Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6525 State: PUBLISHED Published: 2007-12-27T22:00:00 Last Updated: 2024-08-07T16:11:06.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in eClient in IBM DB2 Content Manager (CM) Toolkit 8.3 before fix pack 7 for z/OS has unknown impact and attack vectors, related to "scripting." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26975 - http://www-1.ibm.com/support/docview.wss?uid=isg1IO06740 - http://www.securitytracker.com/id?1019139 - http://osvdb.org/41624 - http://www.vupen.com/english/advisories/2007/4295 - http://www-1.ibm.com/support/docview.wss?uid=isg1PK52498 - https://exchange
www.vupen.com/english/advisories/2007/4295 - http://www-1.ibm.com/support/docview.wss?uid=isg1PK52498 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39177 - http://secunia.com/advisories/28174
CVE ID: CVE-2007-6526 State: PUBLISHED Published: 2007-12-27T22:00:00 Last Updated: 2024-08-07T16:11:06.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tiki-special_chars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via the area_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41179 - http://tikiwiki.org/ReleaseProcess199 - http://www.securityfocus.com/bid/27004 - http://secunia.com/advisories/28225 - http://secunia.com/advisories/28602 - http://security.gentoo.org/glsa/glsa-200801-10.xml - http://www.h-labs.org/blog/2007/12/24/tikiwiki_1
advisories/28602 - http://security.gentoo.org/glsa/glsa-200801-10.xml - http://www.h-labs.org/blog/2007/12/24/tikiwiki_1_9_8_3_tiki_special_chars_php_xss_vulnerability.html - http://www.securityfocus.com/archive/1/485483/100/0/threaded - http://securityreason.com/securityalert/3483
CVE ID: CVE-2007-6527 State: PUBLISHED Published: 2007-12-27T22:00:00 Last Updated: 2024-08-07T16:11:06.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: uploadimg.php in the Automatic Image Upload with Thumbnails (imgUpload) module 1.3.2 for PunBB only verifies the Content-type field of uploaded files, which allows remote attackers to upload and execute arbitrary content via a file with a (1) JPG, (2) GIF, or (3) PNG MIME type. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28138 - http://www.fortconsult.net/images/pdf/advisories/punBB_imgUpload.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/39150 - http://osvdb.org/4
ges/pdf/advisories/punBB_imgUpload.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/39150 - http://osvdb.org/42809
CVE ID: CVE-2007-6528 State: PUBLISHED Published: 2007-12-27T22:00:00 Last Updated: 2024-08-07T16:11:06.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) and modified filename in the movie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3484 - http://tikiwiki.org/ReleaseProcess199 - http://www.securityfocus.com/bid/27008 - http://www.securityfocus.com/archive/1/485482/100/0/threaded - http://secunia.com/advisories/28225 - http://secunia.com/advisories/28602 - http:
.com/archive/1/485482/100/0/threaded - http://secunia.com/advisories/28225 - http://secunia.com/advisories/28602 - http://osvdb.org/41178 - http://security.gentoo.org/glsa/glsa-200801-10.xml - https://www.exploit-db.com/exploits/4942
CVE ID: CVE-2007-6529 State: PUBLISHED Published: 2007-12-27T22:00:00 Last Updated: 2024-08-07T16:11:05.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in TikiWiki before 1.9.9 have unknown impact and attack vectors involving (1) tiki-edit_css.php, (2) tiki-list_games.php, or (3) tiki-g-admin_shared_source.php. Additional Analyst Notes: - CVE Program Container: References: - http://tikiwiki.org/ReleaseProcess199 - http://secunia.com/advisories/28225 - http://osvdb.org/41177 - http://secunia.com/advisories/28602 - http://security.gentoo.org/glsa/glsa-200801-10.xml - http://osvdb.org/41176 - http://osvdb.org/41175
CVE ID: CVE-2007-6530 State: PUBLISHED Published: 2007-12-27T22:00:00 Last Updated: 2024-08-07T16:11:05.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=119863639428564&w=2 - http://www.vupen.com/english/advisories/2007/4310 - http://secunia.com/advisories/28205 - http://www.securitytracker.com/i
tp://www.vupen.com/english/advisories/2007/4310 - http://secunia.com/advisories/28205 - http://www.securitytracker.com/id?1019147 - http://secunia.com/advisories/28145 - http://secunia.com/advisories/28218 - http://osvdb.org/39901 - http://www.securityfocus.com/bid/27025
