Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
E-2006-5172, and CVE-2007-1785. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2628 - http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp - http://www.kb.cert.org/vuls/id/979825 - http://osvdb.org/35326 - http://secunia.com/advisories/24972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33854 - http://www.securityfocus.com/bid/23635 - http://www.securityfocus.com/archive/1/466790/100/0/threaded - http://www.securitytracker.com/id?1017952 - http://www.vupen.com/english/advisories/2007/1529 - http://www.zerodayinitiative.com/advisories/ZDI-07-022.html
CVE ID: CVE-2007-2140 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in everything.php in Franklin Huang Flip (aka Flip-search-add-on) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34147 - http://attrition.org/pipermail/vim/2007-May/001576.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33696 - http://www.securityfocus.com/archive/1/465738/100/0/threaded
CVE ID: CVE-2007-2141 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:51.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3758 - http://secunia.com/advisories/24939 - http://securityreason.com/securityalert/2593 - http://www.securityfocus.com/bid/23542 - http://osvdb.org/34999 - http://www.securityfocus.com/archive/1/466037/100/0/threaded - https://exchange.xforce.ibmcloud.com/vu
osvdb.org/34999 - http://www.securityfocus.com/archive/1/466037/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33727 - http://www.vupen.com/english/advisories/2007/1432
CVE ID: CVE-2007-2142 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code via a URL in the PagePrefix parameter to (1) begin.inc.php, (2) connection.inc.php, (3) events.inc.php, (4) footer.inc.php, (5) header.inc.php, (6) menuleft.inc.php, or (7) pages.inc.php in includes/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33703 - https://www.exploit-db.com/exploits/3752 - http://osvdb.org/
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/33703 - https://www.exploit-db.com/exploits/3752 - http://osvdb.org/37569 - http://osvdb.org/37568 - http://osvdb.org/37571 - http://osvdb.org/37565 - http://osvdb.org/37567 - http://www.vupen.com/english/advisories/2007/1428 - http://www.securityfocus.com/bid/23525 - http://osvdb.org/37570
CVE ID: CVE-2007-2143 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:51.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37572 - http://www.securityfocus.com/bid/23549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33728 - https://www.exploit-db.com/exploits/3759
CVE ID: CVE-2007-2144 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37573 - http://www.securityfocus.com/bid/23529 - http://www.vupen.com/english/advisories/2007/1429 - https://www.exploit-db.com/exploits/3753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33702
CVE ID: CVE-2007-2145 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:51.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: The imagecomments function in classes.php in MiniGal b13 allows remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the input parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3754 - http://www.vupen.com/english/advisories/2007/1430
CVE ID: CVE-2007-2146 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:51.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: The imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the (1) name or (2) email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1430
CVE ID: CVE-2007-2147 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:51.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows remote attackers to read and modify the classes/vars.php and classes/varstuff.php configuration files via direct requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465547/100/0/threaded - http://secunia.com/advisories/24873 - http://www.vupen.com/english/advisories/2007/1386 - http://securityreason.com/securityalert/2595
CVE ID: CVE-2007-2148 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier allows remote authenticated administrators to inject PHP code into .html files via the html parameter, as demonstrated by head.html and foot.html, which are included and executed upon a direct request for index.php. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - http://www.s
table by remote unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465547/100/0/threaded - http://secunia.com/advisories/24873 - http://www.vupen.com/english/advisories/2007/1386 - http://securityreason.com/securityalert/2595
CVE ID: CVE-2007-2149 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier stores usernames and unencrypted passwords in (1) classes/vars.php and (2) classes/varstuff.php, and recommends 0666 or 0777 permissions for these files, which allows local users to gain privileges by reading the files, and allows remote attackers to obtain credentials via a direct request for admin/options.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465547/100/0/threaded - http://secunia.com/advisories/248
ontainer: References: - http://www.securityfocus.com/archive/1/465547/100/0/threaded - http://secunia.com/advisories/24873 - http://www.vupen.com/english/advisories/2007/1386 - http://securityreason.com/securityalert/2595
