Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2704 State: PUBLISHED Published: 2007-05-16T01:00:00 Last Updated: 2024-08-07T13:49:57.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service (SSL port unavailability) by accessing a half-closed SSL socket. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34278 - http://securitytracker.com/id?1018057 - http://secunia.com/advisories/25284 - http://dev2dev.bea.com/pub/advisory/237 - http://www.vupen.com/english/advisories/2007/1815 - http://osvdb.org/36064
CVE ID: CVE-2007-2705 State: PUBLISHED Published: 2007-05-16T01:00:00 Last Updated: 2024-08-07T13:49:57.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018059 - http://osvdb.org/36063 - http://www.vupen.com/english/advisories/2007/1815 - http://dev2dev.bea.com/pub/advisory/239 - https:/
/osvdb.org/36063 - http://www.vupen.com/english/advisories/2007/1815 - http://dev2dev.bea.com/pub/advisory/239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34281
CVE ID: CVE-2007-2706 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows remote attackers to execute arbitrary PHP code via a URL in the _MG_CONF[path_html] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34294 - http://secunia.com/advisories/25272 - http://osvdb.org/36239 - http://www.securityfocus.com/bid/23983 - http://www.vupen.com/english/advisories/2007/18
5272 - http://osvdb.org/36239 - http://www.securityfocus.com/bid/23983 - http://www.vupen.com/english/advisories/2007/1827
CVE ID: CVE-2007-2707 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in linksnet_linkslog_rss.php in Linksnet Newsfeed 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dirpath_linksnet_newsfeed parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3923 - http://www.vupen.com/english/advisories/2007/1826 - http://www.securityfocus.com/bid/23982 - http://secunia.com/advisories/25271 - http://osvdb.org/36050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34297
CVE ID: CVE-2007-2708 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News (News-Script) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34276 - https://www.exploit-db.com/exploits/3920 - http://www.vupen.com/english/advisories/2007/1801 - http://www.securityfocus.com/bid/23970
CVE ID: CVE-2007-2709 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2005 2.00 allows remote attackers to execute arbitrary PHP code via a URL in the SETS[path][physical] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34268 - http://secunia.com/advisories/25274 - http://www.vupen.com/english/advisories/2007/1800 - http://www.securityfocus.com/bid/23966 - https://www.exploit-db.com/exploits/3919
CVE ID: CVE-2007-2710 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2.00-P00 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SETS[path][IT] parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36054 - http://secunia.com/advisories/25274 - http://www.vupen.com/english/advisories/2007/1800
CVE ID: CVE-2007-2711 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 113. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23981 - https://www.exploit-db.com/exploits/3925 - http://www.vupen.com/english/advisories/2007/1825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34298 - http://osvdb.org/36053 - http://secunia.com/advisories/25248
CVE ID: CVE-2007-2712 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MH Software Connect Daily before 3.3.3 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25240 - http://www.mhsoftware.com/changelog.html - http://osvdb.org/34782 - http://www.vupen.com/english/advisories/2007/1788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34262 - http://www.securityfocus.com/bid/23968
CVE ID: CVE-2007-2713 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request for the admin/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23971 - http://www.securityfocus.com/archive/1/468545/100/0/threaded - http://osvdb.org/36173 - http://secunia.com/advisories/25237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34257 - http://securityreason.com/
//secunia.com/advisories/25237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34257 - http://securityreason.com/securityalert/2707 - http://www.expw0rm.com/ifdate-2-unauthorized-administrative-access-bug_no285.html
CVE ID: CVE-2007-2714 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37290 - http://michaeldaw.org/alerts/alert-140507/ - http://www.securityfocus.com/bid/23965 - http://michaeldaw.org/alerts/alerts-140507-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/34338 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/062980.html
CVE ID: CVE-2007-2715 State: PUBLISHED Published: 2007-05-16T10:00:00 Last Updated: 2024-08-07T13:49:57.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1781 - http://www.securityfocus.com/bid/23940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34300 - http://0day.2600.ir/exploits/3900 - https://www.exploit-db.com/exploits/3900
CVE ID: CVE-2007-2716 State: PUBLISHED Published: 2007-05-16T19:00:00 Last Updated: 2024-08-07T13:49:57.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) listmembers.php and (2) stats.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25249 - http://osvdb.org/36052 - http://www.securityfocus.com/bid/23951 - http://marc.info/?l=full-disclosure&m=117901106013812&w=2 - http://marc.info/?l=full-
/www.securityfocus.com/bid/23951 - http://marc.info/?l=full-disclosure&m=117901106013812&w=2 - http://marc.info/?l=full-disclosure&m=117901012506948&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34335 - http://osvdb.org/36051
CVE ID: CVE-2007-2717 State: PUBLISHED Published: 2007-05-16T19:00:00 Last Updated: 2024-08-07T13:49:57.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the type_id[] parameter, a different vector than CVE-2005-0537. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3907 - http://osvdb.org/37910 - http://www.securityfocus.com/bid/23949
CVE ID: CVE-2007-2718 State: PUBLISHED Published: 2007-05-16T19:00:00 Last Updated: 2024-08-07T13:49:57.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via crafted STYLE tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018048 - http://osvdb.org/36017 - http://secunia.com/advisories/25250 - http://www.vupen.com/english/advisories/2007/1795 - http://www.scanit.be/advisory-2007-05-12.html - https://exchange.xforce.
