Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4737 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the STPHPLIB_DIR parameter to (1) stphpapplication.php, (2) stphpbtnimage.php, or (3) stphpform.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38929 - http://osvdb.org/38930 - https://www.exploit-db.com/exploits/4358 - http://www.securityfocus.com/bid/25525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36416 - http://o
ts/4358 - http://www.securityfocus.com/bid/25525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36416 - http://osvdb.org/38931 - http://www.vupen.com/english/advisories/2007/3092 - http://secunia.com/advisories/26658
CVE ID: CVE-2007-4738 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) db_conf or (2) ADODB_DIR parameter to utils/stphpimage_show.php; or a URL in the STPHPLIB_DIR parameter to (3) stphpbutton.php, (4) stphpcheckbox.php, (5) stphpcheckboxwithcaption.php, (6) stphpcheckgroup.php, (7) stphpcomponent.php, (8) stphpcontrolwithcaption.php, (9) stphpedit.php, (10) stphpeditwithcaption.php, (11) stphphr.php, (12) stphpimage.php, (13)
hpcontrolwithcaption.php, (9) stphpedit.php, (10) stphpeditwithcaption.php, (11) stphphr.php, (12) stphpimage.php, (13) stphpimagewithcaption.php, (14) stphplabel.php, (15) stphplistbox.php, (16) stphplistboxwithcaption.php, (17) stphplocale.php, (18) stphppanel.php, (19) stphpradiobutton.php, (20) stphpradiobuttonwithcaption.php, (21) stphpradiogroup.php, (22) stphprichbutton.php, (23) stphpspacer.php, (24) stphptable.php, (25) stphptablecell.php, (26) stphptablerow.php, (27) stphptabpanel.php, (28) stphptabtitle.php, (29) stphptextarea.php, (30) stphptextareawithcaption.php, (31) stphptoolbar.php, (32) stphpwindow.php, (33) stphpxmldoc.php, or (34) stphpxmlelement.php, a different set of v
hp, (31) stphptoolbar.php, (32) stphpwindow.php, (33) stphpxmldoc.php, or (34) stphpxmlelement.php, a different set of vectors than CVE-2007-4737. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39077 - http://osvdb.org/39082 - http://osvdb.org/39088 - http://osvdb.org/39076 - http://osvdb.org/39090 - http://osvdb.org/39085 - http://osvdb.org/39079 - http://osvdb.org/39093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36417 - http://osvdb.org/39099 - http://osvdb.org/39096 - http://osvdb.org/39102 - http://osvdb.org/39101 - http://osvdb
36417 - http://osvdb.org/39099 - http://osvdb.org/39096 - http://osvdb.org/39102 - http://osvdb.org/39101 - http://osvdb.org/39095 - http://osvdb.org/39105 - http://osvdb.org/39097 - http://osvdb.org/39084 - http://osvdb.org/39074 - http://osvdb.org/39094 - http://osvdb.org/39098 - http://osvdb.org/39083 - http://osvdb.org/39078 - http://osvdb.org/39100 - http://osvdb.org/39103 - http://osvdb.org/39075 - http://osvdb.org/39091 - http://www.securityfocus.com/bid/25525 - http://osvdb.org/39089 - http://osvdb.org/39081 - http://osvdb.org/39087 - http://secunia.com/advisories/26658 - http://osvdb.org/39080 - http://osvdb.org/39104 - http://osvdb.org/39073 - http://osvdb.org/39092 - http://osvdb.