CVE ID: CVE-2007-2150 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command, a variant of CVE-1999-0017. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466025/100/0/threaded - http://osvdb.org/35414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33721 - http://www.securityfocus.com/bid/23540
CVE ID: CVE-2007-2151 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration server in McAfee e-Business Server before 8.1.1 and 8.5.x before 8.5.2 allows remote attackers to cause a denial of service (service crash) via a large length value in a malformed authentication packet, which triggers a heap over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1434 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=516 - https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612751&command=show&
lnerabilities/display.php?id=516 - https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612751&command=show&forward=nonthreadedKC - http://www.securitytracker.com/id?1017929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33730 - http://www.securityfocus.com/bid/23544 - http://secunia.com/advisories/24893
CVE ID: CVE-2007-2152 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte (Unicode) characters. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=515 - http://www.vupen.com/english/advisories/2007/1435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33732 - http://secunia.com/advisories/24914 - http://www.securityt
https://exchange.xforce.ibmcloud.com/vulnerabilities/33732 - http://secunia.com/advisories/24914 - http://www.securitytracker.com/id?1017928 - https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612750&command=show&forward=nonthreadedKC - http://www.kb.cert.org/vuls/id/324929 - http://www.securityfocus.com/bid/23543
CVE ID: CVE-2007-2153 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in atmail.php in @Mail 5.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465378/100/100/threaded - http://securityreason.com/securityalert/2594 - http://www.securityfocus.com/bid/23428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33591 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls43
CVE ID: CVE-2007-2154 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron Connector 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the CabronServiceFolder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37574 - https://www.exploit-db.com/exploits/3756 - http://www.securityfocus.com/bid/23531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33716 - http://www.vupen.com/english/advisories/2007/1431
CVE ID: CVE-2007-2155 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the modify parameter in a template action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33581 - http://www.securityfocus.com/archive/1/465339/100/100/threaded - http://www.phpfaber.com/m/News/phpfaber_topsites_v_3_3-58.html - http://www.securityfocus.com/bid/23419 - http://www.attrition.org/pi
pfaber.com/m/News/phpfaber_topsites_v_3_3-58.html - http://www.securityfocus.com/bid/23419 - http://www.attrition.org/pipermail/vim/2007-April/001538.html
CVE ID: CVE-2007-2156 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:50.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) datumVonDatumBis.inc.php, (2) footer.inc.php, (3) header.inc.php, and (4) stylesheets.php in templates/; and (5) wochenuebersicht.inc.php, (6) monatsuebersicht.inc.php, (7) jahresuebersicht.inc.php, and (8) tagesuebersicht.inc.php in belegungsplan/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilitie
n/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33737 - http://osvdb.org/35006 - http://osvdb.org/35009 - http://www.securityfocus.com/bid/23550 - http://osvdb.org/35007 - https://www.exploit-db.com/exploits/3763 - http://osvdb.org/35008 - http://osvdb.org/35013 - http://osvdb.org/35011 - http://osvdb.org/35010 - http://secunia.com/advisories/24926 - http://osvdb.org/35012 - http://www.vupen.com/english/advisories/2007/1448
CVE ID: CVE-2007-2157 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:51.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33740 - https://www.exploit-db.com/exploits/3764 - http://osvdb.org/35016 - http://secunia.com/advisories/24899 - http://www.securityfocus.com/bid/23553
CVE ID: CVE-2007-2158 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:23:51.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in jGallery 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the G_JGALL[inc_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1445 - http://secunia.com/advisories/24956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33738 - https://www.exploit-db.com/exploits/3760
CVE ID: CVE-2007-2159 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:51.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors relating to (1) direct display of data from the database and (2) other portions of the user interface. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24848 - http://www.vupen.com/english/advisories/2007/1360 - http://osvdb.org/34961 - h
