Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
efinition/oval%3Aorg.mitre.oval%3Adef%3A10704 - http://secunia.com/advisories/26933 - http://docs.info.apple.com/article.html?artnum=307177 - http://osvdb.org/36488 - http://secunia.com/advisories/26314 - http://dev2dev.bea.com/pub/advisory/248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35168 - http://secunia.com/advisories/25769 - http://secunia.com/advisories/26369 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102958-1 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://www.redhat.com/support/errata/RHSA-2007-0956.html - http://secunia.com/advisories/26645 - http://www.vupen.com/english/advisories/2007/4224 - http://www.vupen.com/eng
tml - http://secunia.com/advisories/26645 - http://www.vupen.com/english/advisories/2007/4224 - http://www.vupen.com/english/advisories/2007/3009 - http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml - http://secunia.com/advisories/28115 - http://www.vupen.com/english/advisories/2007/2383 - http://secunia.com/advisories/27203 - http://www.securitytracker.com/id?1018327 - http://www.redhat.com/support/errata/RHSA-2007-0829.html - http://www.securityfocus.com/bid/24690 - http://secunia.com/advisories/26631
CVE ID: CVE-2007-3504 State: PUBLISHED Published: 2007-06-30T01:00:00 Last Updated: 2024-08-07T14:21:35.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants file overwrite privileges to itself. NOTE: this can be leveraged to execute arbitrary code by overwriting a .java.policy file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2384 - http://do
onal Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2384 - http://docs.info.apple.com/article.html?artnum=307177 - http://www.securitytracker.com/id?1018328 - http://osvdb.org/37755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35169 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://www.vupen.com/english/advisories/2007/4224 - http://secunia.com/advisories/25823 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102957-1 - http://secunia.com/advisories/28115 - http://www.securityfocus.com/archive/1/472673/100/0/threaded - http://www.securityfocus.com/bid/24695
CVE ID: CVE-2007-3505 State: PUBLISHED Published: 2007-07-02T19:00:00 Last Updated: 2024-08-07T14:21:36.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) sequence in the lang parameter to (1) qtf_checkname.php, (2) qtf_j_birth.php, or (3) qtf_j_exists.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36486 - http://osvdb.org/36487 - http://osvdb.org/36485 - http://secunia.com/advisories/25868 - http://www.securityfocus.com/bid/24671 - https://www.exploit-db.com/exploits/4115 - http://www.v
.com/advisories/25868 - http://www.securityfocus.com/bid/24671 - https://www.exploit-db.com/exploits/4115 - http://www.vupen.com/english/advisories/2007/2373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35117
CVE ID: CVE-2007-3506 State: PUBLISHED Published: 2007-07-02T19:00:00 Last Updated: 2024-08-07T14:21:36.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ft_bitmap_assure_buffer function in src/base/ftbimap.c in FreeType 2.3.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors involving bitmap fonts, related to a "memory buffer overwrite bug." Additional Analyst Notes: - CVE Program Container: References: - http://savannah.nongnu.org/bugs/index.php?19536 - http://www.securityfocus.com/bid/24708 - http://secunia.com/advisories/25884 - http://cvs.savannah.nongnu.org/viewvc/freetype2/src/base/ftbitmap.c?r
/bid/24708 - http://secunia.com/advisories/25884 - http://cvs.savannah.nongnu.org/viewvc/freetype2/src/base/ftbitmap.c?root=freetype&r1=1.17&r2=1.18 - https://sourceforge.net/project/shownotes.php?group_id=3157&release_id=499970
CVE ID: CVE-2007-3507 State: PUBLISHED Published: 2007-07-02T19:00:00 Last Updated: 2024-08-07T14:21:36.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or flac) before 0.0.10 allows user-assisted remote attackers to execute arbitrary code via a large comment value_length. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2854 - http://sourceforge.net/forum/forum.php?forum_id=710314 - http://www.vupen.com/english/advisories/2007/2420 - http://security.gentoo.org/glsa/glsa-200709-06.xml - http://www.securityf
//www.vupen.com/english/advisories/2007/2420 - http://security.gentoo.org/glsa/glsa-200709-06.xml - http://www.securityfocus.com/bid/24712 - http://osvdb.org/40524 - http://www.isecpartners.com/advisories/2007-002-flactools.txt - http://secunia.com/advisories/26827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35175 - http://www.securityfocus.com/archive/1/472504/100/0/threaded
CVE ID: CVE-2007-3508 State: PUBLISHED Published: 2007-07-03T21:00:00 Last Updated: 2024-08-07T14:21:36.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24758 - http://bugs.gentoo.org/show_bug.cgi?id=183844 - http://www.sourceware.org/ml/libc-hacker/2007-07/msg00001.html - http://www.vu
/bugs.gentoo.org/show_bug.cgi?id=183844 - http://www.sourceware.org/ml/libc-hacker/2007-07/msg00001.html - http://www.vupen.com/english/advisories/2007/2418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35240 - http://osvdb.org/37901 - http://www.securitytracker.com/id?1018334 - http://secunia.com/advisories/25864 - http://security.gentoo.org/glsa/glsa-200707-04.xml - http://sources.gentoo.org/viewcvs.py/gentoo/src/patchsets/glibc/2.5/1600_all_glibc-hwcap-mask-secure.patch?rev=1.1&view=markup
CVE ID: CVE-2007-3509 State: PUBLISHED Published: 2007-07-12T01:00:00 Last Updated: 2024-08-07T14:21:36.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service (process exit) and possibly execute arbitrary code via crafted ncacn_ip_tcp requests. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=553 - http://www.vupen.com/english/advisories/2007/2505 - http://secunia.com/advisories/26032 - http://www.securityfocus.com/bid/23897 - http://www.
