Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3166 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a long FLAGS response to a SELECT INBOX command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34625 - http://osvdb.org/36197 - http://www.securityfocus.com/bid/24251
CVE ID: CVE-2007-3167 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34615 - http://osvdb.org/39230 - https://www.exploit-db.com/exploits/4015 - http://www.securityfocus.com/bid/24245
CVE ID: CVE-2007-3168 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1992 - http://www.ocxt.com/archives/28 - http://www.securityfocus.com/bid/24230 - http://shinnai.altervista.org/viewtopic.php?id=42&t_id=31 - https://www.exploit-db.com/exploits/4010 - http://secunia.com/advisori
nnai.altervista.org/viewtopic.php?id=42&t_id=31 - https://www.exploit-db.com/exploits/4010 - http://secunia.com/advisories/25418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34588 - http://moaxb.blogspot.com/2007/05/moaxb-28-edraw-office-viewer-component.html - http://osvdb.org/36044
CVE ID: CVE-2007-3169 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long first argument to the HttpDownloadFile method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1992 - http://moaxb.blogspot.com/2007/05/moaxb-29-edraw-office-viewer-component.html - https://www.exploit-db.
ries/2007/1992 - http://moaxb.blogspot.com/2007/05/moaxb-29-edraw-office-viewer-component.html - https://www.exploit-db.com/exploits/4009 - http://www.ocxt.com/archives/28 - http://www.securityfocus.com/bid/24229 - http://secunia.com/advisories/25418 - http://osvdb.org/36045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34590 - http://shinnai.altervista.org/viewtopic.php?id=42&t_id=32
CVE ID: CVE-2007-3170 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to redirect.php or (2) the selected_theme parameter to demo/pop3/error.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34553 - http://osvdb.org/37464 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063629.html - http://osvdb.org/37463
CVE ID: CVE-2007-3171 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an invalid value of the (1) smarty or (2) selected_theme parameter, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38337 - http://www.securityfocus.com/bid/24210 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063629.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34554
CVE ID: CVE-2007-3172 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in demo/pop3/error.php in Uebimiau Webmail allows remote attackers to determine the existence of arbitrary directories via an absolute pathname and .. (dot dot) in the selected_theme parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38337 - http://www.securityfocus.com/bid/24210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34555 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063629.html
CVE ID: CVE-2007-3173 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '[' and ']' characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/469911/100/0/threaded - http://osvdb.org/38338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34574
CVE ID: CVE-2007-3174 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parameter, a different vector than CVE-2006-1980. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34594 - http://osvdb.org/37465 - http://pridels-team.blogspot.com/2007/05/w2b-online-banking-vuln.html
CVE ID: CVE-2007-3175 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via (1) the draft parameter to mailer.w2b or (2) the listDocPay parameter to DocPay.w2b. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34593 - http://pridels-team.blogspot.com/2007/05/w2b-online-banking-vuln.html - http://osvdb.org/37467 - http://osvdb.org/37466
CVE ID: CVE-2007-3176 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full privileges to download a Support Report. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36707 - http://www.ingate.com/relnote-452.php - http://secunia.com/advisories/25420 - http://www.vupen.com/english/advisories/2007/1973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34885
CVE ID: CVE-2007-3177 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34887 - http://www.ingate.com/relnote-452.php - http://secunia.com/advisories/25420 - http://www.vupen.com/english/advisories/2007/1973 - http://osvdb.org/36708
CVE ID: CVE-2007-3178 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Zindizayn Okul Web Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) pass parameter to (a) mezungiris.asp or (b) ogretmenkontrol.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2798 - http://osvdb.org/38348 - http://www.securityfocus.com/archive/1/469710/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34559 - http://osvdb.org/38349 - http://www.securityfocus.com/
ed - https://exchange.xforce.ibmcloud.com/vulnerabilities/34559 - http://osvdb.org/38349 - http://www.securityfocus.com/bid/24174
CVE ID: CVE-2007-3179 State: PUBLISHED Published: 2007-06-11T23:00:00 Last Updated: 2024-08-07T14:05:29.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the month parameter and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37468 - http://securityreason.com/securityalert/2799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34583 - http://www.securityfocus.com/archive/1/469984/100/0/threaded
CVE ID: CVE-2007-3180 State: PUBLISHED Published: 2007-06-12T17:00:00 Last Updated: 2024-08-07T14:05:29.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Help and Support Center before 4.4 C on HP Windows systems allows remote attackers to read or write arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471864/100/0/threaded - http://osvdb.org/37239 - http://www.securityfocus.com/bid/24459 - http://h10025.www1.hp.com/ewfrf/wc/genericSoftwareDownloadIndex?cc=us&dlc=en&lc=en&softwareitem=ob-48738-1&jumpid=reg_R1002_USEN - http://www.securitytracker.com/id?1018272 - http://
x?cc=us&dlc=en&lc=en&softwareitem=ob-48738-1&jumpid=reg_R1002_USEN - http://www.securitytracker.com/id?1018272 - http://secunia.com/advisories/25624 - http://www.securityfocus.com/archive/1/471864/100/0/threaded - http://www.vupen.com/english/advisories/2007/2164
CVE ID: CVE-2007-3181 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect (0x01) request to port 3050/tcp, related to "an InterBase version of gds32.dll." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24436 - http://www.firebirdsql.org/rlsnotes/Firebird-2.0.1-ReleaseNotes.pdf - http://osvdb.org/37231 - http://secunia.com/advisories/25601 - https://exchange.xforce.ibmcloud.
