Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5270 State: PUBLISHED Published: 2007-10-08T23:00:00 Last Updated: 2024-08-07T15:24:42.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attackers to create or overwrite arbitrary files, and conduct cross-site scripting attacks (XSS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/180591 - http://osvdb.org/45493 - http://osvdb.org/45494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36939
CVE ID: CVE-2007-5271 State: PUBLISHED Published: 2007-10-08T23:00:00 Last Updated: 2024-08-07T15:24:42.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the bField[bf_data] parameter to (1) interface/editors/-custom.php or (2) interface/editors/custom.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25933 - https://www.exploit-db.com/exploits/4485 - http://secunia.com/advisories/27069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36972
CVE ID: CVE-2007-5272 State: PUBLISHED Published: 2007-10-08T23:00:00 Last Updated: 2024-08-07T15:24:41.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25934 - https://www.exploit-db.com/exploits/4486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36971 - http://osvdb.org/37457 - http://secunia.com/advisories/27070
CVE ID: CVE-2007-5273 State: PUBLISHED Published: 2007-10-08T23:00:00 Last Updated: 2024-08-07T15:24:42.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-20
xy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0132.html - http://www.redhat.com/support/errata/RHSA-2007-1041.html - http://www.vupen.com/english/advisories/2007/3895 - http://secunia.com/advisories/29042 - http://crypto.stanford.edu/dns/dns-rebinding.pdf - http://secunia.com/advisories/27693 - http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html - http://securitytracker.com/id?1018771 - http://www.novell.com/linux/security/advisories
16afc3868b8b1b9012955e323.html - http://securitytracker.com/id?1018771 - http://www.novell.com/linux/security/advisories/2007_55_java.html - http://seclists.org/fulldisclosure/2007/Jul/0159.html - http://secunia.com/advisories/29897 - http://secunia.com/advisories/27206 - http://secunia.com/advisories/27804 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://secunia.com/advisories/29858 - http://osvdb.org/45527 - http://www.redhat.com/support/errata/RHSA-2007-0963.html - http://www.securityfocus.com/bid/25918 - http://www.redhat.com/support/errata/RHSA-2008-0100.html - http://www.vupen.com/english/ad
securityfocus.com/bid/25918 - http://www.redhat.com/support/errata/RHSA-2008-0100.html - http://www.vupen.com/english/advisories/2008/0609 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200041-1 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html - http://secunia.com/advisories/27261 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103078-1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://www.securityfocus.com/archive/1/482926/100/0/threaded - http://secunia.com/advisories/28777 - http://www.redhat.com/support/errata/RHSA-2008-0156.html - http://dev2dev.bea.com/pub/advisory/272 - http://secunia.com/advi
://www.redhat.com/support/errata/RHSA-2008-0156.html - http://dev2dev.bea.com/pub/advisory/272 - http://secunia.com/advisories/30780 - http://secunia.com/advisories/28880 - http://secunia.com/advisories/27716 - http://secunia.com/advisories/29214 - http://secunia.com/advisories/29340 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10340 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
CVE ID: CVE-2007-5274 State: PUBLISHED Published: 2007-10-08T23:00:00 Last Updated: 2024-08-07T15:24:42.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound connections via a multi-pin DNS rebinding attack dependent on the LiveConnect API, in which JavaScript download relies on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Ma
on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Machine (JVM), a different issue than CVE-2007-5273. NOTE: this is similar to CVE-2007-5232. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0132.html - http://www.redhat.com/support/errata/RHSA-2007-1041.html - http://www.vupen.com/english/advisories/2007/3895 - http://secunia.com/advisories/30676 - http://secunia.com/advisories/29042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10908 - http://crypto.stanford.edu/dns/dns-rebinding.pdf - http://secunia.com/advisories/27
