Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1989 State: PUBLISHED Published: 2007-04-12T10:00:00 Last Updated: 2024-08-07T13:13:42.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DotClear before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) post_id parameter to ecrire/trackback.php or the (2) tool_url parameter to tools/thememng/index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23411 - http://www.dotclear.net/log/post/2007/04/10/Dotclear-126 - http://lists.grok.org.uk/pipermail/full-disc
.com/bid/23411 - http://www.dotclear.net/log/post/2007/04/10/Dotclear-126 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053720.html - http://www.dotclear.net/forum/viewtopic.php?id=26573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33615 - http://www.vupen.com/english/advisories/2007/1338 - http://secunia.com/advisories/24829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33616
CVE ID: CVE-2007-1990 State: PUBLISHED Published: 2007-04-12T10:00:00 Last Updated: 2024-08-07T13:13:42.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37432 - http://www.vupen.com/english/advisories/2007/1302
CVE ID: CVE-2007-1991 State: PUBLISHED Published: 2007-04-12T10:00:00 Last Updated: 2024-08-07T13:13:42.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33501 - http://www.securityfocus.com/bid/23363 - http://secunia.com/advisories/24812
CVE ID: CVE-2007-1992 State: PUBLISHED Published: 2007-04-12T10:00:00 Last Updated: 2024-08-07T13:13:42.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the com_zoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) EXIF_Makernote.php or (2) EXIF.php in classes/iptc/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33580 - http://www.vupen.com/english/advisories/2007/1353 - http://www.securityfocus.com/bid/23415 - https://www.exploit-db.com/exploits/3706
CVE ID: CVE-2007-1993 State: PUBLISHED Published: 2007-04-12T10:00:00 Last Updated: 2024-08-07T13:13:42.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33567 - http://www.securitytracker.com/id?1017893 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00913684 - http://secunia.com/adviso
d?1017893 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00913684 - http://secunia.com/advisories/24855 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5751 - http://www.securityfocus.com/bid/23401 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=512 - http://www.vupen.com/english/advisories/2007/1343 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00913684
CVE ID: CVE-2007-1994 State: PUBLISHED Published: 2007-04-12T10:00:00 Last Updated: 2024-08-07T13:13:42.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as CVE-2007-0916. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017892 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00944467 - https://oval.cisecurity.org/repository/search/definition/ov
com/bizsupport/TechSupport/Document.jsp?objectID=c00944467 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5624 - http://www.vupen.com/english/advisories/2007/1358 - http://www.securityfocus.com/bid/23410 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00944467
CVE ID: CVE-2007-1995 State: PUBLISHED Published: 2007-04-12T10:00:00 Last Updated: 2024-08-07T13:13:42.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018142 - http://secunia.com/advisories/25119 - http://secunia.com/advisories/25084 - http://secuni
curitytracker.com/id?1018142 - http://secunia.com/advisories/25119 - http://secunia.com/advisories/25084 - http://secunia.com/advisories/25312 - http://www.vupen.com/english/advisories/2007/1336 - http://www.vupen.com/english/advisories/2008/1195/references - http://www.securityfocus.com/bid/23417 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1 - http://www.debian.org/security/2007/dsa-1293 - http://secunia.com/advisories/24808 - http://secunia.com/advisories/25428 - http://bugzilla.quagga.net/show_bug.cgi?id=354 - http://www.trustix.org/errata/2007/0017/ - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.015.html - http://www.redhat.com/support/errata/RHSA-2007
/ - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.015.html - http://www.redhat.com/support/errata/RHSA-2007-0389.html - http://www.novell.com/linux/security/advisories/2007_9_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11048 - http://www.quagga.net/news2.php?y=2007&m=4&d=8#id1176073740 - http://secunia.com/advisories/25293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33547 - http://secunia.com/advisories/29743 - http://www.ubuntu.com/usn/usn-461-1 - http://bugzilla.quagga.net/show_bug.cgi?id=355 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:096 - http://secunia.com/advisories/25255 - http://security.g
ttp://www.mandriva.com/security/advisories?name=MDKSA-2007:096 - http://secunia.com/advisories/25255 - http://security.gentoo.org/glsa/glsa-200705-05.xml