CVE ID: CVE-2007-6531 State: PUBLISHED Published: 2008-01-09T23:00:00 Last Updated: 2024-08-07T16:11:05.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow (over-read) in the xfce_mkdirhier function was also reported, but it might not be exploitable for a crash or code execution, so it is not a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=201289 - http://www.xfce.org/documentation/changelogs/4.4.2 - http://www.vupen
- http://bugs.gentoo.org/show_bug.cgi?id=201289 - http://www.xfce.org/documentation/changelogs/4.4.2 - http://www.vupen.com/english/advisories/2008/0080 - http://security.gentoo.org/glsa/glsa-200801-06.xml - http://osvdb.org/43422 - http://bugs.gentoo.org/show_bug.cgi?id=201293
CVE ID: CVE-2007-6532 State: PUBLISHED Published: 2008-01-09T23:00:00 Last Updated: 2024-08-07T16:11:05.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management." Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=201292 - http://www.xfce.org/documentation/changelogs/4.4.2 - http://www.vupen.com/english/advisories/2008/0080 - http://security.gentoo.org/glsa/glsa-200801-06.xml
CVE ID: CVE-2007-6533 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:06.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39262 - http://www.vupen.com/english/advisories/2007/4309 - http://www.securityfocus.com/archive/1/485499/100/0/threaded - h
2 - http://www.vupen.com/english/advisories/2007/4309 - http://www.securityfocus.com/archive/1/485499/100/0/threaded - http://aluigi.altervista.org/adv/zoomprayer-adv.txt - http://www.securityfocus.com/bid/27007 - http://osvdb.org/39872 - http://securityreason.com/securityalert/3486
CVE ID: CVE-2007-6534 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:05.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted PUB file, possibly involving wordart. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26982 - http://securityreason.com/securityalert/3490 - http://www.securityfocus.com/archive/1/485456/100/0/threaded
CVE ID: CVE-2007-6535 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:06.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39155 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059204.html
CVE ID: CVE-2007-6536 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:06.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Custom Button Installer dialog in Google Toolbar 4 and 5 beta presents certain domain names in the (1) "Downloaded from" and (2) "Privacy considerations" sections without verifying domain names, which makes it easier for remote attackers to spoof domain names and trick users into installing malicious button XML files, as demonstrated by presenting www.google.com when the button was downloaded from an arbitrary site through an open redirector on www.google.com. Additional Analyst Notes: - CVE Program Container: References:
trary site through an open redirector on www.google.com. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26923 - http://aviv.raffon.net/2007/12/18/GoogleToolbarDialogSpoofingVulnerability.aspx - http://secunia.com/advisories/28166 - http://www.securityfocus.com/archive/1/485288/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39164 - http://www.osvdb.org/39499 - http://securityreason.com/securityalert/3491
CVE ID: CVE-2007-6537 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:05.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the zfile_gunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted remote attackers to execute arbitrary code via a long filename in a gzipped archive, such as a (1) gz, (2) adz, (3) roz, or (4) hdz archive in a compressed floppy disk image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26979 - http://osvdb.org/39902 - http://securityreason.com/securityalert/3487 - http://aluigi.altervista.org/adv/winuaebof-adv.txt - http://ww
rg/39902 - http://securityreason.com/securityalert/3487 - http://aluigi.altervista.org/adv/winuaebof-adv.txt - http://www.vupen.com/english/advisories/2007/4306/references - http://www.securityfocus.com/archive/1/485446/100/0/threaded - http://www.winuae.net/frames/mainframe.html - http://aluigi.org/poc/winuaebof.zip - http://secunia.com/advisories/28208
CVE ID: CVE-2007-6538 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:06.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28198 - http://www.securityfocus.com/archive/1/485459/100/200/threaded - http://www.securityfocus.com/archive/1/485455/100/200/threaded - http://securityreason.com/securityalert/3492 - http://osvdb.org/39619 - https://exchange.xforce.ibmcloud.com/vulnerabi
