Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1009 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T12:43:21.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap_xml configuration file without integrity protection to verify authorization for installing an application, which allows local users to perform unauthorized installations by removing the (1) password or (2) serial number verification sections from this file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2596 - http://www.vupen.com/english/advisories/2007/1433 - http://www.securityfocus.com/ar
urityreason.com/securityalert/2596 - http://www.vupen.com/english/advisories/2007/1433 - http://www.securityfocus.com/archive/1/466035/100/0/threaded - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-003.txt - http://www.securityfocus.com/bid/22643
CVE ID: CVE-2007-1010 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:21.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the zf_path parameter to (1) aggregator.php and (2) controller.php in newsfeeds/includes/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24162 - http://cazalet.org/zebrafeeds/forums/viewtopic.php?pid=358 - https://www.exploit-db.com/exploits/3314 - http://www.vupen.com/english/advisories/2007/0622 - http://www.s
hp?pid=358 - https://www.exploit-db.com/exploits/3314 - http://www.vupen.com/english/advisories/2007/0622 - http://www.securityfocus.com/bid/22576 - http://osvdb.org/33205 - http://osvdb.org/33206 - http://cazalet.org/category/zebrafeeds - https://exchange.xforce.ibmcloud.com/vulnerabilities/32507
CVE ID: CVE-2007-1011 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions_inc.php in VS-Gastebuch 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gb_pfad parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24182 - http://osvdb.org/33223 - http://www.securityfocus.com/bid/22605 - http://www.vupen.com/english/advisories/2007/0646 - https://www.exploit-db.com/exploits/3328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32555
CVE ID: CVE-2007-1012 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2267 - http://osvdb.org/33725 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32525 - http://www.securityfocus.com/archive/1/460200/100/0/threaded
CVE ID: CVE-2007-1013 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the ht_pfad parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0643 - http://www.securityfocus.com/bid/22598 - http://osvdb.org/33244 - https://www.exploit-db.com/exploits/3324 - http://secunia.com/advisories/24214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32559
CVE ID: CVE-2007-1014 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VicFTPS before 5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22608 - http://www.vupen.com/english/advisories/2007/0648 - http://osvdb.org/33227 - http://vicftps.50webs.com/ - https://www.exploit-db.com/exploits/3331 - http://secunia.com/advisories/24161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/325
it-db.com/exploits/3331 - http://secunia.com/advisories/24161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32557
CVE ID: CVE-2007-1015 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in HaberDetay.asp in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0620 - https://www.exploit-db.com/exploits/3318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32527
CVE ID: CVE-2007-1016 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via certain vectors related to the HaberDetay.asp and rss.asp components, and the id and kid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: the combination of the HaberDetay.asp component and the id parameter is already covered by another February 2007 CVE candidate. Additional Analyst Notes: - CVE Program Container: References
is already covered by another February 2007 CVE candidate. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0620
CVE ID: CVE-2007-1017 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24220 - https://www.exploit-db.com/exploits/3322 - http://www.securityfocus.com/bid/22592 - http://osvdb.org/33247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32544 - http://www.vupen.com/english/advisories/2007/0649
CVE ID: CVE-2007-1018 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in tpl/header.php in VirtualSystem VS-News-System 1.2.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24220 - http://osvdb.org/33248
CVE ID: CVE-2007-1019 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in webSPELL 4.01.02, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the showonly parameter to index.php, a different vector than CVE-2006-5388. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22541 - http://osvdb.org/33229 - https://www.exploit-db.com/exploits/3325 - http://www.vupen.com/english/advisories/2007/0650 - http://secunia.com/advisories/24191 - https://exchange.xforce.ibmcloud.co
