Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6553 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONF[app_root] parameter to (1) tcuser.class.php, (2) absencecount.inc.php, (3) avatar.inc.php, (4) csvhandler.class.php, (5) functions.tcpro.php, (6) header.html.inc.php, (7) joomlajack.tcpro.php, (8) menu.inc.php, (9) other.inc.php, (10) tcabsence.class.php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php,
php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php, (15) tcdaynote.class.php, (16) tcgroup.class.php, (17) tcholiday.class.php, (18) tclogin.class.php, (19) tcmonth.class.php, (20) tctemplate.class.php, (21) tcusergroup.class.php, or (22) tcuseroption.class.php in includes/, possibly a related issue to CVE-2006-4845. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39813 - http://osvdb.org/39821 - http://osvdb.org/39809 - http://osvdb.org/39811 - http://osvdb.org/39820 - http://osvdb.org/39806 - http://osvdb.org/39808 - http://osvdb.org/39826 - http://osvdb.org/39805 - https://www.exploit-db.
p://osvdb.org/39806 - http://osvdb.org/39808 - http://osvdb.org/39826 - http://osvdb.org/39805 - https://www.exploit-db.com/exploits/4785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39212 - http://osvdb.org/39807 - http://osvdb.org/39815 - http://osvdb.org/39823 - http://osvdb.org/39822 - http://osvdb.org/39817 - http://osvdb.org/39825 - http://osvdb.org/39812 - http://osvdb.org/39818 - http://osvdb.org/39824 - http://osvdb.org/39819 - http://www.securityfocus.com/bid/27022 - http://osvdb.org/39810 - http://osvdb.org/39814 - http://osvdb.org/39816
CVE ID: CVE-2007-6554 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) index.php, (2) register.php, (3) login.php, or (4) statistics.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39212 - http://osvdb.org/39829 - http://osvdb.org/39828 - http://osvdb.org/39827 - http://www.securityfocus.
erabilities/39212 - http://osvdb.org/39829 - http://osvdb.org/39828 - http://osvdb.org/39827 - http://www.securityfocus.com/bid/27022 - http://osvdb.org/39830
CVE ID: CVE-2007-6555 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:05.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4783 - http://osvdb.org/40023 - http://www.securityfocus.com/bid/27014
CVE ID: CVE-2007-6556 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to default.asp in a news page action or (2) the pageid parameter to default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39216 - https://www.exploit-db.com/exploits/4777 - http://www.securityfocus.com/bid/27031 - http://osvdb.org/39640
CVE ID: CVE-2007-6557 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:05.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute arbitrary SQL commands via the ItemID parameter to (1) comments.php, (2) view.php, (3) siteadmin/ViewItem.php, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40024 - http://osvdb.org/40025 - http://www.securityfocus.com/bid/26999 - https://www.exploit-db.com/exploits/4778 - http://osvdb.org/40026 - http://www.inj3ct-it.org/exploit/megacheatz.1.1.txt
CVE ID: CVE-2007-6558 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: TotalPlayer 3.0 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .m3u file. NOTE: this might be a duplicate of CVE-2006-6288. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4322 - http://www.securityfocus.com/archive/1/485513/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39227 - http://securityreason.com/securityalert/3500 - http://www.securityfocus.com/archive/1/485547/100/100/threaded - htt
27 - http://securityreason.com/securityalert/3500 - http://www.securityfocus.com/archive/1/485547/100/100/threaded - http://www.securityfocus.com/archive/1/485564/100/100/threaded - http://www.securityfocus.com/archive/1/485578/100/100/threaded - http://secunia.com/advisories/28236 - http://osvdb.org/39891 - http://www.securityfocus.com/bid/27021
CVE ID: CVE-2007-6559 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL commands via (1) the from parameter to index.php or (2) the page parameter to update.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39791 - http://secunia.com/advisories/28263 - http://osvdb.org/39790 - http://securityreason.com/securityalert/3496 - http://www.securityfocus.com/bid/27003 - http://www.securityfocus.com/archive/1/485480/100/0/threaded - http://www.securityfocu
www.securityfocus.com/bid/27003 - http://www.securityfocus.com/archive/1/485480/100/0/threaded - http://www.securityfocus.com/archive/1/490101/100/0/threaded
CVE ID: CVE-2007-6560 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via (1) the newconfname parameter to profiles.php or (2) the conf parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39793 - http://secunia.com/advisories/28263 - http://securityreason.com/securityalert/3496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39223 - http://osvdb.org/39792 - http://www.securityfocus.com/bid/27003
://exchange.xforce.ibmcloud.com/vulnerabilities/39223 - http://osvdb.org/39792 - http://www.securityfocus.com/bid/27003 - http://www.securityfocus.com/archive/1/485480/100/0/threaded - http://www.securityfocus.com/archive/1/490101/100/0/threaded