- http://securityreason.com/securityalert/3492 - http://osvdb.org/39619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39190 - http://cvs.moodle.org/contrib/plugins/blocks/mrbs/web/view_entry.php?r1=1.1&r2=1.2 - http://www.securityfocus.com/archive/1/485434/100/0/threaded - http://www.securityfocus.com/bid/26977
CVE ID: CVE-2007-6539 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:05.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the include_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26961 - http://securityreason.com/securityalert/3488 - http://www.securityfocus.com/archive/1/485392/100/0/threaded - http://osvdb.org/39801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39184
CVE ID: CVE-2007-6540 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:06.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q parameter to the default URI in patch/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3489 - http://www.securityfocus.com/archive/1/485176/100/0/threaded - http://osvdb.org/39988
CVE ID: CVE-2007-6541 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:06.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in neuron news 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the topic parameter in a viewtopic action, or the (2) newsyear or (3) newsmonth parameter in a newsarchive action to the default URI in patch/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3489 - http://www.securityfocus.com/archive/1/485176/100/0/threaded
CVE ID: CVE-2007-6542 State: PUBLISHED Published: 2007-12-27T23:00:00 Last Updated: 2024-08-07T16:11:06.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/frontpage_right.php in Arcadem LE 2.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39802 - https://www.exploit-db.com/exploits/4764 - http://www.securityfocus.com/bid/26986
CVE ID: CVE-2007-6543 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:05.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39210 - http://secunia.com/advisories/28199 - https://www.exploit-db.com/exploits/4791 - http://osvdb.org/39795
CVE ID: CVE-2007-6544 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:05.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameter to (1) brokenfile.php, (2) visit.php, or (3) ratefile.php in modules/mydownloads/; or (4) ratelink.php, (5) modlink.php, or (6) brokenlink.php in modules/mylinks/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4787 - http://osvdb.org/41240 - http://osvdb.org/41238 - http://osvdb.org/41235 - http://www.runcms.org/modules/mydownloads/si
http://osvdb.org/41240 - http://osvdb.org/41238 - http://osvdb.org/41235 - http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131 - https://www.exploit-db.com/exploits/4790 - http://osvdb.org/41239 - http://www.securityfocus.com/bid/27019 - http://osvdb.org/41236 - http://osvdb.org/41237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39289 - http://securityreason.com/securityalert/3493 - http://www.securityfocus.com/archive/1/485512/100/0/threaded
CVE ID: CVE-2007-6545 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:05.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) the subject parameter to modules/news/submit.php; (2) the PATH_INFO to modules/news/index.php, possibly related to the XoopsPageNav class; or (3) an avatar image to edituser.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39292 - http://www.dsec.ru/about/articles/web_xss - https://www.exploit-db.com/exploits/47
.ibmcloud.com/vulnerabilities/39292 - http://www.dsec.ru/about/articles/web_xss - https://www.exploit-db.com/exploits/4790 - http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131 - http://osvdb.org/41242 - http://www.securityfocus.com/bid/27019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39293 - http://osvdb.org/41243 - http://securityreason.com/securityalert/3493 - http://www.securityfocus.com/archive/1/485512/100/0/threaded - http://osvdb.org/41241
CVE ID: CVE-2007-6546 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:05.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: RunCMS before 1.6.1 uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4790 - http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131 - http://www.securityfocus.com/bid/27019 - http://osvdb.org/41245 - http://securityreason.com/securityalert/3493 - http://www.securityfocus.com/archive/1/485512/100/0/threaded
