Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/www.immunitysec.com/partners-index.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/33216 - https://www.exploit-db.com/exploits/3537 - http://www.osvdb.org/33546
CVE ID: CVE-2007-1580 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) via a LIST command for a Windows drive letter, as demonstrated using "//A:". NOTE: this has been reported as a buffer overflow by some sources, but there is not a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23049 - http://osvdb.org/34524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33091 - https://www.exploit-db.com/exploits/3523
CVE ID: CVE-2007-1581 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hash_update_file function via a userspace (1) error or (2) stream handler, which can then be used to destroy and modify internal resources. NOTE: it was later reported that PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 are also affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3529 - http://secunia.com/advisories/24542 - http://php-security.o
er: References: - https://www.exploit-db.com/exploits/3529 - http://secunia.com/advisories/24542 - http://php-security.org/2010/05/01/mops-2010-001-php-hash_update_file-already-freed-resource-access-vulnerability/index.html - http://www.php-security.org/MOPB/MOPB-28-2007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33248 - http://www.securityfocus.com/bid/23062
CVE ID: CVE-2007-1582 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension and unspecified other extensions via a userspace error handler, which can be used to destroy and modify internal resources. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23046 - https://www.exploit-db.com/exploits/3525 - http://secunia.com/advisories/24542 - http://www.php-security.or
/bid/23046 - https://www.exploit-db.com/exploits/3525 - http://secunia.com/advisories/24542 - http://www.php-security.org/MOPB/MOPB-27-2007.html
CVE ID: CVE-2007-1583 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with register_globals functionality that is not detectable by these scripts, as demonstrated by forcing a memory_limit violation. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://secunia.com/advisories/25056 - h
ram Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://secunia.com/advisories/25056 - http://www.debian.org/security/2007/dsa-1283 - http://www.securityfocus.com/archive/1/466166/100/0/threaded - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://security.gentoo.org/glsa/glsa-200705-19.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10245 - http://www.redhat.com/support/errata/RHSA-2007-0162.html - http://www.securityfocus.com/bid/23016 - http://us2.php.net/releases/4_4_7.php - http://secunia.com/advisories/25062 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:090 - htt
/4_4_7.php - http://secunia.com/advisories/25062 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:090 - http://www.ubuntu.com/usn/usn-455-1 - http://secunia.com/advisories/24909 - http://secunia.com/advisories/24945 - https://issues.rpath.com/browse/RPL-1268 - http://us2.php.net/releases/5_2_2.php - http://docs.info.apple.com/article.html?artnum=306172 - http://secunia.com/advisories/24924 - http://rhn.redhat.com/errata/RHSA-2007-0155.html - http://secunia.com/advisories/24965 - http://www.securityfocus.com/bid/25159 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:089 - http://secunia.com/advisories/25445 - http://www.php-security.org/MOPB/MOPB-26-2007.html - http:
s?name=MDKSA-2007:089 - http://secunia.com/advisories/25445 - http://www.php-security.org/MOPB/MOPB-26-2007.html - http://secunia.com/advisories/25057 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 - http://secunia.com/advisories/26235 - http://www.redhat.com/support/errata/RHSA-2007-0153.html
CVE ID: CVE-2007-1584 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write '\0' characters in whitespace that precedes the string. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3517 - http://www.php-security.org/MOPB/MOPB-25-2007.html
CVE ID: CVE-2007-1585 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linksys WAG200G with firmware 1.01.01, WRT54GC 2 with firmware 1.00.7, and WRT54GC 1 with firmware 1.03.0 and earlier allow remote attackers to obtain sensitive information (passwords and configuration data) via a packet to UDP port 916. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33251 - http://www.securityfocus.com/bid/23063 - http://secunia.com/advisories/24658 - http://www.sec
om/vulnerabilities/33251 - http://www.securityfocus.com/bid/23063 - http://secunia.com/advisories/24658 - http://www.securityfocus.com/archive/1/463342/100/0/threaded - http://marc.info/?l=bugtraq&m=117492736903388&w=2
CVE ID: CVE-2007-1586 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZynOS 3.40 allows remote attackers to cause a denial of service (link restart) by sending a request for the name \M via the SMB Mail Slot Protocol. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34522 - http://www.securityfocus.com/bid/23061 - http://www.securityfocus.com/archive/1/463238/100/0/threaded - http://securitytracker.com/id?1017795
CVE ID: CVE-2007-1587 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the program name in the qshapeLocation parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.statsdawg.org/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/33283
CVE ID: CVE-2007-1588 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privileges, which might allow remote attackers to execute CGI programs with unintended privileges. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34521 - http://www.myserverproject.net/news.php - http://sourceforge.net/mailarchive/forum.php?thread_id=31631045&forum_id=47875
CVE ID: CVE-2007-1589 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service (filesystem unavailability) by dismounting a volume mounted by a different user. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24627 - http://www.vupen.com/english/advisories/2007/1103 - http://www.securityfocus.com/bid/23128 - http://www.truecrypt.org/docs/?s=version-history
