Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2041 State: PUBLISHED Published: 2007-04-16T21:00:00 Last Updated: 2024-08-07T13:23:50.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33611 - http://www.vupen.com/english/advisories/2007/1368 - http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml - http://securitytracker
english/advisories/2007/1368 - http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml - http://securitytracker.com/id?1017908 - http://www.securityfocus.com/bid/23461 - http://www.osvdb.org/34138
CVE ID: CVE-2007-2042 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:49.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) support.html.php or (2) info.html.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37431 - http://www.vupen.com/english/advisories/2007/135
Notes: - CVE Program Container: References: - http://osvdb.org/37431 - http://www.vupen.com/english/advisories/2007/1357 - http://osvdb.org/37430
CVE ID: CVE-2007-2043 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:50.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) 1.08 and earlier module for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) media.tab.php or (2) media.divs.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3714 - http://www.vupen.com/english/advisories/2007/1357 - http://www.securityfocus.com/bid/23432 - http://osvdb.org/37433 - http://o
/www.vupen.com/english/advisories/2007/1357 - http://www.securityfocus.com/bid/23432 - http://osvdb.org/37433 - http://osvdb.org/37434
CVE ID: CVE-2007-2044 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:49.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mod_weather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3712 - http://www.vupen.com/english/advisories/2007/1356 - http://osvdb.org/37435
CVE ID: CVE-2007-2045 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:50.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (CPU consumption) via crafted IP packets, probably related to fragmented packets with duplicate or missing fragments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017911 - http://osvdb.org/34901 - http://secunia.com/advisories/24857 - http://www.vupen.com/english/advisories/2007/1375 - http://secunia.com/advisories/24987 - http://support.avaya.com/
57 - http://www.vupen.com/english/advisories/2007/1375 - http://secunia.com/advisories/24987 - http://support.avaya.com/elmodocs2/security/ASA-2007-165.htm - http://www.securityfocus.com/bid/23468 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102866-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33597
CVE ID: CVE-2007-2046 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:50.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL (phpPgAds) 2.0.11 and earlier allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in (1) the dest parameter and (2) the Referer HTTP header. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=685278 -
dditional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=685278 - http://forum.openads.org/index.php?showtopic=503413399&pid=39136 - http://sourceforge.net/project/shownotes.php?release_id=500343 - http://secunia.com/advisories/24876 - http://www.vupen.com/english/advisories/2007/1364
CVE ID: CVE-2007-2047 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:50.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://forum.openads.org/index.php?showtopic=503413399&pid=39136 - http://www.vupen.com/english/advisories/2007/1365
CVE ID: CVE-2007-2048 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:49.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read arbitrary system files via a .. (dot dot) in the resource parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1363 - http://www.securityfocus.com/bid/23423 - http://securityreason.com/securityalert/2589 - http://www.securitytracker.com/id?1017926 - http://www.securityfocus.com/archive/1/465993/100/0/threaded - http://www
- http://www.securitytracker.com/id?1017926 - http://www.securityfocus.com/archive/1/465993/100/0/threaded - http://www.aushack.com/advisories/200704-webmethods.txt - http://secunia.com/advisories/24933 - http://www.securityfocus.com/archive/1/465332/100/0/threaded - http://www.securityfocus.com/archive/1/467873/30/6720/threaded
CVE ID: CVE-2007-2049 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:50.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Calendar Module (com_calendar) 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) com_calendar.php or (2) mod_calendar.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23435 - http://osvdb.org/37583 - https://www.exploit-db.com/exploits/3713 - http://osvdb.org/37584
CVE ID: CVE-2007-2050 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:50.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) a lang cookie or (2) the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24858 - http://www.vupen.com/english/advisories/2007/1370 - http://www.securityfocus.com/bid/23450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33596 - https://www.exploit-db.com/exploits/3718 - http://osvdb.o
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33596 - https://www.exploit-db.com/exploits/3718 - http://osvdb.org/34909
CVE ID: CVE-2007-2051 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:49.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34890 - http://sourceforge.net/project/shownotes.php?release_id=500238&group_id=32077 - http://www.vupen.com/english/advisories/2007/1347
CVE ID: CVE-2007-2052 State: PUBLISHED Published: 2007-04-16T22:00:00 Last Updated: 2024-08-07T13:23:50.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/security-announce/2008/000005.html - http://secunia.com/advisories/28050 - http://secunia.com/advisories/
.com/pipermail/security-announce/2008/000005.html - http://secunia.com/advisories/28050 - http://secunia.com/advisories/25190 - http://secunia.com/advisories/25217 - http://secunia.com/advisories/37471 - http://www.python.org/download/releases/2.5.1/NEWS.txt - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416934 - http://www.debian.org/security/2008/dsa-1551 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/29303 - http://www.vupen.com/english/advisories/2007/1465 - http://secunia.com/advisories/29032 - http://secunia.com/advisories/31492 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8353 - http://www
