Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ries/30288 - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167 - http://osvdb.org/36085 - http://www.vupen.com/english/advisories/2007/2547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35437 - http://www.exploit-db.com/exploits/4181 - http://www.debian.org/security/2008/dsa-1572 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.php.net/ChangeLog-5.php#5.2.4 - http://secunia.com/advisories/30158 - http://secunia.com/advisories/26085 - http://www.debian.org/security/2008/dsa-1578 - http://secunia.com/advisories/27102 - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log - http://www.php.net/releases/5_2_4.php - http://www.
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log - http://www.php.net/releases/5_2_4.php - http://www.securityfocus.com/bid/24922 - http://www.securityfocus.com/bid/25498 - http://secunia.com/advisories/26642
CVE ID: CVE-2007-3807 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T14:28:52.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SiteScape Forum before 7.3 allow remote attackers to inject arbitrary web script or HTML via the user name field in the login procedure, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2893 - http://osvdb.org/36844 - http://www.securityfocus.com/archive/1/473624/100/0/threaded - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35
threaded - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35395 - http://www.securityfocus.com/bid/24893 - http://secunia.com/advisories/26065
CVE ID: CVE-2007-3808 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T14:28:52.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories[] parameter in a search action to index.php, a different vector than CVE-2005-2000. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0291.html - http://www.exploit-db.com/exploits/4186 - http://www.securityfocus.com/bid/24914 - http://secunia.com/advisories/26078 - http://osvdb.org/36247 - https://exchange.xf
p://www.securityfocus.com/bid/24914 - http://secunia.com/advisories/26078 - http://osvdb.org/36247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35412
CVE ID: CVE-2007-3809 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T14:28:52.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action to directory.php, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24915 - https://www.exploit-db.com/exploits/4185 - http://osvdb.org/36512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35425
CVE ID: CVE-2007-3810 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T14:28:52.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2541 - http://osvdb.org/36244 - https://www.exploit-db.com/exploits/4184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35420 - http://www.securityfocus.com/bid/24916 - http://secunia.com/advisories/26068
CVE ID: CVE-2007-3811 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T14:28:52.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to news.php or (2) the name parameter to page.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35427 - http://www.securityfocus.com/bid/24908 - http://osvdb.org/36267 - http://www.vupen.com/english/advisories/2007/2543 - http://osvdb.org/36266 - https://www.exploit-db.com/exploits/4183
CVE ID: CVE-2007-3812 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T14:28:52.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24906 - http://osvdb.org/36242 - http://secunia.com/advisories/26026 - http://packetstorm.linuxsecurity.com/0707-exploits/cmscout.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35393 - http://www.exploit-db.com/exploits/4182
CVE ID: CVE-2007-3813 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T14:28:52.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbitrary PHP code via a URL in the MK_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35426 - http://osvdb.org/36265
CVE ID: CVE-2007-3814 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T14:28:52.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the idurlo field in the delete_urlo function in (a) index.php in the urlobox module; the iden field in the (2) update_file and (3) del_file functions in (b) index.php in the reviews module; the (4) idnews field in the delete_news function and the (5) idcomm field in the del_comment function in (c) index.php in the news module; the (6) idcomm field in the delete_comments function in (d) index.php in the gall
n in (c) index.php in the news module; the (6) idcomm field in the delete_comments function in (d) index.php in the gallery module; the iden field in the (7) edit_file, (8) update_file, and (9) del_file functions in index.php in the gallery module; the (10) ide and (11) cat fields in the slide_update function in index.php in the gallery module; the iden field in the (12) update_file and (13) del_file functions in (d) index.php in the downloads module; and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41722 - http://osvdb.org/41721 - http://osvdb.org/41723 - http://www.securityfocus.com/bid/24886 - http://www.securityfocus.com/arc
p://osvdb.org/41721 - http://osvdb.org/41723 - http://www.securityfocus.com/bid/24886 - http://www.securityfocus.com/archive/1/473495/100/0/threaded - http://www.securityfocus.com/bid/24891 - https://www.exploit-db.com/exploits/4179 - http://securityreason.com/securityalert/2894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35391 - http://osvdb.org/41719 - http://osvdb.org/41720
CVE ID: CVE-2007-3815 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2024-08-07T14:28:52.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pirs32.exe in Poslovni informator Republike Slovenije (PIRS) 2007 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long search string in certain fields in the GUI. NOTE: this may cross privilege boundaries if PIRS is used by data-entry workers who do not have full access to the underlying Windows environment. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2898 - http://osvdb.org/38697 - http
