Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0609 State: PUBLISHED Published: 2007-05-09T17:00:00 Last Updated: 2024-08-07T12:26:54.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. (dot dot) in a lang cookie, followed by a filename without its .php extension, as demonstrated via a request to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34152 - http://securityreason.com/securityalert/2662 - http://www.vupen.com/english/advisorie
mcloud.com/vulnerabilities/34152 - http://securityreason.com/securityalert/2662 - http://www.vupen.com/english/advisories/2007/1726 - http://www.securityfocus.com/archive/1/467937/100/0/threaded - http://www.netvigilance.com/advisory0013 - http://www.securityfocus.com/archive/1/467941/100/0/threaded - http://www.securityfocus.com/bid/23876 - http://www.netvigilance.com/advisory0012 - http://secunia.com/advisories/25153
CVE ID: CVE-2007-0610 State: PUBLISHED Published: 2007-01-31T01:00:00 Last Updated: 2024-08-07T12:26:53.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML via the sender parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23951 - http://www.securityfocus.com/bid/22250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31841 - http://osvdb.org/32976
CVE ID: CVE-2007-0611 State: PUBLISHED Published: 2007-01-31T01:00:00 Last Updated: 2024-08-07T12:26:53.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) inc.page.php and (2) inc.text.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36682 - http://www.vupen.com/english/advisories/2007/0360 - http://osvdb.org/36683 - http://sourceforge.net/project/shownotes.php?release_id=480714&group_id=98260
CVE ID: CVE-2007-0612 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-07T12:26:54.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll; or the (12) TriEditDocument.TriEditDocument or (13) TriEditDocument.TriEditDocument.1 objects i
jects in (a) mshtml.dll; or the (12) TriEditDocument.TriEditDocument or (13) TriEditDocument.TriEditDocument.1 objects in (b) triedit.dll, which cause a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0547.html - http://www.securityfocus.com/archive/1/458443/100/0/threaded - http://osvdb.org/32628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31867 - http://securityreason.com/securityalert/2199 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052057.html - http://www.securityfocus.com/bid/22288 - http://www.determina.com/security.research/vulnerabilities/activex-
2057.html - http://www.securityfocus.com/bid/22288 - http://www.determina.com/security.research/vulnerabilities/activex-bgcolor.html
CVE ID: CVE-2007-0613 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-07T12:26:54.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32698 - http://projects.info-pull.com/moab/MOAB-29-01-2007.html - http://www.securityfocus.com/bid/22304 -
www.osvdb.org/32698 - http://projects.info-pull.com/moab/MOAB-29-01-2007.html - http://www.securityfocus.com/bid/22304 - http://www.osvdb.org/32699
CVE ID: CVE-2007-0614 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-07T12:26:53.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (persistent application crash) via a crafted phsh hash attribute in a TXT key. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html - http://secunia.com/advisories/24198 - http://secunia.com/advisories/23945 - http://www.securitytracker.com/id?1017661 - http://projects.info-pull
ries/24198 - http://secunia.com/advisories/23945 - http://www.securitytracker.com/id?1017661 - http://projects.info-pull.com/moab/MOAB-29-01-2007.html - http://www.osvdb.org/32713 - http://docs.info.apple.com/article.html?artnum=305102 - http://www.securityfocus.com/bid/22304
CVE ID: CVE-2007-0615 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-07T12:26:53.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edition Management Server and Log Server before 20070124 allows remote attackers to cause a denial of service (application stop) via unexpected data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31733 - http://secunia.com/advisories/23854 - http://www.securityfocus.com/bid/22237 - http://osvdb.org/32963 - http://www.hitachi-support.com/security_e/vuls_e/HS06-019_e/01-e.html - http://www.vupen.com/eng
ttp://osvdb.org/32963 - http://www.hitachi-support.com/security_e/vuls_e/HS06-019_e/01-e.html - http://www.vupen.com/english/advisories/2007/0324
CVE ID: CVE-2007-0616 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-07T12:26:53.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6 allows remote attackers to list arbitrary directories via ".." sequences in the album parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32102 - http://osvdb.org/33072 - http://www.zenphoto.org/support/topic.php?id=1148 - http://secunia.com/advisories/24026 - http://www.zenphoto.org/support/topic.php?id=1146&replies=3 - http://www.securityfocus.
