Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5031 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:17:27.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TSrvOptIA_NA::rebind method in SrvOptions/SrvOptIA_NA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via an invalid IA_NA option in a REBIND message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html - http://osvdb.org/40567 - http://secunia.com/advisories/26876 - http://klub.com.pl/dhcpv6/ - http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt - https
ries/26876 - http://klub.com.pl/dhcpv6/ - http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/36686 - http://www.securityfocus.com/bid/25726
CVE ID: CVE-2007-5032 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:17:28.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/480107/100/0/threaded - http://securityreason.com/securityalert/3157 - http://osvdb.org/42521
CVE ID: CVE-2007-5033 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:17:28.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profile_info editprofile action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38884 - http://securityreason.com/securityalert/3158 - http://www.securityfocus.com/bid/25750 - http://www.securityfocus.com/archive/1/480100/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36707
CVE ID: CVE-2007-5034 State: PUBLISHED Published: 2007-09-21T20:00:00 Last Updated: 2024-08-07T15:17:27.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26956 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10335 - http://bugzilla
s/26956 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10335 - http://bugzilla.elinks.cz/show_bug.cgi?id=937 - http://secunia.com/advisories/27062 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00335.html - http://secunia.com/advisories/27125 - http://www.debian.org/security/2007/dsa-1380 - http://secunia.com/advisories/26936 - http://www.redhat.com/support/errata/RHSA-2007-0933.html - http://www.securityfocus.com/archive/1/481606/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=297981 - http://www.securitytracker.com/id?1018764 - https://bugs.launchpad.net/ubuntu/+source/elinks/+bug/141018 - https://www.redha
://www.securitytracker.com/id?1018764 - https://bugs.launchpad.net/ubuntu/+source/elinks/+bug/141018 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00079.html - http://www.securityfocus.com/bid/25799 - http://www.ubuntu.com/usn/usn-519-1 - http://www.vupen.com/english/advisories/2007/3278 - http://secunia.com/advisories/27132 - http://secunia.com/advisories/26949 - http://secunia.com/advisories/27038
CVE ID: CVE-2007-5035 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in html/modules/extranet_profile/main.php in openEngine 1.9 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the this_module_path parameter. NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for the file, before reaching the include statement Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-03-openengine/ - http://osvdb.org/38727 - http://www.security
r: References: - http://arfis.wordpress.com/2007/09/14/rfi-03-openengine/ - http://osvdb.org/38727 - http://www.securityfocus.com/bid/25716
CVE ID: CVE-2007-5036 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:27.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the "files filter." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4426 - http://www.securityfocus.com/bid/25715 - http://www.vupen.com/english/advisories/2007/3226 - http://www.sybsecurity.com/a
ttp://www.securityfocus.com/bid/25715 - http://www.vupen.com/english/advisories/2007/3226 - http://www.sybsecurity.com/advisors/SYBSEC-ADV01-Airsensor_M520_HTTPD_Remote_Preauth_Denial_Of_Service_and_Buffer_Overflow_PoC - https://exchange.xforce.ibmcloud.com/vulnerabilities/36691 - http://secunia.com/advisories/26869
CVE ID: CVE-2007-5037 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:27.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40563 - http://secunia.com/advisories/27616 - http://sourceforge.net/project/shownotes.php?release_id=540277&group_id=171752 - http://www.securityfocus.com/bid/25724 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00228.html
://www.securityfocus.com/bid/25724 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00228.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443913 - http://secunia.com/advisories/28221 - http://www.debian.org/security/2007/dsa-1440 - http://secunia.com/advisories/26825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36687
CVE ID: CVE-2007-5038 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation. Additional Analyst Notes: - CVE Program Container: References: - http://fedoranews.org/updates/FEDORA-2007-229.shtml - https://bugzilla.mozilla.org/show_bug.cgi?id=395632 - http://www.vupen.com/english/advisories/2007/3200 - http://www.securityfocus.com/archive/1/480077/1
_bug.cgi?id=395632 - http://www.vupen.com/english/advisories/2007/3200 - http://www.securityfocus.com/archive/1/480077/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=299981 - http://secunia.com/advisories/26969 - http://www.securitytracker.com/id?1018719 - http://secunia.com/advisories/26848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36692 - http://www.securityfocus.com/bid/25725 - http://www.bugzilla.org/security/3.0.1/
CVE ID: CVE-2007-5039 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:27.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtQueryValueKey, (4) NtSetSystemInformation, and (5) NtSetValueKey kernel SSDT hooks. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3161 - http://osvdb.org/45895 - http://www.matousec.com/info
iner: References: - http://securityreason.com/securityalert/3161 - http://osvdb.org/45895 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2007-5040 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtCreateThread, (3) NtDeleteValueKey, (4) NtQueryValueKey, (5) NtSetSystemInformation, and (6) NtSetValueKey kernel SSDT hooks. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3161 - http://www.matousec.com/info/adv
: - CVE Program Container: References: - http://securityreason.com/securityalert/3161 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2007-5041 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:27.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey and (2) NtOpenProcess kernel SSDT hooks. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3161 - http://osvdb.org/45896 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.c
svdb.org/45896 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2007-5042 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteFile, (3) NtLoadDriver, (4) NtOpenProcess, (5) NtOpenSection, (6) NtOpenThread, and (7) NtUnloadDriver kernel SSDT hooks, a partial regression of CVE-2006-7160. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityal
