Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
//secunia.com/advisories/25056 - http://secunia.com/advisories/27110 - http://www.debian.org/security/2007/dsa-1283 - http://www.osvdb.org/33962 - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://www.vupen.com/english/advisories/2007/2016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33510 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6067 - http://secunia.com/advisories/25062 - http://www.php-security.org/MOPB/PMOPB-45-2007.html - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html - http://secunia.com/advisories/24824 - http://www.trust
m/archives/fedora-package-announce/2007-September/msg00397.html - http://secunia.com/advisories/24824 - http://www.trustix.org/errata/2007/0023/ - http://www.ubuntu.com/usn/usn-455-1 - http://www.vupen.com/english/advisories/2007/3386 - http://secunia.com/advisories/27037 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.482863 - http://www.php.net/releases/5_2_3.php - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/25535 - http://secunia.com/advisories/27102 - http://secunia.com/advisories/25445 - http:/
http://secunia.com/advisories/25535 - http://secunia.com/advisories/27102 - http://secunia.com/advisories/25445 - http://www.securityfocus.com/bid/23359 - http://secunia.com/advisories/25057 - http://www.novell.com/linux/security/advisories/2007_32_php.html
CVE ID: CVE-2007-1901 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:13:41.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonicBB 1.0 allows remote attackers to obtain sensitive information via the (1) by[] parameter to search.php, (2) p[] parameter to viewforum.php, and the (3) id parameter to (a) viewforum.php or (b) members.php, which reveal the installation path in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33906 - http://www.netvigilance.com/advisory0018 - http://www.securityfocus.com/archive/1/468535/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/
8 - http://www.securityfocus.com/archive/1/468535/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34259 - http://www.vupen.com/english/advisories/2007/1816 - http://osvdb.org/34701 - http://secunia.com/advisories/25279 - http://osvdb.org/34703 - http://marc.info/?l=full-disclosure&m=117914586003786&w=2 - http://osvdb.org/34702
CVE ID: CVE-2007-1902 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:13:41.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34258 - http://marc.info/?l=full-disclosure&m=117914598917534&w=2 - http://www.netvigilance.com/advisory0019 - http://www.vupen.com/english/advisories/2007/1816 - http://www.securityfocus.com/archive
netvigilance.com/advisory0019 - http://www.vupen.com/english/advisories/2007/1816 - http://www.securityfocus.com/archive/1/468536/100/0/threaded - http://secunia.com/advisories/25279 - http://www.securityfocus.com/bid/23964 - http://www.osvdb.org/33907
CVE ID: CVE-2007-1903 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:13:41.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=117914615830702&w=2 - http://www.securityfocus.com/archive/1/468537/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34256 - http://www.vupen.com/english/advisories/2007/1816 - http://secunia.com/advisories/25279 - http://www.osvdb.org/34042 - http://
/www.vupen.com/english/advisories/2007/1816 - http://secunia.com/advisories/25279 - http://www.osvdb.org/34042 - http://www.netvigilance.com/advisory0020 - http://www.securityfocus.com/bid/23963
CVE ID: CVE-2007-1904 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. (dot dot) in a filename in a file transfer operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33538 - http://www.vupen.com/english/advisories/2007/1307 - http://www.securitytracker.com/id?1017891 - http://labs
ties/33538 - http://www.vupen.com/english/advisories/2007/1307 - http://www.securitytracker.com/id?1017891 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=508 - http://secunia.com/advisories/24803 - http://www.securityfocus.com/bid/23391 - http://secunia.com/advisories/24747 - http://www.vupen.com/english/advisories/2007/1306
CVE ID: CVE-2007-1905 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in auth.php in Pineapple Technologies QuizShock 1.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via encoded special characters in the forward_to parameter, as demonstrated using "&lt;&quot;&lt;". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24831 - http://www.vupen.com/english/advisories/2007/1319 - http://www.securityfocus.com/bid/23368 - http://archives.neohapsis.com/archives/bugtraq/2007-04/0144.html -
/2007/1319 - http://www.securityfocus.com/bid/23368 - http://archives.neohapsis.com/archives/bugtraq/2007-04/0144.html - http://john-martinelli.com/work/quizshock.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/33523 - http://securityreason.com/securityalert/2554
CVE ID: CVE-2007-1906 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the first parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1315 - http://www.securityfocus.com/bid/23377 - http://secunia.com/advisories/24825 - http://osvdb.org/34776 - http://www.expw0rm.com/hot-editor-v40-local-file-inclusion_no113.
