Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2067 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Marco Antonio Islas Cruz Web Slider (WebSlider) 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) index.php, (2) modules/pdf.php, (3) plugins/highlight.php, or (4) include/modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37439 - https://www.exploit-db.com/exploits/3745 - http://osvdb.org/37438 - http://osvdb.org/37437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33689 - htt
745 - http://osvdb.org/37438 - http://osvdb.org/37437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33689 - http://osvdb.org/37436 - http://www.vupen.com/english/advisories/2007/1397
CVE ID: CVE-2007-2068 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter to (1) mods/business_functions.php or (2) mods/ui_functions.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3749 - http://secunia.com/advisories/24890 - http://www.securityfocus.com/bid/23516 - http://osvdb.org/34969 - http://www.vupen.com/english/advisories/2007/1423 - http://osvdb.org/3497
focus.com/bid/23516 - http://osvdb.org/34969 - http://www.vupen.com/english/advisories/2007/1423 - http://osvdb.org/34970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33701
CVE ID: CVE-2007-2069 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in openMairie 1.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dsn[phptype] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33700 - http://www.securityfocus.com/bid/23505 - http://osvdb.org/37416 - http://www.vupen.com/english/advisories/2007/1421
CVE ID: CVE-2007-2070 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:49.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php or (2) checkout.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37415 - http://osvdb.org/37414 - http://www.vupen.com/english/advisories/2007/1422 - https://www.exploit-db.com/exploits/3748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33670 - http://www.securityfocus.co
.exploit-db.com/exploits/3748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33670 - http://www.securityfocus.com/bid/23511
CVE ID: CVE-2007-2071 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:49.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open-gorotto 2.0a 2006/02/08 edition, 2006/03/19 edition, and 2006/04/07 edition before 20070416 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) pub/modules/d/_top.html; (2) /pub/modules/a/_access.html; (3) _circletop.html or (4) _cir66.html in pub/modules/ci/; or (5) _fri66.html, (6) _inv66.html, (7) _top.html, (8) _friends.html, or (9) _fri33.html in pub/modules/f/. Additional Analyst Notes: - CVE Program Container: Referen
tml, (8) _friends.html, or (9) _fri33.html in pub/modules/f/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37594 - http://osvdb.org/37595 - http://release.open-gorotto.jp/ - http://www.vupen.com/english/advisories/2007/1398 - http://osvdb.org/37601 - http://osvdb.org/37599 - http://osvdb.org/37598 - http://osvdb.org/37593 - http://osvdb.org/37597 - http://osvdb.org/37596 - http://jvn.jp/jp/JVN%2384646028/index.html - http://www.securityfocus.com/bid/23507 - http://osvdb.org/37600 - http://release.open-gorotto.jp/openg_patch_20070416.tar.gz
CVE ID: CVE-2007-2072 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue has been disputed by third party researchers for 0.3, stating that the dir variable is properly initialized before use Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35395 - http://securityreason.com/securityalert/2580 - http://attrition.org/pipermail/vim/2007-April/001534.html - http://www.securityfocus.com/bid/
n.com/securityalert/2580 - http://attrition.org/pipermail/vim/2007-April/001534.html - http://www.securityfocus.com/bid/23519 - http://www.securityfocus.com/archive/1/465897/100/0/threaded
CVE ID: CVE-2007-2073 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the gallery parameter in a new session. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2007-April/001534.html - http://osvdb.org/35396
CVE ID: CVE-2007-2074 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions, which allows local users to gain privileges via mounted containers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24903 - http://www.vupen.com/english/advisories/2007/1418 - http://sourceforge.net/tracker/index.php?func=detail&aid=1696777&group_id=101952&atid=630783 - http://osvdb.org/34965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33674 - http://www.securityfocus.com/bid
- http://osvdb.org/34965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33674 - http://www.securityfocus.com/bid/23495
CVE ID: CVE-2007-2075 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33677 - http://www.vupen.com/english/advisories/2007/1418 - http://osvdb.org/34966 - http://sourceforge.net/tracker/index.php?func=detail&aid=1696780&group_id=101952&atid=630783 - http://
osvdb.org/34966 - http://sourceforge.net/tracker/index.php?func=detail&aid=1696780&group_id=101952&atid=630783 - http://www.securityfocus.com/bid/23495