.0.1-ReleaseNotes.pdf - http://osvdb.org/37231 - http://secunia.com/advisories/25601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34833 - http://dvlabs.tippingpoint.com/advisory/TPTI-07-11 - http://security.gentoo.org/glsa/glsa-200707-01.xml - http://www.vupen.com/english/advisories/2007/2149 - http://secunia.com/advisories/29501 - http://secunia.com/advisories/25872 - http://www.debian.org/security/2008/dsa-1529
CVE ID: CVE-2007-3182 State: PUBLISHED Published: 2007-06-26T17:00:00 Last Updated: 2024-08-07T14:05:29.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) year and (2) month parameters to calendar.php, and the (3) leftfooter parameter to cal_footer.inc.php. NOTE: the ycyear parameter to yearcal.php is already covered by CVE-2006-1835. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35696 - http://secunia.com/advisories/25795 - http://www.vupen.com/english/advis
ntainer: References: - http://osvdb.org/35696 - http://secunia.com/advisories/25795 - http://www.vupen.com/english/advisories/2007/2324 - http://www.netvigilance.com/advisory0037 - http://www.securityfocus.com/archive/1/472208/100/0/threaded - http://www.osvdb.org/35372 - http://osvdb.org/35695 - http://www.securityfocus.com/bid/24626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35045 - http://securityreason.com/securityalert/2838
CVE ID: CVE-2007-3183 State: PUBLISHED Published: 2007-06-26T17:00:00 Last Updated: 2024-08-07T14:05:29.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters to calendar.php and the (3) search string to cal_search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24633 - http://osvdb.org/35694 - http://secunia.com/advisories/25795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35046 - http://www.netvigilance.com/advisory0038
advisories/25795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35046 - http://www.netvigilance.com/advisory0038 - http://www.osvdb.org/35373 - http://www.vupen.com/english/advisories/2007/2324 - http://www.securitytracker.com/id?1018287 - http://www.securityfocus.com/archive/1/472221/100/0/threaded - http://securityreason.com/securityalert/2837
CVE ID: CVE-2007-3184 State: PUBLISHED Published: 2007-06-12T21:00:00 Last Updated: 2024-08-07T14:05:29.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/35340 - http://www.securityfocus.com/archive/1/471041/100/0/threaded - http://www.securitytracker.com/id?1018217 - http://securityreason.