//www.vupen.com/english/advisories/2007/0650 - http://secunia.com/advisories/24191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32554
CVE ID: CVE-2007-1020 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in CedStat 1.31 allows remote attackers to inject arbitrary web script or HTML via the hier parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22653 - http://osvdb.org/33734 - http://www.securityfocus.com/bid/22588 - http://forums.avenir-geopolitique.net/viewtopic.php?t=2672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32537 - http://www.vupen.com/english/advisories/2007/0680 - http://securityreason.com/sec
e.ibmcloud.com/vulnerabilities/32537 - http://www.vupen.com/english/advisories/2007/0680 - http://securityreason.com/securityalert/2265 - http://www.securityfocus.com/archive/1/460260/100/0/threaded
CVE ID: CVE-2007-1021 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary SQL commands via the CAT_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32528 - http://osvdb.org/35130 - https://www.exploit-db.com/exploits/3317 - http://www.securityfocus.com/bid/22582 - http://www.vupen.com/english/advisories/2007/0621
CVE ID: CVE-2007-1022 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in h_goster.asp in Turuncu Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24209 - http://www.securityfocus.com/bid/22591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32571 - http://osvdb.org/33245
CVE ID: CVE-2007-1023 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32543 - https://www.exploit-db.com/exploits/3321 - http://osvdb.org/35131
CVE ID: CVE-2007-1024 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32546 - http://www.securityfocus.com/archive/1/460323/100/0/threaded - http://attrition.org/pipermail/vim/2007-February/001361.html - http://osvdb.org/33736 - http://www.securityfoc
hreaded - http://attrition.org/pipermail/vim/2007-February/001361.html - http://osvdb.org/33736 - http://www.securityfocus.com/bid/22589
CVE ID: CVE-2007-1025 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/functions_inc.php in VS-Link-Partner 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gb_pfad, or possibly script_pfad, parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32547 - http://www.securityfocus.com/bid/22594 - http://www.vupen.com/english/advisories/2007/0651 - http://osvdb.org/35132 - https://www.exploit-db.com/exploits/3323
CVE ID: CVE-2007-1026 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in view mode. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32556 - http://www.securityfocus.com/archive/1/460592/100/0/threaded - http://www.vupen.com/english/advisories/2007/0644 - http://osvdb.org/33743 - https://www.exploit-db.com/expl
/threaded - http://www.vupen.com/english/advisories/2007/0644 - http://osvdb.org/33743 - https://www.exploit-db.com/exploits/3327 - http://www.securityfocus.com/bid/22602 - http://www.securityfocus.com/archive/1/460739/100/0/threaded - http://www.securityfocus.com/archive/1/460621/100/0/threaded
CVE ID: CVE-2007-1027 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24213 - http://www.securitytracker.com/id?1017665 - http://osvdb.org/34024 - http://www.vupen.com/english/advisories/2007/0652 - http://www.securityfocus.com/bid/22614 - http://www-1.ibm.com/support/docview.wss?uid=swg1IY94817 - http://www.securitytracker.
www.securityfocus.com/bid/22614 - http://www-1.ibm.com/support/docview.wss?uid=swg1IY94817 - http://www.securitytracker.com/id?1017695
CVE ID: CVE-2007-1028 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32539 - http://drupal.org/node/119293 - http://www.securityfocus.com/bid/22586 - http://www.vupen.com/english/advisories/2007/0636 - http://os
org/node/119293 - http://www.securityfocus.com/bid/22586 - http://www.vupen.com/english/advisories/2007/0636 - http://osvdb.org/35151
CVE ID: CVE-2007-1029 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows remote attackers to execute arbitrary code via a long host name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22583 - http://www.vupen.com/english/advisories/2007/0634 - http://www.osvdb.org/33208 - http://secunia.com/advisories/24199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32540 - http://security-assessment.com/files/advisories/easymail_advi
tps://exchange.xforce.ibmcloud.com/vulnerabilities/32540 - http://security-assessment.com/files/advisories/easymail_advisory.pdf - http://www.securityfocus.com/archive/1/460237/100/0/threaded - http://securityreason.com/securityalert/2277
