Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1115 State: PUBLISHED Published: 2007-02-26T23:00:00 Last Updated: 2024-08-07T12:43:22.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22701 - http://osvdb.org/32118 - http://www.securitytracker.com/id?1017909 - http://secunia.com/advisories/24312 - http://www.vupen.com/english
g/32118 - http://www.securitytracker.com/id?1017909 - http://secunia.com/advisories/24312 - http://www.vupen.com/english/advisories/2007/0745 - http://secunia.com/advisories/25027 - http://www.opera.com/support/search/view/855/ - http://www.securityfocus.com/archive/1/461076/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_28_opera.html - http://www.hardened-php.net/advisory_032007.142.html
CVE ID: CVE-2007-1116 State: PUBLISHED Published: 2007-02-26T23:00:00 Last Updated: 2024-08-07T12:43:22.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461006/100/0/threaded - http://www.securityfocus.com/archive/1/461013/100/0/threaded - http://osvdb.org/33804 - https://bugzilla.mozilla.org/show_bug.cgi?id=371375 - http://www.gnucitizen.org/project
eaded - http://osvdb.org/33804 - https://bugzilla.mozilla.org/show_bug.cgi?id=371375 - http://www.gnucitizen.org/projects/hscan-redux/ - http://securityreason.com/securityalert/2309
CVE ID: CVE-2007-1117 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "file format vulnerability." NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable source. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22702 - http://news.com.com/2100-1002_3-6161835.html - http://osvdb.org/45264 - http://research.eeye.com/html
us.com/bid/22702 - http://news.com.com/2100-1002_3-6161835.html - http://osvdb.org/45264 - http://research.eeye.com/html/advisories/upcoming/20070216.html
CVE ID: CVE-2007-1118 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path_to_smf parameter to (1) bridges/SMF/logout.php or (2) get_session_vars.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33527 - http://www.securityfocus.com/bid/22682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32662 - https://www.exploit-db.com/exploits/3361 - http://osvdb.org/33526 - http://secunia.com/advisories/24268 - ht
ies/32662 - https://www.exploit-db.com/exploits/3361 - http://osvdb.org/33526 - http://secunia.com/advisories/24268 - http://www.vupen.com/english/advisories/2007/0708
CVE ID: CVE-2007-1119 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch 3 (ZDM7SP1HP3) allows remote attackers to upload images to certain folders that were not configured in the "Only allow uploads to the following directories" setting via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33533 - http://www.vupen.com/english/advisories/2007/0712 - https://secure-support.novell.com/KanisaPlatform/Publishing/408/3563780_f.SAL_Public.html - https://se
ories/2007/0712 - https://secure-support.novell.com/KanisaPlatform/Publishing/408/3563780_f.SAL_Public.html - https://secure-support.novell.com/KanisaPlatform/Publishing/650/3484245_f.SAL_Public.html - http://www.securityfocus.com/bid/22686 - http://secunia.com/advisories/24274
CVE ID: CVE-2007-1120 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Import.LoadFromURL and (2) Export.asText.SaveToFile functions in TeeChart Pro ActiveX control (TeeChart7.ocx) allow remote attackers to download a crafted .tee file to an arbitrary location. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32694 - http://www.securityfocus.com/bid/22689 - http://secunia.com/advisor
exchange.xforce.ibmcloud.com/vulnerabilities/32694 - http://www.securityfocus.com/bid/22689 - http://secunia.com/advisories/24263
CVE ID: CVE-2007-1121 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the (1) updateRow and (2) deleteRow functions in functions.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22685 - http://www.vupen.com/english/advisories/2007/0715 - http://sourceforge.net/project/shownotes
curityfocus.com/bid/22685 - http://www.vupen.com/english/advisories/2007/0715 - http://sourceforge.net/project/shownotes.php?release_id=488406 - http://secunia.com/advisories/24269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32665
CVE ID: CVE-2007-1122 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 and 1.01 allow remote attackers to execute arbitrary SQL commands via the id parameter to the (1) updateRow and (2) deleteRow functions in functions.php, a variant of a SQL injection issue that was fixed in 1.01. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22685 - http://www.vupen.com/eng
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22685 - http://www.vupen.com/english/advisories/2007/0715 - http://sourceforge.net/project/downloading.php?group_id=153333&use_mirror=osdn&filename=abc-1.02.zip - http://secunia.com/advisories/24269