CVE ID: CVE-2007-1590 State: PUBLISHED Published: 2007-03-21T23:00:00 Last Updated: 2024-08-07T12:59:08.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service (device crash) via SIP (1) INVITE, (2) CANCEL, or unspecified other messages with a WWW-Authenticate header containing a crafted Digest domain. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33108 - http://www.securityfocus.com/bid/23075 - http://www.securitytracker.com/id?1017804 - http://secunia.com/advisories/24538 -
p://www.securityfocus.com/bid/23075 - http://www.securitytracker.com/id?1017804 - http://secunia.com/advisories/24538 - http://osvdb.org/34347 - http://www.vupen.com/english/advisories/2007/1054 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053099.html
CVE ID: CVE-2007-1591 State: PUBLISHED Published: 2007-03-22T19:00:00 Last Updated: 2024-08-07T12:59:08.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: VsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus 14.10.1041, and other products, allows remote attackers to cause a denial of service (kernel fault and system crash) via a crafted UPX file with a certain field that triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017768 - http://www.securityfocus.com/archive/1/463007/100/100/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=488 - http://www.vupen.com/en
07/100/100/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=488 - http://www.vupen.com/english/advisories/2007/0959 - http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034587
CVE ID: CVE-2007-1592 State: PUBLISHED Published: 2007-03-22T19:00:00 Last Updated: 2024-08-07T12:59:08.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2007-0436.html - http://www.debian.org/security/2007/dsa-1286 - http://www.redhat.com/support/errata/RHSA-2007-0347.htm
-2007-0436.html - http://www.debian.org/security/2007/dsa-1286 - http://www.redhat.com/support/errata/RHSA-2007-0347.html - http://marc.info/?l=linux-netdev&m=117406721731891&w=2 - http://www.ubuntu.com/usn/usn-464-1 - http://www.novell.com/linux/security/advisories/2007_43_kernel.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:078 - http://www.redhat.com/support/errata/RHSA-2007-0673.html - http://secunia.com/advisories/24777 - http://www.securityfocus.com/bid/23104 - http://secunia.com/advisories/27528 - http://secunia.com/advisories/26379 - http://secunia.com/advisories/25226 - http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html - http://secunia.com/
nia.com/advisories/25226 - http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html - http://secunia.com/advisories/24618 - http://secunia.com/advisories/25683 - http://www.vupen.com/english/advisories/2007/1084 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://secunia.com/advisories/25288 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478 - http://www.redhat.com/support/errata/RHSA-2007-0672.html - http://rhn.redhat.com/errata/RHBA-2007-0304.html - http://secunia.com/advisories/25099 - http://secunia.com/advisories/25961 - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/25078 - http://secunia.com/advisories/25392
http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/25078 - http://secunia.com/advisories/25392 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4 - http://www.novell.com/linux/security/advisories/2007_30_kernel.html - http://secunia.com/advisories/29058 - http://www.debian.org/security/2007/dsa-1304 - http://secunia.com/advisories/25630 - http://secunia.com/advisories/25714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33176 - http://www.novell.com/linux/security/advisories/2007_35_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linu
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d35690beda1429544d46c8eb34b2e3a8c37ab299 - http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm
CVE ID: CVE-2007-1593 State: PUBLISHED Published: 2007-06-04T16:00:00 Last Updated: 2024-08-07T12:59:08.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service (memory consumption and service crash) via a crafted packet to the service port (8199/tcp) that triggers a request for more memory than available, which causes the service to write to an invalid pointer. Additional Analyst Notes: - CVE Program Container: References: - http://cirt.dk/advisories/cirt-53-ad
n invalid pointer. Additional Analyst Notes: - CVE Program Container: References: - http://cirt.dk/advisories/cirt-53-advisory.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/34676 - http://osvdb.org/36102 - http://secunia.com/advisories/25516 - http://www.symantec.com/avcenter/security/Content/2007.06.01a.html - http://www.securitytracker.com/id?1018184 - http://www.vupen.com/english/advisories/2007/2036 - http://www.securityfocus.com/bid/24160 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=539
CVE ID: CVE-2007-1594 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP Response code 0 in a SIP packet. Additional Analyst Notes: - CVE Program Container: References: - http://svn.digium.com/view/asterisk/trunk/channels/chan_sip.c?r1=58907&r2=59038 - http://www.securityfocus.com/bid/23093 - http://www.vupen.com/english/advisories/2007/1077 - http://bugs.digium.com/view.php?id=9313 - http://www.securitytracker.com/id?1017809 - http://www
/advisories/2007/1077 - http://bugs.digium.com/view.php?id=9313 - http://www.securitytracker.com/id?1017809 - http://www.asterisk.org/node/48338 - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://www.securityfocus.com/archive/1/463434/100/0/threaded - http://secunia.com/advisories/24579 - http://security.gentoo.org/glsa/glsa-200704-01.xml - http://secunia.com/advisories/25582 - http://secunia.com/advisories/24719 - http://www.sineapps.com/news.php?rssid=1707 - http://voipsa.org/pipermail/voipsec_voipsa.org/2007-March/002275.html
CVE ID: CVE-2007-1595 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23155 - http://svn.digium.com/view/asterisk?rev=59073&view=rev - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://bugs.digium.com/view.php?id=9316 - http:/
http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://bugs.digium.com/view.php?id=9316 - http://secunia.com/advisories/25582 - http://secunia.com/advisories/24694 - http://www.vupen.com/english/advisories/2007/1123
CVE ID: CVE-2007-1596 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) components/com_nfn_addressbook/nfnaddressbook.php or (2) administrator/components/com_nfn_addressbook/nfnaddressbook.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43554 - http://www.vupen.com/english/advisories/2007/1073 - https://exchange.xforce.