6658 - http://osvdb.org/39080 - http://osvdb.org/39104 - http://osvdb.org/39073 - http://osvdb.org/39092 - http://osvdb.org/39086
CVE ID: CVE-2007-4739 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file by signing it with an unknown key, related to the update command. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1394 - http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5%3Bfilename=interdiff%3Batt=1%3Bbug=440535 - http://www.securityfocus.com/bid/25537 - http://osvdb.org/40172 - http:
sg=5%3Bfilename=interdiff%3Batt=1%3Bbug=440535 - http://www.securityfocus.com/bid/25537 - http://osvdb.org/40172 - http://secunia.com/advisories/27334 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440535 - http://secunia.com/advisories/26678 - http://alioth.debian.org/frs/shownotes.php?release_id=1031
CVE ID: CVE-2007-4740 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38923 - http://www.securityfocus.com/archive/1/478449/100/0/threaded - http://www.securityfocus.com/bid/25516 - http://retrogod.altervista.org/telecom_regkey.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36408
25516 - http://retrogod.altervista.org/telecom_regkey.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36408 - http://securitytracker.com/id?1018644 - http://securityreason.com/securityalert/3098
CVE ID: CVE-2007-4741 State: PUBLISHED Published: 2007-09-06T19:00:00Z Last Updated: 2024-09-16T18:45:25.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated administrators to inject arbitrary web script or HTML via the sort parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.claroline.net/cgi-bin/viewcvs.cgi/claroline/claroline/admin/adminusers.php?only_with_tag=V_1_8&r2=1.109.2.1&r1=1.10 - http://secunia.com/adviso
iewcvs.cgi/claroline/claroline/admin/adminusers.php?only_with_tag=V_1_8&r2=1.109.2.1&r1=1.10 - http://secunia.com/advisories/26685
CVE ID: CVE-2007-4742 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value in the sort parameter to admin/adminusers.php, which reveals the path in an error message in some circumstances, as demonstrated by a parameter value containing an XSS sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.claroline.net/forum/viewtopic.php?t=13448 - http://osvdb.org/39160 - http://cvs.claroline.net/cgi-bin/viewcvs.cgi/claroline/claroline/admin/adminusers.php?only
48 - http://osvdb.org/39160 - http://cvs.claroline.net/cgi-bin/viewcvs.cgi/claroline/claroline/admin/adminusers.php?only_with_tag=V_1_8&r2=1.109.2.1&r1=1.10
CVE ID: CVE-2007-4743 State: PUBLISHED Published: 2007-09-06T22:00:00 Last Updated: 2024-08-07T15:08:33.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and other applications that use krb5, does not correctly check the buffer length in some environments and architectures, which might allow remote attackers to conduct a buffer overflow attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1387 - http://secunia.com/advisories/26699 - http
ogram Container: References: - http://www.debian.org/security/2007/dsa-1387 - http://secunia.com/advisories/26699 - http://www.novell.com/linux/security/advisories/2007_19_sr.html - http://www.redhat.com/support/errata/RHSA-2007-0892.html - https://issues.rpath.com/browse/RPL-1696 - http://www.securityfocus.com/bid/26444 - http://www.ubuntu.com/usn/usn-511-2 - http://www.securityfocus.com/archive/1/478794/100/0/threaded - http://secunia.com/advisories/26987 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.securityfocus.com/archive/1/478748/100/0/threaded - https://oval.cisecurity.org/repository/sea
rtnum=307041 - http://www.securityfocus.com/archive/1/478748/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10239 - http://article.gmane.org/gmane.comp.encryption.kerberos.announce/86 - http://www.vupen.com/english/advisories/2007/3868 - http://secunia.com/advisories/27643 - http://www.us-cert.gov/cas/techalerts/TA07-319A.html
CVE ID: CVE-2007-4744 State: PUBLISHED Published: 2007-09-06T22:00:00 Last Updated: 2024-08-07T15:08:33.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIR_PREFIX parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4365 - http://www.securityfocus.com/bid/25550 - http://secunia.com/advisories/26696 - http://www.osvdb.org/36846 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36436
CVE ID: CVE-2007-4745 State: PUBLISHED Published: 2007-09-06T22:00:00 Last Updated: 2024-08-07T15:08:33.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) gbmail and (2) gbpage parameters in the sign function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37533 - http://www.securityfocus.com/bid/25576 - http://trew.icenetx.net/toolz/advisory-mambo-akobook-en.txt - http://secunia.com/advisories/26706 - http://securityreason.com/securit
cenetx.net/toolz/advisory-mambo-akobook-en.txt - http://secunia.com/advisories/26706 - http://securityreason.com/securityalert/3101 - http://www.vupen.com/english/advisories/2007/3080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36471