ecunia.com/advisories/24825 - http://osvdb.org/34776 - http://www.expw0rm.com/hot-editor-v40-local-file-inclusion_no113.html - http://www.securityfocus.com/archive/1/465092/100/0/threaded - http://www.expw0rm.com/mybb-hot-editor-plugin-local-file-inclusion_no114.html - http://www.securityfocus.com/archive/1/465094/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33521 - http://securityreason.com/securityalert/2533
CVE ID: CVE-2007-1907 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in warn.php in Pathos Content Management System (CMS) 0.92-2 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23393 - https://www.exploit-db.com/exploits/3696 - http://www.vupen.com/english/advisories/2007/1321 - http://osvdb.org/37394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33536
CVE ID: CVE-2007-1908 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the file_exists function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33525 - http://www.vupen.com/english/advisories/2007/1314 - http://www.securityfocus.com/bid/23392 - http://sec
bilities/33525 - http://www.vupen.com/english/advisories/2007/1314 - http://www.securityfocus.com/bid/23392 - http://secunia.com/advisories/24818 - http://osvdb.org/34720
CVE ID: CVE-2007-1909 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Ryan Haudenschilt Battle.net Clan Script for PHP 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24838 - http://www.vupen.com/english/advisories/2007/1313 - http://osvdb.org/34747 - https://www.exploit-db.com/exploits/3691 - http://www.securityfocus.com/bid/23383
CVE ID: CVE-2007-1910 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted document, as demonstrated by file789-1.doc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23380 - https://www.exploit-db.com/exploits/3690 - http://www.securitytracker.com/id?1017902
CVE ID: CVE-2007-1911 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU consumption) via crafted documents, as demonstrated by (1) file798-1.doc and (2) file613-1.doc, possibly related to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3690
CVE ID: CVE-2007-1912 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017901 - http://www.securityfocus.com/bid/23382 - https://www.exploit-db.com/exploits/3693
CVE ID: CVE-2007-1913 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to verify the existence of users and groups on systems and domains via unspecified vectors, a different vulnerability than CVE-2006-6010. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. Additional Analyst Notes: - CVE Program Container: References: - http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_TRUSTED_SYSTEM_SECURITY_RFC_Function
am Container: References: - http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_TRUSTED_SYSTEM_SECURITY_RFC_Function_Information_Disclosure.pdf - http://www.securityfocus.com/bid/23305 - http://www.securityfocus.com/archive/1/464669/100/0/threaded - http://secunia.com/advisories/24722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33423 - http://www.vupen.com/english/advisories/2007/1270 - http://securityreason.com/securityalert/2535
CVE ID: CVE-2007-1914 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to obtain sensitive information (external RFC server configuration data) via unspecified vectors, a different vulnerability than CVE-2006-6010. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2538 - http://www.securityfocus.com/bid/23313 - http
am Container: References: - http://securityreason.com/securityalert/2538 - http://www.securityfocus.com/bid/23313 - http://www.securityfocus.com/archive/1/464678/100/0/threaded - http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_RFC_START_PROGRAM_RFC_Function_Multiple_Vulnerabilities.pdf - http://secunia.com/advisories/24722 - http://www.vupen.com/english/advisories/2007/1270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33422
CVE ID: CVE-2007-1915 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2538 - http://www.securityfocus.com/bid/23313 - http://www.securityfocus.com/archive/1/464678/100/0/threaded - http://www.cybs
http://www.securityfocus.com/bid/23313 - http://www.securityfocus.com/archive/1/464678/100/0/threaded - http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_RFC_START_PROGRAM_RFC_Function_Multiple_Vulnerabilities.pdf - http://secunia.com/advisories/24722 - http://www.vupen.com/english/advisories/2007/1270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33421
CVE ID: CVE-2007-1916 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. Additional Analyst Notes: - CVE Program Container: References: - http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_RFC_START_GUI_RFC_Function_Buffer_Overflow.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/33420 - http
y_SAP_RFC_START_GUI_RFC_Function_Buffer_Overflow.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/33420 - http://www.securityfocus.com/bid/23304 - http://securityreason.com/securityalert/2537 - http://www.securityfocus.com/archive/1/464680/100/0/threaded - http://secunia.com/advisories/24722 - http://www.vupen.com/english/advisories/2007/1270
CVE ID: CVE-2007-1917 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. Additional Analyst Notes: - CVE Program Container: References: - http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_SYSTEM_CREATE_INSTANCE_RFC_Function_Buffer_Overflow.pdf - http://www.securityfocus.com/archive/1/464683/1
