Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0577 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in function.inc.php in ACGVclick 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0391 - http://secunia.com/advisories/23970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31859 - http://www.securityfocus.com/bid/22278 - https://www.exploit-db.com/exploits/3206
CVE ID: CVE-2007-0578 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinite loop) by closing the HTTP connection early. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:032 - http://www.securityfocus.com/bid/22274 - http://osvdb.org/40128 - http://www.vupen.com/english/advisories/2007/0366 - http://www.mpg123.de/cgi-bin/news.cgi - http://sourceforge.net/project/shownotes.php?group_id=135704&release_id=478747
CVE ID: CVE-2007-0579 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0, and Groupware before 1.0, allows remote attackers to include certain files via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2007/000309.html - http://www.securityfocus.com/bid/22273 - http://www.vupen.com/english/advisories/2007/0368 - http://osvdb.org/33083 - http://lists.horde.
tyfocus.com/bid/22273 - http://www.vupen.com/english/advisories/2007/0368 - http://osvdb.org/33083 - http://lists.horde.org/archives/announce/2007/000308.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31849
CVE ID: CVE-2007-0580 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesion_idioma parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3215 - http://www.securityfocus.com/bid/22285 - http://www.vupen.com/english/advisories/2007/0396 - http://osvdb.org/33004 - http://secunia.com/advisories/23949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31853
CVE ID: CVE-2007-0581 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22283 - http://www.vupen.com/english/advisories/2007/0397 - https://www.exploit-db.com/exploits/3214 - http://www.securityfocus.com/archive/1/466172/100/0/threaded - http://osvdb.org/35416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31852
CVE ID: CVE-2007-0582 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands via the User (username) field. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36618 - https://www.exploit-db.com/exploits/3210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31939 - http://www.securityfocus.com/bid/22280
CVE ID: CVE-2007-0583 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:54.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31877 - ht
rogram Container: References: - http://osvdb.org/32986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31877 - http://www.securityfocus.com/bid/22298 - http://secunia.com/advisories/23964 - http://osvdb.org/32985
CVE ID: CVE-2007-0584 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:54.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-neric) allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22287 - http://osvdb.org/33606 - http://www.vupen.com/english/advisories/2007/0394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31895 - https://www.exploit-db.com/exploits/3217 - http://osvdb.org/36632 - ht
hange.xforce.ibmcloud.com/vulnerabilities/31895 - https://www.exploit-db.com/exploits/3217 - http://osvdb.org/36632 - http://www.securityfocus.com/archive/1/458556/100/0/threaded
CVE ID: CVE-2007-0585 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct directory traversal attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0399 - http://webfwlog.cvs.sourceforge.net/%2Acheckout%2A/webfwlog/webfwlog/ChangeLog - http://osvdb
ish/advisories/2007/0399 - http://webfwlog.cvs.sourceforge.net/%2Acheckout%2A/webfwlog/webfwlog/ChangeLog - http://osvdb.org/33015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31881 - http://secunia.com/advisories/23968 - http://www.securityfocus.com/bid/22291 - https://www.exploit-db.com/exploits/3222
CVE ID: CVE-2007-0588 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:53.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption in the _GetSrcBits32ARGB function. NOTE: this issue might overlap CVE-2007-0462. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/
Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://security-protocols.com/sp-x43-advisory.php - http://www.securityfocus.com/bid/22228 - http://www.osvdb.org/33365 - http://www.kb.cert.org/vuls/id/396820 - http://www.vupen.com/english/advisories/2007/0930 - http://www.securitytracker.com/id?1017760 - http://secunia.com/advisories/24479
CVE ID: CVE-2007-0589 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:54.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to info_user.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36644 - https://www.exploit-db.com/exploits/3197
CVE ID: CVE-2007-0590 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:53.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the palavra parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3197 - http://osvdb.org/36645