CVE ID: CVE-2007-1123 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) the body parameter to templates/ZPanelV2/template.php or (2) the page parameter to zpanel.php. NOTE: the zpanel.php vector may overlap CVE-2005-0793.2. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33498 - https://exchange.xforce.ibmcloud.com/vul
Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33498 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32659 - http://www.vupen.com/english/advisories/2007/0710 - http://www.securityfocus.com/bid/22683 - http://secunia.com/advisories/24275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32680
CVE ID: CVE-2007-1124 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461080/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32654 - http://www.securityfocus.com/bid/22700 - http://securityreason.com/securityalert/2292 - http://osvdb.org/33760
CVE ID: CVE-2007-1125 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to inject arbitrary web script or HTML via the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33759 - http://www.vupen.com/english/advisories/2007/0740 - http://www.securityfocus.com/archive/1/461080/100/0/threaded - http://www.securityfocus.com/bid/22700 - http://securityreason.com/securityalert/2292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32655 - htt
/22700 - http://securityreason.com/securityalert/2292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32655 - http://secunia.com/advisories/24292
CVE ID: CVE-2007-1126 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461073/100/0/threaded - http://osvdb.org/33758 - http://securityreason.com/securityalert/2294 - http://secunia.com/advisories/24301 - http://www.vupen.com/english/advisories/2007/0746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32656 - http://www.securityfocus.c
m/english/advisories/2007/0746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32656 - http://www.securityfocus.com/bid/22698
CVE ID: CVE-2007-1127 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files via a .. (dot dot) in the changetheme parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24279 - http://www.securityfocus.com/bid/22697 - http://www.securityfocus.com/archive/1/461071/100/0/threaded - http://www.vupen.com/english/advisories/2007/0747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32660 - http://securityreason.com/securityalert/2295 -
/2007/0747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32660 - http://securityreason.com/securityalert/2295 - http://osvdb.org/33755
CVE ID: CVE-2007-1128 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: shopkitplus allows remote attackers to obtain sensitive information via a request to (1) events.php with a curmonth[]=01 query string or (2) enc/stylecss.php with a changetheme[]= query string, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461071/100/0/threaded - http://osvdb.org/33757 - http://securityreason.com/securityalert/2295 - http://osvdb.org/33756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32661
CVE ID: CVE-2007-1129 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in MTCMS 3.2 allow remote attackers to upload and execute files via (1) an avatar upload in an add_down action, or (2) an add_link action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461330/100/100/threaded - http://www.securityfocus.com/bid/22690 - http://www.vupen.com/english/advisories/2007/0755 - http://osvdb.org/33778
CVE ID: CVE-2007-1130 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32657 - http://osvdb.org/37007 - http://www.securityfocus.com/bid/22696 - http://www.vupen.com/english/advisories/2007/0737
CVE ID: CVE-2007-1131 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22699 - http://osvdb.org/37008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32658 - https://www.exploit-db.com/exploits/3367 - http://www.vupen.com/english/advisories/2007/0738
CVE ID: CVE-2007-1132 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the "Contact Us" functionality in MTCMS 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) message and (2) title fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461330/100/100/threaded - http://www.securityfocus.com/bid/22690 - http://osvdb.org/37443 - http://www.vupen.com/english/advisories/2007/0755
CVE ID: CVE-2007-1133 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-07T12:43:22.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the s_fuss parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32653 - http://secunia.com/advisories/24305 - http://www.securityfocus.com/bid/22693 - https://www.exploit-db.com/exploits/3365 - http://www.vupen.com/english/advisories/2007/0736
CVE ID: CVE-2007-1134 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Watchtower (WT) before 0.12 has unknown impact and attack vectors, related to "unauthorized accounts." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0743 - http://osvdb.org/41106 - http://sourceforge.net/project/shownotes.php?release_id=486435&group_id=188798 - http://www.securityfocus.com/bid/22721