: - http://secunia.com/advisories/24848 - http://www.vupen.com/english/advisories/2007/1360 - http://osvdb.org/34961 - http://drupal.org/node/135549
CVE ID: CVE-2007-2160 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:51.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to perform unauthorized actions as an arbitrary user, a related issue to CVE-2006-5476. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24848 - http://osvdb.org/34962 - http://www.vupen.com/english/advisories/2007/1360 - http://drupal.org/node/135549
CVE ID: CVE-2007-2161 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:50.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466175/100/0/threaded - http://www.securityfocus.com/archive/1/466017/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33715 - http://osvdb.org/43314 - http://www.securityfocus.com/archive/1/466043/100/0/thr
ce.ibmcloud.com/vulnerabilities/33715 - http://osvdb.org/43314 - http://www.securityfocus.com/archive/1/466043/100/0/threaded
CVE ID: CVE-2007-2162 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:50.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a denial of service (browser crash or system hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466220/100/0/threaded - http://www.securityfocus.com/archive/1/466147/100/0/threaded - http://www.securityfocus.com/archive/1/466017/100/0/threaded
CVE ID: CVE-2007-2163 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:50.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466017/100/0/threaded - http://www.securityfocus.com/archive/1/466043/100/0/threaded
CVE ID: CVE-2007-2164 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:50.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash or abort) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466147/100/0/threaded - http://securityreason.com/securityalert/2600 - http://www.securityfocus.com/archive/1/466017/100/0/threaded
CVE ID: CVE-2007-2165 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:50.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same as the module that retrieves authentication data, which might allow remote attackers to bypass authentication, as demonstrated by use of SQLAuthTypes Plaintext in mod_sql, with data retrieved from /etc/passwd. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=419255 - http://bugs.proftpd.
s: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=419255 - http://bugs.proftpd.org/show_bug.cgi?id=2922 - https://bugzilla.redhat.com/show_bug.cgi?id=237533 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:130 - http://secunia.com/advisories/25724 - http://www.securityfocus.com/bid/23546 - http://secunia.com/advisories/24867 - http://osvdb.org/34602 - http://www.vupen.com/english/advisories/2007/1444 - http://securitytracker.com/id?1017931 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00065.html - http://secunia.com/advisories/27516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33733
CVE ID: CVE-2007-2166 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:50.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot (osp) 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPathToProjectAdmin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osp.cvs.sourceforge.net/osp/osp12/administration/user/lib/group.inc.php?revision=1.1.1.1&view=markup - http://www.vupen.com/english/advisories/2007/1460 - http://secunia.com/advisories/24915 - http://www.securityfocus.com/bid/23563
w.vupen.com/english/advisories/2007/1460 - http://secunia.com/advisories/24915 - http://www.securityfocus.com/bid/23563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33749 - http://osvdb.org/35022 - https://www.exploit-db.com/exploits/3765
CVE ID: CVE-2007-2167 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:50.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action. Additional Analyst Notes: - CVE Program Container: References: - http://www.x-pose.org/aimstats.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/33742 - http://www.securityfocus.com/bid/23573 - http://www.vupen.com/english/advisories/2007/1447 - https://www.exploit-db.com/exploits/3762 - http://secunia.com/advisories/24955
CVE ID: CVE-2007-2168 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:50.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote attackers to inject PHP code into config.php via the databasehost parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.x-pose.org/aimstats.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/33742 - http://www.securityfocus.com/bid/23573 - http://www.vupen.com/english/advisories/200
bmcloud.com/vulnerabilities/33742 - http://www.securityfocus.com/bid/23573 - http://www.vupen.com/english/advisories/2007/1447 - http://secunia.com/advisories/24955
CVE ID: CVE-2007-2169 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:50.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into subs.php via the (1) Sub-name or (2) Sub-url field. NOTE: an earlier report indicated that the add action can be reached through a request to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33739 - http://www.securityfocus.com/bid/23548 - http://www.vupen.com/english/advisories/2007/1446 - https://www.exploit-db.com/exploits/3761