tes: - CVE Program Container: References: - http://securityreason.com/securityalert/2898 - http://osvdb.org/38697 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064627.html - http://www.pirs.si/slo/index.php?dep_id=29&help_id=60 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35388
CVE ID: CVE-2007-3816 State: PUBLISHED Published: 2007-07-17T00:00:00 Last Updated: 2025-01-17T14:44:45.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: JWIG might allow context-dependent attackers to cause a denial of service (service degradation) via loops of references to external templates. NOTE: this issue has been disputed by multiple third parties who state that only the application developer can trigger the issue, so no privilege boundaries are crossed. However, it seems possible that this is a vulnerability class to which an JWIG application may be vulnerable if template contents can be influenced, but this would be an issue in the application itself, not JWIG Additio
ulnerable if template contents can be influenced, but this would be an issue in the application itself, not JWIG Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2007/Jul/0446.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35515 - http://www.securityfocus.com/archive/1/473707/100/0/threaded - http://www.secniche.org/papers/HackAnnotationsInJWIG.pdf - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064768.html - http://www.securitytracker.com/id?1018432 - http://www.securityfocus.com/archive/1/474474/100/200/threaded - http://www.securityfocus.com/bid/24974 - http://seclists.org/bugtraq/2007/
focus.com/archive/1/474474/100/200/threaded - http://www.securityfocus.com/bid/24974 - http://seclists.org/bugtraq/2007/Jul/0206.html - http://seclists.org/fulldisclosure/2007/Jul/0451.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064933.html
CVE ID: CVE-2007-3817 State: PUBLISHED Published: 2007-07-17T01:00:00 Last Updated: 2024-08-07T14:28:52.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the LoginToboggan module 4.7.x-1.0, 4.7.x-1.x-dev, and 5.x-1.x-dev before 20070712 for Drupal, when configured to display a "Log out" link, allows remote attackers to inject arbitrary web script or HTML via a crafted username. NOTE: Drupal sanitizes the username by removing certain characters, so this might not be a vulnerability on default installations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24901 - http://drupal.org/node/1
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24901 - http://drupal.org/node/158921 - http://secunia.com/advisories/26028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35387 - http://www.vupen.com/english/advisories/2007/2526 - http://osvdb.org/36343
CVE ID: CVE-2007-3818 State: PUBLISHED Published: 2007-07-17T01:00:00 Last Updated: 2024-08-07T14:28:52.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the LoginToboggan module 5.x-1.x-dev before 20070712 for Drupal allows remote authenticated users with "administer blocks" permission to inject arbitrary JavaScript and gain privileges via "the message displayed above the default user login block." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/158921 - http://osvdb.org/37010
CVE ID: CVE-2007-3819 State: PUBLISHED Published: 2007-07-17T01:00:00 Last Updated: 2024-08-07T14:28:52.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed. Additional Analyst Notes: - CVE Program Container: References: - http://alt.swiecki.net/oper1.html - http://www.vupen.com/english/advisories/2007/2537 - http://www.securityfocus.com/archive/1/473782/100/0/threaded - http://secunia.com/advisories/26074 - http://osvdb.org/38122 - http://www.securitytracker.com/id?1018397 - http://security.gentoo
cunia.com/advisories/26074 - http://osvdb.org/38122 - http://www.securitytracker.com/id?1018397 - http://security.gentoo.org/glsa/glsa-200708-17.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/35430 - http://www.securityfocus.com/archive/1/473703/100/0/threaded - http://secunia.com/advisories/26545 - http://www.securityfocus.com/bid/24917 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://securityreason.com/securityalert/2891
CVE ID: CVE-2007-3820 State: PUBLISHED Published: 2007-07-17T01:00:00 Last Updated: 2024-08-07T14:28:52.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed. Additional Analyst Notes: - CVE Program Container: References: - http://alt.swiecki.net/oper1.html - http://www.redhat.com/support/errata/RHSA-2007-0909.html - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00085.html - https://www.redhat.com/archives/fedora-package-announce/2007-October
edora-package-announce/2007-October/msg00085.html - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00022.html - http://www.securityfocus.com/bid/24918 - http://www.redhat.com/support/errata/RHSA-2007-0905.html - http://www.ubuntu.com/usn/usn-502-1 - http://secunia.com/advisories/26091 - http://secunia.com/advisories/27106 - http://secunia.com/advisories/27108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35430 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10345 - http://secunia.com/advisories/27090 - http://www.vupen.com/english/advisories/2007/2538 - http://secunia.com/advisories/27089 - http://secunia.com/advisori
- http://www.vupen.com/english/advisories/2007/2538 - http://secunia.com/advisories/27089 - http://secunia.com/advisories/26612 - http://secunia.com/advisories/27096 - http://www.securityfocus.com/archive/1/473703/100/0/threaded - http://www.securityfocus.com/archive/1/473712/100/0/threaded - http://secunia.com/advisories/26720 - http://www.securityfocus.com/bid/24912 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:176 - http://www.kde.org/info/security/advisory-20070816-1.txt - http://www.securitytracker.com/id?1018396 - http://securityreason.com/securityalert/2905 - http://osvdb.org/37242