CVE ID: CVE-2007-4746 State: PUBLISHED Published: 2007-09-06T22:00:00 Last Updated: 2024-08-07T15:08:33.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier, Video Surveillance SP/ISP Decoder Software firmware 1.11.0 and earlier, and the Video Surveillance SP/ISP firmware 1.23.7 and earlier have default passwords for the sypixx and root user accounts, which allows remote attackers to perform administrative actions, aka CSCsj34681. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00808b4d38.sht
CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00808b4d38.shtml - http://www.securityfocus.com/bid/25549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36451 - http://www.vupen.com/english/advisories/2007/3061 - http://www.securitytracker.com/id?1018655 - http://secunia.com/advisories/26721 - http://osvdb.org/37502
CVE ID: CVE-2007-4747 State: PUBLISHED Published: 2007-09-06T22:00:00 Last Updated: 2024-08-07T15:08:32.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telnet service in Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier, Video Surveillance SP/ISP Decoder Software firmware 1.11.0 and earlier, and the Video Surveillance SP/ISP firmware 1.23.7 and earlier does not require authentication, which allows remote attackers to perform administrative actions, aka CSCsj31729. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00808b4d38.shtml - http:/
m Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00808b4d38.shtml - http://osvdb.org/37503 - http://www.securityfocus.com/bid/25549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36449 - http://www.vupen.com/english/advisories/2007/3061 - http://www.securitytracker.com/id?1018655 - http://secunia.com/advisories/26721
CVE ID: CVE-2007-4748 State: PUBLISHED Published: 2007-09-06T22:00:00 Last Updated: 2024-08-07T15:08:33.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitrary code via a long Logo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36394 - http://osvdb.org/38421 - http://www.securityfocus.com/bid/25502 - https://www.exploit-db.com/exploits/4348
CVE ID: CVE-2007-4749 State: PUBLISHED Published: 2007-09-14T00:00:00 Last Updated: 2024-08-07T15:08:33.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary commands on render servers by queueing jobs that contain these commands. NOTE: this is only a vulnerability in environments in which the administrator has not followed documentation that outlines the security risks of operating Backburner on untrusted networks. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018686 - http://www.securityfocus.com/archive/1/479193/100/0/threaded - http://se
nces: - http://securitytracker.com/id?1018686 - http://www.securityfocus.com/archive/1/479193/100/0/threaded - http://securityreason.com/securityalert/3132 - http://secunia.com/advisories/26797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36582 - http://www.securityfocus.com/bid/25590 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-008.txt
CVE ID: CVE-2007-4750 State: PUBLISHED Published: 2007-09-18T21:00:00 Last Updated: 2024-08-07T15:08:33.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbitrary code via a crafted RDZ archive in which the first file has an executable extension. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36652 - http://osvdb.org/40544 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-009.txt - http://www.securityfocus.com/bid/25591 - http://www.securityfocus.com/archive/1/479718/100/0/t
arch/SYMSA-2007-009.txt - http://www.securityfocus.com/bid/25591 - http://www.securityfocus.com/archive/1/479718/100/0/threaded - http://securityreason.com/securityalert/3150 - http://www.vupen.com/english/advisories/2007/3199 - http://secunia.com/advisories/26835 - http://securitytracker.com/id?1018703
CVE ID: CVE-2007-4751 State: PUBLISHED Published: 2007-09-18T21:00:00 Last Updated: 2024-08-07T15:08:33.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-009.txt - http://www.securityfocus.com/bid/25591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36654 - http://www.securityfocus.com/archive/1/479718/100/0/threaded - http://securityreason.com/securitya
lnerabilities/36654 - http://www.securityfocus.com/archive/1/479718/100/0/threaded - http://securityreason.com/securityalert/3150 - http://www.vupen.com/english/advisories/2007/3199 - http://secunia.com/advisories/26835 - http://securitytracker.com/id?1018703
CVE ID: CVE-2007-4752 State: PUBLISHED Published: 2007-09-12T01:00:00 Last Updated: 2024-08-07T15:08:33.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted. Additional Analyst Notes: - CVE Program Container: References: - http://www.openssh.com/txt/release-4.7 - http://security.gentoo.org/glsa/glsa-200711-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10809 - http://www.debian.org/secu
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10809 - http://www.debian.org/security/2008/dsa-1576 - http://www.securityfocus.com/bid/25628 - http://www.securityfocus.com/archive/1/479760/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2008-399.htm - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00214.html - http://www.ubuntu.com/usn/usn-566-1 - http://securityreason.com/securityalert/3126 - http://www.vupen.com/english/advisories/2008/0924/references - http://www.vupen.com/english/advisories/2008/2821 - http://secunia.com/advisories/30249 - http://www.vupen.com/english/advisories/2007/3156 - http://h20000.www