//secunia.com/advisories/24026 - http://www.zenphoto.org/support/topic.php?id=1146&replies=3 - http://www.securityfocus.com/bid/22368 - http://www.vupen.com/english/advisories/2007/0470
CVE ID: CVE-2007-0617 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-07T12:26:54.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting," which allows remote attackers to add arbitrary e-mail addresses and domains to the spam blocker whitelist via the (1) AddSenderToWhitelist and (2) AddDomainToWhitelist functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31827 - http://www.securityfocus.com/bid/22238 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052021.html - http://security
urityfocus.com/bid/22238 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052021.html - http://securityreason.com/securityalert/2210
CVE ID: CVE-2007-0618 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-07T12:26:53.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in (1) pop3d, (2) pop3ds, (3) imapd, and (4) imapds in IBM AIX 5.3.0 has unspecified impact and attack vectors, involving an "authentication vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31875 - http://www.vupen.com/english/advisories/2007/0382 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://www-1.ibm.com/support/search.wss?rs=0&q=IY93084&apar=only - http://
software.ibm.com/aix/efixes/security/README - http://www-1.ibm.com/support/search.wss?rs=0&q=IY93084&apar=only - http://secunia.com/advisories/23957
CVE ID: CVE-2007-0619 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-07T12:26:53.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017565 - http://secunia.com/advisories/23975 - http://www.vupen.com/english/advisories/2007/0361 - http://www.novell.com/linux/security/advisories/2007_3_sr.html - http://www.securityfocus.com/bid/22258 - http://secunia.com/advisories/24335 - http://labs.idefense.com/inte
3_sr.html - http://www.securityfocus.com/bid/22258 - http://secunia.com/advisories/24335 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=468 - http://security.gentoo.org/glsa/glsa-200702-12.xml - http://morte.jedrea.com/~jedwin/projects/chmlib/
CVE ID: CVE-2007-0620 State: PUBLISHED Published: 2007-01-31T11:00:00 Last Updated: 2024-08-07T12:26:54.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23947 - http://www.securityfocus.com/archive/1/458231/100/0/threaded - http://osvdb.org/33001 - http://securityreason.com/securityalert/2197 - http://www.vupen.com/english/advisories/20
ded - http://osvdb.org/33001 - http://securityreason.com/securityalert/2197 - http://www.vupen.com/english/advisories/2007/0383 - http://www.securityfocus.com/bid/22265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31915
CVE ID: CVE-2007-0621 State: REJECTED Published: 2007-01-31T17:00:00 Last Updated: 2007-02-03T10:00:00 Description: No description available.
CVE ID: CVE-2007-0622 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:54.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in MyBB (aka MyBulletinBoard) 1.2.2 allows remote attackers to send messages to arbitrary users. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23934 - http://osvdb.org/32968
CVE ID: CVE-2007-0623 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:54.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MAXdev MDPro 1.0.76 allows remote attackers to execute arbitrary SQL commands via the startrow parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33011 - http://secunia.com/advisories/23948 - http://www.vupen.com/english/advisories/2007/0412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31897 - http://www.securityfocus.com/archive/1/458438/100/0/threaded - http://osvdb.org/33612 - http://www.securityfocus.com/bid/22293 - http://secur
cus.com/archive/1/458438/100/0/threaded - http://osvdb.org/33612 - http://www.securityfocus.com/bid/22293 - http://securityreason.com/securityalert/2198
CVE ID: CVE-2007-0624 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:54.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote) character, and possibly other invalid values, in the uname parameter in a userinfo operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458438/100/0/threaded - http://osvdb.org/33613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31898 - http://securityreason.com/securityalert/2198
CVE ID: CVE-2007-0625 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:53.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.nomachine.com/tr/view.php?id=TR01E01622 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31941 - http://www.vupen.com/english/advisories/2007/0413 - http://www.nomachine.com/news_read.php?idnews=190 - http://osvdb.org/33009
www.vupen.com/english/advisories/2007/0413 - http://www.nomachine.com/news_read.php?idnews=190 - http://osvdb.org/33009 - http://www.securityfocus.com/bid/22308 - http://secunia.com/advisories/23993
CVE ID: CVE-2007-0626 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:54.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5.1, and vbDrupal, allows remote attackers with "post comments" privileges and access to multiple input filters to execute arbitrary code by previewing comments, which are not processed by "normal form validation routines." Additional Analyst Notes: - CVE Program Container: References: - http://www.vbdrupal.org/forum/showthread.php?t=786 - http://www.securityfocus.com/bid/22306 - http://secunia.com/advisories/23960 - http://www.vupen
m/showthread.php?t=786 - http://www.securityfocus.com/bid/22306 - http://secunia.com/advisories/23960 - http://www.vupen.com/english/advisories/2007/0406 - http://osvdb.org/32136 - http://www.vupen.com/english/advisories/2007/0415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31940 - http://drupal.org/node/113935 - http://archives.neohapsis.com/archives/bugtraq/2007-01/0670.html - http://secunia.com/advisories/23990
