Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0113 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service (reset or reboot) via (1) a long traffic class argument to the "class show" command or (2) a long POLICY parameter value in clastree.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21933 - http://www.securityfocus.com/archive/1/456267/100/0/threaded - http://secunia.com/advisories/23685 - http://securityreason.com/securityalert/2110 - https://exchange.xfo
0/0/threaded - http://secunia.com/advisories/23685 - http://securityreason.com/securityalert/2110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31357 - http://osvdb.org/31656 - http://www.vupen.com/english/advisories/2007/0098
CVE ID: CVE-2007-0114 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T12:03:37.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regarding "content details" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23630 - http://www.securityfocus.com/bid/21908 - http://osvdb.org/32645 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102764-1 - http://www.vupen.com/english/advisories/2007/0076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31345
CVE ID: CVE-2007-0115 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the Username to login.php, which is injected into an error message in security.log.php, which can then be accessed using viewlog.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-January/001218.html - http://osvdb.org/33383 - http://acid-root.new.fr/poc/19070104.txt - http://securityreason.com/securityalert
01218.html - http://osvdb.org/33383 - http://acid-root.new.fr/poc/19070104.txt - http://securityreason.com/securityalert/2107 - http://www.securityfocus.com/archive/1/456051/100/0/threaded
CVE ID: CVE-2007-0116 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digger Solutions Intranet Open Source (IOS) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for data/intranet.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://aria-security.com/forum/showthread.php?goto=newpost&t=88 - http://osvdb.org/33379 - http://securityreason.com/securityalert/2109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31308 - http://www.securityfocus
ityreason.com/securityalert/2109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31308 - http://www.securityfocus.com/archive/1/456047/100/0/threaded
CVE ID: CVE-2007-0117 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file permission changes upon execution of a diskutil permission repair operation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23653 - http://projects.info-pull.com/moab/MOAB-05-01-2007.html - http://www.securityfocus.com/bid/21899 - http:/
sories/23653 - http://projects.info-pull.com/moab/MOAB-05-01-2007.html - http://www.securityfocus.com/bid/21899 - http://www.vupen.com/english/advisories/2007/0074 - http://osvdb.org/31167
CVE ID: CVE-2007-0118 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456055/100/0/threaded - http://osvdb.org/33395 - http://osvdb.org/33394 - http://secunia.com/advisories/7950 - http://www.securityfocus.com/bid/21890 - http://osvdb.org/33396 - http://osvdb.or
- http://secunia.com/advisories/7950 - http://www.securityfocus.com/bid/21890 - http://osvdb.org/33396 - http://osvdb.org/33393
CVE ID: CVE-2007-0119 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web script or HTML via the plain parameter to (1) mkpw_mp.cgi, (2) mkpw.pl, or (3) mkpw.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456055/100/0/threaded - http://osvdb.org/33390 - http://osvdb.org/33392 - http://secunia.com/advisories/7950 - http://www.securityfocus.com/bid/21891 - http://osvdb.org/33391
CVE ID: CVE-2007-0120 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service (application crash) via multiple HTTP requests containing invalid Content-Length values. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31279 - http://osvdb.org/37580 - http://www.securityfocus.com/bid/21898
CVE ID: CVE-2007-0121 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23657 - http://www.vupen.com/english/advisories/2007/0083 - http://www.securityfocus.com/bid/21880 - http://securityreason.com/securityalert/2108 - http://www.securityfocus.com/archive/1/456052/100/0/threaded - http://osvdb.org/31637 - https://exchange.xforce.ibmcloud.com/vulnerabil
rityfocus.com/archive/1/456052/100/0/threaded - http://osvdb.org/31637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31317
CVE ID: CVE-2007-0122 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via (1) the cat parameter to albmgr.php, and possibly (2) the gid parameter to usermgr.php; (3) the start parameter to db_ecard.php; and the albumid parameter to unspecified files, related to the (4) filename_to_title and (5) del_titles functions. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35853 - http://securityreason.com/securi
