134 - https://www.exploit
n.org/pipermail/vim/2007-September/001788.html - http://www.vupen.com/english/advisories/2007/3134 - https://www.exploit-db.com/exploits/4377 - http://secunia.com/advisories/26750
CVE ID: CVE-2007-4807 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to (1) modules/Discipline/CategoryBreakdownTime.php or (2) modules/Discipline/StudentFieldBreakdown.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26775 - http://www.securityfocus.com/bid/25603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36523 - http://www.osvdb.org/36998 - http://www.osvdb.org/36997 - https
s://exchange.xforce.ibmcloud.com/vulnerabilities/36523 - http://www.osvdb.org/36998 - http://www.osvdb.org/36997 - https://www.exploit-db.com/exploits/4377 - http://www.vupen.com/english/advisories/2007/3133
CVE ID: CVE-2007-4808 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to news.php in a lirenews action, (2) the idnews parameter to goodies.php in a lire action, (3) the id parameter to file.php in a voir action, (4) the ID parameter to affichage.php, (5) the id_sal parameter to mod_forum/afficher.php, or (6) the id_sujet parameter to mod_forum/messages.php. NOTE: it was later reported that goodies.php and affichage.php scripts are reachable through index.php, a
/messages.php. NOTE: it was later reported that goodies.php and affichage.php scripts are reachable through index.php, and 1.1 is also affected. NOTE: it was later reported that the goodies.php vector also affects 3.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.z0rlu.ownspace.org/index.php?/archives/74-Powered-by-TLM-CMS-index.php-sql-inj..html - http://osvdb.org/37001 - http://osvdb.org/37002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42204 - http://osvdb.org/37005 - https://www.exploit-db.com/exploits/4376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36536 - http://osvdb.org/37003 - http://secunia.com/advisories/26752 - http://www.secu
orce.ibmcloud.com/vulnerabilities/36536 - http://osvdb.org/37003 - http://secunia.com/advisories/26752 - http://www.securityfocus.com/bid/29049 - http://www.securityfocus.com/bid/25602 - http://www.vupen.com/english/advisories/2007/3137 - http://osvdb.org/37004 - http://osvdb.org/37006
CVE ID: CVE-2007-4809 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter to (1) lib/functions.php or (2) lib/header.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36944 - http://www.securityfocus.com/bid/25596 - http://secunia.com/advisories/26767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36529 - https://www.exploit-db.com/exploits/4374 - http://osvdb.org/36943
CVE ID: CVE-2007-4810 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to execute arbitrary SQL commands via (1) the ge_id parameter in a list.artists action to explore.php or (2) the id parameter in a show.tracks action to xml.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25600 - http://osvdb.org/38834 - http://www.securityfocus.com/archive/1/478871/100/0/threaded - http://securityreason.com/securityalert/3110 - https://exchange.xforce.ibmcloud.com/vulnerabili
/478871/100/0/threaded - http://securityreason.com/securityalert/3110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36516 - http://osvdb.org/38833
CVE ID: CVE-2007-4811 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via (1) the val parameter to alphabet.php in an alpha.albums action, or the PATH_INFO to (2) random.php or (3) admin/hidden.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36517 - http://osvdb.org/38403 - http://www.securityfocus.com/archive/1/478871/100/0/threaded - http://osvdb.org/38404 - http:/
http://osvdb.org/38403 - http://www.securityfocus.com/archive/1/478871/100/0/threaded - http://osvdb.org/38404 - http://securityreason.com/securityalert/3110 - http://www.securityfocus.com/bid/25599
CVE ID: CVE-2007-4812 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple Safari 3.0.3 522.15.5, and other versions before Beta Update 3.0.4, allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact by setting document.location.hash to a long string. NOTE: the crash might actually occur in the alert method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26448 - http://www.securityfocus.com/archive/1/478802/100/0/threaded - http://lists.apple.com/archives/Security-announce/2007/N
http://www.securityfocus.com/archive/1/478802/100/0/threaded - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html - http://osvdb.org/43971 - http://securityreason.com/securityalert/3111
