Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2296 State: PUBLISHED Published: 2007-04-26T20:00:00 Last Updated: 2024-08-07T13:33:28.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the FlipFileTypeAtom_BtoN function in Apple Quicktime 7.1.5, and other versions before 7.2, allows remote attackers to execute arbitrary code via a crafted M4V (MP4) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34069 - http://www.securitytracker.com/id?1018373 - http://www.osvdb.org/35578 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - http://www.vupen.com/english/advisories/2007/251
svdb.org/35578 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - http://www.vupen.com/english/advisories/2007/2510 - http://www.securityfocus.com/bid/23652 - http://security-protocols.com/sp-x46-advisory.php - http://docs.info.apple.com/article.html?artnum=305947 - http://www.securitytracker.com/id?1017967 - http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
CVE ID: CVE-2007-2297 State: PUBLISHED Published: 2007-04-26T20:00:00 Last Updated: 2024-08-07T13:33:28.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.asterisk.org/files/ASA-2007-011.pdf - http://bugs.digium.com/view.php?id=9313 - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://www.securitytracker.com/id?1017954 - http://www.securityfocus.c
linux/security/advisories/2007_34_asterisk.html - http://www.securitytracker.com/id?1017954 - http://www.securityfocus.com/bid/24359 - http://www.securityfocus.com/archive/1/466882/100/0/threaded - http://secunia.com/advisories/25582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33892 - http://securityreason.com/securityalert/2644 - http://www.debian.org/security/2007/dsa-1358
CVE ID: CVE-2007-2298 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertoire_config parameter to index.php in (1) cpe/, (2) direction/, or (3) professeurs/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3732 - http://www.vupen.com/english/advisories/2007/1389 - http://www.securityfocus.com/bid/23479 - http://osvdb.org/35771
CVE ID: CVE-2007-2299 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) dzial parameter to (a) katalog.php, or the (2) t parameter to (b) forum.php or (c) forum/viewtopic.php, different vectors than CVE-2006-4536. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33640 - http://www.securityfocus.com/bid/23476 - http://osvdb.org/35528 - http://osvdb.org/35527 - https://www.exploit-db.com/exploits
/www.securityfocus.com/bid/23476 - http://osvdb.org/35528 - http://osvdb.org/35527 - https://www.exploit-db.com/exploits/3731 - http://www.vupen.com/english/advisories/2007/1388 - http://osvdb.org/35526
CVE ID: CVE-2007-2300 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News Management Online (aka phpwebnews) 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the m_txt parameter to (1) iklan.php, (2) index.php, or (3) bukutamu.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/35365 - http://www.securityfocus.com/bid/23448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33641 - http://securityreason.com/securityalert/2643 - http://ww
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33641 - http://securityreason.com/securityalert/2643 - http://www.osvdb.org/35366 - http://www.securityfocus.com/archive/1/465545/100/0/threaded - http://www.osvdb.org/35367
CVE ID: CVE-2007-2301 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the arashlib_dir parameter to (1) edit.inc.php and (2) list_features.inc.php in arash_lib/include, and (3) arash_gadmin.class.php and (4) arash_sadmin.class.php in arash_lib/class/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3744 - http://www.securityfocus.com/bid/23496 - http://www.vupen.com/english/advisories/2007/1396
CVE ID: CVE-2007-2302 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in autoindex.php in Expow 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23464 - http://osvdb.org/35731 - https://www.exploit-db.com/exploits/3722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33619
CVE ID: CVE-2007-2303 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/footer.php in News Manager Deluxe (NMDeluxe) 1.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34997 - http://secunia.com/advisories/24896 - https://www.exploit-db.com/exploits/3742 - http://www.vupen.com/english/advisories/2007/1395
CVE ID: CVE-2007-2304 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter to categories.php and other unspecified files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33634 - http://www.vupen.com/english/advisories/2007/1387 - https://www.exploit-db.com/exploits/3729 - http://www.securityfocus.com/bid/23485 - http://w
lish/advisories/2007/1387 - https://www.exploit-db.com/exploits/3729 - http://www.securityfocus.com/bid/23485 - http://www.attrition.org/pipermail/vim/2007-April/001544.html
CVE ID: CVE-2007-2305 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33631 - http://www.vupen.com/english/advisories/2007/1387 - https://www.exploit-db.com/exploits/3729 - http://www.securityfocus.com/bid/23485 - http://osvdb.org/35746
