Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0344 State: PUBLISHED Published: 2007-01-18T02:00:00 Last Updated: 2024-08-07T12:12:18.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22086 - https://www.exploit-db.com/exploits/3139 - http://p
am Container: References: - http://www.securityfocus.com/bid/22086 - https://www.exploit-db.com/exploits/3139 - http://projects.info-pull.com/moab/MOAB-16-01-2007.html - http://www.vupen.com/english/advisories/2007/0238 - http://www.osvdb.org/32688 - http://secunia.com/advisories/23801
CVE ID: CVE-2007-0345 State: PUBLISHED Published: 2007-01-18T02:00:00 Last Updated: 2024-08-07T12:12:18.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Activity Monitor.app/Contents/Resources/pmTool, (2) Keychain Access.app/Contents/Resources/kcproxy, and (3) ODBC Administrator.app/Contents/Resources/iodbcadmintool programs in /Applications/Utilities/ in Mac OS X 10.4.8 have weak permissions (writable by admin group), which allows local admin users to gain root privileges by modifying a program and then performing permissions repair via diskutil. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32700 - http://www.osvdb.org/32701 -
itional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32700 - http://www.osvdb.org/32701 - http://projects.info-pull.com/moab/MOAB-15-01-2007.html - https://www.exploit-db.com/exploits/3136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31530 - http://www.osvdb.org/32702
CVE ID: CVE-2007-0346 State: PUBLISHED Published: 2007-01-18T02:00:00 Last Updated: 2024-08-07T12:12:18.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the us parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31533 - http://www.attrition.org/pipermail/vim/2007-January/001244.html - http://www.vupen.com/english/advisories/2007/0221
CVE ID: CVE-2007-0347 State: PUBLISHED Published: 2007-01-29T20:00:00 Last Updated: 2024-08-07T12:12:18.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote authenticated users to execute limited SQL injection attacks and cause a denial of service (database error) via a ' character in certain messages, tickets, or Wiki entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0398 - http://securityreason.com/securityalert/2192 - http://osvdb.org/31935 - http://lists.grok.org.uk/pipermail/full
7/0398 - http://securityreason.com/securityalert/2192 - http://osvdb.org/31935 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052058.html - http://www.securityfocus.com/archive/1/458455/100/0/threaded - http://www.cvstrac.org/cvstrac/chngview?cn=850 - http://www.securityfocus.com/bid/22296 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.008.html - http://secunia.com/advisories/23940 - http://www.cvstrac.org/cvstrac/tktview?tn=683
CVE ID: CVE-2007-0348 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:12:18.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33186 - http://osvdb.org/34314 - http://secunia.com/advisories/23032 - http://www.kb.cert.org/vuls/id/9
/vulnerabilities/33186 - http://osvdb.org/34314 - http://secunia.com/advisories/23032 - http://www.kb.cert.org/vuls/id/922969 - http://secunia.com/secunia_research/2007-37/advisory/ - http://osvdb.org/34315 - http://www.vupen.com/english/advisories/2007/1042 - http://www.securityfocus.com/bid/23071 - http://www.vupen.com/english/advisories/2007/1043 - http://secunia.com/advisories/24556 - http://www.securityfocus.com/archive/1/463405/100/0/threaded
CVE ID: CVE-2007-0349 State: PUBLISHED Published: 2007-01-19T00:00:00 Last Updated: 2024-08-07T12:12:18.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. (dot dot) in the gateway parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31539 - http://www.securityfocus.com/archive/1/457079/100/0/threaded - http://osvdb.org/45533
CVE ID: CVE-2007-0350 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:12:18.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in (a) index.php and (b) dl.php in SmE FileMailer 1.21 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ps, (2) us, (3) f, or (4) code parameter. NOTE: the us vector in index.php is already covered by CVE-2007-0346. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2007-January/001244.html - http://archives.neohapsis.com/archives/bugtraq/2007-01/0395.html - https://exchange.xforce.ibmcloud.com/vulnerabilitie
- http://archives.neohapsis.com/archives/bugtraq/2007-01/0395.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31533 - http://osvdb.org/32833 - http://www.vupen.com/english/advisories/2007/0221
CVE ID: CVE-2007-0351 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:12:18.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction with another product. The issue might involve ZoneAlarm not being able to terminate processes when it cannot prompt the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457217/1
e user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457217/100/0/threaded - http://www.securityfocus.com/archive/1/457167/100/0/threaded - http://www.securityfocus.com/archive/1/457807/100/200/threaded - http://www.securityfocus.com/archive/1/459838/100/0/threaded - http://www.securityfocus.com/archive/1/457340/100/0/threaded
CVE ID: CVE-2007-0352 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:12:18.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a crafted .cnt file composed of lines that begin with an integer followed by a space and a long string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457210/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31555 - http://securitytracker.com/id?1017530 - http://www.securityfocus.com/bid/22100 - http://securityreason.com