CVE ID: CVE-2007-6561 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDF_load_image function that results in an overflow in the pdc_fsearch_fopen function, and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27001 - http://osvdb.org/40275 - http://www.securityfocus.com/archive/1/485479/100/0/threaded - http://security.gentoo.org/glsa/glsa-200803-17.xml - http://secunia.com/advi
focus.com/archive/1/485479/100/0/threaded - http://security.gentoo.org/glsa/glsa-200803-17.xml - http://secunia.com/advisories/29304 - http://secunia.com/advisories/28239 - http://securityreason.com/securityalert/3495
CVE ID: CVE-2007-6562 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the use of FD_SET in TCPreen before 1.4.4 allow remote attackers to cause a denial of service via multiple concurrent connections, which result in overflows in the (1) SocketAddress::Connect function in libsolve/sockprot.cpp and (2) monitor_bridge function in src/bridge.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1443 - http://osvdb.org/40318 - http://www.securityfocus.com/bid/27018 - https://exchange.xforce.ibmcloud.com/
/2008/dsa-1443 - http://osvdb.org/40318 - http://www.securityfocus.com/bid/27018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39241 - http://anonsvn.remlab.net/svn/tcpreen/tags/1.4.4/NEWS - http://osvdb.org/40317 - http://www.vupen.com/english/advisories/2007/4318 - http://secunia.com/advisories/28217 - http://secunia.com/advisories/28254
CVE ID: CVE-2007-6563 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:05.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in WinAce 2.65 and earlier, and possibly other versions before 2.69, allows user-assisted remote attackers to execute arbitrary code via a long filename in a compressed UUE archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4312 - http://jvndb.jvn.jp/contents/ja/2007/JVNDB-2007-000822.html - http://www.securityfocus.com/bid/27017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39268 - http://www.fourteenforty.jp/research/advis
.com/bid/27017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39268 - http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071225 - http://jvn.jp/jp/JVN%2344736880/index.html - http://osvdb.org/40267 - http://secunia.com/advisories/28215
CVE ID: CVE-2007-6564 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in Limbo CMS 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the com_option parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitrustgroup.com/advisories/web-application-security-limbo-cms.html - http://www.vupen.com/english/advisories/2007/4317 - http://secunia.com/advisories/28190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39207 - http://www.securityfocus.com/bid/27027 - http://www.osvdb.org/396
//exchange.xforce.ibmcloud.com/vulnerabilities/39207 - http://www.securityfocus.com/bid/27027 - http://www.osvdb.org/39642
CVE ID: CVE-2007-6565 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Blakord Portal 1.3.A Beta and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to an arbitrary component. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485544/100/0/threaded - http://www.spanish-hackers.com/vuln/bug19.txt - https://www.exploit-db.com/exploits/4793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39284 - http://www.securityfocus.com/bid/27038 - http://securityreason.com/
exchange.xforce.ibmcloud.com/vulnerabilities/39284 - http://www.securityfocus.com/bid/27038 - http://securityreason.com/securityalert/3497
CVE ID: CVE-2007-6566 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39259 - http://en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst - http://www.securityfocus.com/archive/1/485545/100/0/threaded - http://osvdb.org/39740 - http://secunia.com/advisories/28250 - https://
urityfocus.com/archive/1/485545/100/0/threaded - http://osvdb.org/39740 - http://secunia.com/advisories/28250 - https://www.exploit-db.com/exploits/4794 - http://www.securityfocus.com/bid/27042
CVE ID: CVE-2007-6567 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagename parameter in a page view action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39741 - http://en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst - http://www.securityfocus.com/archive/1/485545/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39260 - h
//www.securityfocus.com/archive/1/485545/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39260 - https://www.exploit-db.com/exploits/4794 - http://www.securityfocus.com/bid/27041
CVE ID: CVE-2007-6568 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:05.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4795 - http://osvdb.org/39742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39258 - http://www.securityfocus.com/bid/27040
CVE ID: CVE-2007-6569 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26978 - http://secunia.com/advisories/28216 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 - http://secunia.com/advisories/28186 - http://docs.sun.com/app/docs/doc/820-2499/aea