val%3Aorg.mitre.oval%3Adef%3A10908 - http://crypto.stanford.edu/dns/dns-rebinding.pdf - http://secunia.com/advisories/27693 - http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html - http://securitytracker.com/id?1018771 - http://www.novell.com/linux/security/advisories/2007_55_java.html - http://secunia.com/advisories/29897 - http://secunia.com/advisories/27206 - http://secunia.com/advisories/27804 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://secunia.com/advisories/29858 - http://www.redhat.com/support/errata/RHSA-2007-0963.html - http://www.securityfocus.com/bid/2591
.com/advisories/29858 - http://www.redhat.com/support/errata/RHSA-2007-0963.html - http://www.securityfocus.com/bid/25918 - http://www.vupen.com/english/advisories/2008/0609 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200041-1 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html - http://secunia.com/advisories/27261 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103078-1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533 - http://www.securityfocus.com/archive/1/482926/100/0/threaded - http://secunia.com/advisories/28777 - http://dev2dev.bea.com/pub/advisory/272 - http://secunia.com/advisories/30780 - http://se
secunia.com/advisories/28777 - http://dev2dev.bea.com/pub/advisory/272 - http://secunia.com/advisories/30780 - http://secunia.com/advisories/28880 - http://secunia.com/advisories/27716 - http://www.vupen.com/english/advisories/2008/1856/references - http://www.vmware.com/security/advisories/VMSA-2008-0010.html - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
CVE ID: CVE-2007-5275 State: PUBLISHED Published: 2007-10-08T23:00:00 Last Updated: 2024-08-07T15:24:42.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser's DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324. Additional Analyst Notes: - CVE Program Container: Refe
attacks, a different issue than CVE-2002-1467 and CVE-2007-4324. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html - http://secunia.com/advisories/29865 - http://secunia.com/advisories/28157 - http://secunia.com/advisories/30507 - http://crypto.stanford.edu/dns/dns-rebinding.pdf - http://secunia.com/advisories/28570 - http://www.adobe.com/support/security/bulletins/apsb08-11.html - http://www.vupen.com/english/advisories/2008/1724/references - http://www.us-cert.gov/cas/techalerts/TA07-355A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9250 - http://www.ge
-355A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9250 - http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml - http://www.redhat.com/support/errata/RHSA-2008-0221.html - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html - http://secunia.com/advisories/28161 - http://www.redhat.com/support/errata/RHSA-2007-1126.html - http://secunia.com/advisories/29763 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.securityfocus.
nia.com/advisories/29763 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.securityfocus.com/bid/26930 - http://www.vupen.com/english/advisories/2007/4258 - http://securitytracker.com/id?1019116 - http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml - http://www.vupen.com/english/advisories/2008/1697 - http://www.us-cert.gov/cas/techalerts/TA08-100A.html - http://secunia.com/advisories/28213 - http://www.adobe.com/support/security/bulletins/apsb07-20.html
CVE ID: CVE-2007-5276 State: PUBLISHED Published: 2007-10-08T23:00:00 Last Updated: 2024-08-07T15:24:42.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80. Additional Analyst Notes: - CVE Program Container: References: - http://crypto.stanford.edu/dns/dns-rebinding.pdf - http://osvdb.org/45526
CVE ID: CVE-2007-5277 State: PUBLISHED Published: 2007-10-08T23:00:00 Last Updated: 2024-08-07T15:24:42.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45525 - http://crypto.stanford.edu/dns/dns-rebinding.pdf