ities/31555 - http://securitytracker.com/id?1017530 - http://www.securityfocus.com/bid/22100 - http://securityreason.com/securityalert/2156 - https://www.exploit-db.com/exploits/3149 - http://secunia.com/advisories/23862 - http://osvdb.org/31898 - http://www.anspi.pl/~porkythepig/visualization/cnt-expl1.cpp
CVE ID: CVE-2007-0353 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:12:18.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31554 - http://osvdb.org/32930 - http://www.securityfocus.com/archive/1/457206/100/0/threaded - http://securityreason.com/securityalert/2155 - http://www.securityfocus.com/bid/22097 - http://mywebland.com/forums/showtopic.php?t=12
yreason.com/securityalert/2155 - http://www.securityfocus.com/bid/22097 - http://mywebland.com/forums/showtopic.php?t=1224 - http://osvdb.org/32929 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0338.html - http://securitytracker.com/id?1017531
CVE ID: CVE-2007-0354 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:12:18.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31612 - http://www.securityfocus.com/bid/22094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31551 - http://www.tv-kritik.net/mgb/index.php - https://www.exploit-db.com/exploits/3141 - http://www.attrition.org/pipermail/vim/2007-January/001246.html - http://www.vupen.com/
w.exploit-db.com/exploits/3141 - http://www.attrition.org/pipermail/vim/2007-January/001246.html - http://www.vupen.com/english/advisories/2007/0232 - http://secunia.com/advisories/23825
CVE ID: CVE-2007-0355 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:12:18.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=307430 - http://securitytracker.com/id?1019359 - https://www.exploit-db.com/exploits/3151 - http://securitytracker.com/id?1017533 - http:/
curitytracker.com/id?1019359 - https://www.exploit-db.com/exploits/3151 - http://securitytracker.com/id?1017533 - http://www.osvdb.org/32693 - http://projects.info-pull.com/moab/MOAB-17-01-2007.html - http://www.vupen.com/english/advisories/2007/0239 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://secunia.com/advisories/23796 - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html - http://www.securityfocus.com/bid/22101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31562
CVE ID: CVE-2007-0356 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:12:18.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP.RootFolder property value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22092 - https://www.exploit-db.com/exploits/3142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31549
CVE ID: CVE-2007-0357 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:19:29.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C (URL-encoded dot dot backslash) sequences in a URI requested from the AR7 webserver. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0236 - http://secunia.com/advisories/23774 - http://securityreason.com/securityalert/2159 - http://osvdb.org/32866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31556 - http://lists.grok
rityalert/2159 - http://osvdb.org/32866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31556 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051844.html - http://www.securityfocus.com/bid/22093
CVE ID: CVE-2007-0358 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:19:29.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the FTP server implementation in HP Jetdirect firmware x.20.nn through x.24.nn allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23802 - http://www.vupen.com/english/advisories/2007/0233 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00838612 - http://securitytracker.com/id?1017532 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00838612 - http://osvdb.org/32867 - http
itytracker.com/id?1017532 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00838612 - http://osvdb.org/32867 - http://www.securityfocus.com/bid/22105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31589
CVE ID: CVE-2007-0359 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:19:28.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22098 - http://www.vupen.com/english/advisories/2007/0230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31553 - http://www.attrition.org/pipermail/vim/2007-January/001247.html - https://www.exploit-db.com/exploits/3147
CVE ID: CVE-2007-0360 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:19:29.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31568 - http://www.securityfocus.com/archive/1/459811/100/0/threaded - http://osvdb.org/33711 - http://www.vupen.com/english/advisories/2007/0229 - https://www.exploit-db.com/exploits/3150
CVE ID: CVE-2007-0361 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:19:29.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitrary PHP code via a URL in the chem parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0231 - http://www.securityfocus.com/bid/22099 - https://www.exploit-db.com/exploits/3145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31552