ner: References: - http://osvdb.org/43554 - http://www.vupen.com/english/advisories/2007/1073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33133 - http://osvdb.org/43553 - http://www.securityfocus.com/bid/23092 - https://www.exploit-db.com/exploits/3539
CVE ID: CVE-2007-1597 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unclassified NewsBoard 1.6.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain (1) the board log via a direct request for logs/board-YYYY-MM-DD.log, (2) the mail and private message (PM) log via a direct request for logs/email-YY-MM-DD-HH-MM-SS.log, (3) the SQL error message log via a direct request for logs/error-YY-MM.log, and (4) the IP log via a direct request for logs/ip.log. Additional Analyst Notes: - CVE Program Container: References: - http://osvd
P log via a direct request for logs/ip.log. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33150 - http://www.securityfocus.com/archive/1/463186/100/0/threaded
CVE ID: CVE-2007-1598 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in InterVations FileCOPA FTP Server 1.01 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by filecopa.tar by Immunity. NOTE: some of these details are obtained from third party information. NOTE: As of 20070322, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
ier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33462 - http://osvdb.org/43559 - http://www.immunitysec.com/partners-index.shtml - https://www.immunityinc.com/downloads/immpartners/filecopa.tar
CVE ID: CVE-2007-1599 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirect_to parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.metaeye.org/advisories/40 - http://secunia.com/advisories/30960 - http://www.securityfocus.com/archive/1/463291/100/0/threaded - http://www.debian.org/security/2008/dsa-1601
CVE ID: CVE-2007-1600 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in module.php in Digital Eye Gallery 1.1 Beta (aka 0.1.1b) allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37241 - http://www.securityfocus.com/bid/23083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33115 - https://www.exploit-db.com/exploits/3533 - http://www.vupen.com/english/advisories/2007/1070
CVE ID: CVE-2007-1601 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the order parameter. NOTE: another researcher disputes this vulnerability, noting that the order variable is not used in any context that allows opening files Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462702/100/100/threaded - http://securityreason.com/securityalert/2453 - http://osvdb.org/35148 - http://www.securi
ve/1/462702/100/100/threaded - http://securityreason.com/securityalert/2453 - http://osvdb.org/35148 - http://www.securityfocus.com/archive/1/462663/100/100/threaded
CVE ID: CVE-2007-1602 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to execute arbitrary SQL commands via the order parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462702/100/100/threaded - http://securityreason.com/securityalert/2453
CVE ID: CVE-2007-1603 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass authentication, and insert new contest information into a database, via a direct POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462702/100/100/threaded - http://securityreason.com/securityalert/2453
CVE ID: CVE-2007-1604 State: PUBLISHED Published: 2007-03-22T23:00:00 Last Updated: 2024-08-07T12:59:08.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in w-Agora (Web-Agora) allow remote attackers to upload and execute arbitrary PHP code (1) via a forum message with an attached file, which is stored under forums/hello/hello/notes/ or (2) by using browse_avatar.php to upload a file with a double extension, as demonstrated by .php.jpg. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463286/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33173 - http:/
.securityfocus.com/archive/1/463286/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33173 - http://www.securityfocus.com/bid/23055 - http://securityreason.com/securityalert/2462 - http://osvdb.org/34384 - http://secunia.com/advisories/24605 - http://osvdb.org/34383