Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://us2.php.net/releases/5_2_2.php - http://www.securitytracker.com/id?1018023 - http://secunia.com/advisories/25255 - http://secunia.com/advisories/25445 - http://secunia.com/advisories/25372 - https://rhn.redhat.com/errata/RHSA-2007-0348.html - http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
CVE ID: CVE-2007-2511 State: PUBLISHED Published: 2007-05-09T00:00:00 Last Updated: 2024-08-07T13:42:32.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34676 - http://secunia.com/advisories/25191 - http://www.ubuntu.com/usn/usn-462-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:102 - http://secunia.com/advisories/26048 - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://www.trustix.org/errata/2007/0017/ - http://us2.php.net/releases/5_2_2.php - ht
ntoo.org/glsa/glsa-200705-19.xml - http://www.trustix.org/errata/2007/0017/ - http://us2.php.net/releases/5_2_2.php - http://secunia.com/advisories/25255 - http://secunia.com/advisories/25445 - http://viewcvs.php.net/viewvc.cgi/php-src/ext/standard/user_filters.c?r1=1.31.2.4.2.5&r2=1.31.2.4.2.6 - http://secunia.com/advisories/25372 - http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
CVE ID: CVE-2007-2512 State: PUBLISHED Published: 2007-06-07T21:00:00 Last Updated: 2024-08-07T13:42:33.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470742/100/0/threaded - http://www.securityfocus.com/bid/24360 - http://cert.uni-stuttgart.de/advisories/al-ip-touch-vlan-filtering.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/34760 - http://osvdb.org/38526
CVE ID: CVE-2007-2513 State: PUBLISHED Published: 2007-06-04T16:00:00 Last Updated: 2024-08-07T13:42:33.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell GroupWise 7 before SP2 20070524, and GroupWise 6 before 6.5 post-SP6 20070522, allows remote attackers to obtain credentials via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2024 - https://secure-support.novell.com/KanisaPlatform/Publishing/300/3382383_f.SAL_Public.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34655 - http://secunia.com/advisories/25498 - http://www.securityfocus.com/bid/24258 - http://securitytrac
lnerabilities/34655 - http://secunia.com/advisories/25498 - http://www.securityfocus.com/bid/24258 - http://securitytracker.com/id?1018180 - http://osvdb.org/35942
CVE ID: CVE-2007-2514 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T13:42:33.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack, allows remote attackers to execute arbitrary code via a long request. NOTE: this might be a reservation duplicate of CVE-2007-1173. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018191 - http://dvlabs.tippingpoint.com/advisory/TPTI-07-10 - https://exchange.xforce.ibmcloud.com/vulner
racker.com/id?1018191 - http://dvlabs.tippingpoint.com/advisory/TPTI-07-10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34723 - http://www.securityfocus.com/archive/1/470563/100/0/threaded - http://www.securityfocus.com/bid/24317 - http://osvdb.org/42059 - http://securityreason.com/securityalert/2785
CVE ID: CVE-2007-2518 State: REJECTED Published: 2007-05-09T21:00:00Z Last Updated: 2024-09-17T03:12:51.193Z Description: No description available.
