Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0088 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in openmedia allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) src parameter to page.php or the (2) format parameter to search_form.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33371 - http://www.securityfocus.com/archive/1/455786/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31258 - http://securityreason.com/securityalert/2103 - http://osvdb.org/33370
CVE ID: CVE-2007-0089 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/bbs.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://aria-security.com/forum/showthread.php?t=87 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31274 - http://www.securityfocus.com/archive/1/455832/100/0/threaded - http://osvdb.org/33376
CVE ID: CVE-2007-0090 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/data.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0037 - http://secunia.com/advisories/23594 - http://osvdb.org/32575 - http://www.securityfocus.com/archive/1/455807/100/0/threaded - http://aria-security.com/forum/showthread.php?p=112
CVE ID: CVE-2007-0091 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31222 - https://www.exploit-db.com/exploits/3066 - http://osvdb.org/37548
CVE ID: CVE-2007-0092 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31243 - http://osvdb.org/31679 - https://www.exploit-db.com/exploits/3074 - http://www.vupen.com/english/advisories/2007/0036
CVE ID: CVE-2007-0093 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/poc/18070102.txt - http://secunia.com/advisories/23590 - http://www.securityfocus.com/archive/1/455814/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31261 - http://www.vupen.com/english/advisories/2007/0040 - https://www.exploit-db.com/exploits/3076 - http://
abilities/31261 - http://www.vupen.com/english/advisories/2007/0040 - https://www.exploit-db.com/exploits/3076 - http://securityreason.com/securityalert/2106 - http://osvdb.org/31657
CVE ID: CVE-2007-0094 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for (1) gbook97.mdb or (2) gbook.mdb in ~db/. Additional Analyst Notes: - CVE Program Container: References: - http://aria-security.com/forum/showthread.php?p=114 - http://www.securityfocus.com/archive/1/455788/100/0/threaded - http://securityreason.com/securityalert/2105 - http://osvdb.org/33363 - https://exchange.xforce.ibm
788/100/0/threaded - http://securityreason.com/securityalert/2105 - http://osvdb.org/33363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31245
CVE ID: CVE-2007-0095 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblue_orange/layout.inc.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051544.html - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0034.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31223 - http:
andriva.com/security/advisories?name=MDKSA-2007:199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31223 - http://osvdb.org/33257 - http://securityreason.com/securityalert/2104
CVE ID: CVE-2007-0096 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for DataBase/Carbon2.4d.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://aria-security.com/forum/showthread.php?t=85 - http://osvdb.org/37549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31253 - http://www.vupen.com/english/advisories/2007/0038
CVE ID: CVE-2007-0097 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the (1) LoadTree and (2) ReadHeader functions in PAISO.DLL 1.7.3.0 (1.7.3 beta) in ConeXware PowerArchiver 2006 9.64.02 allow user-assisted attackers to execute arbitrary code via a crafted ISO file containing a file within several nested directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455892/100/0/threaded - http://osvdb.org/32576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31263 - http://vuln.sg/powarc964-
readed - http://osvdb.org/32576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31263 - http://vuln.sg/powarc964-en.html - http://secunia.com/advisories/23559 - http://marc.info/?l=full-disclosure&m=116791509125050&w=2 - http://www.vupen.com/english/advisories/2007/0041
CVE ID: CVE-2007-0098 State: PUBLISHED Published: 2007-01-05T18:00:00 Last Updated: 2024-08-07T12:03:37.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32352 - https://www.exploit-db.com/exploits/3075 - http://www.vupen.com/english/advisories/2007/0035 - htt
p://osvdb.org/32352 - https://www.exploit-db.com/exploits/3075 - http://www.vupen.com/english/advisories/2007/0035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31241
