Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2539 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existence and file metadata) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1669 - https://www.exploit-db.com/exploits/3850 - http://www.securityfocus.com/archive/1/467665/100/0/threaded - http://securityreason.com/securityalert/2671 - http://osvdb.org/35783 - http://retrogod.altervista.org/runcms_152_sql.html - http://www.secur
.com/securityalert/2671 - http://osvdb.org/35783 - http://retrogod.altervista.org/runcms_152_sql.html - http://www.securityfocus.com/bid/23819
CVE ID: CVE-2007-2540 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config[pathMod] parameter to index.php in (1) mod/image/, (2) mod/liens/, (3) mod/liste/, (4) mod/special/, or (5) mod/texte/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34104 - http://osvdb.org/35779 - http://osvdb.org/35778 - http://www.securityfocus.com/bid/23829
ud.com/vulnerabilities/34104 - http://osvdb.org/35779 - http://osvdb.org/35778 - http://www.securityfocus.com/bid/23829 - http://www.vupen.com/english/advisories/2007/1670 - http://osvdb.org/35777 - http://osvdb.org/35781 - http://secunia.com/advisories/25177 - http://osvdb.org/35780
CVE ID: CVE-2007-2541 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/ajax_listado.php in Versado CMS 1.07 allows remote attackers to execute arbitrary PHP code via a URL in the urlModulo parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25103 - http://www.securityfocus.com/bid/23815 - http://osvdb.org/35772 - https://www.exploit-db.com/exploits/3847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34072 - http://www.vupen.com/english/advisories/2007/1666
CVE ID: CVE-2007-2542 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37682 - http://www.securityfocus.com/bid/23821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34071 - https://www.exploit-db.com/exploits/3848 - http://www.vupen.com/english/advisories/2007/1667
CVE ID: CVE-2007-2543 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34076 - https://www.exploit-db.com/exploits/3849 - http://www.securityfocus.com/bid/23820 - http://www.vupen.com/english/advisories/2007/1668 - http://secunia.com/advisories/25155 - http://osvdb.org/34472
CVE ID: CVE-2007-2544 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in templates/default/tpl_message.php in PHP TopTree BBS 2.0.1a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the right_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23867 - http://www.vupen.com/english/advisories/2007/1673 - http://secunia.com/advisories/25175 - http://osvdb.org/35787 - https://www.exploit-db.com/exploits/3854 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34107
CVE ID: CVE-2007-2545 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the system[path] parameter to (1) blocks/headerfile.php, (2) files/blocks/latest_files.php, (3) filters/headerfile.php, (4) forums/blocks/latest_posts.php, (5) groups/headerfile.php, (6) links/blocks/links.php, (7) menu/headerfile.php, (8) news/blocks/latest_news.php, (9) settings/headerfile.php, or (10) users/headerfile.php, in modules/. Additional Analyst Notes: - CVE Program C
s.php, (9) settings/headerfile.php, or (10) users/headerfile.php, in modules/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37774 - http://osvdb.org/37775 - http://osvdb.org/37767 - http://osvdb.org/37770 - http://osvdb.org/37773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34102 - http://osvdb.org/37769 - http://osvdb.org/37768 - http://osvdb.org/37772 - https://www.exploit-db.com/exploits/3853 - http://osvdb.org/37771 - http://www.securityfocus.com/bid/23828 - http://osvdb.org/37776 - http://www.vupen.com/english/advisories/2007/1671
CVE ID: CVE-2007-2546 State: PUBLISHED Published: 2007-05-09T10:00:00 Last Updated: 2024-08-07T13:42:33.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25139 - http://www.securityfocus.com/archive/1/471414/100/0/threaded - http://osvdb.org/35705 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls47 - http://www.securityfocus.com/archive/1/467748/100/0/threaded - http://securityreason.com/securityalert/2676 - http
s47 - http://www.securityfocus.com/archive/1/467748/100/0/threaded - http://securityreason.com/securityalert/2676 - http://www.securityfocus.com/bid/24482
CVE ID: CVE-2007-2547 State: PUBLISHED Published: 2007-05-09T10:00:00 Last Updated: 2024-08-07T13:42:33.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34131 - http://securityreason.com/securityalert/2677 - http://osvdb.org/35655 - http://www.securityfocus.com/archive/1/467825/100/0/threaded - http://www.securityfocus.com/bid/23856