/2008/2821 - http://secunia.com/advisories/30249 - http://www.vupen.com/english/advisories/2007/3156 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01271085 - http://secunia.com/advisories/31575 - http://www.redhat.com/support/errata/RHSA-2008-0855.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:236 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5599 - https://bugzilla.redhat.com/show_bug.cgi?id=280471 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.securityfocus.com/archive/1/483748/100/200/threaded - http://h20000.www2.hp.com/
nce/2008/Mar/msg00001.html - http://www.securityfocus.com/archive/1/483748/100/200/threaded - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01271085 - http://secunia.com/advisories/27399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36637 - https://issues.rpath.com/browse/RPL-1706 - http://docs.info.apple.com/article.html?artnum=307562 - http://bugs.gentoo.org/show_bug.cgi?id=191321 - http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html - http://secunia.com/advisories/32241
CVE ID: CVE-2007-4753 State: PUBLISHED Published: 2007-09-08T00:00:00 Last Updated: 2024-08-07T15:08:33.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via (1) an empty SIP message or (2) a SIP INVITE message with a malformed To header, different vectors than CVE-2007-4553. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3104 - http://secunia.com/advisories/26587 - http://securitytracker.com/id?1018611 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065458.html - http://securitytracker.c
r.com/id?1018611 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065458.html - http://securitytracker.com/id?1018616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36286 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065478.html
CVE ID: CVE-2007-4754 State: PUBLISHED Published: 2007-09-08T01:00:00 Last Updated: 2024-08-07T15:08:33.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in a nickname. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/aa2k7x-adv.txt - http://secunia.com/advisories/26819 - http://securityreason.com/securityalert/3105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36463 - http://osvdb.org/40507 - http://www.secur
urityalert/3105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36463 - http://osvdb.org/40507 - http://www.securityfocus.com/bid/25559 - http://www.securityfocus.com/archive/1/478628/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2007-09/0049.html - http://www.vupen.com/english/advisories/2007/3169 - http://www.quakesrc.org/forums/viewtopic.php?t=6843&start=1
CVE ID: CVE-2007-4755 State: PUBLISHED Published: 2007-09-08T01:00:00 Last Updated: 2024-08-07T15:08:33.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (client disconnect) by sending a client_connect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/aa2k7x-adv.txt - http://secunia.com/advisories/26819 - http://securityreason.com/securityalert/3105 - http://www.securityfocus.com/bid/25559 - https://exchange.xforce.ibmclo
- http://securityreason.com/securityalert/3105 - http://www.securityfocus.com/bid/25559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36465 - http://www.securityfocus.com/archive/1/478628/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2007-09/0049.html - http://osvdb.org/40508 - http://www.vupen.com/english/advisories/2007/3169 - http://www.quakesrc.org/forums/viewtopic.php?t=6843&start=1
CVE ID: CVE-2007-4756 State: PUBLISHED Published: 2007-09-08T01:00:00 Last Updated: 2024-08-07T15:08:33.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP client in Total Commander before 7.02 allows remote FTP servers to create or overwrite arbitrary files via "..\" (dot dot backslash) sequences in a filename. NOTE: the "..\" are not displayed when the user lists files. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/478720/100/0/threaded - http://secunia.com/advisories/26734 - http://osvdb.org/39838
://www.securityfocus.com/archive/1/478720/100/0/threaded - http://secunia.com/advisories/26734 - http://osvdb.org/39838 - http://www.ghisler.com/whatsnew.htm - http://www.securityfocus.com/bid/25581 - http://securityreason.com/securityalert/3106 - http://blog.hispasec.com/lab/advisories/adv_TotalCommander_7_01_Remote_Traversal.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/36487 - http://www.vupen.com/english/advisories/2007/3102 - http://www.securitytracker.com/id?1018662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36486
CVE ID: CVE-2007-4757 State: PUBLISHED Published: 2007-09-08T10:00:00 Last Updated: 2024-08-07T15:08:33.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the functions_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25579 - https://www.exploit-db.com/exploits/4368 - http://osvdb.org/38331 - http://www.vupen.com/english/advisories/2007/3112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36495