CVE ID: CVE-2007-2076 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only briefly in v1.0." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33692 - http://www.securityfocus.com/archive/1/465853/100/0/threaded - http://archives.neohapsis.com/a
m/vulnerabilities/33692 - http://www.securityfocus.com/archive/1/465853/100/0/threaded - http://archives.neohapsis.com/archives/bugtraq/2007-04/0244.html - http://attrition.org/pipermail/vim/2007-April/001530.html - http://www.securityfocus.com/archive/1/465732/100/0/threaded - http://www.osvdb.org/34149
CVE ID: CVE-2007-2077 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this issue was fixed last year and [no] is longer a problem." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465857/100/0/threaded - http://archives.neohapsis.com/archives/bugtraq/2007-04/0244.html - http://
tyfocus.com/archive/1/465857/100/0/threaded - http://archives.neohapsis.com/archives/bugtraq/2007-04/0244.html - http://attrition.org/pipermail/vim/2007-April/001524.html - http://www.osvdb.org/34150 - http://www.securityfocus.com/archive/1/465731/100/0/threaded
CVE ID: CVE-2007-2078 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, since the path_to_folder variable is initialized before use Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35360 - http://securityreason.com/securityalert/2582 - http://www.securityfocus.com/archive/1/465735/100/0/threaded - http://archives.neohapsis.com/archives/bugt
yalert/2582 - http://www.securityfocus.com/archive/1/465735/100/0/threaded - http://archives.neohapsis.com/archives/bugtraq/2007-04/0244.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33708 - http://attrition.org/pipermail/vim/2007-April/001527.html
CVE ID: CVE-2007-2079 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:49.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the database server hostname, which allows remote attackers to trigger a library buffer overflow and execute arbitrary code via a long host parameter, or have other unspecified impact. NOTE: it could be argued that this is an issue in mssql_connect (CVE-2007-1411.1) in PHP, or an issue in the ADOdb Library, and the proper fix should be in one of these products; if so, then this should not be treated as a vulnerab
Odb Library, and the proper fix should be in one of these products; if so, then this should not be treated as a vulnerability in XAMPP. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33683 - http://osvdb.org/41594 - https://www.exploit-db.com/exploits/3738 - http://www.securityfocus.com/bid/23491
CVE ID: CVE-2007-2080 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers to execute arbitrary SQL commands via unspecified vectors in certain test scripts. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37440 - https://www.exploit-db.com/exploits/3738
CVE ID: CVE-2007-2081 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:49.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication requirements via the admin cookie parameter to certain admin files, as demonstrated by admin/settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465873/100/0/threaded - http://osvdb.org/41593 - http://www.securityfocus.com/bid/23521 - http://securityreason.com/securityalert/2581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34025
CVE ID: CVE-2007-2082 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465873/100/0/threaded - http://osvdb.org/35392 - http://securityreason.com/
es: - http://www.securityfocus.com/archive/1/465873/100/0/threaded - http://osvdb.org/35392 - http://securityreason.com/securityalert/2581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33707
CVE ID: CVE-2007-2083 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (system crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateKey and (2) NtDeleteFile functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465868/100/0/threaded - http://securityreason.com/securityalert/2591 - http://www.mato
//www.securityfocus.com/archive/1/465868/100/0/threaded - http://securityreason.com/securityalert/2591 - http://www.matousec.com/info/advisories/ZoneAlarm-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/33664 - http://osvdb.org/35239
CVE ID: CVE-2007-2084 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in MobilePublisherphp 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the auth_method parameter to (1) index.php, (2) list.php, (3) postreview.php, (4) reindex.php, (5) sections.php, (6) templates.php, (7) userinfo.php, (8) users.php, and (9) view.php in admin/. NOTE: this issue has been disputed by a reliable third party, who states that $auth_method is defined before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.c
method is defined before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465724/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33679 - http://www.osvdb.org/35325 - http://attrition.org/pipermail/vim/2007-April/001523.html - http://securityreason.com/securityalert/2583