document.do?assetkey=1-26-103002-1 - http://secunia.com/advisories/28186 - http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view - http://www.vupen.com/english/advisories/2007/4313
CVE ID: CVE-2007-6570 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26978 - http://secunia.com/advisories/28216 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 - http://secunia.com/advisories/28186 - https://exchange.x
://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 - http://secunia.com/advisories/28186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43976 - http://osvdb.org/40851 - http://docs.sun.com/source/820-3637-10/relnotes36sp11_unix.html#wp19247 - http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view - http://www.vupen.com/english/advisories/2007/4313
CVE ID: CVE-2007-6571 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26978 - http://secunia.com/advisories/28216 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43977 - http://www.vupen.com/english/advisories/2007/431
103002-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43977 - http://www.vupen.com/english/advisories/2007/4313
CVE ID: CVE-2007-6572 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43978 - http://www.securityfocus.com/bid/26978 - http://secunia.com/advisories/28216 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 - http://www.vupen.com/english/advisories/20
s/28216 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103002-1 - http://www.vupen.com/english/advisories/2007/4313
CVE ID: CVE-2007-6573 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: QK SMTP Server 3 allows remote attackers to cause a denial of service (daemon crash) via a long (1) HELO, (2) MAIL FROM, or (3) RCPT TO command; or (4) a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3494 - http://osvdb.org/43533 - http://www.securityfocus.com/archive/1/485026/100/100/threaded
CVE ID: CVE-2007-6574 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:05.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the origin parameter to work/work.php in a display_upload_form action, or the forum parameter to (2) forum/viewforum.php or (3) forum/viewthread.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3481 - http://osvdb.org/39771 - http://osvdb.org/39772 - http://www.securityfocus.com/archive/1/485458/100/0/threaded - http://
http://osvdb.org/39771 - http://osvdb.org/39772 - http://www.securityfocus.com/archive/1/485458/100/0/threaded - http://osvdb.org/39773 - http://www.securityfocus.com/bid/26992
CVE ID: CVE-2007-6575 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.php in MMSLamp allows remote attackers to execute arbitrary SQL commands via the idpro parameter in a prodotti_dettaglio action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39220 - http://osvdb.org/39761 - http://www.securityfocus.com/bid/26995 - https://www.exploit-db.com/exploits/4776
CVE ID: CVE-2007-6576 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) videolink_count.php or (2) links.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39229 - http://osvdb.org/39621 - http://osvdb.org/39622 - http://www.securityfocus.com/bid/26996 - http://secunia.com/advisories/28165 - http://www.inj3ct-it.org/exploit/adultscript.txt - https://www.exploit-db.com/exp
http://secunia.com/advisories/28165 - http://www.inj3ct-it.org/exploit/adultscript.txt - https://www.exploit-db.com/exploits/4775
CVE ID: CVE-2007-6577 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the categ parameter in a categ action or (2) the article parameter in an articles action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39239 - http://osvdb.org/39774 - https://www.exploit-db.com/exploits/4772 - http://www.securityfocus.com/bid/26994 - http://osvdb.org/39775
CVE ID: CVE-2007-6578 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4774 - http://www.securityfocus.com/bid/26997 - http://osvdb.org/39762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39231
CVE ID: CVE-2007-6579 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlan_id parameter to (1) vlanview.php, (2) vlanedit.php, and (3) vlandel.php; the (4) assetclassgroup_id parameter to assetclassgroupview.php; the (5) subnet_id parameter to nodelist.php; and unspecified other vectors. NOTE: it was later reported that the vlanview.php and vlandel.php vectors are also in 0.4. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39777 - http://osvdb.o
re also in 0.4. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39777 - http://osvdb.org/39780 - http://www.securityfocus.com/bid/26993 - http://osvdb.org/39776 - https://www.exploit-db.com/exploits/4771 - http://osvdb.org/39779 - http://www.inj3ct-it.org/exploit/ipreg0.3.txt - http://osvdb.org/39778
CVE ID: CVE-2007-6580 State: PUBLISHED Published: 2007-12-28T21:00:00 Last Updated: 2024-08-07T16:11:06.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter to category.php or (2) the groupid parameter to editadgroup.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26984 - https://www.exploit-db.com/exploits/4770 - http://osvdb.org/40369 - http://osvdb.org/40368