w.securityfocus.com/archive/1/471041/100/0/threaded - http://www.securitytracker.com/id?1018217 - http://securityreason.com/securityalert/2796 - http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html - http://secunia.com/advisories/25598 - http://www.securityfocus.com/bid/24415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34807 - http://www.vupen.com/english/advisories/2007/2140
CVE ID: CVE-2007-3185 State: PUBLISHED Published: 2007-06-12T22:00:00 Last Updated: 2024-08-07T14:05:29.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspecified DHTML manipulations that trigger memory corruption, as demonstrated using Hamachi. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34846 - http://www.securityfocus.com/bid/24433 - http://lists.apple.com/archives/security-announce/2007/Jun/msg00000.html - http://aviv.raffon.net/2007/06
om/bid/24433 - http://lists.apple.com/archives/security-announce/2007/Jun/msg00000.html - http://aviv.raffon.net/2007/06/11/AppleSafariForWindowsOutWithACrash.aspx - http://osvdb.org/38541
CVE ID: CVE-2007-3186 State: PUBLISHED Published: 2007-06-12T22:00:00 Last Updated: 2024-08-07T14:05:29.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated using a gopher URI. Additional Analyst Notes: - CVE Program Container: References: - http://larholm.com/2007/06/12/safari-for-windows-0day-exploit-in-2-hours - http://www.securityfocus.com/archive/1/471176/100/0/threaded - http://osvdb.org/38542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34824 - http://www.vupen.com/english/advisories/2007/2192 - http:/
https://exchange.xforce.ibmcloud.com/vulnerabilities/34824 - http://www.vupen.com/english/advisories/2007/2192 - http://www.securityfocus.com/bid/24434 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063926.html - http://www.securitytracker.com/id?1018224 - http://larholm.com/2007/06/14/safari-301-released/ - http://lists.apple.com/archives/security-announce/2007/Jun/msg00000.html
CVE ID: CVE-2007-3187 State: PUBLISHED Published: 2007-06-12T22:00:00 Last Updated: 2024-08-07T14:05:29.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Apple Safari for Windows allow remote attackers to cause a denial of service or execute arbitrary code, possibly involving memory corruption, and a different issue from CVE-2007-3185 and CVE-2007-3186. NOTE: as of 20070612, the original disclosure has no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com
tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34978 - http://erratasec.blogspot.com/2007/06/niiiice.html - http://osvdb.org/38543 - http://securitytracker.com/id?1018223
CVE ID: CVE-2007-3188 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in down_indir.asp in Fullaspsite GeometriX Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34791 - http://secunia.com/advisories/25576 - http://www.vupen.com/english/advisories/2007/2124 - http://www.securityfocus.com/bid/24404 - https://www.exploit-db.com/exploits/4057
CVE ID: CVE-2007-3189 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1374 - http://www.securityfocus.com/archive/1/471039/100/0/threaded - http://secunia.com/advisories/26769 - http://www.securityfocus.com/bid/24414 - http://secunia.com/advisories/25587 - http://marc.info/?l=full-disclosure&m=11815
tp://www.securityfocus.com/bid/24414 - http://secunia.com/advisories/25587 - http://marc.info/?l=full-disclosure&m=118151087109711&w=2
CVE ID: CVE-2007-3190 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) pass parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1374 - http://www.securityfocus.com/archive/1/471039/100/0/threaded - http://secunia.com/advisories/26769 - http://www.securityfocus.com/bid/24414 - http://secunia.com/advisories/25587
ded - http://secunia.com/advisories/26769 - http://www.securityfocus.com/bid/24414 - http://secunia.com/advisories/25587 - http://marc.info/?l=full-disclosure&m=118151087109711&w=2
CVE ID: CVE-2007-3191 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1374 - http://www.securityfocus.com/archive/1/471039/100/0/threaded - http://secunia.com/advisories/26769 - http://www.securityfocus.com/bid/24414 - http://secunia.com/advisories/25587 - http://marc.info/?l=full-disclosure&m=1181510871
www.securityfocus.com/bid/24414 - http://secunia.com/advisories/25587 - http://marc.info/?l=full-disclosure&m=118151087109711&w=2 - http://osvdb.org/37167
CVE ID: CVE-2007-3192 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/setup.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to read and modify configuration settings via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471039/100/0/threaded - http://www.securityfocus.com/bid/24414 - http://secunia.com/advisories/25587 - http://marc.info/?l=full-disclosure&m=118151087109711&w=2 - http://osvdb.org/37168
CVE ID: CVE-2007-3193 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldap_bind to return true when used with certain LDAP implementations. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34819 - http://secunia.com/advisories/25595 - http://www.debian.org/security/2007/dsa-1371 - http://osvdb.org/37219 - http://security.gentoo
ia.com/advisories/25595 - http://www.debian.org/security/2007/dsa-1371 - http://osvdb.org/37219 - http://security.gentoo.org/glsa/glsa-200709-10.xml - http://www.vupen.com/english/advisories/2007/2144 - http://sourceforge.net/project/shownotes.php?release_id=514820 - http://secunia.com/advisories/26784 - http://sourceforge.net/tracker/index.php?func=detail&aid=1732882&group_id=6121&atid=106121 - http://secunia.com/advisories/26880
CVE ID: CVE-2007-3194 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2025-01-17T14:41:46.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in myBloggie 2.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the bloggie_root_path parameter to (1) config.php; (2) db.php, (3) template.php, (4) functions.php, and (5) classes.php in includes/; (6) viewmode.php; and (7) blog_body.php. NOTE: another researcher disputes the vulnerability because the files are protected against direct requests, contain no relevant include statements, or do not exist Additional Analyst Notes: - CVE Program Container: - CIS
quests, contain no relevant include statements, or do not exist Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://securityreason.com/securityalert/2794 - http://archives.neohapsis.com/archives/bugtraq/2007-06/0125.html - http://www.securityfocus.com/archive/1/470972/100/0/threaded - http://osvdb.org/37685