y_Advisory_SAP_SYSTEM_CREATE_INSTANCE_RFC_Function_Buffer_Overflow.pdf - http://www.securityfocus.com/archive/1/464683/100/0/threaded - http://secunia.com/advisories/24722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33416 - http://www.vupen.com/english/advisories/2007/1270 - http://securityreason.com/securityalert/2536 - http://www.securityfocus.com/bid/23307
CVE ID: CVE-2007-1918 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows remote attackers to cause a denial of service (client lockout) via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. Additional Analyst Notes: - CVE Program Container: References: - http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_RFC_SET_REG_SERVER_PROPERTY_RFC_F
ogram Container: References: - http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_RFC_SET_REG_SERVER_PROPERTY_RFC_Function_Denial_of_Service.pdf - http://www.securityfocus.com/bid/23309 - http://securityreason.com/securityalert/2540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33418 - http://secunia.com/advisories/24722 - http://www.vupen.com/english/advisories/2007/1270 - http://www.securityfocus.com/archive/1/464685/100/0/threaded
CVE ID: CVE-2007-1919 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Arizona Dream Livre d'or (livor) 2.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35280 - http://www.securityfocus.com/bid/23353 - http://www.securityfocus.com/archive/1/464888/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33490
CVE ID: CVE-2007-1920 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24802 - http://www.vupen.com/english/advisories/2007/1298 - http://osvdb.org/34745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33476 - http://www.securityfocus.com/bid/23356 - https://www.exploit-db.com/exploits/3678
CVE ID: CVE-2007-1921 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arbitrary code via a crafted .MAT file that contains a value that is used as an offset, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34432 - http://www.securitytracker.com/id?1017886 - http://www.piotrbania.com/all/adv/nullsoft-winamp-libsndfile-adv.txt - http://www.securityfocus.com/archive/1/464889/100/0/threaded - http://www.vupen.com/engli
ft-winamp-libsndfile-adv.txt - http://www.securityfocus.com/archive/1/464889/100/0/threaded - http://www.vupen.com/english/advisories/2007/1286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33481 - http://securityreason.com/securityalert/2541 - http://secunia.com/advisories/24766 - http://marc.info/?l=dailydave&m=117589848432659&w=2 - http://www.securityfocus.com/bid/23351
CVE ID: CVE-2007-1922 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules in IN_MOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted (1) .IT or (2) .S3M file containing integer values that are used as memory offsets, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33480 - http://marc.info/?l=dailydave&m=117590046601511&w=2 - http://marc.info/?l=daily
rce.ibmcloud.com/vulnerabilities/33480 - http://marc.info/?l=dailydave&m=117590046601511&w=2 - http://marc.info/?l=dailydave&m=117589949000906&w=2 - http://www.piotrbania.com/all/adv/nullsoft-winamp-it_module-in_mod-adv.txt - http://www.vupen.com/english/advisories/2007/1286 - http://osvdb.org/34430 - http://osvdb.org/34431 - http://www.piotrbania.com/all/adv/nullsoft-winamp-s3m_module-in_mod-adv.txt - http://www.securityfocus.com/archive/1/464893/100/0/threaded - http://www.securityfocus.com/archive/1/464890/100/0/threaded - http://www.securityfocus.com/bid/23350 - http://securityreason.com/securityalert/2532
CVE ID: CVE-2007-1923 State: PUBLISHED Published: 2007-04-10T00:00:00 Last Updated: 2024-08-07T13:13:41.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33494 - http://securityreason.com/securityalert/2552 - http://osvdb.org/38217 - http://www.securityfocus.com/bid/23352 - http://ww
tp://securityreason.com/securityalert/2552 - http://osvdb.org/38217 - http://www.securityfocus.com/bid/23352 - http://www.securityfocus.com/archive/1/464880/100/0/threaded - https://github.com/ledgersmb/LedgerSMB/blob/master/Changelog
CVE ID: CVE-2007-1924 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpContact allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) contact_business.php or (2) contact_person.php. NOTE: this issue is disputed by CVE and a reliable third party, because include_path is initialized to a fixed value before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/464877/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-April/001495.html -
/www.securityfocus.com/archive/1/464877/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-April/001495.html - http://securityreason.com/securityalert/2528
CVE ID: CVE-2007-1925 State: PUBLISHED Published: 2007-04-10T23:00:00 Last Updated: 2024-08-07T13:13:41.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The borrado function in modules/Your_Account/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that account deletion requests come from the account owner, which allows remote authenticated users to delete arbitrary accounts via a modified cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1285 - http://www.securityfocus.com/bid/23354 - http://truzone.org/modules.php?name=Forums&file=viewtopic&p=287012 - https://exchange.xforce.ibmcloud.com/vulnerab