CVE ID: CVE-2007-2085 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in oe2edit.cgi in oe2edit CMS allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23512 - http://osvdb.org/34972 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls45 - http://www.securityfocus.com/archive/1/465844/100/0/threaded - http://secunia.com/advisories/24919 - http://www.vupen.com/english/advisories/2007/1417 - https://exchange.xforce.ibmcl
http://secunia.com/advisories/24919 - http://www.vupen.com/english/advisories/2007/1417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33690
CVE ID: CVE-2007-2086 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in CNStats 2.9 allow remote attackers to execute arbitrary PHP code via a URL in the bj parameter to (1) who_r.php or (2) who_s.php in reports/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24902 - https://www.exploit-db.com/exploits/3741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33672 - http://www.securityfocus.com/bid/23501
CVE ID: CVE-2007-2087 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when register_globals is enabled and .htaccess is not recognized, allow remote attackers to execute arbitrary PHP code via a URL in the bn parameter to (1) who_r.php or (2) who_s.php in reports/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24902 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
rogram Container: References: - http://secunia.com/advisories/24902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33977
CVE ID: CVE-2007-2088 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) writerFile parameter to index.php and the (2) file parameter to Integrator.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33688 - http://securityreason.com/securityalert/2586 - http://www.securityfocus.com/archive/1/465860/100/0/threaded - http://osvdb.org/35394
CVE ID: CVE-2007-2089 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to com_articles.php in (1) components/ or (2) classes/html/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33663 - http://www.securityfocus.com/bid/23513 - http://www.securityfocus.com/archive/1
rce.ibmcloud.com/vulnerabilities/33663 - http://www.securityfocus.com/bid/23513 - http://www.securityfocus.com/archive/1/466059/100/0/threaded - http://www.vupen.com/english/advisories/2007/1394
CVE ID: CVE-2007-2090 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1374 - http://securityreason.com/securityalert/2585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33593 - http://www.securityfocus.com/archive/1/465515/100/0/threaded - http://secunia.com/advisories/24874
CVE ID: CVE-2007-2091 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in blocks/tsdisplay4xoops_block2.php in tsdisplay4xoops (TSD4XOOPS, aka the TeamSpeak display module) 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the xoops_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23518 - https://www.exploit-db.com/exploits/3750 - http://osvdb.org/37413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33695 - http://www.vupen.com/english/advisories/2007/1424
CVE ID: CVE-2007-2092 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) allows remote attackers to inject arbitrary PHP code into posts.txt via the name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1393
CVE ID: CVE-2007-2093 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23503 - https://www.exploit-db.com/exploits/3735 - http://www.vupen.com/english/advisories/2007/1393 - http://securityreason.com/securityalert/2590 - http://secunia.com/advisories/24904 - https://exchange.xforce.ibmcloud.com/vulnerabil
ityreason.com/securityalert/2590 - http://secunia.com/advisories/24904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33666 - http://www.securityfocus.com/archive/1/465864/100/0/threaded
CVE ID: CVE-2007-2094 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:51.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Anthologia 0.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the ads_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34083 - http://secunia.com/advisories/24908 - http://www.securityfocus.com/bid/23524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33705 - http://www.vupen.com/english/advisories/2007/1427 - https://www.exploit-db.com/exploits/3751
CVE ID: CVE-2007-2095 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in chat.php in MySpeach 1.9 allows remote attackers to execute arbitrary PHP code via a URL in the my[root] parameter, a different vector than CVE-2007-0498. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465721/100/0/threaded - http://securityreason.com/securityalert/2592
CVE ID: CVE-2007-2096 State: PUBLISHED Published: 2007-04-18T10:00:00 Last Updated: 2024-08-07T13:23:50.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in Hinton Design PHPHD Download System (phphd_downloads) allows remote attackers to execute arbitrary PHP code via a URL in the phphd_real_path parameter. NOTE: this issue may be present in versions from 2006. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33724 - http://www.securityfocus.com/archive/1/465983/100/0/threaded - http://securityreason.com/securityalert/2588