CVE ID: CVE-2007-2548 State: PUBLISHED Published: 2007-05-09T10:00:00 Last Updated: 2024-08-07T13:42:33.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown impact and an l remote attack vector, related to "Cookie Manipulation." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2677 - http://www.securityfocus.com/archive/1/467825/100/0/threaded - http://www.securityfocus.com/bid/23856 - http://osvdb.org/35657
CVE ID: CVE-2007-2549 State: PUBLISHED Published: 2007-05-09T10:00:00 Last Updated: 2024-08-07T13:42:33.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) c or (2) quantity parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34138 - http://www.securityfocus.com/archive/1/477829/100/200/threaded - http://securityreason.com/securityalert/2677 - http://www.securityfocus.com/archive/1/467825/100/0/threaded - http://www.securityfocus.com/bid/23856 - http:
ert/2677 - http://www.securityfocus.com/archive/1/467825/100/0/threaded - http://www.securityfocus.com/bid/23856 - http://osvdb.org/35656
CVE ID: CVE-2007-2550 State: PUBLISHED Published: 2007-05-09T10:00:00 Last Updated: 2024-08-07T13:42:33.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a cookie name beginning with "ccSID" to (1) cart.php or (2) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23852 - http://osvdb.org/36210 - http://www.securityfocus.com/archive/1/467828/100/0/threaded - http://www.securityfocus.com/archive/1/468053/100/0/threaded - http://securi
focus.com/archive/1/467828/100/0/threaded - http://www.securityfocus.com/archive/1/468053/100/0/threaded - http://securityreason.com/securityalert/2678 - http://osvdb.org/36209 - http://www.cubecart.com/site/forums/index.php?s=0cbaa8a2f26fc573d1fc888285f610b1&showtopic=27418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34141
CVE ID: CVE-2007-2551 State: PUBLISHED Published: 2007-05-09T10:00:00 Last Updated: 2024-08-07T13:42:33.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in usersettings.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1725 - http://wikkawiki.org/WikkaReleaseNotes - http://osvdb.org/35828 - http://www.securityfocus.com/bid/23894 - http://wush.net/trac/wikka/ticket/363 - http://secunia.com/advisories/25181
CVE ID: CVE-2007-2552 State: PUBLISHED Published: 2007-05-09T10:00:00 Last Updated: 2024-08-07T13:42:33.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to obtain the names, and possibly revision notes and dates, of private pages via RSS feeds. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-May/001607.html - http://www.vupen.com/english/advisories/2007/1725 - http://wikkawiki.org/WikkaReleaseNotes - http://www.securityfocus.com/bid/23894 - http://wush.net/trac/wikka/ticket/305 - http://osvdb.org/35827 - http://secunia.com/advi
w.securityfocus.com/bid/23894 - http://wush.net/trac/wikka/ticket/305 - http://osvdb.org/35827 - http://secunia.com/advisories/25181
CVE ID: CVE-2007-2553 State: PUBLISHED Published: 2007-05-09T17:00:00 Last Updated: 2024-08-07T13:42:33.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via a large amount of data in the environment, as demonstrated by a long environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23881 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c01036871 - http://secunia.com/advisories/25197 - http://www.securityfocus.com/archive/1/468103/100/0/threaded - http://www.vupen.com/english/advisories/2007
ries/25197 - http://www.securityfocus.com/archive/1/468103/100/0/threaded - http://www.vupen.com/english/advisories/2007/1715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34175 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c01036871 - http://www.securitytracker.com/id?1018021 - http://www.orkaan.org/tru64/orkaan_-_exp_Tru64-5.X_SSRT071326.html - http://osvdb.org/36203
CVE ID: CVE-2007-2554 State: PUBLISHED Published: 2007-05-09T17:00:00 Last Updated: 2024-08-07T13:42:33.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Associated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36251 - http://securityreason.com/securityalert/2679 - http://www.securityfocus.com/archive/1/467962/100/0/threaded
CVE ID: CVE-2007-2555 State: PUBLISHED Published: 2007-05-09T17:00:00 Last Updated: 2024-08-07T13:42:33.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468058/100/0/threaded - http://securityreason.com/securityalert/2664 - http://www.securityfocus.com/archive/1/467823/100/0/threaded - http://
- http://securityreason.com/securityalert/2664 - http://www.securityfocus.com/archive/1/467823/100/0/threaded - http://osvdb.org/36182
CVE ID: CVE-2007-2556 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, as demonstrated by a request to the /nk/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2665 - http://www.securityfocus.com/archive/1/467750/100/0/threaded - http://osvdb.org/36931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34116 - http://www.securityfocus.com/bid/23835 - https://www.exploit-db.