CVE ID: CVE-2007-5278 State: PUBLISHED Published: 2007-10-08T23:00:00 Last Updated: 2024-08-07T15:24:42.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to download files that were uploaded by users, as demonstrated by obtaining a directory listing via a direct request to /upload and then retrieving individual files. NOTE: in a non-default configuration, the directory listing is denied, but filenames may be predicable. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4466 - http
icable. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4466 - http://www.securityfocus.com/bid/25861
CVE ID: CVE-2007-5279 State: PUBLISHED Published: 2007-10-09T00:00:00 Last Updated: 2024-08-07T15:24:42.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ConeXware PowerArchiver before 10.20.21 might allow remote attackers to execute arbitrary code via a long filename in a BlackHole archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.powerarchiver.com/news/ - http://www.vupen.com/english/advisories/2007/3378 - http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071009 - http://www.securityfocus.com/bid/25938 - http://secunia.com/advisories/27000 - http://jvn.jp/jp/JVN%2361323184/index.html - https://exchange.x
us.com/bid/25938 - http://secunia.com/advisories/27000 - http://jvn.jp/jp/JVN%2361323184/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36969 - http://osvdb.org/41552
CVE ID: CVE-2007-5280 State: PUBLISHED Published: 2007-10-09T00:00:00 Last Updated: 2024-08-07T15:24:42.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in (1) success or (2) error messages. Additional Analyst Notes: - CVE Program Container: References: - http://appfuse.org/display/APF/Release+Notes+2.0 - http://secunia.com/advisories/27041 - http://osvdb.org/37423 - http://issues.appfuse.org/browse/APF-880 - http://www.securityfocus.com/bid/25927
CVE ID: CVE-2007-5281 State: PUBLISHED Published: 2007-10-09T00:00:00 Last Updated: 2024-08-07T15:24:42.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be the same as CVE-2007-3698. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25935 - http://www.vupen.com/english/advisories/2007/3375 - http://www.hitachi-support.com/security_e/vuls_e
cus.com/bid/25935 - http://www.vupen.com/english/advisories/2007/3375 - http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36965 - http://secunia.com/advisories/27075
CVE ID: CVE-2007-5282 State: PUBLISHED Published: 2007-10-09T00:00:00 Last Updated: 2024-08-07T15:24:42.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service (agent process crash) via invalid data from clients other than Cosminexus Manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-support.com/security_e/vuls_e/HS07-033_e/index-e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36966 - http://www.vupen.com/english/advisories/2007/3377 - http://www.securityfocus.co
rce.ibmcloud.com/vulnerabilities/36966 - http://www.vupen.com/english/advisories/2007/3377 - http://www.securityfocus.com/bid/25937 - http://secunia.com/advisories/27074
CVE ID: CVE-2007-5283 State: PUBLISHED Published: 2007-10-09T00:00:00 Last Updated: 2024-08-07T15:24:42.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TSC Domain Manager in Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor 01-00 through 03-00 might allow attackers to cause a denial of service (crash) via invalid messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25936 - http://www.hitachi-support.com/security_e/vuls_e/HS07-032_e/index-e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36968 - http://secunia.com/advisories/27035 - http://www.vupen.com/english/a
xchange.xforce.ibmcloud.com/vulnerabilities/36968 - http://secunia.com/advisories/27035 - http://www.vupen.com/english/advisories/2007/3376
CVE ID: CVE-2007-5284 State: REJECTED Published: 2007-10-09T00:00:00 Last Updated: 2007-10-11T09:00:00 Description: No description available.
CVE ID: CVE-2007-5285 State: REJECTED Published: 2007-10-09T00:00:00 Last Updated: 2007-10-11T09:00:00 Description: No description available.
CVE ID: CVE-2007-5286 State: REJECTED Published: 2007-10-09T00:00:00 Last Updated: 2007-10-11T09:00:00 Description: No description available.
CVE ID: CVE-2007-5287 State: REJECTED Published: 2007-10-09T00:00:00 Last Updated: 2007-10-11T09:00:00 Description: No description available.
CVE ID: CVE-2007-5288 State: REJECTED Published: 2007-10-09T00:00:00 Last Updated: 2007-10-11T09:00:00 Description: No description available.