nglish/advisories/2007/2505 - http://secunia.com/advisories/26032 - http://www.securityfocus.com/bid/23897 - http://www.securitytracker.com/id?1018366 - http://www.osvdb.org/36111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35340 - http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11a.html - http://www.kb.cert.org/vuls/id/213697
CVE ID: CVE-2007-3510 State: PUBLISHED Published: 2007-10-29T21:00:00 Last Updated: 2024-08-07T14:21:35.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authenticated users to execute arbitrary code via a long mailbox name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37365 - http://www-1.ibm.com/support/docview.wss?uid=swg21270623 - http://www.vupen.com/english/advisories/2007/3598 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=605 - http://www.securityfocus.com/bid/26176
598 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=605 - http://www.securityfocus.com/bid/26176 - http://secunia.com/advisories/27321 - http://www.securitytracker.com/id?1018854
CVE ID: CVE-2007-3511 State: PUBLISHED Published: 2007-07-03T10:00:00 Last Updated: 2024-08-07T14:21:36.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24725 - https://www.redhat.com/archives/fedora-package-announce/2007-October/ms
nces: - http://www.securityfocus.com/bid/24725 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html - http://www.securityfocus.com/archive/1/482876/100/200/threaded - http://www.vupen.com/english/advisories/2007/3587 - http://secunia.com/advisories/27414 - http://www.securityfocus.com/archive/1/482925/100/0/threaded - https://issues.rpath.com/browse/RPL-1858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35299 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27298 - http://securitytracker.com/id?1018837 - http://secunia.com/advisories/27327 - http://www.vupen.com/english/advisories/2007/
p://securitytracker.com/id?1018837 - http://secunia.com/advisories/27327 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com/advisories/27276 - https://usn.ubuntu.com/535-1/ - http://www.debian.org/security/2007/dsa-1401 - http://www.debian.org/security/2007/dsa-1392 - http://www.redhat.com/support/errata/RHSA-2007-0980.html - http://secunia.com/advisories/27383 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - http://secunia.com/advisories/27356 - http://www.redhat.com/support/errata/RHSA-2007-0981.html - http://osvdb.org/37994 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/27387 - http://sla.ckers.org/forum/re
http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/27387 - http://sla.ckers.org/forum/read.php?3%2C13142 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html - http://secunia.com/advisories/27403 - http://secunia.com/advisories/27336 - http://www.debian.org/security/2007/dsa-1396 - http://secunia.com/advisories/27425 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0646.html - http://www.mozilla.org/security/announce/2007/mfsa2007-32.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9763
nt.jsp?objectID=c00771742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9763 - http://secunia.com/advisories/27325 - http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 - http://www.redhat.com/support/errata/RHSA-2007-0979.html - http://secunia.com/advisories/27335 - http://secunia.com/advisories/25904 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html - http://secunia.com/advisories/27480 - http://yathong.googlepages.com/FirefoxFocusBug.html - http://secunia.com/advisories/27680 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0658.html - http://support.novell.com/techcenter/psdb/60eb9
ttp://archives.neohapsis.com/archives/fulldisclosure/2007-06/0658.html - http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://www.securityfocus.com/archive/1/482932/100/200/threaded - http://www.ubuntu.com/usn/usn-536-1
CVE ID: CVE-2007-3512 State: PUBLISHED Published: 2007-07-03T10:00:00 Last Updated: 2024-08-07T14:21:36.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Lhaca File Archiver before 1.22 allows user-assisted remote attackers to execute arbitrary code via a large LHA "Extended Header Size" value in an LZH archive, a different issue than CVE-2007-3375. Additional Analyst Notes: - CVE Program Container: References: - http://park8.wakwak.com/~app/Lhaca/overflow.html - http://www.vupen.com/english/advisories/2007/2399 - http://vuln.sg/lhaca121-en.html - http://secunia.com/advisories/25797 - http://osvdb.org/37802 - https://exchange.xforce.ibmcloud.com/v
lhaca121-en.html - http://secunia.com/advisories/25797 - http://osvdb.org/37802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35297
CVE ID: CVE-2007-3513 State: PUBLISHED Published: 2007-07-03T10:00:00 Last Updated: 2024-08-07T14:21:36.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0940.html - http://osvdb.org/37116 - http://secunia.com/advisories/27212 - http://secunia.com/advisories/27227 - http://secunia.com/advisories/26664 - http://secunia.com/advisories/26643 - http://www.