://www.vupen.com/english/advisories/2007/1795 - http://www.scanit.be/advisory-2007-05-12.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34266 - http://www.communigate.com/CommuniGatePro/History51.html - http://marc.info/?l=full-disclosure&m=117900749209206&w=2 - http://www.securityfocus.com/bid/23950
CVE ID: CVE-2007-2719 State: PUBLISHED Published: 2007-05-16T19:00:00 Last Updated: 2024-08-07T13:49:57.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23988 - http://www.vupen.com/english/advisories/2007/1823 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713 - http://osvdb.org/36061 - http://www.securityfocus.com/archive/1/468974/100/0/threaded - http://www.across
ID=c01049713 - http://osvdb.org/36061 - http://www.securityfocus.com/archive/1/468974/100/0/threaded - http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713 - http://www.securitytracker.com/id?1018062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34303 - http://secunia.com/advisories/25275
CVE ID: CVE-2007-2720 State: PUBLISHED Published: 2007-05-16T19:00:00 Last Updated: 2024-08-07T13:49:57.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Group-Office before 2.16-13 does not properly validate user IDs, which allows remote attackers to obtain sensitive information via certain requests for (1) message.php and (2) messages.php in modules/email/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25369 - http://sourceforge.net/project/shownotes.php?release_id=498556&group_id=76359 - http://www.vupen.com/english/advisories/2007/1773 - http://group-offic
/shownotes.php?release_id=498556&group_id=76359 - http://www.vupen.com/english/advisories/2007/1773 - http://group-office.svn.sourceforge.net/viewvc/group-office?view=rev&revision=261 - http://www.securityfocus.com/bid/23925
CVE ID: CVE-2007-2721 State: PUBLISHED Published: 2007-05-16T20:00:00 Last Updated: 2024-08-07T13:49:57.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9397 - http://www.securityfocus.com/bid/24052 - http://www.ubuntu.com/usn/usn-501-2 -
ion/oval%3Aorg.mitre.oval%3Adef%3A9397 - http://www.securityfocus.com/bid/24052 - http://www.ubuntu.com/usn/usn-501-2 - http://secunia.com/advisories/27319 - http://osvdb.org/36137 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:164 - http://secunia.com/advisories/25287 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413033 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:209 - http://www.debian.org/security/2010/dsa-2036 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041 - http://www.redhat.com/support/errata/RHSA-2009-0012.html - http://secunia.com/advisories/25703 - http://secunia.com/advisories/26516 - http://www.mandriva.com/security/advisories?name=
//secunia.com/advisories/25703 - http://secunia.com/advisories/26516 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:129 - http://secunia.com/advisories/27489 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:142 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413041%3Bmsg=88 - http://secunia.com/advisories/39505 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:208 - http://www.vupen.com/english/advisories/2010/0912 - http://www.ubuntu.com/usn/usn-501-1
CVE ID: CVE-2007-2722 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instability) via certain invalid strings in the URL attribute of an ENCLOSURE element, as demonstrated by a "%s" sequence, a "%Y" sequence, a "%%" sequence, and an "n," sequence. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3930 - http://osvdb.org/39768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34350 - http://www.securityfocus.com/bid/23994
CVE ID: CVE-2007-2723 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service (web browser crash) via an "empty" .MPA file, which triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23991 - http://www.securityfocus.com/archive/1/468626/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34299 - http://www.securityfocus.com/archive/1/468758/100/0/threaded - http://osvdb.org/37376
CVE ID: CVE-2007-2724 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in all_photos.html in fotolog allows remote attackers to inject arbitrary web script or HTML via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2713 - http://www.securityfocus.com/archive/1/468316/100/0/threaded - http://osvdb.org/37916