CVE ID: CVE-2007-0099 State: PUBLISHED Published: 2007-01-08T20:00:00 Last Updated: 2024-08-07T12:03:37.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via many nested tags in an XML document in an IFRAME, when synchronous document rendering is frequently disrupted with asynchronous events, as demonstrated using a JavaScript timer, which can trigger NULL pointer dereferences or memory corruption, aka "MSXML Memory Corruption Vulnerability." Additional An
h can trigger NULL pointer dereferences or memory corruption, aka "MSXML Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - http://osvdb.org/32627 - http://seclists.org/fulldisclosure/2007/Jan/0110.html - http://www.us-cert.gov/cas/techalerts/TA08-316A.html - http://www.securityfocus.com/bid/21872 - http://isc.sans.org/diary.php?storyid=2004 - http://secunia.com/advisories/23655 - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0113.html - http://www.vupen.com/english/advisories/2008/3111 - https://docs.microsoft.com/en-us/secur
isclosure/2007-01/0113.html - http://www.vupen.com/english/advisories/2008/3111 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069 - http://www.securityfocus.com/archive/1/455986/100/0/threaded - http://securitytracker.com/id?1021164 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5793 - http://www.securityfocus.com/archive/1/455965/100/0/threaded - http://www.securityfocus.com/archive/1/456343/100/0/threaded
CVE ID: CVE-2007-0100 State: PUBLISHED Published: 2007-01-08T20:00:00 Last Updated: 2024-08-07T12:03:37.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33369 - http://www.securityfocus.com/archive/1/455977/100/0/threaded
CVE ID: CVE-2007-0101 State: PUBLISHED Published: 2007-01-08T20:00:00 Last Updated: 2024-08-07T12:03:37.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in SPINE allows remote attackers to perform unauthorized actions as administrators via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31283 - http://spine.sourceforge.net/changelog.html - http://osvdb.org/32577 - http://www.vupen.com/english/advisories/2007/0042 - http://secunia.com/advisories/23537
CVE ID: CVE-2007-0102 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://docs.info.apple.com/article.html?artnum=305214 -
rences: - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://docs.info.apple.com/article.html?artnum=305214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31364 - http://www.securityfocus.com/bid/21910 - http://osvdb.org/31221 - http://www.securitytracker.com/id?1017749 - http://projects.info-pull.com/moab/MOAB-06-01-2007.html - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/24479
CVE ID: CVE-2007-0103 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://docs.info.apple.com/article.html?artnum=3052
References: - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://docs.info.apple.com/article.html?artnum=305214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31364 - http://www.securityfocus.com/bid/21910 - http://www.securitytracker.com/id?1017749 - http://projects.info-pull.com/moab/MOAB-06-01-2007.html - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/24479
CVE ID: CVE-2007-0104 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/2381
alid page tree node. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23815 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:022 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:020 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:021 - http://www.kde.org/info/security/advisory-20070115-1.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2007:019 - http://secunia.com/advisories/23799 - http://secunia.com/advisories/23839 - http://docs.info.apple.com/article.html?artnum=305214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31364 - http:
tp://docs.info.apple.com/article.html?artnum=305214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31364 - http://www.ubuntu.com/usn/usn-410-2 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:018 - http://securitytracker.com/id?1017514 - http://secunia.com/advisories/23791 - http://www.novell.com/linux/security/advisories/2007_3_sr.html - http://support.novell.com/techcenter/psdb/44d7cb9b669d58e0ce5aa5d7ab2c7c53.html - http://www.securityfocus.com/bid/21910 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:024 - http://www.securitytracker.com/id?1017749 - http://projects.info-pull.com/moab/MOAB-06-01-2007.html - http://secunia.com/advisories/23844 - http://ww
m/id?1017749 - http://projects.info-pull.com/moab/MOAB-06-01-2007.html - http://secunia.com/advisories/23844 - http://www.ubuntu.com/usn/usn-410-1 - http://www.vupen.com/english/advisories/2007/0203 - http://secunia.com/advisories/23876 - http://www.securityfocus.com/archive/1/457055/100/0/threaded - http://www.vupen.com/english/advisories/2007/0244 - http://www.vupen.com/english/advisories/2007/0212 - http://www.vupen.com/english/advisories/2007/0930 - https://issues.rpath.com/browse/RPL-964 - http://secunia.com/advisories/23813 - http://secunia.com/advisories/24204 - http://secunia.com/advisories/23808 - http://secunia.com/advisories/24479