://exchange.xforce.ibmcloud.com/vulnerabilities/34116 - http://www.securityfocus.com/bid/23835 - https://www.exploit-db.com/exploits/3858 - http://www.vupen.com/english/advisories/2007/1662 - http://secunia.com/advisories/25165
CVE ID: CVE-2007-2557 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to have an unknown impact via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25039 - http://osvdb.org/35540
CVE ID: CVE-2007-2558 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in phpFullAnnu CMS (pfa CMS) 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the repinc parameter. NOTE: CVE disputes this issue since $repinc is set to a constant value before use Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2667 - http://osvdb.org/36167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34160 - http://www.securityfocus.com/archive/1/467827/100/0/threaded - http://www.att
force.ibmcloud.com/vulnerabilities/34160 - http://www.securityfocus.com/archive/1/467827/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-May/001604.html
CVE ID: CVE-2007-2559 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php, (2) checkout.php, and (3) libsecure.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34165 - http://www.securityfocus.com/archive/1/467840/100/0/threaded - http://osvdb.org/36172 - http://osvdb.org/36171 - http://osvdb.org/36170 - http://securityreason.com/securityalert/2681
CVE ID: CVE-2007-2560 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the rubrik parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3867 - http://www.attrition.org/pipermail/vim/2007-May/001605.html - http://osvdb.org/36181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34108 - http://www.securityfocus.com/bid/23842
CVE ID: CVE-2007-2561 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-6115. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467838/100/0/threaded - http://securityreason.com/securityalert/2688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34155 - http://www.securityfocus.com/bid/23850 - http://osvdb.org/36169
CVE ID: CVE-2007-2562 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or HTML via the _m parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467832/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34144 - http://securityreason.com/securityalert/2684 - http://osvdb.org/36166
CVE ID: CVE-2007-2563 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remote attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34123 - http://www.vupen.com/english/advisories/2007/1672 - http://www.shinnai.altervista.org/moaxb/20070507/ufile.txt - http://secunia.com/advisories/25156 - http://moaxb.blogspot.com/2007/05/moaxb-07-versalso
org/moaxb/20070507/ufile.txt - http://secunia.com/advisories/25156 - http://moaxb.blogspot.com/2007/05/moaxb-07-versalsoft-http-file-uploader.html - http://www.securityfocus.com/bid/23853
CVE ID: CVE-2007-2564 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Sienzo Digital Music Mentor (DMM) 2.6.0.4 ActiveX control (DSKernel2.dll) allow remote attackers to execute arbitrary code via a long argument to the (1) LockModules or (2) UnlockModule function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23838 - http://moaxb.blogspot.com/2007_05_06_archive.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34120 - http://www.shinnai.altervista.org/moaxb/20070506/sienzo.txt - http://osv
nge.xforce.ibmcloud.com/vulnerabilities/34120 - http://www.shinnai.altervista.org/moaxb/20070506/sienzo.txt - http://osvdb.org/34338
CVE ID: CVE-2007-2565 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466754/100/100/threaded - http://securityreason.com/securityalert/2687 - http://osvdb.org/39020 - http://www.securityfocus.com/bid/23629 - http://www.securityfocus.com/archive/1/466786/100/100/threaded
CVE ID: CVE-2007-2566 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of service (disk consumption) by uploading multiple bar codes, as demonstrated by a WSF package. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467822/100/0/threaded - http://securityreason.com/securityalert/2683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34130 - http://secunia.com/advisories/25180
CVE ID: CVE-2007-2567 State: PUBLISHED Published: 2007-05-09T18:00:00 Last Updated: 2024-08-07T13:42:33.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467822/100/0/threaded - http://securityreason.com/securityalert/2683 - http://osvdb.org/34336 - http://secunia.com/advisories/25180 - http://www.vupen.com/english/advisories/2007/1705
CVE ID: CVE-2007-2568 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:42:33.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via a long (1) tag or (2) track type in a CUE file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24003 - http://www.vupen.com/english/advisories/2007/1835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34317 - http://secunia.com/secunia_research/2007-51/advisory/ - http://osvdb.org/36178 - http://secunia.com/advisories/25117
CVE ID: CVE-2007-2569 State: PUBLISHED Published: 2007-05-09T21:00:00 Last Updated: 2024-08-07T13:42:33.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the friendly_path parameter to (1) core/data/yaml.inc.php, or _load.php in (2) core/data/, (3) core/display/, or (4) core/support/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37659 - https://www.exploit-db.com/exploits/3864 - http://osvdb.org/37660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34099 - http://osvdb.org/37657 - http://ww
http://osvdb.org/37660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34099 - http://osvdb.org/37657 - http://www.vupen.com/english/advisories/2007/1679 - http://osvdb.org/37658