CVE ID: CVE-2007-1996 State: PUBLISHED Published: 2007-04-12T10:00:00 Last Updated: 2024-08-07T13:13:42.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in codebreak.php in CodeBreak, probably 1.1.2 and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the process_method parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1355 - http://secunia.com/advisories/24846 - http://www.securityfocus.com/archive/1/465382/100/0/threaded - http://securityreason.com/securityalert/2562 - http://www.securityfocus.com/bid/23425
CVE ID: CVE-2007-1997 State: PUBLISHED Published: 2007-04-16T21:00:00 Last Updated: 2024-08-07T13:13:42.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25022 - http://www.trustix.org/errata/2007/0013/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/33637 - http
ies/25022 - http://www.trustix.org/errata/2007/0013/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/33637 - http://www.securitytracker.com/id?1017921 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=513 - http://www.securityfocus.com/bid/23473 - http://secunia.com/advisories/24996 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:098 - http://www.vupen.com/english/advisories/2008/0924/references - http://www.novell.com/linux/security/advisories/2007_26_clamav.html - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/25189 - http://docs.info.apple.com/article.h
es/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/25189 - http://docs.info.apple.com/article.html?artnum=307562 - http://support.novell.com/techcenter/psdb/50a5cb718f20761dd7e0b6b4e0935c52.html - http://sourceforge.net/project/shownotes.php?release_id=500765 - http://www.vupen.com/english/advisories/2007/1378 - http://secunia.com/advisories/25028 - http://security.gentoo.org/glsa/glsa-200704-21.xml - http://secunia.com/advisories/24946 - http://www.debian.org/security/2007/dsa-1281 - http://secunia.com/advisories/24920 - http://secunia.com/advisories/24891
CVE ID: CVE-2007-1998 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP code via the Email field, which results in code execution through a direct request to gb.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33540 - http://secunia.com/advisories/24835 - https://www.exploit-db.com/exploits/3697
CVE ID: CVE-2007-1999 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Weatimages 1.7.1 and earlier, when weatimages.ini is missing, allows remote attackers to execute arbitrary PHP code via a URL in the ini[langpack] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1335 - http://osvdb.org/34807 - http://secunia.com/advisories/24863 - https://www.exploit-db.com/exploits/3700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33553
CVE ID: CVE-2007-20001 State: PUBLISHED Published: 2022-02-06T20:19:06 Last Updated: 2024-08-07T16:18:20.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN (Windows Native) Version 3.2.2 build 2007-02-20. Additional Analyst Notes: - CVE Program Container: References: - https://www.starwindsoftware.com/security/sw-20070601-0001/
CVE ID: CVE-2007-2000 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) pseudo or (2) passe parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3701 - http://www.vupen.com/english/advisories/2007/1344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33555 - http://secunia.com/advisories/24862 - http://www.osvdb.org/34816
CVE ID: CVE-2007-2001 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" (background color) field and other unspecified fields, which injects into config.inc.php3. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3701 - http://secunia.com/advisories/24862 - http://www.osvdb.org/34817
CVE ID: CVE-2007-2002 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: InoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by setting an arbitrary admin cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24842 - https://www.exploit-db.com/exploits/3702 - http://www.vupen.com/english/advisories/2007/1345
CVE ID: CVE-2007-2003 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check fails, which allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by ignoring the redirect. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24842 - https://www.exploit-db.com/exploits/3702 - http://www.vupen.com/english/advisories/2007/1345
CVE ID: CVE-2007-2004 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in InoutMailingListManager 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to changename.php and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24842 - https://www.exploit-db.com/exploits/3702 - http://www.vupen.com/english/advisories/2007/1345
CVE ID: CVE-2007-2005 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) contact_type.php, (2) itemstatus_type.php, (3) projectstatus_type.php, (4) request_type.php, (5) responses_type.php, (6) timelog_type.php, or (7) urgency_type.php in inc/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34801 - http://www.osvdb.org/34796 - https://www.exploit-d