CVE ID: CVE-2007-0627 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:54.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.stillhq.com/gtalkbot/000003.html - http://www.stillhq.com/gtalkbot/ - http://www.securityfocus.com/bid/22322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31923 - http://secunia.com/advisories/23942 - http://www.vupen.com/english/advisories/2007/0408 - http://osvdb.org/33
es/31923 - http://secunia.com/advisories/23942 - http://www.vupen.com/english/advisories/2007/0408 - http://osvdb.org/33071 - http://freshmeat.net/projects/gtalkbot/?branch_id=67830&release_id=245004
CVE ID: CVE-2007-0628 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:53.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) before 20070129 allow remote attackers to inject arbitrary web script or HTML via the (1) goto or (2) gx-charset parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0411 - http://securitytracker.com/id?1017570 - http://secunia.com/advisories/23979 - http://osvd
english/advisories/2007/0411 - http://securitytracker.com/id?1017570 - http://secunia.com/advisories/23979 - http://osvdb.org/33010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31936 - http://www.securityfocus.com/bid/22302 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102621-1
CVE ID: CVE-2007-0629 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:53.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unauthorized assets. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23981 - http://sourceforge.net/project/shownotes.php?group_id=51417&release_id=481584 - http://www.securityfocus.com/bid/22294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31905 - http://www.plainblac
tp://www.securityfocus.com/bid/22294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31905 - http://www.plainblack.com/getwebgui/advisories/security-defect-discovered-in-7.x-versions - http://osvdb.org/32992
CVE ID: CVE-2007-0630 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:54.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) from, and (3) q parameters, different vectors than CVE-2007-0569. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0395 - http://osvdb.org/33000
CVE ID: CVE-2007-0631 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:53.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31968 - https://www.exploit-db.com/exploits/3227 - http://www.vupen.com/english/advisories/2007/0424 - http://secunia.com/advisories/23965 - http://www.osvdb.org/31675 - http://www.securityfocus.com/bid/22314
CVE ID: CVE-2007-0632 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:54.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in artreplydelete.asp in ASP EDGE 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via a username cookie, a different vector than CVE-2007-0560. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36634 - http://www.vupen.com/english/advisories/2007/0341
CVE ID: CVE-2007-0633 State: PUBLISHED Published: 2007-01-31T18:00:00 Last Updated: 2024-08-07T12:26:54.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myNewsConf[path][sys][index] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33019 - https://www.exploit-db.com/exploits/3228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31971 - http://www.securityfocus.com/bid/22313 - http://secunia.com/advisories/23973 - http://www.vupen.com/english/advisories/2007/042
www.securityfocus.com/bid/22313 - http://secunia.com/advisories/23973 - http://www.vupen.com/english/advisories/2007/0423
CVE ID: CVE-2007-0634 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:54.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system crash) via certain ICMP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22323 - http://secunia.com/advisories/23982 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102697-1 - http://www.kb.cert.org/vuls/id/967236 - http://www.vupen.com/english/advisories/2007/0420 - http://securitytracker.com/id?1017574 - http://osvdb.org/31878 - https://e
/www.vupen.com/english/advisories/2007/0420 - http://securitytracker.com/id?1017574 - http://osvdb.org/31878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1249
CVE ID: CVE-2007-0635 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:54.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) config[path] parameter to (a) common_foot.php or (b) blogs.php, or (2) the config[theme] parameter to (c) admin/gallery_head.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0430 - http://osvdb.org/33035 - http://osvdb.org/33034 - http://www.securityfocus.com/bid/22319 - http://secunia.com/advisories/23987 - https://exch
5 - http://osvdb.org/33034 - http://www.securityfocus.com/bid/22319 - http://secunia.com/advisories/23987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31978 - http://securityreason.com/securityalert/2200 - http://osvdb.org/33036 - http://www.securityfocus.com/archive/1/458582/100/0/threaded
CVE ID: CVE-2007-0636 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:54.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in inotify before 0.3.5 has unknown impact and attack vectors, related to "access rights to watched files." Additional Analyst Notes: - CVE Program Container: References: - http://inotify.aiken.cz/?section=incron&page=changelog - http://osvdb.org/38132 - http://www.securityfocus.com/bid/22305 - http://www.vupen.com/english/advisories/2007/0405
CVE ID: CVE-2007-0637 State: PUBLISHED Published: 2007-01-31T21:00:00 Last Updated: 2024-08-07T12:26:54.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the galeria parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by zd_numer.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31967 - http://secunia.com/advisories/23956 - http://osvdb.org/33033 - https://www.exploit-db.com
ud.com/vulnerabilities/31967 - http://secunia.com/advisories/23956 - http://osvdb.org/33033 - https://www.exploit-db.com/exploits/3225 - http://www.securityfocus.com/bid/22324 - http://www.vupen.com/english/advisories/2007/0425