Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10331 - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39181 - http://www.securityfocus.com/bid/27071 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004
CVE ID: CVE-2007-6440 State: REJECTED Published: 2007-12-19T22:00:00Z Last Updated: 2024-09-16T20:17:48.271Z Description: No description available.
CVE ID: CVE-2007-6441 State: PUBLISHED Published: 2007-12-19T22:00:00 Last Updated: 2024-08-07T16:02:36.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WiMAX dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors related to "unaligned access on some platforms." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27777 - https://issues.rpath.com/browse/RPL-1975 - http://secunia.com/advisories/29048 - http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39183 - h
-sec-2007-03.html - http://secunia.com/advisories/28564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39183 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http://security.gentoo.org/glsa/glsa-200712-23.xml - http://secunia.com/advisories/28304 - http://secunia.com/advisories/28325 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14126 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_
08-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10452 - http://www.securityfocus.com/bid/27071 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004
CVE ID: CVE-2007-6442 State: REJECTED Published: 2007-12-19T22:00:00Z Last Updated: 2024-09-17T00:51:20.869Z Description: No description available.
CVE ID: CVE-2007-6443 State: REJECTED Published: 2007-12-19T22:00:00Z Last Updated: 2024-09-16T22:16:02.578Z Description: No description available.
CVE ID: CVE-2007-6444 State: REJECTED Published: 2007-12-19T22:00:00Z Last Updated: 2024-09-16T22:45:08.632Z Description: No description available.
CVE ID: CVE-2007-6445 State: REJECTED Published: 2007-12-19T22:00:00Z Last Updated: 2024-09-16T16:12:31.739Z Description: No description available.
CVE ID: CVE-2007-6446 State: REJECTED Published: 2007-12-19T22:00:00Z Last Updated: 2024-09-16T18:09:26.103Z Description: No description available.
CVE ID: CVE-2007-6447 State: REJECTED Published: 2007-12-19T22:00:00Z Last Updated: 2024-09-16T22:29:42.328Z Description: No description available.
CVE ID: CVE-2007-6448 State: REJECTED Published: 2007-12-19T22:00:00Z Last Updated: 2024-09-16T23:46:46.115Z Description: No description available.
CVE ID: CVE-2007-6449 State: REJECTED Published: 2007-12-19T22:00:00Z Last Updated: 2024-09-17T01:36:33.065Z Description: No description available.
CVE ID: CVE-2007-6450 State: PUBLISHED Published: 2007-12-19T22:00:00 Last Updated: 2024-08-07T16:11:05.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39186 - http://secunia.com/advisories/27777 - https://issues.rpath.com/browse/RPL-1975 - http://secunia.com/advisories/29048 - http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archi
.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http://security.gentoo.org/glsa/glsa-200712-23.xml - http://www.redhat.com/support/errata/RHSA-2008-0059.html - http://secunia.com/advisories/28304 - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - http://secunia.com/advisories/28315 - http://secu
008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - http://secunia.com/advisories/28315 - http://secunia.com/advisories/28583 - http://www.securityfocus.com/bid/27071 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11442 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 - http://www.debian.org/security/2008/dsa-1446
CVE ID: CVE-2007-6451 State: PUBLISHED Published: 2007-12-19T22:00:00 Last Updated: 2024-08-07T16:11:04.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27777 - https://issues.rpath.com/browse/RPL-1975 - http://secunia.com/advisories/29048 - http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfoc
- http://www.wireshark.org/security/wnpa-sec-2007-03.html - http://secunia.com/advisories/28564 - http://www.securityfocus.com/archive/1/485792/100/0/threaded - http://security.gentoo.org/glsa/glsa-200712-23.xml - http://www.redhat.com/support/errata/RHSA-2008-0059.html - http://secunia.com/advisories/28304 - http://secunia.com/advisories/28325 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39187 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:001 - http://www.redhat.com/support/errata/RHSA-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/s
A-2008-0058.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://bugs.gentoo.org/show_bug.cgi?id=199958 - http://secunia.com/advisories/28315 - http://secunia.com/advisories/28583 - http://www.securityfocus.com/bid/27071 - http://secunia.com/advisories/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9685 - http://www.debian.org/security/2008/dsa-1446
CVE ID: CVE-2007-6452 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit (GWT) before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/webtoolkit/releases/release-notes-1.4.61.html - http://secunia.com/advisories/28122 - http://www.securityfocus.com/bid/26915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39117 - http://www.vupen.com/english/advisories/2007/4248 - http://www.osvd
