Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1605 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: w-Agora (Web-Agora) allows remote attackers to obtain sensitive information via a request to rss.php with an invalid (1) site or (2) bn parameter, (3) a certain value of the site[] parameter, or (4) an empty value of the bn[] parameter; a request to index.php with a certain value of the (5) site[] or (6) sort[] parameter; (7) a request to profile.php with an empty value of the site[] parameter; or a request to search.php with (8) an empty value of the bn[] parameter or a certain value of the (9) pattern[] or (10) search_date[]
o search.php with (8) an empty value of the bn[] parameter or a certain value of the (9) pattern[] or (10) search_date[] parameter, which reveal the path in various error messages, probably related to variable type inconsistencies. NOTE: the bn[] parameter to index.php is already covered by CVE-2007-0606.1. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34381 - http://osvdb.org/34382 - http://www.securityfocus.com/archive/1/463286/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33174 - http://securityreason.com/securityalert/2462 - http://osvdb.org/34380 - http://secunia.com/advisories/24605 - http://www.securityfocus.com/bid/23057
CVE ID: CVE-2007-1606 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T13:06:25.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary web script or HTML via (1) the showuser parameter to profile.php, the (2) search_forum or (3) search_user parameter to search.php, or (4) the userid parameter to change_password.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34379 - http://www.securityfocus.com/archive/1/463286/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33175 - http://osvdb.org/
cus.com/archive/1/463286/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33175 - http://osvdb.org/34378 - http://securityreason.com/securityalert/2462 - http://osvdb.org/34377 - http://secunia.com/advisories/24605 - http://www.securityfocus.com/bid/23057
CVE ID: CVE-2007-1607 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T13:06:25.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: search.php in w-Agora (Web-Agora) allows remote attackers to obtain potentially sensitive information via a ' (quote) value followed by certain SQL sequences in the (1) search_forum or (2) search_user parameter, which force a SQL error. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33177 - http://www.securityfocus.com/archive/1/463286/100/0/threaded - http://securityreason.com/securityalert/2462 - http://secunia.com/advisories/24605 - http://www.securityfo
/0/threaded - http://securityreason.com/securityalert/2462 - http://secunia.com/advisories/24605 - http://www.securityfocus.com/bid/23057 - http://osvdb.org/34376
CVE ID: CVE-2007-1608 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T13:06:25.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34484 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK39732 - http://www.vupen.com/english/advisories/2007/1062 - http://www.securityfocus.com/bid/23086 - https://exchange.xforce
2 - http://www.vupen.com/english/advisories/2007/1062 - http://www.securityfocus.com/bid/23086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33123 - http://secunia.com/advisories/24552 - http://www.securitytracker.com/id?1017806
CVE ID: CVE-2007-1609 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T13:06:25.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Server (OAS) 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2474 - http://www.securityfocus.com/archive/1/496045/100/0/threaded - http://www.osvdb.org/33521 - http://www.vupen.com/english/advisories/2007/1078 - h
com/archive/1/496045/100/0/threaded - http://www.osvdb.org/33521 - http://www.vupen.com/english/advisories/2007/1078 - http://secunia.com/advisories/24554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33146 - http://www.securityfocus.com/bid/23102 - http://www.securityfocus.com/archive/1/463285/100/0/threaded
CVE ID: CVE-2007-1610 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T13:06:25.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RSS reader in Glue Software NewsGlue before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via a feed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33166 - http://www.vupen.com/english/advisories/2007/1074 - http://www.securityfocus.com/bid/23094 - http://osvdb.org/34408 - http://jvn.jp/jp/JVN%2364227086/index.html - http://secunia.com/advisories/24603 - http://www.gluesoft.co.jp/NewsGl
08 - http://jvn.jp/jp/JVN%2364227086/index.html - http://secunia.com/advisories/24603 - http://www.gluesoft.co.jp/NewsGlue/Update.aspx
CVE ID: CVE-2007-1611 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T13:06:25.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RSS reader in a certain SOURCENEXT product, probably IKANARI JIJYOU 1.0.0 and 1.0.1, allows remote attackers to inject arbitrary web script or HTML via the title of an article in a feed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33452 - http://www.sourcenext.info/download/jijou.html - http://jvn.jp/jp/JVN%2364227086/index.html
CVE ID: CVE-2007-1612 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the kolumna parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3513 - http://secunia.com/advisories/24539 - http://osvdb.org/34269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33048 - http://www.securityfocus.com/bid/23024 - http://www.vupen.com/english/advisories/2007/1015
CVE ID: CVE-2007-1613 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the logi parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3503 - http://www.vupen.com/english/advisories/2007/1008 - http://osvdb.org/34278 - http://secunia.com/advisories/24576 - http://www.securityfocus.com/bid/23009