CVE ID: CVE-2007-6547 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:05.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: RunCMS before 1.6.1 does not require entry of the old password during a password change, which allows context-dependent attackers to change passwords upon obtaining temporary access to a session. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4790 - http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131 - http://www.securityfocus.com/bid/27019 - http://osvdb.org/41246 - http://securityreason.com/securityalert/3493 - http://www.securityfocus.com/archive/1/485512/10
http://osvdb.org/41246 - http://securityreason.com/securityalert/3493 - http://www.securityfocus.com/archive/1/485512/100/0/threaded
CVE ID: CVE-2007-6548 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators to inject arbitrary PHP code via the (1) header and (2) footer parameters to modules/system/admin.php in a meta-generator action, (3) the disclaimer parameter to modules/system/admin.php in a disclaimer action, (4) the disclaimer parameter to modules/mydownloads/admin/index.php in a mydownloadsConfigAdmin action, (5) the disclaimer parameter to modules/newbb_plus/admin/forum_config.php, (6) the disclaimer para
dsConfigAdmin action, (5) the disclaimer parameter to modules/newbb_plus/admin/forum_config.php, (6) the disclaimer parameter to modules/mylinks/admin/index.php in a myLinksConfigAdmin action, or (7) the intro parameter to modules/sections/admin/index.php in a secconfig action, which inject PHP sequences into (a) sections/cache/intro.php, (b) mylinks/cache/disclaimer.php, (c) mydownloads/cache/disclaimer.php, (d) newbb_plus/cache/disclaimer.php, (e) system/cache/disclaimer.php, (f) system/cache/footer.php, (g) system/cache/header.php, or (h) system/cache/maintenance.php in modules/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41250 - http://osvdb.org/412
modules/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41250 - http://osvdb.org/41251 - http://osvdb.org/41249 - http://osvdb.org/41248 - http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131 - https://www.exploit-db.com/exploits/4790 - http://osvdb.org/41247 - http://www.securityfocus.com/bid/27019 - http://securityreason.com/securityalert/3493 - http://www.securityfocus.com/archive/1/485512/100/0/threaded
CVE ID: CVE-2007-6549 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in RunCMS before 1.6.1 has unknown impact and attack vectors, related to "pagetype using." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41252 - http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39299
CVE ID: CVE-2007-6550 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42662 - http://www.vupen.com/english/advisories/2007/4321 - https://www.exploit-db.com/exploits/4789 - http://secunia.com/advisories/28201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39274 - http://www.securityfoc
ttp://secunia.com/advisories/28201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39274 - http://www.securityfocus.com/bid/27032
CVE ID: CVE-2007-6551 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showMsg.php in MailMachine Pro 2.2.4, and other versions before 2.2.6, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39638 - https://www.exploit-db.com/exploits/4788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39211 - http://www.securityfocus.com/bid/27030 - http://www.inj3ct-it.org/exploit/MailMachine%20Pro%202.2.4.txt - http://secunia.com/advisories/28232 - http://www.a
30 - http://www.inj3ct-it.org/exploit/MailMachine%20Pro%202.2.4.txt - http://secunia.com/advisories/28232 - http://www.attrition.org/pipermail/vim/2008-January/001873.html
CVE ID: CVE-2007-6552 State: PUBLISHED Published: 2007-12-28T00:00:00 Last Updated: 2024-08-07T16:11:06.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/admin_users.php to bypass a protection mechanism against direct request. Additional Analyst Notes: - CVE Program Container: References: - http://newhack.org/advisories/AuraCMS-2.2-RemoteAddAdmin.txt - http://osvdb.org/39804 - https://www.exploit-db.com/exploits/4786 - h
ck.org/advisories/AuraCMS-2.2-RemoteAddAdmin.txt - http://osvdb.org/39804 - https://www.exploit-db.com/exploits/4786 - http://www.securityfocus.com/bid/27037