exchange.xforce.ibmcloud.com/vulnerabilities/39117 - http://www.vupen.com/english/advisories/2007/4248 - http://www.osvdb.org/39232
CVE ID: CVE-2007-6453 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:04.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in raidenhttpd-admin/workspace.php in RaidenHTTPD 2.0.19, when the WebAdmin function is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ulang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.raidenhttpd.com/jp/security.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39088 - http://www.securityfocus.com/bid/26903 - http://www.securityfocus.com/archive/1/485221/100/0/threaded - http://jvn.jp
- http://www.securityfocus.com/bid/26903 - http://www.securityfocus.com/archive/1/485221/100/0/threaded - http://jvn.jp/jp/JVN%2390438169/index.html - http://secunia.com/advisories/28143 - http://retrogod.altervista.org/rgod_raidenhttpdudo.html - http://www.osvdb.org/39228 - http://securityreason.com/securityalert/3460 - http://www.vupen.com/english/advisories/2007/4244
CVE ID: CVE-2007-6454 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:04.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200801-22.xml - http://www.securityfocus.com/bid/26899 - http://bugs.gentoo.org/show_bug.cgi?id=202747 - http://secunia.com/advisories/28719 - https://exchange.xforce.ibmcloud.com
tp://bugs.gentoo.org/show_bug.cgi?id=202747 - http://secunia.com/advisories/28719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39075 - http://www.debian.org/security/2008/dsa-1583 - http://secunia.com/advisories/28120 - http://secunia.com/advisories/30325 - http://www.securityfocus.com/archive/1/485199/100/0/threaded - http://secunia.com/advisories/28260 - http://www.debian.org/security/2007/dsa-1441 - http://bugs.gentoo.org/show_bug.cgi?id=202747 - http://aluigi.altervista.org/adv/peercasthof-adv.txt - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457300 - http://www.vupen.com/english/advisories/2007/4246 - http://securityreason.com/securityalert/3461
CVE ID: CVE-2007-6455 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Itemid parameter in a com_frontpage option and the (2) option parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39115 - http://secunia.com/advisories/28133 - http://www.securityfocus.com/bid/26922 - http://www.securityfocus.com/archive/1/485257/100/0/threaded - http://securityreason.com/securityale
cus.com/bid/26922 - http://www.securityfocus.com/archive/1/485257/100/0/threaded - http://securityreason.com/securityalert/3462
CVE ID: CVE-2007-6456 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenOffice.org code in Planamesa NeoOffice 2.2.2 before Patch 4 has unknown impact and attack vectors related to MacOS 10.3.9 .odb files. NOTE: it is not clear whether this issue is a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28093 - http://www.securityfocus.com/bid/26878 - http://neowiki.neooffice.org/index.php/NeoOffice_Release_Notes - https://exchange.xforce.ibmcloud.com/vulnerabilities/39040
CVE ID: CVE-2007-6457 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service (crash) via a long Host header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39087 - http://www.vupen.com/english/advisories/2007/4245 - http://www.securityfocus.com/archive/1/485224/100/0/threaded - http://securityreason.com/securityalert/3464 - http://retrogod.altervista.org/rgod_surgemail_crash.
224/100/0/threaded - http://securityreason.com/securityalert/3464 - http://retrogod.altervista.org/rgod_surgemail_crash.html - http://www.securityfocus.com/bid/26901
CVE ID: CVE-2007-6458 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded value of the admin parameter to shop/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4733 - http://www.securityfocus.com/bid/26890 - http://osvdb.org/43706
CVE ID: CVE-2007-6459 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:04.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485151/100/0/threaded - http://osvdb.org/43711 - http://osvdb.org/43712 - http://www.securityfocus.com/bid/26882 - http://securityrea
threaded - http://osvdb.org/43711 - http://osvdb.org/43712 - http://www.securityfocus.com/bid/26882 - http://securityreason.com/securityalert/3463 - https://www.exploit-db.com/exploits/4734
CVE ID: CVE-2007-6460 State: PUBLISHED Published: 2007-12-20T00:00:00Z Last Updated: 2024-09-16T23:56:24.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI, which is later displayed by (1) log.php or (2) logerror.php, a different vulnerability than CVE-2007-6459. Additional Analyst Notes: - CVE Program Container: References: - http://anonproxyserver.svn.sourceforge.net/viewvc/anonproxyserver/trunk/anon_proxy_server/logerror.php?r1=245&r2=325 - http://anonproxyserver.svn.sourceforge.net/viewvc/anonproxyserver/trunk/anon_pr
roxy_server/logerror.php?r1=245&r2=325 - http://anonproxyserver.svn.sourceforge.net/viewvc/anonproxyserver/trunk/anon_proxy_server/log.php?r1=284&r2=325 - http://sourceforge.net/forum/forum.php?forum_id=761265 - http://anonproxyserver.svn.sourceforge.net/viewvc/anonproxyserver/trunk/anon_proxy_server/
CVE ID: CVE-2007-6461 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action, related to the savesearch JavaScript function; and (2) the details parameter in a details action, related to the History tab and the getHistory JavaScript function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28106 - http://osvdb.org/39256 - http://flyspray.org/fsa:2 - http:
