Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4163 State: PUBLISHED Published: 2007-08-03T21:00:00 Last Updated: 2024-08-07T14:46:39.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id, (2) start_id, (3) row[parent_id], and (4) row[cat_id] parameters to unspecified components, related to use of these parameters within include/utils.php. NOTE: the show_cat.php cat_id vector is already covered by CVE-2007-4069. Additional Analyst Notes: - CVE Program Container: References: - http://www.indexscript.com/forum/showthread.php?t=2266 - http://osvdb.org/46989
CVE ID: CVE-2007-4164 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the url-prefix parameter and escape is disabled, or an Error directive uses the url-prefix parameter in obj.conf, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2766 - http://secunia.com/advisories/
CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2766 - http://secunia.com/advisories/26326 - http://www.securityfocus.com/bid/25190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35783 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103003-1 - http://www.securitytracker.com/id?1018504
CVE ID: CVE-2007-4165 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26345 - http://www.securityfocus.com/bid/25215 - http://www.osvdb.org/36603 -
ferences: - http://secunia.com/advisories/26345 - http://www.securityfocus.com/bid/25215 - http://www.osvdb.org/36603 - http://xuyiyang.com/2007/06/22/blue-memories-and-spring-updated/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/35817
CVE ID: CVE-2007-4166 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special Edition (SE) 1.02, before 20070804 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757, CVE-2007-4014, and CVE-2007-4165. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35821 - http://www.securityfocus.com/bi
am Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35821 - http://www.securityfocus.com/bid/25215 - http://secunia.com/advisories/26321 - http://xuyiyang.com/2007/06/29/unnamed-1-217/ - http://osvdb.org/36604
CVE ID: CVE-2007-4167 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cat_viewed.php in AL-Caricatier 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the CatName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475641/100/0/threaded - http://osvdb.org/39254 - http://securityreason.com/securityalert/2962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35810
CVE ID: CVE-2007-4168 State: REJECTED Published: 2007-06-20T23:00:00 Last Updated: 2007-06-23T09:00:00 Description: No description available.
CVE ID: CVE-2007-4169 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in vgallite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dirpath parameter to _functions.php or the (2) lang parameter to index.php. NOTE: CVE disputes vector 1 because the applicable include_once is located in a function that is not called on a direct request, and because $dirpath is an argument to this function. CVE disputes vector 2 because "lang" is a constant string within an include_once, not a variable. The researcher is also unreliable Addi
tor 2 because "lang" is a constant string within an include_once, not a variable. The researcher is also unreliable Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35819 - http://osvdb.org/46803 - http://www.securityfocus.com/archive/1/475643/100/0/threaded
CVE ID: CVE-2007-4170 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in AL-Athkar 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) include parameter to (a) Main.php and (b) get.php and the (2) exec parameter to (c) count.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35818 - http://www.securityfocus.com/archive/1/475646/100/0/threaded - http://securityreason.com/securityalert/2964
CVE ID: CVE-2007-4171 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26332 - http://www.securityfocus.com/archive/1/475645/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35814 - http://www.securityfocus.com/bid/25
475645/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35814 - http://www.securityfocus.com/bid/25202 - http://osvdb.org/36432 - https://www.exploit-db.com/exploits/4254
CVE ID: CVE-2007-4172 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Webmail (OWM) 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchtype, (2) longpage, and (3) page parameters to (a) openwebmail-main.pl; the (4) prefs_caller, (5) userfirsttime, (6) page, (7) sort, (8) folder, and (9) message_id parameters to (b) openwebmail-prefs.pl; the (10) compose_caller, (11) msgdatetype, (12) keyword, (13) searchtype, (14) folder, (15) page, and (16) sort parameters to (c) openwebmail-send.p
