Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
354 - http://truzone.org/modules.php?name=Forums&file=viewtopic&p=287012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33483 - http://truzone.org/modules.php?name=News&file=article&sid=1613 - http://secunia.com/advisories/24800 - http://osvdb.org/34665
CVE ID: CVE-2007-1926 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log; (3) allows context-dependent attackers to inject arbitrary web script or HTML into /var/log/messages via a PHP script that invokes /usr/bin/logger; (4) allows local users to inject arbitrary web script or HTML into /var/log/messages by invoking /usr/bin/l
/bin/logger; (4) allows local users to inject arbitrary web script or HTML into /var/log/messages by invoking /usr/bin/logger at the command line; and allows remote attackers to inject arbitrary web script or HTML via remote requests logged in the (5) /var/log/exim/rejectlog, (6) /var/log/exim/mainlog, (7) /var/log/proftpd/auth.log, (8) /var/log/httpd/error_log, (9) /var/log/httpd/access_log, (10) /var/log/directadmin/error.log, and (11) /var/log/directadmin/security.log files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/464471/100/100/threaded - http://www.directadmin.com/features.php?id=760 - https://exchange.xforce.ibmcloud.com/v
hive/1/464471/100/100/threaded - http://www.directadmin.com/features.php?id=760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33390 - http://secunia.com/advisories/24728 - http://www.securityfocus.com/bid/23254 - http://securityreason.com/securityalert/2534 - http://www.directadmin.com/versions.php
CVE ID: CVE-2007-1927 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33501 - http://securityreason.com/securityalert/2529 - http://osvdb.org/34119 - http://secunia.com/advisories/24812 - http://www.securityfocus.com/bid/23360 - http://www.securityfocus.com/archive/1/464966/100/0/threaded
CVE ID: CVE-2007-1928 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in witshare 0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the menu parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24813 - http://www.securityfocus.com/archive/1/464969/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33496 - http://www.vupen.com/english/advisories/2007/1303 - http://securityreason.com/securityalert/2539 - http://www.securityfocus.com/bid
vupen.com/english/advisories/2007/1303 - http://securityreason.com/securityalert/2539 - http://www.securityfocus.com/bid/23358
CVE ID: CVE-2007-1929 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in downloadpic.php in Beryo 2.0, and possibly other versions including 2.4, allows remote attackers to read arbitrary files via a .. (dot dot) in the chemin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3676 - http://osvdb.org/34778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33479 - http://secunia.com/advisories/24811 - http://www.vupen.com/english/advisories/2007/1296 - http://www.securityfocus.com/bid/23387
CVE ID: CVE-2007-1930 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions including 3.0, allows remote attackers to read arbitrary files via a .. (dot dot) in the fn1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3677 - http://osvdb.org/34736 - http://secunia.com/advisories/24807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33474 - http://www.vupen.com/english/advisories/2007/1297 - http://www.securityfocus.com/bid/23390
CVE ID: CVE-2007-1931 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ssid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33477 - http://www.vupen.com/english/advisories/2007/1299 - http://osvdb.org/37395 - https://www.exploit-db.com/exploits/3679
CVE ID: CVE-2007-1932 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scarnews.inc.php in ScarNews 1.2.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sn_admin_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23375 - http://secunia.com/advisories/24796 - http://www.vupen.com/english/advisories/2007/1304 - https://www.exploit-db.com/exploits/3687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33492
CVE ID: CVE-2007-1933 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) index.php, (2) gb.php, or (3) faq.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33491 - http://osvdb.org/38461 - https://www.exploit-db.com/exploits/3689 - http://osvdb.org/38459
CVE ID: CVE-2007-1934 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[name] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33493 - http://www.vupen.com/english/advisories/2007/1301 - http://www.securityfocus.com/bid/23365 - http://osvdb.org/34806 - https://www.exploit-db.com/exploits/3683
CVE ID: CVE-2007-1935 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in admin/index.php in ScarAdControl (ScarAdController) 1.1 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the site parameter, which is accessed by the file_exists function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37403 - https://www.exploit-db.com/exploits/3682
CVE ID: CVE-2007-1936 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in scaradcontrol.php in ScarAdControl (ScarAdController) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sac_config_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37547 - https://www.exploit-db.com/exploits/3682
CVE ID: CVE-2007-1937 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24809 - https://www.exploit-db.com/exploits/3681 - http://osvdb.org/34754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33495 - http://www.securityfocus.com/archive/1/465079/100/0/threaded - http://www.vupen.com/english/advisories/2007/1300
CVE ID: CVE-2007-1938 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ichitaro 2005 through 2007, and possibly related products, allows remote attackers to have an unknown impact via unspecified vectors in a document distributed through e-mail or a web site, possibly due to a buffer overflow or cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33507 - http://osvdb.org/34759 - http://secunia.com/advisories/24780 - http://vil.mcafeesecurity.com/vil/con
erabilities/33507 - http://osvdb.org/34759 - http://secunia.com/advisories/24780 - http://vil.mcafeesecurity.com/vil/content/v_141950.htm - http://www.securitytracker.com/id?1017887 - http://www.justsystem.co.jp/info/pd7002.html - http://www.securityfocus.com/bid/23386
CVE ID: CVE-2007-1939 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the embedded webserver in Daniel Naber LanguageTool before 0.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message, possibly the demultiplex method in HTTPServer.java. Additional Analyst Notes: - CVE Program Container: References: - http://www.danielnaber.de/languagetool/download/CHANGES.txt - http://www.vupen.com/english/advisories/2007/1759
CVE ID: CVE-2007-1940 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34770 - http://www.securityfocus.com/bid/23298 - http://www.vupen.com/english/advisories/2007/1248 - http://secunia.com/advisories/24763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33426 - http://www.securitytracker.com/id?1017869 - http://ww
763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33426 - http://www.securitytracker.com/id?1017869 - http://www-1.ibm.com/support/docview.wss?uid=swg24015473