CVE ID: CVE-2007-0591 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:53.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22241 - http://secunia.com/advisories/23918 - https://www.exploit-db.com/exploits/3198 - http://osvdb.org/31636 - http://www.vupen.com/english/advisories/2007/0352
CVE ID: CVE-2007-0592 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:53.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to admin/login.php and the Admin Panel Database. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36954 - http://www.securityfocus.com/archive/1/458062/100/0/threaded - http://securityreason.com/securityalert/2196 - http://osvdb.org/36955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31768 - http://www.securityfocus.com/bid/22235
CVE ID: CVE-2007-0593 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:54.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siteman 1.1.11 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for data/members.txt. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31780 - http://securityreason.com/securityalert/2205 - http://www.securityfocus.com/bid/31440 - http://www.securityfocus.com/archive/1/458092/100/0/threaded - http://osvdb.org/31662 - http://sec
focus.com/bid/31440 - http://www.securityfocus.com/archive/1/458092/100/0/threaded - http://osvdb.org/31662 - http://secunia.com/advisories/23925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45485
CVE ID: CVE-2007-0594 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:54.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458081/100/0/threaded - http://osvdb.org/33590 - http://securityreason.com/securityalert/2206
CVE ID: CVE-2007-0595 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:54.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search in High 5 Review Site allows remote attackers to inject arbitrary web script or HTML via the q parameter (aka the search box). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31797 - http://www.vupen.com/english/advisories/2007/0363 - http://www.securityfocus.com/archive/1/458122/100/0/threaded - http://secunia.com/advisories/23905
CVE ID: CVE-2007-0596 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:53.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PF[top_url] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/poc/21070125.txt - http://www.securityfocus.com/archive/1/458076/100/0/threaded - http://osvdb.org/33593 - http://www.securityfocus.com/archive/1/458123/100/0/threaded
CVE ID: CVE-2007-0597 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:54.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/poc/21070125.txt - http://osvdb.org/33594 - http://www.securityfocus.com/archive/1/458076/100/0/threaded - http://www.securityfocus.com/archive/1/458123/100/0/threaded
CVE ID: CVE-2007-0598 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:54.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cookie to forum.php. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/poc/21070125.txt - http://osvdb.org/33595 - http://www.securityfocus.com/archive/1/458076/100/0/threaded - http://www.securityfocus.com/archive/1/458123/100/0/threaded
CVE ID: CVE-2007-0599 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:53.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as copying arbitrary files using index/common_actions.php, via vectors associated with extract operations on the (1) POST, (2) GET, (3) COOKIE, and (4) SERVER superglobal arrays. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/poc/21070125.txt - http://www.securityfocus.com/archive/1/458076/100/0/thread
ner: References: - http://acid-root.new.fr/poc/21070125.txt - http://www.securityfocus.com/archive/1/458076/100/0/threaded - http://osvdb.org/33596 - http://www.securityfocus.com/archive/1/458123/100/0/threaded
CVE ID: CVE-2007-0600 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:53.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2208 - https://www.exploit-db.com/exploits/3194 - http://secunia.com/advisories/23930 - http://www.securityfocus.com/archive/1/458063/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31747 - http://os
curityfocus.com/archive/1/458063/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31747 - http://osvdb.org/31640 - http://www.securityfocus.com/bid/22230 - http://osvdb.org/36633 - http://www.vupen.com/english/advisories/2007/0354
CVE ID: CVE-2007-0601 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:54.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences (URL encoded double quotes) and other potentially dangerous manipulations by sending a cookie, which bypasses the blacklist matching against the GET and PUT superglobal arrays. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/poc/21070125.txt - http://osvdb.org/33597 - http://www.securityfocus.com/archive/1/458076/100/0/threaded - http://www.securityfocus.com/archive/1/458123/100/
3597 - http://www.securityfocus.com/archive/1/458076/100/0/threaded - http://www.securityfocus.com/archive/1/458123/100/0/threaded