CVE ID: CVE-2007-2519 State: PUBLISHED Published: 2007-05-22T19:00:00 Last Updated: 2024-08-07T13:42:33.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the (1) install-as attribute in the file element in package.xml 1.0 or the (2) as attribute in the install element in package.xml 2.0. NOTE: it could be argued that this does not cross privilege boundaries in typical installations, since the code being installed could perform the same actions. Additional Analyst Notes: - CVE Program Container: References:
the code being installed could perform the same actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-462-1 - http://osvdb.org/42108 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:110 - http://www.securityfocus.com/bid/24111 - http://www.vupen.com/english/advisories/2007/1926 - http://pear.php.net/advisory-20070507.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/34482 - http://pear.php.net/news/vulnerability2.php - http://secunia.com/advisories/25372
CVE ID: CVE-2007-2520 State: PUBLISHED Published: 2007-06-26T17:00:00 Last Updated: 2024-08-07T13:42:33.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2834 - http://www.securityfocus.com/archive/1/472203/100/0/threaded - http://www.securityfocus.com/bid/24621 - http://www.osvdb.org/34274 - http://www.netvigilance.com/advisory0025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35049
CVE ID: CVE-2007-2521 State: PUBLISHED Published: 2007-05-08T18:00:00 Last Updated: 2024-08-07T13:42:33.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25104 - http://www.vupen.com/english/advisories/2007/1665 - http://www.securityfocus.com/bid/23817 - https://sourceforge.net/project/shownotes.php?group_id=88942&release_id=533122 - https://www.exploit-db.com/exploits/3846 - https://exchange.xforce.ibmcloud.com/vulnerab
up_id=88942&release_id=533122 - https://www.exploit-db.com/exploits/3846 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34073 - http://osvdb.org/35773
CVE ID: CVE-2007-2522 State: PUBLISHED Published: 2007-05-11T03:55:00 Last Updated: 2024-08-07T13:42:33.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password. Additional Analyst Notes: - CVE Program Container: References: - http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp - http://www.securitytracker.com/id?1018043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34204 - http://www.
p - http://www.securitytracker.com/id?1018043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34204 - http://www.osvdb.org/34585 - http://www.vupen.com/english/advisories/2007/1750 - http://www.securityfocus.com/bid/23906 - http://secunia.com/advisories/25202 - http://www.zerodayinitiative.com/advisories/ZDI-07-028.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063275.html - http://www.kb.cert.org/vuls/id/680616 - http://www.securityfocus.com/archive/1/468304/100/0/threaded
CVE ID: CVE-2007-2523 State: PUBLISHED Published: 2007-05-11T03:55:00 Last Updated: 2024-08-07T13:42:33.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0. Additional Analyst Notes: - CVE Program Container: References: - http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp - http://www.securitytracker.com/id?1018043 - http://blog.48bits.com/?p=103 -
ntivirus/infodocs/caav-secnotice050807.asp - http://www.securitytracker.com/id?1018043 - http://blog.48bits.com/?p=103 - http://www.vupen.com/english/advisories/2007/1750 - http://www.securityfocus.com/bid/23906 - http://www.kb.cert.org/vuls/id/788416 - http://www.osvdb.org/34586 - http://secunia.com/advisories/25202 - http://www.securityfocus.com/archive/1/468306/100/0/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=530 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063275.html
CVE ID: CVE-2007-2524 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T13:42:33.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, but the proper identifier for the ipsec-tools issue is CVE-2007-1841. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1698 - http://www.virtuax.be/?page=library&id=35&typ
ntainer: References: - http://www.vupen.com/english/advisories/2007/1698 - http://www.virtuax.be/?page=library&id=35&type=Exploits - http://www.securityfocus.com/archive/1/471192/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34164 - http://www.securityfocus.com/bid/23862 - http://secunia.com/advisories/25205 - http://osvdb.org/35822 - http://www.debian.org/security/2007/dsa-1298 - http://securityreason.com/securityalert/2668 - http://www.novell.com/linux/security/advisories/2007_13_sr.html - http://www.securityfocus.com/archive/1/467870/100/0/threaded - http://secunia.com/advisories/25787 - http://secunia.com/advisories/25419 - http://osvdb.org/35821