: - CVE Program Container: References: - http://www.osvdb.org/34801 - http://www.osvdb.org/34796 - https://www.exploit-db.com/exploits/3703 - http://www.osvdb.org/34798 - http://www.osvdb.org/34799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33552 - http://www.securityfocus.com/bid/23408 - http://www.osvdb.org/34795 - http://www.vupen.com/english/advisories/2007/1346 - http://www.osvdb.org/34800 - http://www.osvdb.org/34797 - http://attrition.org/pipermail/vim/2007-April/001504.html
CVE ID: CVE-2007-2006 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) pass parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465340/100/0/threaded - https://www.exploit-db.com/exploits/3704 - http://www.vupen.com/english/advisories/2007/1352
CVE ID: CVE-2007-2007 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465340/100/0/threaded - https://www.exploit-db.com/exploits/3704 - http://www.vupen.com/english/advisories/2007/1352
CVE ID: CVE-2007-2008 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465340/100/0/threaded - https://www.exploit-db.com/exploits/3704 - http://www.vupen.com/english/advisories/2007/1352
CVE ID: CVE-2007-2009 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in SimpCMS Light 04.10.2007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33572 - https://www.exploit-db.com/exploits/3705 - http://www.attrition.org/pipermail/vim/2007-April/001513.html - http://www.securityfocus.com/archive/1/465343/100/100/threaded - ht
attrition.org/pipermail/vim/2007-April/001513.html - http://www.securityfocus.com/archive/1/465343/100/100/threaded - http://secunia.com/advisories/24851 - http://www.securityfocus.com/bid/23439
CVE ID: CVE-2007-2010 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:41.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in bftpd before 1.8 allows remote authenticated users to cause a denial of service (daemon crash) via a (1) get or (2) mget command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23406 - http://osvdb.org/34889 - http://secunia.com/advisories/24864 - http://bftpd.sourceforge.net/downloads/CHANGELOG - http://www.vupen.com/english/advisories/2007/1347 - http://bftpd.sourceforge.net/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/33594
CVE ID: CVE-2007-2011 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in DeskPro 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23381 - http://john-martinelli.com/work/deskpro.txt - http://securityreason.com/securityalert/2556 - http://secunia.com/advisories/24844 - http://www.securityfocus.com/archive/1/465089/100/0/threaded - http://osvdb.org/34721 - http://www.vupen.com/english/advisories/2007/
curityfocus.com/archive/1/465089/100/0/threaded - http://osvdb.org/34721 - http://www.vupen.com/english/advisories/2007/1320
CVE ID: CVE-2007-2012 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .rar, (2) .jar or (3) .zip archive. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33551 - http://www.vupen.com/english/advisories/2007/1312 - http://www.bugtraq.ir/articles/advisory/comprexx_directory_traversal/7 - http://www.securityfocus.com/bid/23362 - http://secunia.com/advisories/24840
CVE ID: CVE-2007-2013 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in JEx-Treme Einfacher Passworschutz allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33542 - http://hackberry.ath.cx/research/1.txt - http://secunia.com/advisories/24922 - http://www.securityfocus.com/bid/23395 - http://www.vupen.com/english/advisories/2007/1316
CVE ID: CVE-2007-2014 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/blocks/week_events.php in MyNews 4.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the myNewsConf[path][sys][index] parameter, a different vector than CVE-2007-0633. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37425 - http://hackberry.ath.cx/research/3.txt - http://www.vupen.com/english/advisories/2007/1317
CVE ID: CVE-2007-2015 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:41.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Request It 1.0b allows remote attackers to execute arbitrary PHP code via a URL in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1318 - http://osvdb.org/34722 - http://www.securityfocus.com/archive/1/465081/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-April/001514.html - http://secunia.com/advisories/24832 - http://securityreason.com/securityalert/2553 - http://hackberry.ath.
001514.html - http://secunia.com/advisories/24832 - http://securityreason.com/securityalert/2553 - http://hackberry.ath.cx/research/2.txt - http://www.securityfocus.com/bid/23370
CVE ID: CVE-2007-2016 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the lang[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465082/100/0/threaded - http://securityreason.com/securityalert/2560 - http://osvdb.org/35049
CVE ID: CVE-2007-2017 State: PUBLISHED Published: 2007-04-12T19:00:00 Last Updated: 2024-08-07T13:13:42.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.alstrasoft.com/videoshare_fix.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/33548 - http://www.attrition.org/pipermail/vim/2007-July/001707.html - http://www.vupen.com/english/advisories/2007/1331 - http://www.securityfocus.com/bid/23409 - http://pridels0.blogspo