Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3110 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:28.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via an RSS feed. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34986 - http://osvdb.org/36982 - http://secunia.com/advisories/25549
CVE ID: CVE-2007-3111 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4, allows remote attackers to execute arbitrary code via a long URL property value. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4023 - http://osvdb.org/36962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34691 - http://secunia.com/advisories/25479 - http://www.vupen.com/english/advisories/2007/2042 - http://www.securityfocus.c
1 - http://secunia.com/advisories/25479 - http://www.vupen.com/english/advisories/2007/2042 - http://www.securityfocus.com/bid/24279
CVE ID: CVE-2007-3112 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:29.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113. Additional Analyst Notes: - CVE Program Container: References: - http://mdessus.free.fr/?p=15 - http://secunia.com/advisories/26872 - https://bugzilla.redhat.com/show_bug.cgi?id=243592 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:184 - http://archives.neohapsis.com
show_bug.cgi?id=243592 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:184 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0074.html - http://bugs.cacti.net/view.php?id=955 - http://secunia.com/advisories/25557 - http://svn.cacti.net/cgi-bin/viewcvs.cgi/branches/BRANCH_0_8_6/cacti/graph_image.php?rev=3956&r1=3898&r2=3956 - http://fedoranews.org/updates/FEDORA-2007-219.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/34747 - http://osvdb.org/37019
CVE ID: CVE-2007-3113 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:29.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_height or (2) graph_width parameter, different vectors than CVE-2007-3112. Additional Analyst Notes: - CVE Program Container: References: - http://mdessus.free.fr/?p=15 - http://secunia.com/advisories/26872 - https://bugzilla.redhat.com/show_bug.cgi?id=243592 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:184 - http://bugs.cacti.net/view.php?id=955 - http:
243592 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:184 - http://bugs.cacti.net/view.php?id=955 - http://secunia.com/advisories/25557 - http://svn.cacti.net/cgi-bin/viewcvs.cgi/branches/BRANCH_0_8_6/cacti/graph_image.php?rev=3956&r1=3898&r2=3956 - http://fedoranews.org/updates/FEDORA-2007-219.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/34747 - http://osvdb.org/37019
CVE ID: CVE-2007-3114 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:29.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3115 and CVE-2007-3116. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25406 - http://secunia.com/advisories/25767 - http://osvdb.org/37018 - http://www.debian.org/security/2007/dsa-1319 - http://superb-west.dl.sourceforge.net/sourceforge/maradns/m
b.org/37018 - http://www.debian.org/security/2007/dsa-1319 - http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.05.tar.gz - http://www.maradns.org/changelog.html - http://www.securityfocus.com/bid/24337
CVE ID: CVE-2007-3115 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:28.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (memory consumption) via (1) reverse lookups or (2) requests for records in a class other than Internet (IN), a different set of affected versions than CVE-2007-3114 and CVE-2007-3116. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018201 - http://osvdb.org/37017 - http://secunia.com/advisories/25406 - http://secunia.com/advisori
uritytracker.com/id?1018201 - http://osvdb.org/37017 - http://secunia.com/advisories/25406 - http://secunia.com/advisories/25767 - http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.06.tar.gz - http://www.debian.org/security/2007/dsa-1319 - http://www.vupen.com/english/advisories/2007/2263 - http://www.securityfocus.com/archive/1/471725/100/0/threaded - http://www.maradns.org/changelog.html - http://www.securityfocus.com/bid/24337
CVE ID: CVE-2007-3116 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:28.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3114 and CVE-2007-3115. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25767 - http://www.debian.org/security/2007/dsa-1319 - http://osvdb.org/37016 - http://maradns.blogspot.com/search/label/MaraDNS
CVE ID: CVE-2007-3117 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:29.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SEO module in ADPLAN 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37080 - http://jvn.jp/jp/JVN%2323891849/index.html - http://secunia.com/advisories/25527 - http://www.vupen.com/english/advisories/2007/2100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34764 - http://www.securityfocus.com/bid/24356