CVE ID: CVE-2007-2306 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Virtual War (VWar) 1.5.0 R15 and earlier module for PHP-Nuke, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) memberlist parameter to extra/login.php and the (2) title parameter to extra/today.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33647 - http://www.securityfocus.com/bid/23478 - http://www.securityfocus.com/archive/1/465612/10
ud.com/vulnerabilities/33647 - http://www.securityfocus.com/bid/23478 - http://www.securityfocus.com/archive/1/465612/100/0/threaded - http://securityreason.com/securityalert/2642 - http://www.waraxe.us/advisory-48.html
CVE ID: CVE-2007-2307 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35747 - http://www.vupen.com/english/advisories/2007/1385 - http://www.securityfocus.com/bid/23451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33598 - https://www.exploit-db.com/exploits/3717
CVE ID: CVE-2007-2308 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the rok parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23488 - http://securityreason.com/securityalert/2639 - http://www.vupen.com/english/advisories/2007/1402 - http://www.securityfocus.com/archive/1/465730/100/0/threaded
CVE ID: CVE-2007-2309 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the den parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35759 - http://www.vupen.com/english/advisories/2007/1402
CVE ID: CVE-2007-2310 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS 0.2.2 allows remote attackers to inject arbitrary web script or HTML via the img_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2640 - http://www.securityfocus.com/bid/23487 - http://www.securityfocus.com/archive/1/465719/100/0/threaded
CVE ID: CVE-2007-2311 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in install/index.php in BlooFoxCMS 0.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the content_php parameter. NOTE: this issue has been disputed by a reliable third party, stating that content_php is initialized before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465739/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-April/001526.html - http://securityreason.com/securityalert/2641 - http:
d - http://www.attrition.org/pipermail/vim/2007-April/001526.html - http://securityreason.com/securityalert/2641 - http://www.securityfocus.com/archive/1/466016/100/200/threaded
CVE ID: CVE-2007-2312 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Virtual War (VWar) 1.5.0 R15 module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the n parameter to extra/online.php and other unspecified scripts in extra/. NOTE: this might be same vulnerability as CVE-2006-4142; however, there is an intervening vendor fix announcement. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-April/001519.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33
http://www.attrition.org/pipermail/vim/2007-April/001519.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33649 - http://www.securityfocus.com/bid/23478 - http://www.securityfocus.com/archive/1/465612/100/0/threaded - http://securityreason.com/securityalert/2642 - http://www.waraxe.us/advisory-48.html
CVE ID: CVE-2007-2313 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33599 - http://www.securityfocus.com/bid/23444 - http://www.vupen.com/english/advisories/2007/1384 - https://www.exploit-db.com/exploits/3716
CVE ID: CVE-2007-2314 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) pseudo or (2) passe parameter to (a) configurer.php, (b) connect.php, (c) delete.php, (d) delete2.php, (e) index.php, (f) infos.php, (g) membres.php, (h) modif-infos.php, (i) modif-message.php, (j) modif.php, (k) uninstall.php, or (l) uninstall_table.php in admin/, different vectors than CVE-2007-2000. NOTE: the provenance of this information is u
r (l) uninstall_table.php in admin/, different vectors than CVE-2007-2000. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34819 - http://www.osvdb.org/34820 - http://www.osvdb.org/34825 - http://www.osvdb.org/34829 - http://www.osvdb.org/34827 - http://secunia.com/advisories/24862 - http://www.osvdb.org/34824 - http://www.osvdb.org/34826 - http://www.osvdb.org/34822 - http://www.osvdb.org/34823 - http://www.osvdb.org/34818 - http://www.osvdb.org/34821 - http://www.osvdb.org/34828
CVE ID: CVE-2007-2315 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniShare 1.5.4, and possibly earlier, allows remote attackers to cause a denial of service (application crash) via a flood of requests for new connections. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=109595&release_id=500854 - http://www.vupen.com/english/advisories/2007/1419 - http://secunia.com/advisories/24898 - http://sourceforge.net/forum/forum.php?forum_id=685448