CVE ID: CVE-2007-2525 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T13:42:33.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service (memory consumption) by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is initialized. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.21-git8.log - http://www.vupen.com/english/advisories/2007/1703 - http://secunia.com/advisories/27227 - http://secunia.com/advisories/
http://www.vupen.com/english/advisories/2007/1703 - http://secunia.com/advisories/27227 - http://secunia.com/advisories/26664 - http://www.novell.com/linux/security/advisories/2007_51_kernel.html - http://www.novell.com/linux/security/advisories/2007_53_kernel.html - http://secunia.com/advisories/26289 - http://www.securityfocus.com/bid/23870 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10594 - http://secunia.com/advisories/25838 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 - http://www.ubuntu.com/usn/usn-510-1 - http://www.debian.org/security/2008/dsa-1504 - http://www.debian.org/security/2007/dsa-1356 - http://www.mandriva.co
1 - http://www.debian.org/security/2008/dsa-1504 - http://www.debian.org/security/2007/dsa-1356 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:216 - http://secunia.com/advisories/26620 - http://www.ubuntu.com/usn/usn-489-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34150 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 - http://secunia.com/advisories/25163 - http://www.debian.org/security/2008/dsa-1503 - http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm - http://secunia.com/advisories/29058 - https://rhn.redhat.com/errata/RHSA-2007-0376.html - http://www.ubuntu.com/usn/usn-486-1 - http://secunia.com/advisories/26450 - http://secunia.com/
ta/RHSA-2007-0376.html - http://www.ubuntu.com/usn/usn-486-1 - http://secunia.com/advisories/26450 - http://secunia.com/advisories/25700 - http://secunia.com/advisories/26139 - http://rhn.redhat.com/errata/RHSA-2007-0488.html - http://secunia.com/advisories/26133
CVE ID: CVE-2007-2526 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T13:42:33.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control (scvncctrl.dll) in the SmartCode VNC Manager 3.6 allows remote attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23869 - http://osvdb.org/34340 - http://www.shinnai.altervista.org/moaxb/20070508/scvncctrl.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/34149 - http://www.exploit-db.com/exploits/3873 - http://moaxb.blogspot.com
exchange.xforce.ibmcloud.com/vulnerabilities/34149 - http://www.exploit-db.com/exploits/3873 - http://moaxb.blogspot.com/2007/05/moaxb-08-smartcode-vnc-manager-36.html - http://www.vupen.com/english/advisories/2007/1704 - http://secunia.com/advisories/25203
CVE ID: CVE-2007-2527 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T13:42:33.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a URL in the HomeDir parameter to (1) dp_logs.php or (2) index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34125 - http://secunia.com/advisories/25176 - http://www.vupen.com/english/advisories/2007/1681 - http://attrition.org/pipermail/vim/2007-May/001591.html - http://dynamicpad.org/ - http://attrition.org/piperma
7/1681 - http://attrition.org/pipermail/vim/2007-May/001591.html - http://dynamicpad.org/ - http://attrition.org/pipermail/vim/2007-May/001593.html - http://www.securityfocus.com/bid/23861 - https://www.exploit-db.com/exploits/3868
CVE ID: CVE-2007-2528 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T13:42:33.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35793 - http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch3_readme.txt
CVE ID: CVE-2007-2529 State: PUBLISHED Published: 2007-05-09T00:00:00 Last Updated: 2024-08-07T13:42:33.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a denial of service (kernel panic) and possibly gain privileges via a certain argument, related to ACE_SETACL. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1683 - http://osvdb.org/34906 - http://securitytracker.com/id?1018009 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102869-1 - https://oval.cisecurity.org/repository/search/definition/o
/sunsolve.sun.com/search/document.do?assetkey=1-26-102869-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1669 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34147 - http://secunia.com/advisories/25162 - http://www.securityfocus.com/bid/23863