CVE ID: CVE-2007-3118 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:28.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter (K-letter) 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the scdir parameter to (1) action.php, (2) subs.php, or (3) unsubs.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24334 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34738 - http://osvdb.org/38797 - http://osvdb.org/38799 - http://osvdb.org/38798 - http://www.vupen.com/english/advisories/2007/2091 - https://www.exp
- http://osvdb.org/38799 - http://osvdb.org/38798 - http://www.vupen.com/english/advisories/2007/2091 - https://www.exploit-db.com/exploits/4034
CVE ID: CVE-2007-3119 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:29.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.asp in Kartli Alisveris Sistemi (aka Free-PayPal-Shopping-Cart) 1.0 allows remote attackers to execute arbitrary SQL commands via the news_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34756 - https://www.exploit-db.com/exploits/4040 - http://secunia.com/advisories/25565 - http://www.securityfocus.com/bid/24362 - http://osvdb.org/37170 - http://www.vupen.com/english/advisories/2007/2098
CVE ID: CVE-2007-3120 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:28.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34762 - http://osvdb.org/35533 - http://sourceforge.net/project/shownotes.php?release_id=514035 - http://www.securityfocus.com/bid/2
://osvdb.org/35533 - http://sourceforge.net/project/shownotes.php?release_id=514035 - http://www.securityfocus.com/bid/24357 - http://secunia.com/advisories/25584 - http://www.vupen.com/english/advisories/2007/2097
CVE ID: CVE-2007-3121 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:28.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library (ZVBI) before 0.2.25 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via long data during a reception error. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=492374&group_id=2599 - http://osvdb.org/43454 - http://www.vupen.co
p://sourceforge.net/project/shownotes.php?release_id=492374&group_id=2599 - http://osvdb.org/43454 - http://www.vupen.com/english/advisories/2007/2088
CVE ID: CVE-2007-3122 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:28.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value of 10, which can be processed by WinRAR. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25796 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=511 - http://www.novell.com/linux/security/advisories/2007_33_clamav.html - http://secunia.com/advisories/25525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34823 - http://secunia
html - http://secunia.com/advisories/25525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34823 - http://secunia.com/advisories/25523 - http://www.debian.org/security/2007/dsa-1320 - http://kolab.org/security/kolab-vendor-notice-15.txt - http://secunia.com/advisories/25688 - http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html - http://osvdb.org/45392 - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog - http://security.gentoo.org/glsa/glsa-200706-05.xml
CVE ID: CVE-2007-3123 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T14:05:29.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified vm_codesize value, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25796 - http://www.securityfocus.com/bid/24289 - http://osvdb.org/35522 - http://www.novell.com/linux/security/advisories/2007_33_clamav.html - http://secunia.com/advisories/25525 - http://secunia.com
/www.novell.com/linux/security/advisories/2007_33_clamav.html - http://secunia.com/advisories/25525 - http://secunia.com/advisories/25523 - http://www.debian.org/security/2007/dsa-1320 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=521 - http://kolab.org/security/kolab-vendor-notice-15.txt - http://secunia.com/advisories/25688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34778 - http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog - http://security.gentoo.org/glsa/glsa-200706-05.xml
CVE ID: CVE-2007-3124 State: PUBLISHED Published: 2007-06-07T22:00:00 Last Updated: 2024-08-07T14:05:28.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in backup/src/vmsbackup.c (aka the backup utility) in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract [ny]" prompt. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34820 - http://www.securityfocus.com/bid/24333 - ftp://freevms.nvg.org/pub/vms/freevms/freevms-0_3_6.tgz
CVE ID: CVE-2007-3125 State: REJECTED Published: 2007-06-07T22:00:00 Last Updated: 2007-06-22T09:00:00 Description: No description available.