of CVE-2006-7160. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3161 - http://osvdb.org/45899 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2007-5043 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:27.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to (1) cause a denial of service (crash) and possibly gain privileges via the NtCreateSection kernel SSDT hook or (2) cause a denial of service (avp.exe service outage) via the NtLoadDriver kernel SSDT hook. NOTE: this issue may partially overlap CVE-2006-3074. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securitya
rlap CVE-2006-3074. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3161 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2007-5044 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreatePort and (2) NtDeleteFile kernel SSDT hooks, a partial regression of CVE-2007-2083. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3161 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www
on.com/securityalert/3161 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://www.securityfocus.com/archive/1/479830/100/0/threaded - http://osvdb.org/45898
CVE ID: CVE-2007-5045 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter containing the Firefox "-chrome" argument. NOTE: this is a related issue to CVE-2006-4965 and the result of an incomplete fix for CVE-2007-3670. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announc
CVE-2007-3670. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2007/mfsa2007-28.html - https://bugzilla.mozilla.org/show_bug.cgi?id=395942 - http://www.securityfocus.com/archive/1/479179/100/0/threaded - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5896 - http://www.vupen.com/english/advisories/2007/3197 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - http://secunia.com/advisories/26881 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.gnuci
m/advisories/26881 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1
CVE ID: CVE-2007-5046 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribute of an element in an email message body, as demonstrated by the onload attribute in a BODY element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25708 - http://secunia.com/advisories/26877 - http://www.mwrinfosecurity.com/publications/mwri_merak-webmail-xss-advisory_2008-09-17.
//secunia.com/advisories/26877 - http://www.mwrinfosecurity.com/publications/mwri_merak-webmail-xss-advisory_2008-09-17.pdf - http://www.vupen.com/english/advisories/2007/3225 - http://osvdb.org/37428
CVE ID: CVE-2007-5047 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutant and NtOpenEvent function hooks are already covered by CVE-2007-1793. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45897 - http://securityreason.com/securityalert/3161 - http://www.matousec.com
Container: References: - http://osvdb.org/45897 - http://securityreason.com/securityalert/3161 - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2007-5048 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive. Additional Analyst Notes: - CVE Program Container: References: - http://www7a.biglobe.ne.jp/~schezo/arj_vul.html - http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20070921 - http://jvn.jp/jp/JVN%2370734805/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36718 - http://secunia.com/advisories/26907 - http://www.securityfocus.com/bid/25754 - http://osvdb.org/40582
CVE ID: CVE-2007-5049 State: REJECTED Published: 2007-09-24T00:00:00 Last Updated: 2007-10-02T09:00:00 Description: No description available.
CVE ID: CVE-2007-5050 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36717 - http://osvdb.org/38728 - http://www.securityfocus.com/archive/1/480233/100/0/threaded - http://www.vupen.com/english/advisories/2007/3248 - https://www.exploit-db.com/exploits/4439
CVE ID: CVE-2007-5051 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:27.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) box_width, (2) PEDIGREE_GENERATIONS, and (3) rootid parameters in ancestry.php, and the (4) newpid parameter in timeline.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26922 - http://www.debian.org/security/2008/dsa-15
- CVE Program Container: References: - http://secunia.com/advisories/26922 - http://www.debian.org/security/2008/dsa-1559 - http://secunia.com/advisories/29954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36720 - http://www.securityfocus.com/bid/25756
CVE ID: CVE-2007-5052 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T15:17:28.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with (1) the title parameter or (2) a "title=" sequence in the PATH_INFO, or a request to the download module with (3) the cat parameter or (4) a "cat=" sequence in the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36712 - h
erences: - http://securityreason.com/securityalert/3162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36712 - http://secunia.com/advisories/26913 - http://www.securityfocus.com/archive/1/480117/100/0/threaded - http://www.securityfocus.com/bid/25752
CVE ID: CVE-2007-5053 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php; or a URL in the language_home parameter to (3) search/search.php, (4) poll/inlinepoll.php, (5) poll/showpoll.php, (6) links/showlinks.php, or (7) links/submit_links.php in modules/; related to missing checks in (a) modules/moduleSec.php and (b) include/includeSec.php for inclus
_links.php in modules/; related to missing checks in (a) modules/moduleSec.php and (b) include/includeSec.php for inclusion of certain URLs, as demonstrated by an ftps:// URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4441
CVE ID: CVE-2007-5054 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the gsLanguage parameter to (1) search/search.php, (2) poll/inlinepoll.php, (3) poll/showpoll.php, (4) links/showlinks.php, or (5) links/submit_links.php in modules/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26931 - https://www.exploit-db.com/exploits/4441 - http://www.vupen.com/english/advisories/2007/3260 - https://exchange.
26931 - https://www.exploit-db.com/exploits/4441 - http://www.vupen.com/english/advisories/2007/3260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36734
CVE ID: CVE-2007-5055 State: PUBLISHED Published: 2007-09-24T22:00:00 Last Updated: 2024-08-07T15:17:28.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36735 - https://www.exploit-db.com/exploits/4441 - http://www.vupen.com/english/advisories/2007/326
.com/vulnerabilities/36735 - https://www.exploit-db.com/exploits/4441 - http://www.vupen.com/english/advisories/2007/3260