CVE ID: CVE-2007-2530 State: PUBLISHED Published: 2007-05-09T00:00:00 Last Updated: 2024-08-07T13:42:33.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2 allow remote attackers to execute arbitrary PHP code via a URL in the RESPATH parameter to (1) dosearch.php or (2) printfriendly.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34113 - http://osvdb.org/35824 - http://secunia.com/advisories/25179 - http://www.vupen.com/english/advisories/2007/1680 - https://www.exploit-db.com/exploits/3865 - http://osvdb.org/35823
CVE ID: CVE-2007-2531 State: PUBLISHED Published: 2007-05-09T00:00:00 Last Updated: 2024-08-07T13:42:33.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows remote attackers to execute arbitrary PHP code via a URL in the beryliumroot parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34158 - https://www.exploit-db.com/exploits/3869 - http://secunia.com/advisories/25164 - http://www.vupen.com/english/advisories/2007/1682 - http://www.securityfocus.com/bid/23882
CVE ID: CVE-2007-2532 State: PUBLISHED Published: 2007-05-09T00:00:00 Last Updated: 2024-08-07T13:42:33.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) to (1) sendmail.php or (2) order_form.php, different vectors than CVE-2006-6734. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36249 - http://osvdb.org/36248 - http://securityreason.com/securityalert/2666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34105 - http://www.securityfocus.com/ar
on.com/securityalert/2666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34105 - http://www.securityfocus.com/archive/1/467831/100/0/threaded - http://www.securityfocus.com/bid/23847
CVE ID: CVE-2007-2533 State: PUBLISHED Published: 2007-05-09T00:00:00 Last Updated: 2024-08-07T13:42:33.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the (1) the RPCFN_ActiveRollback function in (a) stcommon.dll, or the (2) ENG_SetRealTimeScanConfigInfo or (3) ENG_SendEmail functions in (b) eng50.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1689 - http://osvdb.org/35792 - http://osvdb.org/35791 - http://www.trendmicro.com/ft
.vupen.com/english/advisories/2007/1689 - http://osvdb.org/35792 - http://osvdb.org/35791 - http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt - http://www.trendmicro.com/download_beta/product.asp?productid=17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34171
CVE ID: CVE-2007-2534 State: PUBLISHED Published: 2007-05-09T00:00:00 Last Updated: 2024-09-25T16:07:11.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since ADMIN_USER/ADMIN_PASS are initialized before use Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/23854 - http://www.attrition.org/pipermail/vim/2007-May/001597.html - http://osvdb.org/36180 - http://securityre
com/bid/23854 - http://www.attrition.org/pipermail/vim/2007-May/001597.html - http://osvdb.org/36180 - http://securityreason.com/securityalert/2669 - http://www.securityfocus.com/archive/1/467839/100/0/threaded
CVE ID: CVE-2007-2535 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinAce allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34080 - http://www.securityfocus.com/bid/23823 - http://www.securityfocus.com/archive/1/467646/100/0/threaded - http://osvdb.org/41750 - http://securityreason.com/securityalert/2680
CVE ID: CVE-2007-2536 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34080 - http://osvdb.org/41751 - http://www.securityfocus.com/bid/23823 - http://www.securityfocus.com/archive/1/467646/100/0/threaded - http://securityreason.com/securityalert/2680
CVE ID: CVE-2007-2537 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote authenticated users to execute arbitrary SQL commands via a (1) nickname or (2) Id in a cookie, or (3) the X-Forwarded-For (X_FORWARDED_FOR) HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2670 - http://www.aeroxteam.fr/exploit-NPDS-5.10.txt - http://www.securityfocus.com/bid/23831 - http://www.securityfocus.com/archive/1/467696/100/0/threaded - http://osvdb.org/3619
//www.securityfocus.com/bid/23831 - http://www.securityfocus.com/archive/1/467696/100/0/threaded - http://osvdb.org/36195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34109
CVE ID: CVE-2007-2538 State: PUBLISHED Published: 2007-05-09T01:00:00 Last Updated: 2024-08-07T13:42:33.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the executed_queries array parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1669 - https://www.exploit-db.com/exploits/3850 - http://www.securityfocus.com/archive/1/467665/100/0/threaded - http://securityreason.com/securityalert/2671 - http://retrogod.altervista.org/runcms_152_sql.html - http://secunia.com/advi
p://securityreason.com/securityalert/2671 - http://retrogod.altervista.org/runcms_152_sql.html - http://secunia.com/advisories/25154 - http://www.runcms.org/modules/news/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/34075 - http://osvdb.org/35782 - http://www.securityfocus.com/bid/23819