) msgdatetype, (12) keyword, (13) searchtype, (14) folder, (15) page, and (16) sort parameters to (c) openwebmail-send.pl; the (17) folder, (18) page, and (19) sort parameters to (d) openwebmail-folder.pl; the (20) searchtype, (21) page, (22) filesort, (23) singlepage, (24) showhidden, (25) showthumbnail, and (26) message_id parameters to (e) openwebmail-webdisk.pl; the (27) folder parameter to (f) openwebmail-advsearch.pl; and the (28) abookcollapse, (29) abooksearchtype, (30) abooksort, (31) abooklongpage, (32) abookpage, (33) message_id, (34) searchtype, (35) msgdatetype, (36) sort, (37) page, (38) rootxowmuid, and (39) listviewmode parameters to (g) openwebmail-abook.pl, different vector
, (36) sort, (37) page, (38) rootxowmuid, and (39) listviewmode parameters to (g) openwebmail-abook.pl, different vectors than CVE-2005-2863, CVE-2006-2190, CVE-2006-3229, and CVE-2006-3233. Additional Analyst Notes: - CVE Program Container: References: - http://pridels-team.blogspot.com/2007/08/openwebmail-multiple-xss-vuln.html - http://www.securityfocus.com/bid/25175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35754 - http://securityreason.com/securityalert/2965
CVE ID: CVE-2007-4173 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in duyuruoku.asp in Hunkaray Okul Portali 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-3080. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35778 - http://www.securityfocus.com/bid/25185 - http://securityreason.com/securityalert/2966 - http://www.securityfocus.com/archive/1/475354/100/0/threaded - http://yollubunlar.org/hunkaray-okul-portali-v1.1-tr-sql-injec
//www.securityfocus.com/archive/1/475354/100/0/threaded - http://yollubunlar.org/hunkaray-okul-portali-v1.1-tr-sql-injection-vuln-44.html - http://secunia.com/advisories/26323 - http://osvdb.org/36272
CVE ID: CVE-2007-4174 State: PUBLISHED Published: 2007-08-07T10:00:00 Last Updated: 2024-08-07T14:46:39.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25188 - https://exchange.xforce.ibmc
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36407 - http://www.securitytracker.com/id?1018510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35784 - http://www.vupen.com/english/advisories/2007/2768 - http://osvdb.org/36271 - http://secunia.com/advisories/26301 - http://archives.seul.org/or/announce/Sep-2007/msg00000.html - http://archives.seul.org/or/announce/Aug-2007/msg00000.html
CVE ID: CVE-2007-4175 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenRat CMS 0.8-beta1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subaction and (2) action parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25169 - http://pridels-team.blogspot.com/2007/08/openrat-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35748
CVE ID: CVE-2007-4176 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35763 - http://secunia.com/advisories/26267 - http://sourceforge.net/project/shownotes.php?release_id=528450&group_id=167016 - http://www.securityfocus.com/bid/25172
CVE ID: CVE-2007-4177 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2007-3328. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35765 - http://cce-interact.cvs.sourceforge.net/cce-interact/Interact/includes/common.inc.php?r1=1.259&r2=1.260 - http://sourceforge.net/project/shownotes.php?release_id=528858&group_id=6
ct/includes/common.inc.php?r1=1.259&r2=1.260 - http://sourceforge.net/project/shownotes.php?release_id=528858&group_id=69681 - http://www.securityfocus.com/bid/25173 - http://secunia.com/advisories/26304
CVE ID: CVE-2007-4178 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the deslocal parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26315 - http://pridels-team.blogspot.com/2007/08/webdirector-xss-vuln.html - http://osvdb.org/36439 - http://www.securityfocus.com/bid/25166 - http://www.vupen.com/english/advisories/2007/2765
CVE ID: CVE-2007-4179 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors. NOTE: this is probably different from CVE-2007-0916, but this is not certain due to lack of vendor details. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26279 - http://www.vupen.com/english/advisories/2007/2758 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.j
/26279 - http://www.vupen.com/english/advisories/2007/2758 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01090656 - http://www.securitytracker.com/id?1018501 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5948 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01090656 - http://www.securityfocus.com/bid/25165
CVE ID: CVE-2007-4180 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to read arbitrary local files via a .. (dot dot) in the file parameter. NOTE: CVE and a reliable third party dispute this vulnerability because the code uses a fixed argument when invoking fputs, which cannot be used to read files Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35757 - http://securityreason.com/securityalert/2973 -
ferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35757 - http://securityreason.com/securityalert/2973 - http://www.attrition.org/pipermail/vim/2007-August/001752.html - http://www.securityfocus.com/archive/1/475323/100/0/threaded - http://outlaw.aria-security.info/?p=12