CVE ID: CVE-2007-0602 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:54.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users to gain privileges via a long command line argument, a different vulnerability than CVE-2005-0533. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2204 - http://www.devtarget.org/trendmicro-advisory-01-2007.txt - http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034124&id=EN-1034124 - http://securitytracker.com/id?1017
ttp://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034124&id=EN-1034124 - http://securitytracker.com/id?1017562 - http://www.vupen.com/english/advisories/2007/0367 - http://www.securityfocus.com/archive/1/458111/100/0/threaded - http://osvdb.org/33043 - http://www.devtarget.org/tmvwall381v3_exp.c
CVE ID: CVE-2007-0603 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:54.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: PGP Desktop before 9.5.1 does not validate data objects received over the (1) \pipe\pgpserv named pipe for PGPServ.exe or the (2) \pipe\pgpsdkserv named pipe for PGPsdkServ.exe, which allows remote authenticated users to gain privileges by sending a data object representing an absolute pointer, which causes code execution at the corresponding address. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017563 - http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0025.html - http
ces: - http://securitytracker.com/id?1017563 - http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0025.html - http://securityreason.com/securityalert/2203 - http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-pgp-desktop/ - http://osvdb.org/32970 - http://www.securityfocus.com/bid/22247 - http://www.securityfocus.com/archive/1/458137/100/0/threaded - http://secunia.com/advisories/23938 - http://www.vupen.com/english/advisories/2007/0356 - http://osvdb.org/32969 - http://www.kb.cert.org/vuls/id/102465
CVE ID: CVE-2007-0604 State: PUBLISHED Published: 2007-01-30T18:00:00 Last Updated: 2024-08-07T12:26:53.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the MTCommentPreviewIsStatic tag, which can open the "comment entry screen," a different vulnerability than CVE-2007-0231. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32987 - http://www.sixapart.com/movabletype/beta/distros/MT-3.34-beta-Release-Notes.html
CVE ID: CVE-2007-0605 State: PUBLISHED Published: 2007-05-09T17:00:00 Last Updated: 2024-08-07T12:26:53.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1726 - http://securityreason.com/securityalert/2663 - http://www.securityfocus.com/archive/1/467937/100/0/threaded - http://www.netvigilance.com/advisory0012 - http://www.securityfocus.com/bid/23873 - http://www.osvdb.org/33877 - http://secunia.com
netvigilance.com/advisory0012 - http://www.securityfocus.com/bid/23873 - http://www.osvdb.org/33877 - http://secunia.com/advisories/25153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34156
CVE ID: CVE-2007-0606 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:26:54.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the (1) bn[] array parameter to index.php, which expects a string, and (2) certain parameters to delete_forum.php, which displays the path name in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33076 - http://www.securityfocus.com/archive/1/463213/100/0/threaded - http://www.osvdb.org/31669 - http://www.osvdb.org/31668 - http://securityreason.com/securi
ive/1/463213/100/0/threaded - http://www.osvdb.org/31669 - http://www.osvdb.org/31668 - http://securityreason.com/securityalert/2461 - http://www.netvigilance.com/advisory0014
CVE ID: CVE-2007-0607 State: PUBLISHED Published: 2007-03-20T20:00:00 Last Updated: 2024-08-07T12:26:53.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: W-Agora (Web-Agora) 4.2.1, when register_globals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2465 - http://www.netvigilance.com/advisory0015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33073 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053054.html - http://
ibmcloud.com/vulnerabilities/33073 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053054.html - http://www.osvdb.org/31670 - http://www.securityfocus.com/archive/1/463215/100/0/threaded
CVE ID: CVE-2007-0608 State: PUBLISHED Published: 2007-05-09T17:00:00 Last Updated: 2024-08-07T12:26:53.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid (1) GB_TBL parameter to (a) lang/codes-english.php or (b) image.php, which reveal the database name; (2) an invalid GB_DB parameter to index.php, coupled with a ../index lang cookie, which reveals the installation path; or (3) a direct request to index.php with no parameters or cookies, which reveals the installation path. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33879 - http://www.securi
on path. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33879 - http://www.securityfocus.com/archive/1/467940/100/0/threaded - http://www.netvigilance.com/advisory0011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34161 - http://securityreason.com/securityalert/2661 - http://www.vupen.com/english/advisories/2007/1726 - http://www.osvdb.org/33878 - http://osvdb.org/34362 - http://www.osvdb.org/33876 - http://secunia.com/advisories/25153