CVE ID: CVE-2007-0362 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:19:29.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2395249468/index.html - http://www.vupen.com/english/advisories/2007/0241 - http://manual.freshreader.com/archives/2007/01/20070118_javasc.html - http://secunia.com/advisories/23806 - http://www.securityfocus.com/bid/221
r.com/archives/2007/01/20070118_javasc.html - http://secunia.com/advisories/23806 - http://www.securityfocus.com/bid/22106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31566 - http://osvdb.org/32923
CVE ID: CVE-2007-0363 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T12:19:30.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10 and (2) Openads (aka phpAdsNew) before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23720 - http://sourceforge.net/project/shownotes.php?group_id=11386&release_id=479424 - http://www.securityfocus.com/bid/22124 - http://sourceforge.net/project/shownotes.php?group_
d=11386&release_id=479424 - http://www.securityfocus.com/bid/22124 - http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=479426 - http://www.vupen.com/english/advisories/2007/0240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31570
CVE ID: CVE-2007-0364 State: PUBLISHED Published: 2007-01-19T19:00:00 Last Updated: 2024-08-07T12:19:29.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to (a) suggest_category.php; the (2) u parameter to (b) user_detail.php; the (3) friend_name, (4) friend_email, (5) error_msg, (6) my_name, (7) my_email, and (8) id parameters to (c) tell_friend.php; the (9) error_msg, (10) email, (11) name, and (12) subject parameters to (d) sendmail.php; the (13) email, (14) error_msg, and (15) username param
ail, (11) name, and (12) subject parameters to (d) sendmail.php; the (13) email, (14) error_msg, and (15) username parameters to (e) send_pwd.php; the (16) keyword parameter to (f) search.php; the (17) error_msg, (18) username, (19) password, (20) password2, and (21) email parameters to (g) register.php; the (22) url, (23) contact_name, and (24) email parameters to (h) power_search.php; the (25) path and (26) total parameters to (i) new.php; the (27) query parameter to (j) modify.php; the (28) error_msg parameter to (k) login.php; the (29) error_msg and (30) email parameters to (l) mailing_list.php; the (31) gateway parameter to (m) upgrade.php; and another unspecified vector. Additional Ana
s to (l) mailing_list.php; the (31) gateway parameter to (m) upgrade.php; and another unspecified vector. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32846 - http://www.vupen.com/english/advisories/2007/0222 - http://www.osvdb.org/32849 - http://www.osvdb.org/32840 - http://www.osvdb.org/32850 - http://www.osvdb.org/32843 - http://www.securityfocus.com/archive/1/457079/100/0/threaded - http://www.osvdb.org/32845 - http://www.osvdb.org/32842 - http://www.securityfocus.com/bid/22084 - http://www.osvdb.org/32847 - http://www.osvdb.org/32848 - http://www.osvdb.org/32844 - http://osvdb.org/32839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31538
32848 - http://www.osvdb.org/32844 - http://osvdb.org/32839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31538 - http://www.osvdb.org/32838 - http://www.osvdb.org/32851 - http://secunia.com/advisories/23764 - http://www.osvdb.org/32841
CVE ID: CVE-2007-0365 State: PUBLISHED Published: 2007-01-19T19:00:00 Last Updated: 2024-08-07T12:19:29.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably a different vulnerability than CVE-2006-5830. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31486 - http://secunia.com/advisories/23732 - http://osvdb.org/32808 - http://sourceforge.net/project/shownotes.php?release_id=478370 - http://www.vup
isories/23732 - http://osvdb.org/32808 - http://sourceforge.net/project/shownotes.php?release_id=478370 - http://www.vupen.com/english/advisories/2007/0189
CVE ID: CVE-2007-0366 State: PUBLISHED Published: 2007-01-19T21:00:00 Last Updated: 2024-08-07T12:19:29.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/moab/MOAB-18-01-2007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31597 - http://secunia.com/advisories/23842 - http://osvdb.org/32690
CVE ID: CVE-2007-0367 State: PUBLISHED Published: 2007-01-19T21:00:00 Last Updated: 2024-08-07T12:19:28.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/moab/MOAB-18-01-2007.html - http://osvdb.org/32691 - http://secunia.com/advisories/23842
CVE ID: CVE-2007-0368 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string in the MBSE_ROOT environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051859.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31639 - https://www.exploit-db.com/exploits/3154 - http://www.mbse.eu/mbse/mbsebbs/index.html - http://www.securityfocus.com/bid/22112
CVE ID: CVE-2007-0369 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:28.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31622 - http://osvdb.org/34763
CVE ID: CVE-2007-0370 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP code through an image_form parameter specifying a multiple-extension filename such as .jpg.vil.gif.php, which is stored in upload/banners/ under a different name, and executable via a direct request. NOTE: a separate SQL injection issue could be leveraged to make this vulnerability reachable by remote unauthen
request. NOTE: a separate SQL injection issue could be leveraged to make this vulnerability reachable by remote unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31619 - https://www.exploit-db.com/exploits/3153 - http://osvdb.org/34762