CVE ID: CVE-2007-2316 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the admin script in Open Business Management (OBM) before 2.0.0 allows remote attackers to have an unknown impact by calling the script "in txt mode from a browser." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34899 - http://www.vupen.com/english/advisories/2007/1376 - http://secunia.com/advisories/24775 - http://www.securityfocus.com/bid/23472 - http://obm.aliasource.org/changelogs/changelog-2.0.html
CVE ID: CVE-2007-2317 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to bb_plugins.php in (1) components/minibb/ or (2) components/com_minibb, or (3) configuration.php. NOTE: the com_minibb.php vector is already covered by CVE-2006-3690. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23416 - https://exchange.xf
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33578 - http://www.vupen.com/english/advisories/2007/1354 - http://www.attrition.org/pipermail/vim/2007-April/001518.html - http://osvdb.org/35761 - https://www.exploit-db.com/exploits/3707 - http://osvdb.org/35762
CVE ID: CVE-2007-2318 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in (1) FTP server responses or (2) data sent by an FTP server. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34437 - http://www.securityfocus.com/bid/23506 - http://secunia.com/advisories/24894 - http://sourceforge.net/project/shownotes.php?release_id=501534&group_id=21558 - http:
p://secunia.com/advisories/24894 - http://sourceforge.net/project/shownotes.php?release_id=501534&group_id=21558 - http://osvdb.org/34436
CVE ID: CVE-2007-2319 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to mod_as_category.php in (1) modules/mod_as_category/ or (2) modules/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1392 - http://osvdb.org/35753 - http://www.securityfocus.com/bid/23490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33660 - https://www.exploit
ttp://www.securityfocus.com/bid/23490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33660 - https://www.exploit-db.com/exploits/3734
CVE ID: CVE-2007-2320 State: PUBLISHED Published: 2007-04-26T21:00:00 Last Updated: 2024-08-07T13:33:28.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33682 - http://secunia.com/advisories/25071 - http://www.securityfocus.com/bid/23500 - https://www.exploit-db.com/exploits/3739 - http://osvdb.org/35477 - http://osvdb.org/35834
CVE ID: CVE-2007-2321 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.silverstripe.com/silverstripe-2-0-1-released/ - http://www.vupen.com/english/advisories/2007/1537 - http://osvdb.org/35323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33883 - http://secunia.com/advisories/24936
CVE ID: CVE-2007-2322 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: NMMediaServer.exe in Nero MediaHome 2.5.5.0 and CE 1.3.0.4 allows remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted packet that contains two CRLF sequences. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35321 - http://www.securityfocus.com/bid/23640 - http://secunia.com/advisories/24724 - https://exchange.xforce.ibmcloud.com/vul
http://www.securityfocus.com/bid/23640 - http://secunia.com/advisories/24724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33974
CVE ID: CVE-2007-2323 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and 2.5.13.58 allow remote attackers to execute arbitrary code via a long string argument to the (1) GetDiscType or (2) AddFileList method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33868 - http://www.securityfocus.com/bid/23637 - http://secunia.co
https://exchange.xforce.ibmcloud.com/vulnerabilities/33868 - http://www.securityfocus.com/bid/23637 - http://secunia.com/advisories/24710 - http://osvdb.org/34330
CVE ID: CVE-2007-2324 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3799 - http://secunia.com/advisories/25053 - http://osvdb.org/35387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33859 - http://www.securityfocus.com/bid/23642
CVE ID: CVE-2007-2325 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include.php in MyNewsGroups :) allows remote attackers to execute arbitrary PHP code via a URL in the myng_root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466836/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33867 - http://www.securityfocus.com/bid/23646
CVE ID: CVE-2007-2326 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP code via a URL in the plugin_file parameter to (1) Smarty.class.php and (2) Smarty_Compiler.class.php in inc/libs/; (3) core.display_debug_console.php, (4) core.load_plugins.php, (5) core.load_resource_plugin.php, (6) core.process_cached_inserts.php, (7) core.process_compiled_include.php, and (8) core.read_cache_file.php in inc/libs/core/; and other unspecified files. NOTE: (1) and (2) might be incorrectly rep
(8) core.read_cache_file.php in inc/libs/core/; and other unspecified files. NOTE: (1) and (2) might be incorrectly reported vectors in Smarty. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33882 - http://www.securityfocus.com/archive/1/466837/100/0/threaded - http://www.securityfocus.com/bid/23663