CVE ID: CVE-2007-0105 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23629 - http://www.securityfocus.com/bid/21900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31323 - http://www.vupen.com/english/advisories/2007/0068 - http://securitytracker.com/id?1017475 -
com/vulnerabilities/31323 - http://www.vupen.com/english/advisories/2007/0068 - http://securitytracker.com/id?1017475 - http://www.kb.cert.org/vuls/id/744249 - http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml - http://www.osvdb.org/32642
CVE ID: CVE-2007-0106 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly handled when WordPress generates a new link to verify the request. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2114 - http://www.securityfocus.com/archive/1/456048/100/0/threaded - http://wor
http://securityreason.com/securityalert/2114 - http://www.securityfocus.com/archive/1/456048/100/0/threaded - http://wordpress.org/development/2007/01/wordpress-206/ - http://secunia.com/advisories/23595 - http://osvdb.org/33397 - http://www.vupen.com/english/advisories/2007/0061 - http://www.securityfocus.com/bid/21893 - http://www.hardened-php.net/advisory_012007.140.html
CVE ID: CVE-2007-0107 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31297 - http://www.securityfocus.com/bid/21907 - http://secunia.com/advisories/23741 - http://www.openpkg.com/security/advisories/Op
://www.securityfocus.com/bid/21907 - http://secunia.com/advisories/23741 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html - http://security.gentoo.org/glsa/glsa-200701-10.xml - http://osvdb.org/31579 - http://wordpress.org/development/2007/01/wordpress-206/ - http://secunia.com/advisories/23595 - http://www.securityfocus.com/archive/1/456049/100/0/threaded - http://www.vupen.com/english/advisories/2007/0061 - http://www.hardened-php.net/advisory_022007.141.html - http://securityreason.com/securityalert/2112
CVE ID: CVE-2007-0108 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0064 - http://securitytracker.com/id?1017471 - http://www.securityfocus.com/bid/21886 - http://osvdb.org/31358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31343 - http://secunia.com/advisories/23619
tp://osvdb.org/31358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31343 - http://secunia.com/advisories/23619 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm
CVE ID: CVE-2007-0109 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31577 - http://secunia.com/advisories/23621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31262 - http://secunia.com/advisories/23741 - http://security.gentoo.org/glsa/glsa-200701-10.xml - http://www.vupen.com/english/advisories/2007/0062
visories/23741 - http://security.gentoo.org/glsa/glsa-200701-10.xml - http://www.vupen.com/english/advisories/2007/0062 - http://www.securityfocus.com/archive/1/455927/100/0/threaded - http://securityreason.com/securityalert/2113
CVE ID: CVE-2007-0110 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 allows remote attackers to inject arbitrary web script or HTML via the IssueInstant parameter, which is not properly handled in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23654 - http://osvdb.org/31359 - http://www.securityfocus.com/bid/21921 - http://www.vupen.com/english/advisories/2007/0073 - https://secure-support.novell.com/Kan
.securityfocus.com/bid/21921 - http://www.vupen.com/english/advisories/2007/0073 - https://secure-support.novell.com/KanisaPlatform/Publishing/143/3615264_f.SAL_Public.html - http://securitytracker.com/id?1017483
CVE ID: CVE-2007-0111 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0, 2003, and 2003SE, allows remote attackers to execute arbitrary code via a crafted PNG image. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0072 - http://osvdb.org/32644 - http://blog.trendmicro.com/flaw-in-3rd-party-app-weakens-windows-mobile/ - http://secunia.com/advisories/23658 - http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName
windows-mobile/ - http://secunia.com/advisories/23658 - http://www.trendmicro.com/vinfo/secadvisories/default6.asp?VName=Vulnerability+in+Resco+Photo+Viewer+6.01+Enabling+Code+Injection+and+Arbitrary+Code+Execution - http://www.securityfocus.com/bid/21920
CVE ID: CVE-2007-0112 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31356 - http://osvdb.org/33406 - http://securityreason.com/securityalert/2111 - http://www.securityfocus.com/archive/1/456272/100/0/threaded - http://www.securityfocus.com/bid/21929