CVE ID: CVE-2007-4181 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: A reliable third party disputes this vulnerability because the applicable include is within a function that does not receive the dir parameter from an HTTP request Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35756 - http://securityreason.com/securityalert/
ner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35756 - http://securityreason.com/securityalert/2973 - http://www.attrition.org/pipermail/vim/2007-August/001752.html - http://www.securityfocus.com/archive/1/475323/100/0/threaded - http://outlaw.aria-security.info/?p=12
CVE ID: CVE-2007-4182 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in index.php in WikiWebWeaver 1.1 and earlier allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .gif.php, which is accessible from data/documents/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475242/100/0/threaded - http://www.securityfocus.com/bid/25164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35736 - http://securityreason.com
www.securityfocus.com/bid/25164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35736 - http://securityreason.com/securityalert/2972
CVE ID: CVE-2007-4183 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35758 - http://www.securityfocus.com/bid/25178
CVE ID: CVE-2007-4184 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in administrator/popups/pollwindow.php in Joomla! 1.0.12 allows remote attackers to execute arbitrary SQL commands via the pollid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475066/100/0/threaded - http://www.securityfocus.com/archive/1/480757/100/0/threaded - http://www.securityfocus.com/archive/1/480738/100/0/threaded - http://www.securityfocus.com/archive/1/480809/100/0/threaded
CVE ID: CVE-2007-4185 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other unspecified components, which reveal the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39043 - http://www.securityfocus.com/archive/1/475066/100/0/threaded - http://osv
tainer: References: - http://osvdb.org/39043 - http://www.securityfocus.com/archive/1/475066/100/0/threaded - http://osvdb.org/39037 - http://www.securityfocus.com/archive/1/480757/100/0/threaded - http://osvdb.org/39038 - http://osvdb.org/39041 - http://www.securityfocus.com/archive/1/480738/100/0/threaded - http://www.securityfocus.com/archive/1/480809/100/0/threaded - http://osvdb.org/39039 - http://osvdb.org/39040 - http://osvdb.org/39042
CVE ID: CVE-2007-4186 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39059 - http://yollubunlar.org/our-de-france-pool-101-remote-file-include-43.html - http://www.securityfocus.com/archive/1/475356/100/0/threaded - http://www.securityfocus.com/bid/25183 - http://securityreason.com
w.securityfocus.com/archive/1/475356/100/0/threaded - http://www.securityfocus.com/bid/25183 - http://securityreason.com/securityalert/2979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35779
CVE ID: CVE-2007-4187 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple eval injection vulnerabilities in the com_search component in Joomla! 1.5 beta before RC1 (aka Mapya) allow remote attackers to execute arbitrary PHP code via PHP sequences in the searchword parameter, related to default_results.php in (1) components/com_search/views/search/tmpl/ and (2) templates/beez/html/com_search/search/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474417/100/100/threaded - http://joomlacode.org/gf/project/joomla/scmsvn/?action=browse&pa
w.securityfocus.com/archive/1/474417/100/100/threaded - http://joomlacode.org/gf/project/joomla/scmsvn/?action=browse&path=%2Fdevelopment%2Ftrunk%2Fcomponents%2Fcom_search%2Fviews%2Fsearch%2Fview.php&r1=7455&r2=7456 - http://osvdb.org/41260 - http://securityreason.com/securityalert/2969
CVE ID: CVE-2007-4188 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26239 - http://www.joomla.org/content/view/3677/1/ - http://www.vupen.com/english/advisories/2007/2719 - http://www.securityfocus.com/archive/1/476017/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35953
CVE ID: CVE-2007-4189 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the (1) com_search, (2) com_content, and (3) mod_login components. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26239 - http://www.joomla.org/content/view/3677/1/ - http://www.vupen.com/english/advisories/2007/2719 - http://osvdb.o
/26239 - http://www.joomla.org/content/view/3677/1/ - http://www.vupen.com/english/advisories/2007/2719 - http://osvdb.org/38755 - http://osvdb.org/38757 - http://osvdb.org/38756
CVE ID: CVE-2007-4190 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T14:46:39.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26239 - http://osvdb.org/38739 - http://www.joomla.org/content/view/3677/1/ - h
erences: - http://secunia.com/advisories/26239 - http://osvdb.org/38739 - http://www.joomla.org/content/view/3677/1/ - http://www.vupen.com/english/advisories/2007/2719