CVE ID: CVE-2007-1941 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different issue than CVE-2006-4843. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017870 - http://www.securityfocus.com/bid/23421 - http://www.intrinsec.com/Advisory_DWA_XSS_200704.txt - http://www-1.ibm.com/sup
http://www.securityfocus.com/bid/23421 - http://www.intrinsec.com/Advisory_DWA_XSS_200704.txt - http://www-1.ibm.com/support/docview.wss?rs=477&uid=swg21247201
CVE ID: CVE-2007-1942 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23312 - http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html - http://www.securityfocus.com/archive/1/464726/100/0/threaded - http://secunia.com/advisories/24784 - http://securityreason.com/securi
curityfocus.com/archive/1/464726/100/0/threaded - http://secunia.com/advisories/24784 - http://securityreason.com/securityalert/2558 - http://osvdb.org/34664
CVE ID: CVE-2007-1943 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1283 - http://www.securityfocus.com/bid/23317 - http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html - http://secunia.com/advisories/24779 - http://www.securityf
sec.blogspot.com/2007/04/several-windows-image-viewers.html - http://secunia.com/advisories/24779 - http://www.securityfocus.com/archive/1/464726/100/0/threaded - http://osvdb.org/34663 - http://securityreason.com/securityalert/2558 - http://www.acdsee.com/support/knowledgebase/article?id=2800
CVE ID: CVE-2007-1944 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Message Service (JMS) in IBM WebSphere Application Server (WAS) before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release [of] a bytebuffer input stream," possibly a double free vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24852 - http://www.vupen.com/english/advisories/2007/1282 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951#6107
CVE ID: CVE-2007-1945 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) before 6.1.0.7 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=PK36447&apar=only - http://osvdb.org/41605 - http://secunia.com/advisories/24852 - http://www.vupen.com/english/advisories/2007/1282 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951#6107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/334
www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951#6107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33471
CVE ID: CVE-2007-1946 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:42.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23321 - http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html - http://www.securityfocus.com/archive/1/464726/100/0/threaded - http://osvdb.org/41553 - ht
-windows-image-viewers.html - http://www.securityfocus.com/archive/1/464726/100/0/threaded - http://osvdb.org/41553 - http://securityreason.com/securityalert/2558
CVE ID: CVE-2007-1947 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.04 for Mozilla Firefox allows remote attackers to bypass zone restrictions, read arbitrary file:// URIs, or execute arbitrary code in the browser chrome by overwriting the toString function via a certain function declaration, related to incorrect identification of anonymous JavaScript functions, a different issue than CVE-2007-1878. Additional Analyst Notes: - CVE Program Container: References:
vaScript functions, a different issue than CVE-2007-1878. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/464875/100/0/threaded - http://larholm.com/2007/04/06/more-0day-in-firebug/#comment-6 - http://larholm.com/2007/04/06/more-0day-in-firebug/
CVE ID: CVE-2007-1948 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the (1) xoffset or (2) yoffset RLE command, or (3) large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp. Additional Analyst Notes: - CVE Program Container: References: - http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html - http://www.securityfocus.com/archive/1/464726/100/0/threaded - http://www.vupen.com/english/advisories/200
iewers.html - http://www.securityfocus.com/archive/1/464726/100/0/threaded - http://www.vupen.com/english/advisories/2007/1284 - http://securityreason.com/securityalert/2558 - http://osvdb.org/41554
CVE ID: CVE-2007-1949 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:42.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2557 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls42 - http://www.securityfocus.com/archive/1/464959/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33499
CVE ID: CVE-2007-1950 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index_cms.php in WebBlizzard CMS allows remote attackers to inject arbitrary web script or HTML via the Suchzeile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2557 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls42 - http://www.securityfocus.com/archive/1/464959/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33498
CVE ID: CVE-2007-1951 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions by setting a PHPSESSID cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.majorsecurity.de/index_2.php?major_rls=major_rls40 - http://www.securityfocus.com/archive/1/464886/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33500
CVE ID: CVE-2007-1952 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:42.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in onelook onebyone CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2546 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls39 - http://www.securityfocus.com/archive/1/464884/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33497
CVE ID: CVE-2007-1953 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:42.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PHPSESSID cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33502 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls41 - http://www.securityfocus.com/archive/1/464887/100/0/threaded
CVE ID: CVE-2007-1954 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:42.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .gz, (2) .jar, (3) .rar, (4) .tar.gz, (5) .zip, or (6) .tar file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33539 - http://www.vupen.com/english/advisories/2007/1311 - http://www.bugtraq.ir/articles/advisory/archivexpert_directory_traversal/8 - http://secunia.com/advisories/24827 - http:/
ttp://www.bugtraq.ir/articles/advisory/archivexpert_directory_traversal/8 - http://secunia.com/advisories/24827 - http://www.securityfocus.com/bid/23372
CVE ID: CVE-2007-1955 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the (1) DownloadCert, (2) DecryptFileByKey, and (3) EncryptFileByKey functions, a different module and vectors than CVE-2007-1722. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34322 - http:/
hird party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34322 - http://www.securityfocus.com/bid/23374 - http://secunia.com/advisories/24820
CVE ID: CVE-2007-1956 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the C parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33509 - http://securityreason.com/securityalert/2545 - http://www.securityfocus.com/archive/1/465076/100/0/threaded - http://www.securityfocus.com/bid/23369