CVE ID: CVE-2007-2725 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DB Software Laboratory DeWizardX (DEWizardAX.ocx) ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36023 - http://moaxb.blogspot.com/2007/05/moaxb-15-db-software-laboratory.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34304 - http://www.securityfocus.com/bid/23986 - http://shinnai.altervista.org/viewtopic.php?id=42&t_id=17
CVE ID: CVE-2007-2726 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39767 - https://www.exploit-db.com/exploits/3929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34344 - http://www.securityfocus.com/bid/23993
CVE ID: CVE-2007-2727 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls php_rand_r with an uninitialized seed variable and therefore always generates the same initialization vector (IV), which might allow context-dependent attackers to decrypt certain data more easily because of the guessable encryption keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23984 - http://www.fortheloot.com/public/mcrypt.patch - http://
ontainer: References: - http://www.securityfocus.com/bid/23984 - http://www.fortheloot.com/public/mcrypt.patch - http://cvs.php.net/viewvc.cgi/php-src/ext/mcrypt/mcrypt.c?r1=1.91.2.3.2.9&r2=1.91.2.3.2.10 - http://blog.php-security.org/archives/80-Watching-the-PHP-CVS.html - http://www.php.net/ChangeLog-5.php - http://bugs.php.net/bug.php?id=40999 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 - http://secunia.com/advisories/26895 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://osvdb.org/36087
CVE ID: CVE-2007-2728 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-29T16:00:16.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727. Note: The PHP team argue that this is not a valid security issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/25306 - http://blog.php-security.org/archives/80-Watching-the-PHP-CVS.html - http://www.vupen.com/english/advisories/2007/1839 - http://www.ubuntu.co
ity.org/archives/80-Watching-the-PHP-CVS.html - http://www.vupen.com/english/advisories/2007/1839 - http://www.ubuntu.com/usn/usn-485-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 - http://secunia.com/advisories/26895 - http://secunia.com/advisories/26102 - http://osvdb.org/36086 - http://www.novell.com/linux/security/advisories/2007_15_sr.html
CVE ID: CVE-2007-2729 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/
an the canonical identifier. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2714 - http://www.securityfocus.com/archive/1/468643/100/0/threaded - http://www.matousec.com/info/advisories/Bypassing-PWF-HIPS-open-process-control-with-uncommon-identifier.php - http://osvdb.org/37375
CVE ID: CVE-2007-2730 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2714 - http://www.securityfocus.com/archive/1/468643/1
Container: References: - http://securityreason.com/securityalert/2714 - http://www.securityfocus.com/archive/1/468643/100/0/threaded - http://osvdb.org/37383 - http://www.matousec.com/info/advisories/Bypassing-PWF-HIPS-open-process-control-with-uncommon-identifier.php
CVE ID: CVE-2007-2731 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF (%0A) sequences in the subject parameter, a related issue to CVE-2007-1898. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34292 - http://www.netvigilance.com/advisory0026 - http://securityreason.com/securityalert/2710 - http://www.vupen.com/english/advisories/2007/1831 - http://www.securityfocus.com/archive/1/468644/100/0/th
yalert/2710 - http://www.vupen.com/english/advisories/2007/1831 - http://www.securityfocus.com/archive/1/468644/100/0/threaded - http://www.securitytracker.com/id?1018063 - http://www.osvdb.org/34088 - http://www.securityfocus.com/bid/23989
CVE ID: CVE-2007-2732 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML via the (1) path parameter to view/search/; or the (2) companyname, (3) country, (4) email, (5) firstname, (6) middlename, (7) required, (8) surname, or (9) title parameter to view/supplynews/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468681/100/0/threaded - http://securityreason.com/securityalert/2711 - http://www.vupen.com/english/adviso
com/archive/1/468681/100/0/threaded - http://securityreason.com/securityalert/2711 - http://www.vupen.com/english/advisories/2007/1831 - http://www.securityfocus.com/bid/23999 - http://osvdb.org/37451 - http://osvdb.org/37452