CVE ID: CVE-2007-4813 State: PUBLISHED Published: 2007-09-11T18:00:00 Last Updated: 2024-08-07T15:08:33.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Domino Blogsphere 3.01 Beta 7 allows remote attackers to inject arbitrary web script or HTML via the name field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38400 - http://www.securityfocus.com/bid/25587
CVE ID: CVE-2007-4814 State: PUBLISHED Published: 2007-09-11T19:00:00 Last Updated: 2024-08-07T15:08:33.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3112 - https://www.exploit-db.com/exploits/4379 - http://www.securityfocus.com/bid/25594 - https://www.exploit-db.com/exploits/4398 - http://retrogod.a
om/exploits/4379 - http://www.securityfocus.com/bid/25594 - https://www.exploit-db.com/exploits/4398 - http://retrogod.altervista.org/microsoft_sqldmo.html - http://www.osvdb.org/38399 - http://www.securityfocus.com/archive/1/478822/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36509
CVE ID: CVE-2007-4815 State: PUBLISHED Published: 2007-09-11T19:00:00 Last Updated: 2024-08-07T15:08:33.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URL in the Codebase parameter to (1) channeledit.php, (2) post.php, (3) view.php, or (4) viewitem.php in source/mod/rss/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38395 - http://www.securityfocus.com/archive/1/480108/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36532 - http://osvdb.org/38397 - http://osvdb.o
08/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36532 - http://osvdb.org/38397 - http://osvdb.org/38396 - http://osvdb.org/38398 - https://www.exploit-db.com/exploits/4384 - http://www.securityfocus.com/bid/25608 - http://www.vupen.com/english/advisories/2007/3171
CVE ID: CVE-2007-4816 State: PUBLISHED Published: 2007-09-11T19:00:00 Last Updated: 2024-08-07T15:08:33.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long (1) URL, (2) backImage, or (3) titleImage property value; (4) a long first argument to the advancedOpen method; a long argument to the (5) isDVDPath or (6) rawParse method; or (7) a .smpl file with a long path attribute in an item element in a PlayList. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40491 - http://www.milw0rm.com/sploits/09082007-storm.zip - h
s: - CVE Program Container: References: - http://osvdb.org/40491 - http://www.milw0rm.com/sploits/09082007-storm.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/36542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36543 - http://secunia.com/advisories/26749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36540 - http://www.securityfocus.com/bid/25601 - https://www.exploit-db.com/exploits/4375 - http://www.vupen.com/english/advisories/2007/3111
CVE ID: CVE-2007-4817 State: PUBLISHED Published: 2007-09-11T19:00:00 Last Updated: 2024-08-07T15:08:33.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .php.jpg, which creates an accessible file under img_original/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4383 - http://www.attrition.org/pipermail/vim/2007-September/001779.html - http://secunia.com/advisories/26756 - http://www.secur
tp://www.attrition.org/pipermail/vim/2007-September/001779.html - http://secunia.com/advisories/26756 - http://www.securityfocus.com/bid/25612 - http://www.vupen.com/english/advisories/2007/3139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36538
CVE ID: CVE-2007-4818 State: PUBLISHED Published: 2007-09-11T19:00:00 Last Updated: 2024-08-07T15:08:33.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php, or (4) mail/mailbox.php in modules/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/478870/100/0/threaded - https://www.exploit-db.com/exploits/4381 - http://osvdb.org/38390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36511 - http://osvdb.
.com/exploits/4381 - http://osvdb.org/38390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36511 - http://osvdb.org/38392 - http://www.securityfocus.com/bid/25597 - http://securityreason.com/securityalert/3116 - http://osvdb.org/38391 - http://osvdb.org/38393
CVE ID: CVE-2007-4819 State: PUBLISHED Published: 2007-09-11T19:00:00 Last Updated: 2024-08-07T15:08:33.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/478870/100/0/threaded - https://www.exploit-db.com/exploits/4381 - http://securityreason.com/securityalert/3116 - http://osvdb.org/38389
CVE ID: CVE-2007-4820 State: PUBLISHED Published: 2007-09-11T19:00:00 Last Updated: 2024-08-07T15:08:33.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitrary local files, and possibly execute local PHP scripts, via the nmf parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25605 - http://osvdb.org/39017 - https://www.exploit-db.com/exploits/4380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36533