ontainer: References: - http://secunia.com/advisories/28106 - http://osvdb.org/39256 - http://flyspray.org/fsa:2 - http://osvdb.org/39257
CVE ID: CVE-2007-6462 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:06.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://phprealestatescript.com/PHPREC-121707-646PM-PATCH.zip - https://www.exploit-db.com/exploits/4737 - http://www.securityfocus.com/bid/26888 - http://secunia.com/advisories/28119
CVE ID: CVE-2007-6463 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote attackers to inject arbitrary web script or HTML via unspecified "text areas/boxes." Additional Analyst Notes: - CVE Program Container: References: - http://phprealestatescript.com/PHPREC-121707-646PM-PATCH.zip - http://osvdb.org/43708
CVE ID: CVE-2007-6464 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the g_root_dir parameter to (1) admin_page_open.php and (2) client_page_open.php in global/templates/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40254 - https://www.exploit-db.com/exploits/4736 - http://osvdb.org/40255
CVE ID: CVE-2007-6465 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) c and (2) h parameters to (a) web/host_gmetrics.php; the (3) G, (4) me, (5) x, (6) n, (7) v, (8) l, (9) vl, and (10) st parameters to (b) web/graph.php; and the (11) c, (12) G, (13) h, (14) r, (15) m, (16) s, (17) cr, (18) hc, (19) sh, (20) p, (21) t, (22) jr, (23) js, (24) gw, (25) z, and (26) gs parameters to (c) web/get_context.php. NOTE: some of these details a
) t, (22) jr, (23) js, (24) gw, (25) z, and (26) gs parameters to (c) web/get_context.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/39515 - http://sourceforge.net/project/shownotes.php?release_id=562168 - http://www.osvdb.org/39517 - http://www.osvdb.org/39516 - http://secunia.com/advisories/28116 - http://www.vupen.com/english/advisories/2007/4250 - http://www.securityfocus.com/bid/26895
CVE ID: CVE-2007-6466 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the prod parameter in a details action, (2) the cat parameter in a browse list action, or (3) the group parameter in a categories action. NOTE: it was later reported that MOG - Web Shop (MOG-WebShop), a product based on the same code, is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3468 - https://www.exploit-db.com/ex
tes: - CVE Program Container: References: - http://securityreason.com/securityalert/3468 - https://www.exploit-db.com/exploits/4740 - http://newhack.org/advisories/FreeWebShop-2.2.1.txt - http://www.securityfocus.com/bid/26886 - https://www.exploit-db.com/exploits/4739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39143
CVE ID: CVE-2007-6467 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery foto_show action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39027 - http://www.securityfocus.com/archive/1/485035/100/0/threaded - http://securityreason.com/securityalert/3465 - http://www.securityfocus.com/bid/26860
CVE ID: CVE-2007-6468 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:05.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HuffDecode function in hw_utils/hwrcon/huffman.c and hexenworld/Client/huffman.c in Hammer of Thyrion 1.4.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted huffman encoded packet. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://uhexen2.cvs.sourceforge.net/uhexen2/hexenworld/Client/huffman.c?r1=1.24&r2=1.25 - http://uhexen2.cvs.sourceforge.net/uhexen2/hw_utils/hwrcon/
ge.net/uhexen2/hexenworld/Client/huffman.c?r1=1.24&r2=1.25 - http://uhexen2.cvs.sourceforge.net/uhexen2/hw_utils/hwrcon/huffman.c?r1=1.18&r2=1.19 - http://www.securityfocus.com/bid/26893 - http://secunia.com/advisories/28124 - http://osvdb.org/42641 - http://sourceforge.net/project/shownotes.php?release_id=562016&group_id=124987 - http://www.vupen.com/english/advisories/2007/4239
CVE ID: CVE-2007-6469 State: PUBLISHED Published: 2007-12-20T00:00:00Z Last Updated: 2024-09-17T01:31:30.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27968 - http://marc.info/?l=bugtraq&m=119774326804168&w=2 - http://www.securityfocus.com/bid/26884
CVE ID: CVE-2007-6470 State: PUBLISHED Published: 2007-12-20T00:00:00Z Last Updated: 2024-09-16T19:15:09.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files under tmp/, and then hijack sessions via PHPSESSID cookies. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27968 - http://marc.info/?l=bugtraq&m=119774326804168&w=2 - http://www.securityfocus.com/bid/26884
CVE ID: CVE-2007-6471 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:11:06.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ (dot dot backslash) in the config parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4231 - http://www.securityfocus.com/archive/1/485149/100/0/threaded - http://www.securityfocus.com/bid/26881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39063 - http://secu
aded - http://www.securityfocus.com/bid/26881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39063 - http://secunia.com/advisories/28111 - http://securityreason.com/securityalert/3466