//secunia.com/advisories/27227 - http://secunia.com/advisories/26664 - http://secunia.com/advisories/26643 - http://www.novell.com/linux/security/advisories/2007_51_kernel.html - http://www.novell.com/linux/security/advisories/2007_53_kernel.html - http://secunia.com/advisories/27322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35302 - http://www.ubuntu.com/usn/usn-510-1 - http://www.debian.org/security/2007/dsa-1356 - http://www.ubuntu.com/usn/usn-509-1 - http://www.securityfocus.com/bid/24734 - http://www.ubuntu.com/usn/usn-489-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 - http://secunia.com/advisories/25895 - http://www.kernel.org/pub/linux/kernel/v2.6/te
ty/advisories?name=MDKSA-2007:196 - http://secunia.com/advisories/25895 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.22-rc7 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9883 - http://secunia.com/advisories/26450 - http://www.vupen.com/english/advisories/2007/2403 - http://secunia.com/advisories/26139 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:195
CVE ID: CVE-2007-3514 State: PUBLISHED Published: 2007-07-03T10:00:00 Last Updated: 2024-08-07T14:21:36.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute to a file:// location, a different vector than CVE-2007-3482. Additional Analyst Notes: - CVE Program Container: References: - http://www.0x000000.com/?i=371 - http://osvdb.org/38861
CVE ID: CVE-2007-3515 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35189 - http://osvdb.org/36337 - https://www.exploit-db.com/exploits/4130 - http://www.vupen.com/english/advisories/2007/2401 - http://secunia.com/advisories/25899
CVE ID: CVE-2007-3516 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in kayit.asp in Gorki Online Santrac Sitesi allow remote attackers to inject arbitrary web script or HTML via the (1) kullanici, (2) posta, or (3) takim_adi parameter to uyeler.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24735 - http://osvdb.org/37530 - https://exchange.xforce.ibmcloud.com/vulnerabilities
- http://www.securityfocus.com/bid/24735 - http://osvdb.org/37530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35224 - http://secunia.com/advisories/25908
CVE ID: CVE-2007-3517 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF) to (1) index.php, (2) demo/claroline170/index.php, and possibly other scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.claroline.net/forum/viewtopic.php?t=11920 - http://osvdb.org/36334 - http://www.vupen.com/english/advisories/2007/2402 - http://osvdb.org/36333 - http://secunia.com/advisories/25887 - http://www.securityfocus.com/bi
sh/advisories/2007/2402 - http://osvdb.org/36333 - http://secunia.com/advisories/25887 - http://www.securityfocus.com/bid/24742
CVE ID: CVE-2007-3518 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in msg.php in HispaH YouTube Clone Script (youtubeclone) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25922 - http://www.securityfocus.com/bid/24720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35192 - http://www.vupen.com/english/advisories/2007/2400 - http://osvdb.org/36328 - https://www.exploit-db.com/exploits/4136
CVE ID: CVE-2007-3519 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25915 - http://www.securityfocus.com/bid/24721 - https://www.exploit-db.com/exploits/4135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35193 - http://osvdb.org/36338 - http://www.vupen.com/english/advisories/2007/2404
CVE ID: CVE-2007-3520 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:35.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25901 - http://www.securityfocus.com/bid/24723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35196 - http://www.vupen.com/english/advisories/2007/2406 - https://www.exploit-db.com/exploits/4134 - http://osvdb.org/36355
CVE ID: CVE-2007-3521 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL commands via a usercookie cookie. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36367 - http://secunia.com/advisories/25916 - https://www.exploit-db.com/exploits/4133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35198 - http://www.securityfocus.com/bid/24731
CVE ID: CVE-2007-3522 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the SpellIncPath parameter to (1) spellcheckpageinc.php, (2) spellchecktext.php, (3) spellcheckwindow.php, or (4) spellcheckwindowframeset.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24727 - http://www.vupen.com/english/advisories/2007/2408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35194 - http://osvdb.org/38966 - http://osvd
advisories/2007/2408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35194 - http://osvdb.org/38966 - http://osvdb.org/38967 - https://www.exploit-db.com/exploits/4132 - http://osvdb.org/38964 - http://osvdb.org/38965
CVE ID: CVE-2007-3523 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) Ent or (2) Lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24724 - https://www.exploit-db.com/exploits/4131 - http://osvdb.org/38963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35191 - http://www.vupen.com/english/advisories/2007/2409
CVE ID: CVE-2007-3524 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to (1) admin/includes/author_panel_header.php or (2) admin/includes/admin_header.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35188 - https://www.exploit-db.com/exploits/4129 - http://www.vupen.com/english/advisories/2007/2407 - http://www.securityfocus.com/bid/24722 - http:
b.com/exploits/4129 - http://www.vupen.com/english/advisories/2007/2407 - http://www.securityfocus.com/bid/24722 - http://osvdb.org/37800 - http://secunia.com/advisories/25898 - http://osvdb.org/37799
CVE ID: CVE-2007-3525 State: PUBLISHED Published: 2007-07-03T18:00:00 Last Updated: 2024-08-07T14:21:36.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35200 - http://osvdb.org/37801 - http://www.securityfocus.com/bid/24722 - http://secunia.com/advisories/25898