Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://secunia.com/advisories/25544 - http://secunia.com/advisories/29420 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:114 - http://www.redhat.com/support/errata/RHSA-2007-0391.html - http://secunia.com/advisories/25578 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.securityfocus.com/archive/1/469520/30/6420/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34731 - http://www.vupen.com/english/advisories/2007/2071 - http://secunia.com/advisories/25394 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/26294
NetBSD-SA2008-001.txt.asc - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/26294 - http://secunia.com/advisories/26203 - http://www.gentoo.org/security/en/glsa/glsa-200705-25.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11012 - http://www.securityfocus.com/bid/24146 - http://osvdb.org/38498 - http://www.ubuntu.com/usn/usn-439-2
CVE ID: CVE-2007-2800 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T13:49:57.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone[], or (4) subject[] parameters, which reveals the installation path in the resulting error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.netvigilance.com/advisory0030 - http://marc.info/?l=full-disclosure&m=118297850220633&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35122 - http://www.securityfocus.com/archive/1/472431/100/0/threaded -
ps://exchange.xforce.ibmcloud.com/vulnerabilities/35122 - http://www.securityfocus.com/archive/1/472431/100/0/threaded - http://www.osvdb.org/34785
CVE ID: CVE-2007-2801 State: PUBLISHED Published: 2007-06-30T01:00:00 Last Updated: 2024-08-07T13:49:57.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) err and (2) warn parameters. NOTE: the vendor disputes the significance of the issue, stating that "eTicket is not designed to work with register_globals On." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472434/100/0/threaded - http://marc.info/?l=full-disclosure&m=11829
References: - http://www.securityfocus.com/archive/1/472434/100/0/threaded - http://marc.info/?l=full-disclosure&m=118297864900677&w=2 - http://www.vupen.com/english/advisories/2007/2372 - http://www.osvdb.org/34786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35121 - http://www.netvigilance.com/advisory0031 - http://www.securityfocus.com/bid/24681 - http://secunia.com/advisories/25871 - http://www.securityfocus.com/archive/1/472514/100/0/threaded - http://www.securityfocus.com/archive/1/473095/100/0/threaded
CVE ID: CVE-2007-2802 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cp/ps/Main/login/Login in RM EasyMail Plus allows remote attackers to inject arbitrary web script or HTML via the d parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36254 - http://secunia.com/advisories/25326 - http://redlevel.org/wp-content/uploads/2007/05/rmeasymail.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/34406
CVE ID: CVE-2007-2803 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a haberdetay action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4007 - http://www.securityfocus.com/bid/24079 - http://osvdb.org/36232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34403 - http://www.securityfocus.com/bid/24238 - http://secunia.com/advisories/25348
CVE ID: CVE-2007-2804 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) brand and (2) Msg parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1881 - http://secunia.com/advisories/25370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34389 - http://www.securityfocus.com/bid/24069 - http://osvdb.org/36234 - http://pridels-team.blogspot.
/vulnerabilities/34389 - http://www.securityfocus.com/bid/24069 - http://osvdb.org/36234 - http://pridels-team.blogspot.com/2007/05/candypress-store-xss-vuln.html
CVE ID: CVE-2007-2805 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2, and possibly other versions, allow remote attackers to inject arbitrary web script or HTML via the (1) ticketID, (2) view, and (3) fuse parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34390 - http://www.securityfocus.com/bid/24061 - http://pridels-team.blogspot.com/2007/05/clientexec-xss-vuln.html
CVE ID: CVE-2007-2806 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) galix_cat_detail, (2) galix_gal_detail, and (3) galix_cat_detail_sort parameters. Additional Analyst Notes: - CVE Program Container: References: - http://redlevel.org/wp-content/uploads/2007/05/galix.txt - http://osvdb.org/36253 - http://www.securityfocus.com/bid/24066 - http://secunia.com/advisories/25324
CVE ID: CVE-2007-2807 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25276 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:175 - http://www.securityfocus.com/bid/24070 - http://security.gentoo.org/glsa/glsa-200709-07.xml - http://secunia.com/advisories/27989 - https://www.redhat.com/archives/fedora