ditional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35853 - http://securityreason.com/securityalert/2123 - http://secunia.com/advisories/25846 - http://acid-root.new.fr/poc/19070104.txt - https://www.exploit-db.com/exploits/3085 - http://osvdb.org/35854 - http://osvdb.org/35852 - http://www.securityfocus.com/archive/1/456051/100/0/threaded - http://www.securityfocus.com/bid/21894 - http://osvdb.org/35856 - http://osvdb.org/35855
CVE ID: CVE-2007-0123 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and execute arbitrary PHP scripts by naming them with a .phtml extension, which bypasses the .php extension check but is still executable on some server configurations. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31303 - http://www.securityfocus.com/archive/1/456045/100/0/threaded
CVE ID: CVE-2007-0124 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2115 - http://secunia.com/advisories/23586 - http://osvdb.org/32131 - http://www.vupen.com/english/advisories/2007/0051 - http://www.securityfocus.com/arch
s/23586 - http://osvdb.org/32131 - http://www.vupen.com/english/advisories/2007/0051 - http://www.securityfocus.com/archive/1/456056/100/0/threaded - http://drupal.org/node/104238 - http://www.securityfocus.com/bid/21895
CVE ID: CVE-2007-0125 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable (PE) file, which allows remote attackers to cause a denial of service (CPU consumption) by scanning a crafted PE file. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
bs.idefense.com/intelligence/vulnerabilities/display.php?id=459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31315 - http://secunia.com/advisories/23575 - http://www.vupen.com/english/advisories/2007/0067 - http://osvdb.org/32588 - http://www.securityfocus.com/bid/21901 - http://securitytracker.com/id?1017476
CVE ID: CVE-2007-0126 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31574 - http://securitytracker.com/id?1017473 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31305 - http://secunia.com/advisories/23613 - http://www.vupen.com/english/advisories/2007/0060 - http://secunia.com/advisories/23739 - http://labs.idefense.com/i
3 - http://www.vupen.com/english/advisories/2007/0060 - http://secunia.com/advisories/23739 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457 - http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml - http://secunia.com/advisories/23771 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html - http://www.opera.com/support/search/supsearch.dml?index=852
CVE ID: CVE-2007-0127 State: PUBLISHED Published: 2007-01-09T02:00:00 Last Updated: 2024-08-07T12:03:37.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31575 - http://www.opera.com/support/search/supsearch.dml?index=851 - http://securitytracker.com/id?1017473 - http:
.org/31575 - http://www.opera.com/support/search/supsearch.dml?index=851 - http://securitytracker.com/id?1017473 - http://secunia.com/advisories/23613 - http://www.vupen.com/english/advisories/2007/0060 - http://secunia.com/advisories/23739 - http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml - http://secunia.com/advisories/23771 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=458
CVE ID: CVE-2007-0128 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the book_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0053 - http://secunia.com/advisories/23606 - http://osvdb.org/31677 - https://www.exploit-db.com/exploits/3081
CVE ID: CVE-2007-0129 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31242 - http://osvdb.org/35813 - http://www.vupen.com/english/advisories/2007/0052 - https://www.exploit-db.com/exploits/3073
CVE ID: CVE-2007-0130 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21873 - http://secunia.com/advisories/23602 - http://www.vupen.com/english/advisories/2007/0055 - https://www.exploit-db.com/exploits/3082 - http://www.securityfocus.com/archive/1/456044/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31300 - http://osvdb.org/3167
com/archive/1/456044/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31300 - http://osvdb.org/31678
CVE ID: CVE-2007-0131 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32581 - http://sourceforge.net/project/shownotes.php?group_id=171441&release_id=475663 - http://secunia.com/advisories/23634 - http://www.securityfocus.com/bid/21879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31296
CVE ID: CVE-2007-0132 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3083 - http://osvdb.org/33385 - http://secunia.com/advisories/23604 - http://www.securityfocus.com/archive/1/456043/100/0/threaded - http://www.vupen.com/english/advisories/2007/0056 - http://packetstormsecurity.nl/0701-exploits/igshop10-multiple.txt - http://www.securityfocu