CVE ID: CVE-2007-3821 State: PUBLISHED Published: 2007-07-17T01:00:00 Last Updated: 2024-08-07T14:28:52.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38181 - http://www.securityfocus.com/bid/24913 - http://securityreason.com/securityalert/2890 - http://www.securityfocus.com/archive/1/473714/100/0/threaded - http://secunia.com/advisories/26090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35432
CVE ID: CVE-2007-3822 State: PUBLISHED Published: 2007-07-17T01:00:00 Last Updated: 2024-08-07T14:28:52.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via (1) the who parameter to showuser; and other vectors involving (2) calendar mode, (3) bulletin board mode, (4) room names, and (5) uploaded file names. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38179 - http://osvdb.org/38177 - http://osvdb.org/38180 - http://www.securityfocus.com/bid/24913 - http://securityreason.com/securityalert/2890 - http://osvdb
//osvdb.org/38180 - http://www.securityfocus.com/bid/24913 - http://securityreason.com/securityalert/2890 - http://osvdb.org/38178 - http://www.securityfocus.com/archive/1/473714/100/0/threaded - http://secunia.com/advisories/26090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35433 - http://osvdb.org/38176
CVE ID: CVE-2007-3823 State: PUBLISHED Published: 2007-07-17T01:00:00 Last Updated: 2024-08-07T14:28:52.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 allows remote attackers to cause a denial of service (daemon crash) by sending a crafted packet containing a long string to port 5151/udp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26040 - http://packetstormsecurity.org/0707-advisories/wsftp75290-dos.txt - http://www.osvdb.org/36218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35396 - http://www.vdalabs.com/tools/ipswitch.html
CVE ID: CVE-2007-3824 State: PUBLISHED Published: 2007-07-17T01:00:00 Last Updated: 2024-08-07T14:28:52.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in katgoster.asp in MzK Blog (tr) allows remote attackers to execute arbitrary SQL commands via the katID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36257 - http://www.securityfocus.com/bid/24909 - http://www.packetstormsecurity.org/0707-exploits/mzkblog-sql.txt - http://secunia.com/advisories/26070 - http://www.vupen.com/english/advisories/2007/2542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35424
CVE ID: CVE-2007-3825 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T14:28:52.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26088 - http://www.securitytracker.com
alyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26088 - http://www.securitytracker.com/id?1018405 - http://www.securitytracker.com/id?1018402 - http://www.securitytracker.com/id?1018404 - http://www.securityfocus.com/bid/24947 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=561 - http://www.securitytracker.com/id?1018406 - http://www.securitytracker.com/id?1018403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35467 - http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-secnotice.asp - http://www.vupen.com/english/advisories/2007/2559
CVE ID: CVE-2007-3826 State: PUBLISHED Published: 2007-07-17T21:00:00 Last Updated: 2024-08-07T14:28:52.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 on Windows XP SP2 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via repeated document.open function calls after a user requests a new page, but before the onBeforeUnload function is called. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473702/100/0/threaded - http://www.vupen.com/english/advisories/2007/2540 - http://osvdb.org/38212 - http://secunia.com/advisories
/0/threaded - http://www.vupen.com/english/advisories/2007/2540 - http://osvdb.org/38212 - http://secunia.com/advisories/26069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2324 - http://www.securityfocus.com/bid/24911 - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.securityfocus.com/archive/1/482366/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35421 - http://lcamtuf.coredump.cx/ietrap3/ - http://securitytracker.com/id?1018788 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057 - http://www.us-cert.gov/cas/techalerts/TA07-282A.html - http://securityreason.com/securi
ecuritybulletins/2007/ms07-057 - http://www.us-cert.gov/cas/techalerts/TA07-282A.html - http://securityreason.com/securityalert/2892
CVE ID: CVE-2007-3827 State: PUBLISHED Published: 2007-07-17T21:00:00 Last Updated: 2024-08-07T14:28:52.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473702/100/0/threaded - http://securityreason.com/securityalert/2892
CVE ID: CVE-2007-3828 State: PUBLISHED Published: 2007-07-17T21:00:00 Last Updated: 2024-08-07T14:28:52.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mDNSResponder in Apple Mac OS X allows remote attackers to execute arbitrary code via unspecified vectors, a related issue to CVE-2007-2386. Additional Analyst Notes: - CVE Program Container: References: - http://infosecsellout.blogspot.com/2007/07/oh-look-apple-worm.html - http://www.securitytracker.com/id?1018399 - http://www.securityfocus.com/bid/24924
CVE ID: CVE-2007-3829 State: PUBLISHED Published: 2007-07-17T21:00:00 Last Updated: 2024-08-07T14:28:52.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via a (1) long FailURL attribute in the IAMCE ActiveX Control (IAMCE.dll) or a (2) long URLCode attribute in the IAKey ActiveX Control (IAKey.dll). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25739 - http://osvd
tion. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25739 - http://osvdb.org/37718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35422 - http://www.kb.cert.org/vuls/id/470913 - http://secunia.com/advisories/25718 - http://osvdb.org/37717 - http://www.securityfocus.com/bid/24919 - http://www.kb.cert.org/vuls/id/916897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35423
CVE ID: CVE-2007-3830 State: PUBLISHED Published: 2007-07-17T21:00:00 Last Updated: 2024-08-07T14:28:52.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25979 - http://www.vupen.com/english/advisories/2007/2545 - http://osvdb.org/36475 - http://www.sybsecurity.com/hack-proventia-1.pdf