curity.gentoo.org/glsa/glsa-200709-07.xml - http://secunia.com/advisories/27989 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00348.html - http://secunia.com/advisories/26826 - http://secunia.com/advisories/35690 - http://secunia.com/advisories/28347 - http://securitytracker.com/id?1018700 - http://secunia.com/advisories/26727 - http://www.eggheads.org/bugzilla/show_bug.cgi?id=462 - http://www.debian.org/security/2008/dsa-1448 - http://osvdb.org/36237 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00336.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=427157 - http://www.debian.org/security/2009/dsa-1826
CVE ID: CVE-2007-2808 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36224 - http://secunia.com/advisories/25333 - http://secunia.com/advisories/28743 - http://www.securityfocus.com/bid/24081 - http://www.debian.org/security/2008/dsa-1486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34392 - http://pridels-team.blogspot.com/200
curity/2008/dsa-1486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34392 - http://pridels-team.blogspot.com/2007/05/blog-post.html - http://www.vupen.com/english/advisories/2007/1886
CVE ID: CVE-2007-2809 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted torrent file. NOTE: due to the lack of details, it is not clear if this is the same issue as CVE-2007-2274. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1888 - http://securitytracker.com/id?1018089 - http://isc.sans.org/diary.html?storyid=2823 - http://www.opera.com/support/search/view/860/ - http://osvdb.org/36229
9 - http://isc.sans.org/diary.html?storyid=2823 - http://www.opera.com/support/search/view/860/ - http://osvdb.org/36229 - http://secunia.com/advisories/25278 - http://www.securityfocus.com/bid/24080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34470
CVE ID: CVE-2007-2810 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34409 - http://www.securityfocus.com/bid/23714 - http://securityreason.com/securityalert/2715
CVE ID: CVE-2007-2811 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.evalue.jp/support/security/IPA_92832583.asp - http://secunia.com/advisories/25338 - http://www.vupen.com/english/advisories/2007/1884 - http://www.securityfocus.com/bid/24071 - http://osvdb.org/36256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34404 - http://jvn.jp/jp/JVN%239283
4071 - http://osvdb.org/36256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34404 - http://jvn.jp/jp/JVN%2392832583/index.html
CVE ID: CVE-2007-2812 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24063 - http://www.vupen.com/english/advisories/2007/1882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34382 - http://securityreason.com/securityalert/2724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3438
ilities/34382 - http://securityreason.com/securityalert/2724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34383 - http://osvdb.org/36215 - http://www.securityfocus.com/archive/1/469088/100/0/threaded - http://secunia.com/advisories/25340 - http://www.securityfocus.com/bid/24102 - http://www.securityfocus.com/archive/1/469087/100/0/threaded
CVE ID: CVE-2007-2813 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34442 - http://www.securitytracker.com/id?1018094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34436 - http://www.vupen.com/english/advisories/2007/1910 - http://
https://exchange.xforce.ibmcloud.com/vulnerabilities/34436 - http://www.vupen.com/english/advisories/2007/1910 - http://secunia.com/advisories/25361 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5745 - http://www.securityfocus.com/bid/24097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34432 - http://www.osvdb.org/35339 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080847c49.shtml
CVE ID: CVE-2007-2814 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attackers to execute arbitrary code via (1) a long FileName parameter, or unspecified vectors involving the (2) BeginReport, (3) CreatePictureExA, (4) DefineImage, (5) DefineImageEx, (6) DefineImageFox, (7) CopyBufToClipExA, (8) LoadEx, (9) LoadFox, and other functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25351 - https://exchange.xforce.ibmcloud.com/vulnerab
CVE Program Container: References: - http://secunia.com/advisories/25351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34419 - http://retrogod.altervista.org/IE_pegasus_imagn_bof.html - http://www.securityfocus.com/bid/24086 - http://osvdb.org/36518 - http://www.vupen.com/english/advisories/2007/1899
CVE ID: CVE-2007-2815 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:49:57.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41091 - http://securityreason.com/securityalert/2725 - http://www.securityfocus.com/archive/1/469238/100/0/threaded - http://www.secu
//securityreason.com/securityalert/2725 - http://www.securityfocus.com/archive/1/469238/100/0/threaded - http://www.securityfocus.com/bid/24105 - http://support.microsoft.com/kb/328832
CVE ID: CVE-2007-2816 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) test1.php, (2) blackorange.php, (3) default.php, (4) frames1.php, (5) frames1_top.php, (7) test2.php, (8) test3.php, (9) test4.php, (10) test5.php, (11) test6.php, (12) frames1_left.php, and (13) frames1_center.php in themes/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36502 - http://osvdb.org/36503 - http://osvdb.org/36495 -