glish/advisories/2007/0056 - http://packetstormsecurity.nl/0701-exploits/igshop10-multiple.txt - http://www.securityfocus.com/bid/21874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31299
CVE ID: CVE-2007-0133 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) user_login_cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33386 - http://www.vupen.com/english/advisories/2007/0056
CVE ID: CVE-2007-0134 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in (1) cart.php and (2) page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1.4. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21875 - https://www.exploit-db.com/exploits/3083 - http://osvdb.org/33388 - http://osvdb.org/33387 - http://www.securityfocus.com
ttps://www.exploit-db.com/exploits/3083 - http://osvdb.org/33388 - http://osvdb.org/33387 - http://www.securityfocus.com/archive/1/471722/100/0/threaded - http://secunia.com/advisories/23604 - http://www.securityfocus.com/archive/1/456043/100/0/threaded - http://www.vupen.com/english/advisories/2007/0056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31301 - http://www.attrition.org/pipermail/vim/2007-June/001664.html - http://packetstormsecurity.nl/0701-exploits/igshop10-multiple.txt
CVE ID: CVE-2007-0135 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the current_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-January/001219.html - http://osvdb.org/33405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31282 - http://securityreason.com/exploitalert/1698 - http://www.vupen.com/english/advisories/200
ud.com/vulnerabilities/31282 - http://securityreason.com/exploitalert/1698 - http://www.vupen.com/english/advisories/2007/0054 - https://www.exploit-db.com/exploits/3079
CVE ID: CVE-2007-0136 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in the (1) filter and (2) system modules. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31311 - http://osvdb.org/32140 - http://www.securityfocus.com/archive/1/456054/100/100/threaded - http://osvdb.or
lities/31311 - http://osvdb.org/32140 - http://www.securityfocus.com/archive/1/456054/100/100/threaded - http://osvdb.org/32139 - http://www.vupen.com/english/advisories/2007/0050 - http://drupal.org/files/sa-2007-001/advisory.txt - http://marc.info/?l=full-disclosure&m=116799778408115&w=2 - http://drupal.org/node/104233
CVE ID: CVE-2007-0137 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earlier in the 2.08 series; and (2) sb 1.13D and earlier, and 1.18R and earlier in the 1.18 series; allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://serenebach.net/log/sb209R.html - http://www.vupen.com/english/advisories/2007/0065 - http://serenebach.net/log/sb119R.html - http://jvn.jp/jp/JVN%2365500885/
://www.vupen.com/english/advisories/2007/0065 - http://serenebach.net/log/sb119R.html - http://jvn.jp/jp/JVN%2365500885/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31302 - http://osvdb.org/32580 - http://secunia.com/advisories/23623 - http://www.securityfocus.com/bid/21884 - http://securitytracker.com/id?1017470
CVE ID: CVE-2007-0138 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows remote attackers to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31216 - http://se
Container: References: - http://osvdb.org/32546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31216 - http://secunia.com/advisories/23539
CVE ID: CVE-2007-0139 State: PUBLISHED Published: 2007-01-09T11:00:00 Last Updated: 2024-08-07T12:03:37.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for OpenVMS VAX, allows attackers to obtain "unintended privileged access to data and system resources" via unspecified vectors, related to (1) [SYSEXE]CTF$UI.EXE, (2) [SYSMSG]CTF$MESSAGES.EXE, (3) [SYSHLP]CTF$HELP.HLB, and (4) [SYSMGR]CTF$STARTUP.COM. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32583 - http://osvdb.org/32586 - http://osvdb.org
Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32583 - http://osvdb.org/32586 - http://osvdb.org/32584 - http://osvdb.org/32585 - ftp://ftp.itrc.hp.com/openvms_patches/vax/V7.3/VAX_DNVOSIMUP01-V0703.txt - http://www.vupen.com/english/advisories/2007/0063 - ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIMUP01-V0703-2.txt - http://secunia.com/advisories/23636
CVE ID: CVE-2007-0140 State: PUBLISHED Published: 2007-01-09T18:00:00 Last Updated: 2024-08-07T12:03:37.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456068/100/0/threaded - http://secunia.com/advisories/23645 - http://www.securityfocus.com/bid/21889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31320 - http://osvdb.org/31625 - http://securityreason.com/securityalert/2122 - http://www.vupen.com/english/advisor
ies/31320 - http://osvdb.org/31625 - http://securityreason.com/securityalert/2122 - http://www.vupen.com/english/advisories/2007/0079