CVE ID: CVE-2007-5289 State: PUBLISHED Published: 2009-02-24T17:00:00 Last Updated: 2024-08-07T15:24:42.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement "workflow" and decisions about the "capability" of a user, which allows remote attackers to execute arbitrary code via crafted use of the Open Test Architecture (OTA) API, as demonstrated by modifying (1) common.tds, (2) defects.tds, (3) manrun.tds, (4) req.tds, (5) testlab.tds, or (6) testplan.tds in %tmp%\TD_80, and then setting the file's properties to read-only. Additional Analyst Notes: - CVE Progra
testplan.tds in %tmp%\TD_80, and then setting the file's properties to read-only. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34046 - http://www.securityfocus.com/archive/1/501177/100/0/threaded - http://www.securityfocus.com/bid/33854 - http://secunia.com/advisories/34015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48860 - http://www.kb.cert.org/vuls/id/898865 - http://www.securityfocus.com/archive/1/501219/100/0/threaded - http://blogs.exposit.co.uk/2009/02/23/vulnerability-in-quality-center/
CVE ID: CVE-2007-5290 State: PUBLISHED Published: 2007-10-09T18:00:00 Last Updated: 2024-08-07T15:24:42.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64, WebMail Lite ASP before 4.0.11, and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to login.php and the (2) mode2 parameter to default.asp in an advanced_login mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3450 - http://osvdb.org/37649 - http:/
CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3450 - http://osvdb.org/37649 - http://www.securitytracker.com/id?1018783 - http://osvdb.org/37650 - http://www.securityfocus.com/bid/25942 - http://marc.info/?l=bugtraq&m=119161078031690&w=2 - http://secunia.com/advisories/27073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36979
CVE ID: CVE-2007-5291 State: PUBLISHED Published: 2007-10-09T18:00:00 Last Updated: 2024-08-07T15:24:42.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Edit.asp in DB Manager 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels-team.blogspot.com/2007/10/db-manager-xss-vuln.html - http://www.securityfocus.com/bid/25964 - http://www.vupen.com/english/advisories/2007/3422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36985 - http://secunia.com/advisories/27120
CVE ID: CVE-2007-5292 State: PUBLISHED Published: 2007-10-09T18:00:00 Last Updated: 2024-08-07T15:24:42.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in photos.cfm in Directory Image Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the backwardDirectory parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36986 - http://pridels-team.blogspot.com/2007/10/directory-image-gallery-xss-vuln.html - http://www.vupen.com/english/advisories/2007/3425
CVE ID: CVE-2007-5293 State: PUBLISHED Published: 2007-10-09T18:00:00 Last Updated: 2024-08-07T15:24:42.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IDMOS 1.0-beta (aka Phoenix) allow remote attackers to inject arbitrary web script or HTML via the (1) err_msg parameter to error.php and the (2) content parameter to templates/simple/ia.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4495 - http://www.securityfocus.com/archive/1/481682/100/0/threaded - http://securityreason.com/securityalert/3205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36997 - https:
ded - http://securityreason.com/securityalert/3205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36999 - http://osvdb.org/38632 - http://www.vupen.com/english/advisories/2007/3433 - http://www.securityfocus.com/bid/25950 - http://osvdb.org/38631
CVE ID: CVE-2007-5294 State: PUBLISHED Published: 2007-10-09T18:00:00 Last Updated: 2024-08-07T15:24:42.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to execute arbitrary PHP code via a URL in the site_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4495 - http://www.securityfocus.com/archive/1/481682/100/0/threaded - http://securityreason.com/securityalert/3205 - http://osvdb.org/38633 - http://www.vupen.com/english/advisories/2007/3433 - https://exchange.xforce.ibmcloud.com/vulnerabi
p://osvdb.org/38633 - http://www.vupen.com/english/advisories/2007/3433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36994
CVE ID: CVE-2007-5295 State: PUBLISHED Published: 2007-10-09T18:00:00 Last Updated: 2024-08-07T15:24:42.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in (a) Wikepage Opus 13 2007.2 and (b) TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the (1) PageContent and (2) PageName parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38635 - http://www.vupen.com/english/advisories/2007/3424 - http://osvdb.org/38634 - http://pridels-team.blogspot.com/2007/10/wikepage-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36988