CVE ID: CVE-2007-1614 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the zzip_open_shared_io function in zzip/file.c in ZZIPlib Library before 0.13.49 allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0998 - http://www.securitylab.ru/forum/read.php?FID=21&TID=40858&MID=326187 - http://sourceforge.net/project/shownotes.php?group_id=6389&release_id=494587 - http://secunia.com
TID=40858&MID=326187 - http://sourceforge.net/project/shownotes.php?group_id=6389&release_id=494587 - http://secunia.com/advisories/24708 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:093 - http://www.securityfocus.com/bid/23013 - http://osvdb.org/33838 - http://secunia.com/advisories/24586 - http://security.gentoo.org/glsa/glsa-200704-05.xml
CVE ID: CVE-2007-1615 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33063 - http://secunia.com/advisories/24595 - http://www.securityfocus.com/bid/23015 - https://www.exploit-db.com/exploits/3509
CVE ID: CVE-2007-1616 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the recid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23019 - http://secunia.com/advisories/24563 - http://osvdb.org/34283 - https://www.exploit-db.com/exploits/3515 - http://www.vupen.com/english/advisories/2007/1016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33056
CVE ID: CVE-2007-1617 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24594 - http://osvdb.org/34286 - https://www.exploit-db.com/exploits/3510 - http://www.vupen.com/english/advisories/2007/1013
CVE ID: CVE-2007-1618 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1011 - https://www.exploit-db.com/exploits/3507 - http://osvdb.org/34619 - http://secunia.com/advisories/24704
CVE ID: CVE-2007-1619 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33061 - https://www.exploit-db.com/exploits/3511 - http://www.securityfocus.com/bid/23018 - http://secunia.com/advisories/24698 - http://osvdb.org/34629
CVE ID: CVE-2007-1620 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SESSION[SITE_PATH] parameter to (a) wind/help.php or (b) wind/about.php, or the (2) _SESSION[DRIVER] parameter to (c) db/session.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37212 - https://www.exploit-db.com/exploits/3501 - http://osvdb.org/37210 - http://osvdb.org/37211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
/exploits/3501 - http://osvdb.org/37210 - http://osvdb.org/37211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33033 - http://www.vupen.com/english/advisories/2007/1007
CVE ID: CVE-2007-1621 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes (APB) 0.2.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS[template_path] parameter. NOTE: this issue might be related to CVE-2003-1254. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3504 - http://www.securityfocus.com/bid/23010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33065 - http://osvdb.org/37226 - http://www.vupen.com
m/bid/23010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33065 - http://osvdb.org/37226 - http://www.vupen.com/english/advisories/2007/1009
CVE ID: CVE-2007-1622 State: PUBLISHED Published: 2007-03-23T00:00:00 Last Updated: 2024-08-07T13:06:25.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in the 2.1 series, allows remote authenticated users with theme privileges to inject arbitrary web script or HTML via the PATH_INFO in the administration interface, related to loose regular expression processing of PHP_SELF. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1005 - http://www.buayacorp.com/files/wordpress/wordpress-advisory.txt - http://ww
www.vupen.com/english/advisories/2007/1005 - http://www.buayacorp.com/files/wordpress/wordpress-advisory.txt - http://www.securityfocus.com/bid/23027 - http://secunia.com/advisories/25108 - http://secunia.com/advisories/24567 - http://www.debian.org/security/2007/dsa-1285 - http://sla.ckers.org/forum/read.php?2%2C7935#msg-8006
CVE ID: CVE-2007-1623 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:25.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) bg_color_1, (2) fs_menu, (3) fc_menu, (4) ff_menu, (5) bg_color_2, (6) fs_normal, (7) fc_normal, and (8) ff_normal parameters to welcome_admin.php; and possibly unspecified other parameters and files. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE P
information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24602 - http://www.osvdb.org/34341
CVE ID: CVE-2007-1624 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:25.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, and (4) text parameters to save_entry.php, as reachable through add_entry.php; and possibly other unspecified parameters and files. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24602 - http://www.securityfo
tional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24602 - http://www.securityfocus.com/bid/23072 - http://www.vupen.com/english/advisories/2007/1060 - http://www.osvdb.org/34342
CVE ID: CVE-2007-1625 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:25.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter, as reachable through add_entry.php. NOTE: the original report stated that the vulnerability was in add_entry.php, which does not receive the input data. Additional Analyst Notes: - CVE Program Container: References: - http://trew.icenetx.net/toolz/advisory-realGuestbook_V5-en.txt - http://secunia.com/advisories/24602 - http://www.securityfocus.com/bid/23072
t/toolz/advisory-realGuestbook_V5-en.txt - http://secunia.com/advisories/24602 - http://www.securityfocus.com/bid/23072 - http://www.vupen.com/english/advisories/2007/1060 - http://www.osvdb.org/34343
CVE ID: CVE-2007-1626 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:25.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33060 - http://osvdb.org/37222 - https://www.exploit-db.com/exploits/3512 - http://www.securityfocus.com/bid/23038
CVE ID: CVE-2007-1627 State: REJECTED Published: 2007-03-23T21:00:00 Last Updated: 2007-11-15T10:00:00 Description: No description available.