otes: - CVE Program Container: References: - http://osvdb.org/36502 - http://osvdb.org/36503 - http://osvdb.org/36495 - http://osvdb.org/36499 - http://osvdb.org/36494 - http://osvdb.org/36498 - http://www.vupen.com/english/advisories/2007/1893 - http://www.attrition.org/pipermail/vim/2007-May/001623.html - https://www.exploit-db.com/exploits/3962 - http://secunia.com/advisories/25356 - http://osvdb.org/36501 - http://osvdb.org/36504 - http://osvdb.org/36493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34402 - http://osvdb.org/36497 - http://osvdb.org/36500 - http://www.securityfocus.com/bid/24083 - http://osvdb.org/36496
CVE ID: CVE-2007-2817 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in read/index.php in ol'bookmarks 0.7.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25356 - https://www.exploit-db.com/exploits/3964 - http://www.securityfocus.com/bid/24085 - http://osvdb.org/36492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34414
CVE ID: CVE-2007-2818 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cand_login.asp in CactuSoft Parodia 6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the strJobIDs parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34388 - http://pridels-team.blogspot.com/2007/05/parodia-xss-vuln.html - http://osvdb.org/37523 - http://www.securityfocus.com/bid/24078
CVE ID: CVE-2007-2819 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34391 - http://pridels-team.blogspot.com/2007/05/track-xss-vuln.html - http://osvdb.org/37525 - http://www.securityfocus.com/bid/24060
CVE ID: CVE-2007-2820 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the (1) SWAT_Init, (2) SWAT_InitEx, (3) SWAT_InitEx2, (4) SWAT_InitEx3, and (5) SWAT_Login functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24088 - http://osvdb.org/36517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34417 - http://marc.info/?l=full-disclosure&m=117981953312669&w=2 - http
://exchange.xforce.ibmcloud.com/vulnerabilities/34417 - http://marc.info/?l=full-disclosure&m=117981953312669&w=2 - http://secunia.com/advisories/25357 - http://www.vupen.com/english/advisories/2007/1901
CVE ID: CVE-2007-2821 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1502 - http://www.exploit-db.com/exploits/3960 - http://www.securityfocus.com/bid/24076 - http://secunia.com/advisories/25345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34399 - http://www.vupen.com/english/advisories/2007/1889 - http://www.waraxe.us/ad
.xforce.ibmcloud.com/vulnerabilities/34399 - http://www.vupen.com/english/advisories/2007/1889 - http://www.waraxe.us/advisory-50.html - http://www.securityfocus.com/archive/1/469258/100/0/threaded - http://secunia.com/advisories/29014 - http://osvdb.org/36311
CVE ID: CVE-2007-2822 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2) activated parameters to (a) login.php, (b) headerLinks.php, (c) submit1.php, (d) myFav.php, and (e) userCP.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25358 - https://www.exploit-db.com/exploits/3963 - http://www.wavelinkmedia.com/scripts/tutorialcms/ - http://osvdb.org/36520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34
avelinkmedia.com/scripts/tutorialcms/ - http://osvdb.org/36520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34401 - http://www.vupen.com/english/advisories/2007/1903
CVE ID: CVE-2007-2823 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the editor display width. NOTE: some of the details were obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36514 - http://hte.cvs.sourceforge.net/hte/HT%20Editor/ChangeLog?revision=1.104 - http://www.securityfocus.com/bid/24091 - http://secunia.com/advisories/25363 - http://www.vupen.com/english/advisories/20
ttp://www.securityfocus.com/bid/24091 - http://secunia.com/advisories/25363 - http://www.vupen.com/english/advisories/2007/1907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34423
CVE ID: CVE-2007-2824 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34400 - https://www.exploit-db.com/exploits/3956 - http://osvdb.org/38056 - http://www.securityfocus.com/bid/24067
CVE ID: CVE-2007-2825 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) links and (2) images. Additional Analyst Notes: - CVE Program Container: References: - http://terra.calacode.com/mail/docs/changelog.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34376 - http://www.securityfocus.com/bid/24260 - http://secunia.com/advisories/25506 - http://osvdb.org/36826
CVE ID: CVE-2007-2826 State: PUBLISHED Published: 2007-05-22T21:00:00 Last Updated: 2024-08-07T13:49:57.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[basedir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25475 - http://securityreason.com/securityalert/2718 - https://www.exploit-db.com/exploits/4031 - http://osvdb.org/36802 - http://www.securityfocus.com/bid/24059