CVE ID: CVE-2007-1030 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Niels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service (infinite loop) via a DNS response containing a label pointer that references its own offset. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24181 - http://monkey.org/~provos/libevent/ - http://www.vupen.com/english/advisories/2007/0647 - http://www.securityfocus.com/bid/22606 - http://osvdb.org/33228 - http://securityreason.com/securityalert/2268 - http://www.securityfocus.com/archive/1/46053
6 - http://osvdb.org/33228 - http://securityreason.com/securityalert/2268 - http://www.securityfocus.com/archive/1/460530/100/0/threaded
CVE ID: CVE-2007-1031 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35159 - https://www.exploit-db.com/exploits/3326 - http://www.securityfocus.com/bid/22600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32553
CVE ID: CVE-2007-1032 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when register_globals is enabled, allows remote attackers to "gain the privilege for uploading files on the server." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32573 - http://www.phpmyfaq.de/advisory_2007-02-18.php - http://osvdb.org/32603 - http://secunia.com/advisories/24230
CVE ID: CVE-2007-1033 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Secure site 4.7.x-1.x-dev and 5.x-1.x-dev module for Drupal allows remote attackers to bypass access restrictions via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/119619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32538 - http://www.vupen.com/english/advisories/2007/0637 - http://osvdb.org/35160
CVE ID: CVE-2007-1034 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3334 - http://www.vupen.com/english/advisories/2007/0661 - http://www.securityfocus.com/bid/22612 - http://osvdb.org/35981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23699
CVE ID: CVE-2007-1035 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32542 - http://www.vupen.com/english/advisories/2007/0635 - http://www.securityfocus.com/bid/22587 - http://drupal.org/node/119385 - h
/www.vupen.com/english/advisories/2007/0635 - http://www.securityfocus.com/bid/22587 - http://drupal.org/node/119385 - http://blamcast.net/articles/highly-critical-security-flaws-in-drupal-audio-module - http://osvdb.org/35161
CVE ID: CVE-2007-1036 State: PUBLISHED Published: 2007-02-21T11:00:00 Last Updated: 2024-08-07T12:43:22.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureJBoss - http://www.securitytracker.com/id?1017677 - http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureTheJmxConsole - https://exchange.xforce.ibmcloud.com/vulnerabilities/32596 - http://www.kb.cert.org/
Wiki.jsp?page=SecureTheJmxConsole - https://exchange.xforce.ibmcloud.com/vulnerabilities/32596 - http://www.kb.cert.org/vuls/id/632656 - http://www.securityfocus.com/archive/1/460597/100/0/threaded - http://osvdb.org/33744 - http://www.securityfocus.com/archive/1/460605/100/0/threaded - http://www.securityfocus.com/archive/1/460695/100/0/threaded
CVE ID: CVE-2007-1037 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in News File Grabber 4.1.0.1 and earlier allows remote attackers to execute arbitrary code via a .nzb file with a long subject field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32577 - http://secunia.com/advisories/24237 - http://www.securityfocus.com/bid/22617 - http://www.vupen.com/engl
ilities/32577 - http://secunia.com/advisories/24237 - http://www.securityfocus.com/bid/22617 - http://www.vupen.com/english/advisories/2007/0662
CVE ID: CVE-2007-1038 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shemes.com Grabit 1.5.3, and possibly earlier, allows remote attackers to cause a denial of service (application crash) via a .nzb file with a subject field containing ';' (semicolon) characters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0664 - http://www.securityfocus.com/bid/22619 - http://osvdb.org/38906 - https://exchange.xforce.ibmcloud.com/v
ies/2007/0664 - http://www.securityfocus.com/bid/22619 - http://osvdb.org/38906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32579
CVE ID: CVE-2007-1039 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Peanut Knowledge Base (PeanutKB) 0.0.3 and earlier has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=157653&release_id=483888 - http://www.securityfocus.com/bid/22628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32574 - http://osvdb.org/42001 - http://www.vupen.com/english/advisories/2007/0666
CVE ID: CVE-2007-1040 State: PUBLISHED Published: 2007-02-21T17:00:00 Last Updated: 2024-08-07T12:43:22.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote attackers to include arbitrary files or obtain sensitive information via a .. (dot dot) in the xnews-template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32560 - http://secunia.com/advisories/24177 - http://osvdb.org/33225 - https://www.exploit-db.com/exploits/3332 - http://www.securityfocus.com/bid/22609 - http://www.vupen.com/english/advisories/2