CVE ID: CVE-2007-1628 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:25.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the SPL_CFG[dirroot] parameter to (1) service.alert.inc.php or (2) settings.ses.php in inc/; (3) db/mysql/db.inc.php; (4) integration/shortstat/configuration.php; (5) ali.class.php or (6) cat.class.php in methodology/traditional/class/; (7) cat_browse.inc.php, (8) chr_browse.inc.php, (9) chr_display.inc.php, or (10) dash_browse.i
ology/traditional/class/; (7) cat_browse.inc.php, (8) chr_browse.inc.php, (9) chr_display.inc.php, or (10) dash_browse.inc.php in methodology/traditional/ui/inc/; (11) spl.webservice.php or (12) konfabulator/gateway_admin.php in ws/; or other unspecified files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33128 - http://www.vupen.com/english/advisories/2007/1069 - http://www.securityfocus.com/archive/1/463491/100/0/threaded - http://www.securityfocus.com/bid/23076 - http://advisories.echo.or.id/adv/adv77-K-159-2007.txt - https://www.exploit-db.com/exploits/3532
CVE ID: CVE-2007-1629 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:25.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23077 - http://www.vupen.com/english/advisories/2007/1072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33129 - https://www.exploit-db.com/exploits/3536 - http://secunia.com/advisories/24568
CVE ID: CVE-2007-1630 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:26.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33111 - http://www.vupen.com/english/advisories/2007/1071 - http://www.osvdb.org/34364 - http://www.securityfocus.com/bid/23080 - http://secunia.com/advisories/24574
CVE ID: CVE-2007-1631 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:25.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463076/100/0/threaded - http://www.osvdb.org/33503 - http://www.attrition.org/pipermail/vim/2007-March/001443.html - http://securityreason.com/
http://www.osvdb.org/33503 - http://www.attrition.org/pipermail/vim/2007-March/001443.html - http://securityreason.com/securityalert/2469
CVE ID: CVE-2007-1632 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:25.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in TYPOlight webCMS before 2.2 Build 5 has unknown impact and attack vectors related to a "major security hole." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24546 - http://www.vupen.com/english/advisories/2007/1026 - http://www.typolight.org/changelog.html - http://www.osvdb.org/33303
CVE ID: CVE-2007-1633 State: PUBLISHED Published: 2007-03-23T21:00:00 Last Updated: 2024-08-07T13:06:25.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by bbcode_ref.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38599 - http://www.vupen.com/english/advisories/2007/1027 - http://www.securityfocus.com/bid/23035 -
- http://osvdb.org/38599 - http://www.vupen.com/english/advisories/2007/1027 - http://www.securityfocus.com/bid/23035 - https://www.exploit-db.com/exploits/3518
CVE ID: CVE-2007-1634 State: PUBLISHED Published: 2007-03-23T22:00:00 Last Updated: 2024-08-07T13:06:25.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the _FILES[DB][tmp_name] parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-March/001460.html - http://secunia.com/advisories/24571 - http://www.securityfocus.com/archive/1/463176/100/0/threaded - http://securityre
- http://secunia.com/advisories/24571 - http://www.securityfocus.com/archive/1/463176/100/0/threaded - http://securityreason.com/securityalert/2473