CVE ID: CVE-2007-1135 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the (1) strid parameter to index.php and the (2) id[0] or other id array index parameter to filecheck.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34442 - http://osvdb.org/34443 - http://sourceforge.net/project/shownotes.php?release_id=486880&group_id=172354 - http://www.securityfocus.com/bid/22726 - http://www.vupen.com/english/advisories/2007/0742
CVE ID: CVE-2007-1136 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function call. NOTE: some sources have referred to this as eval injection in the param parameter, but CVE source inspection suggests that this is erroneous. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=486880&group_id=172354 - http://www.securityfocus.com/bid/22726 - http://attrition.org/pipermail/vim/2007-February/001399.htm
0&group_id=172354 - http://www.securityfocus.com/bid/22726 - http://attrition.org/pipermail/vim/2007-February/001399.html - http://osvdb.org/34441 - http://www.vupen.com/english/advisories/2007/0742
CVE ID: CVE-2007-1137 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the username and password in plaintext while the user believes encryption is in use, and allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32689 - http://www.securityfocus.com/bid/22718 - http://putmail
3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32689 - http://www.securityfocus.com/bid/22718 - http://putmail.sourceforge.net/home.html - http://secunia.com/advisories/24266 - http://osvdb.org/33764
CVE ID: CVE-2007-1138 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/460913/100/0/threaded - http://securityreason.com/securityalert/2332 - http://www.securityfocus.com/bid/22669 - http://osvdb.org/33138
CVE ID: CVE-2007-1139 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitrary scripts via a filename with a double extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/460913/100/0/threaded - http://securityreason.com/securityalert/2332 - http://www.securityfocus.com/bid/22669 - http://osvdb.org/33139
CVE ID: CVE-2007-1140 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33140 - http://securityreason.com/securityalert/2354 - http://www.securityfocus.com/bid/22670 - http://www.securityfocus.com/archive/1/460920/100/0/threaded
CVE ID: CVE-2007-1141 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the php_script_path parameter. NOTE: This issue may overlap CVE-2006-0723. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/460902/100/0/threaded - http://www.securityfocus.com/bid/22661 - http://osvdb.org/33135 - http://securityreason.com/securityalert/2334
CVE ID: CVE-2007-1142 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the link_parameters parameter in (1) news.php and (2) n_layouts.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33137 - http://www.securityfocus.com/archive/1/460902/100/0/threaded - http://www.securityfocus.com/bid/22661 - http://securityreason.com/securityalert/2334 - http://osvdb.org/33136
CVE ID: CVE-2007-1143 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2340 - http://forums.avenir-geopolitique.net/viewtopic.php?t=2692 - http://www.securityfocus.com/archive/1/460907/100/0/threaded - http://osvdb.org/33118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32646
CVE ID: CVE-2007-1144 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33117 - http://securityreason.com/securityalert/2340 - http://www.securityfocus.com/bid/22681 - http://forums.avenir-geopolitique.net/viewtopic.php?t=2692 - http://www.securityfocus.com/archive/1/460907/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
- http://www.securityfocus.com/archive/1/460907/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32646 - http://secunia.com/advisories/24273 - http://www.vupen.com/english/advisories/2007/0711
CVE ID: CVE-2007-1145 State: PUBLISHED Published: 2007-02-27T18:00:00 Last Updated: 2024-08-07T12:43:22.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a (1) lostpassword or (2) register action in index.php, (3) unspecified vectors in the Submit form in a submit action in index.php, and (4) the user's name in index.php; and (5) allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the Admin and Staff Control Panel. NOTE: thi
s to inject arbitrary web script or HTML via unspecified vectors related to the Admin and Staff Control Panel. NOTE: this might issue overlap CVE-2004-1412, CVE-2005-0487, or CVE-2005-0842. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2335 - http://secunia.com/advisories/24223 - http://www.securityfocus.com/bid/22631 - http://osvdb.org/33536 - http://www.vupen.com/english/advisories/2007/0717 - http://www.securityfocus.com/archive/1/460591/100/0/threaded - http://osvdb.org/33535