CVE ID: CVE-2007-3126 State: PUBLISHED Published: 2007-06-08T00:00:00 Last Updated: 2024-08-07T14:05:28.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43453 - https://bugzilla.gnome.org/show_bug.cgi?id=778604 - https://git.gnome.org/browse/gimp/commit/?id=323ecb73f7bf36788fb7066eb2d6678830cd5de7 - http://www.securityfocus.com/archive/1/470751/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabiliti
5de7 - http://www.securityfocus.com/archive/1/470751/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34789 - https://www.gimp.org/news/2017/05/11/gimp-2-8-22-released/
CVE ID: CVE-2007-3127 State: PUBLISHED Published: 2007-06-19T17:00:00 Last Updated: 2024-08-07T14:05:28.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information via a "';" (quote semicolon) sequence in the page parameter, which reveals the installation path in the resulting forced SQL error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34164 - http://www.netvigilance.com/advisory0032 - http://www.securityfocus.com/archive/1/471619/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34894 - http://arch
rityfocus.com/archive/1/471619/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34894 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0368.html - http://www.vupen.com/english/advisories/2007/2237
CVE ID: CVE-2007-3128 State: PUBLISHED Published: 2007-06-19T17:00:00 Last Updated: 2024-08-07T14:05:29.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24513 - http://www.osvdb.org/34164 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0369.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34896 - http://www.vupen.com/english/advisories/2007/2237 - http://www.securityfocus.com/arch
mcloud.com/vulnerabilities/34896 - http://www.vupen.com/english/advisories/2007/2237 - http://www.securityfocus.com/archive/1/471629/100/0/threaded - http://www.netvigilance.com/advisory0033
CVE ID: CVE-2007-3129 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:05:28.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in Utopia News Pro 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.netvigilance.com/advisory0034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34902 - http://www.securityfocus.com/archive/1/471626/100/0/threaded - http://www.vupen.com/english/advisories/2007/2236 - http://www.securityfocus.com/bid/24506 - http://www.osvdb.org/34165 - http://a
.vupen.com/english/advisories/2007/2236 - http://www.securityfocus.com/bid/24506 - http://www.osvdb.org/34165 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0370.html - http://secunia.com/advisories/25702
CVE ID: CVE-2007-3130 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:29.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the OpenWiki (formerly JD-Wiki) component (com_jd-wiki) 1.0.2, and possibly earlier, for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) dwpage.php or (2) wantedpages.php, different vectors than CVE-2006-4074. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24342 - http://osvdb.org/37472 - http://osvdb.org/37473
CVE ID: CVE-2007-3131 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:29.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add_comment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.secvsn.com/content/Advisories/sr-060607-lightblog.html - http://www.securityfocus.com/archive/1/470673/100/0/threaded - http://secunia.com/advisories/25561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34753 - http://securityreason.com/securityalert/2783
CVE ID: CVE-2007-3132 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:28.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service (client or server crash) via malformed requests to the daemon port, 1346/udp or 1347/udp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34745 - http://www.securityfocus.com/bid/24323 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=540 - http://www.securityfocu
focus.com/bid/24323 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=540 - http://www.securityfocus.com/archive/1/470644/100/0/threaded - http://www.securitytracker.com/id?1018200 - http://www.vupen.com/english/advisories/2007/2075 - http://securityreason.com/securityalert/2805 - http://secunia.com/advisories/25539 - http://osvdb.org/36106 - http://www.symantec.com/avcenter/security/Content/2007.06.05b.html
CVE ID: CVE-2007-3133 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:28.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in urunbak.asp in W1L3D4 WEBmarket 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36308 - http://www.securityfocus.com/archive/1/470745/100/0/threaded - http://www.exploit-db.com/exploits/4083 - http://secunia.com/advisories/25585 - http://www.securityfocus.com/archive/1/471765/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34766 - http://www.securityfocus.com
hive/1/471765/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34766 - http://www.securityfocus.com/bid/24364 - http://securityreason.com/securityalert/2782
CVE ID: CVE-2007-3134 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:29.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Your Name, (2) Your Homepage, and (3) Your Comment fields, when using "Approve Comments." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34767 - http://sourceforge.net/project/shownotes.php?group_id=186464&release_id=514101 - http://secunia.com/advisories/25562 - http://osvdb.o
forge.net/project/shownotes.php?group_id=186464&release_id=514101 - http://secunia.com/advisories/25562 - http://osvdb.org/37046
CVE ID: CVE-2007-3135 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:29.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34768 - http://securityreason.com/securityalert/2787 - http://sourceforge.net/project/shownotes.php?group_id=186464&release_id=514101 - http://www.securityfocus.com/archive/1/470750/100/0/t
orge.net/project/shownotes.php?group_id=186464&release_id=514101 - http://www.securityfocus.com/archive/1/470750/100/0/threaded - http://secunia.com/advisories/25562 - http://osvdb.org/37046 - http://www.secvsn.com/content/Advisories/sr-060607-atomphotoblog.html
CVE ID: CVE-2007-3136 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:29.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/nuke_include.php in newsSync 1.5.0rc6 allows remote attackers to execute arbitrary PHP code via a URL in the newsSync_NUKE_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37456 - http://www.securityfocus.com/bid/24361 - https://www.exploit-db.com/exploits/4041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34761
CVE ID: CVE-2007-3137 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:29.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sbl, (2) sbr, or (3) search parameter. NOTE: the original disclosure claims the pageid parameter in index.php is affected, but this is incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24365 - http://securityreason.com/securityalert/2789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34763 - http:/
365 - http://securityreason.com/securityalert/2789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34763 - http://www.securityfocus.com/archive/1/470758/100/0/threaded - http://secunia.com/advisories/25583 - http://osvdb.org/37144