isories/31492 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8353 - http://www.securityfocus.com/archive/1/469294/30/6450/threaded - http://www.redhat.com/support/errata/RHSA-2008-0629.html - http://www.redhat.com/support/errata/RHSA-2007-1077.html - http://www.securityfocus.com/archive/1/488457/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2007-1076.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.vupen.com/english/advisories/2008/0637 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235093 - http://secunia.com/advisories/25353 - http://secunia.com/advisories/25233 - https://issues.rpath.com/browse/
id=235093 - http://secunia.com/advisories/25353 - http://secunia.com/advisories/25233 - https://issues.rpath.com/browse/RPL-1358 - http://www.ubuntu.com/usn/usn-585-1 - http://www.trustix.org/errata/2007/0019/ - http://secunia.com/advisories/28027 - http://www.novell.com/linux/security/advisories/2007_13_sr.html - http://secunia.com/advisories/31255 - http://www.debian.org/security/2008/dsa-1620 - http://secunia.com/advisories/25787 - http://www.securityfocus.com/bid/23887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34060 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11716 - http://www.vupen.com/english/advisories/2009/3316 - http://www.m
search/definition/oval%3Aorg.mitre.oval%3Adef%3A11716 - http://www.vupen.com/english/advisories/2009/3316 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:099 - http://secunia.com/advisories/29889
CVE ID: CVE-2007-2053 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:23:50.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a long LastModified value in an S3 XML response in lib/s3.cpp; (2) a long (a) path or (b) bucket in an S3 URL in lib/vnode_s3.cpp; or (3) a long (c) EFW, (d) AFD, or (c) aimage file path. NOTE: the aimage vector (3c) has since been recalled from the researcher's original advisory, since the code is not called in any version of AFFLIB. Additional Analyst Notes: - CVE
e researcher's original advisory, since the code is not called in any version of AFFLIB. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2655 - http://osvdb.org/35613 - http://www.vsecurity.com/bulletins/advisories/2007/afflib-overflows.txt - http://osvdb.org/35614 - http://osvdb.org/35615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33961 - http://www.securityfocus.com/archive/1/467038/100/0/threaded - http://www.securityfocus.com/bid/23695
CVE ID: CVE-2007-2054 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:23:49.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in AFFLIB before 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in (1) warn and (2) err calls in (a) lib/s3.cpp, (b) tools/afconvert.cpp, (c) tools/afcopy.cpp, (d) tools/afinfo.cpp, (e) aimage/aimage.cpp, (f) aimage/imager.cpp, and (g) tools/afxml.cpp. NOTE: the aimage.cpp vector (e) has since been recalled from the researcher's original advisory, since the code is not called in any version of AFFLIB. Additional Analyst Notes: -
the researcher's original advisory, since the code is not called in any version of AFFLIB. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33969 - http://www.securityfocus.com/archive/1/467040/100/0/threaded - http://www.vsecurity.com/bulletins/advisories/2007/afflib-fmtstr.txt
CVE ID: CVE-2007-2055 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:23:50.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: AFFLIB 2.2.8 and earlier allows attackers to execute arbitrary commands via shell metacharacters involving (1) certain command line parameters in tools/afconvert.cpp and (2) arguments to the get_parameter function in aimage/ident.cpp. NOTE: it is unknown if the get_parameter vector (2) is ever called. Additional Analyst Notes: - CVE Program Container: References: - http://www.vsecurity.com/bulletins/advisories/2007/afflib-shellinject.txt - http://www.securityfocus.com/archive/1/467041/100/0/threaded - https://exchange.xforce.i
s/2007/afflib-shellinject.txt - http://www.securityfocus.com/archive/1/467041/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33964 - http://securityreason.com/securityalert/2656 - http://osvdb.org/35608
CVE ID: CVE-2007-2056 State: REJECTED Published: 2007-04-30T22:00:00 Last Updated: 2018-10-19T14:57:01 Description: No description available.
CVE ID: CVE-2007-2057 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34931 - http://www.vupen.com/english/advisories/2007/1379 - http://secunia.com/advisories/24880 - http://security.gentoo.org/glsa/glsa-200704-16.xml - http://secunia.com/advisories/24964 - http://secunia.com/advisories/24982 - http://www.kb.cert.org/vuls/id/349828 - http://www.securityfocus.com/ar
es/24964 - http://secunia.com/advisories/24982 - http://www.kb.cert.org/vuls/id/349828 - http://www.securityfocus.com/archive/1/465552/100/0/threaded - http://www.securityfocus.com/bid/23467 - http://securityreason.com/securityalert/2584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33626 - http://www.debian.org/security/2007/dsa-1280 - http://www.nop-art.net/advisories/airodump-ng.txt
CVE ID: CVE-2007-2058 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:49.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the file path in an (1) GZ, (2) TAR, (3) RAR, (4) JAR, or (5) ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23471 - http://www.vupen.com/english/advisories/2007/1377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33639 - http://www.bugtraq.ir/articles/advisory/picozip_directory_traversal/9 - http://secu
ibmcloud.com/vulnerabilities/33639 - http://www.bugtraq.ir/articles/advisory/picozip_directory_traversal/9 - http://secunia.com/advisories/24868
CVE ID: CVE-2007-2059 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allow remote attackers to execute arbitrary code via a long parameter to the (1) DELETESEARCHFOLDER, (2) DELTASK, (3) HMGR_CHECKHOSTSCSV, (4) TASKUPDATEDUSER, (5) VERIFYUSERKEY, or (6) VERIFYPWD command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33646 - http://secunia.com/advisories/24881 - http://www.infigo.hr/en/in_focus/advisories/INFIG
loud.com/vulnerabilities/33646 - http://secunia.com/advisories/24881 - http://www.infigo.hr/en/in_focus/advisories/INFIGO-2007-04-05 - http://www.vupen.com/english/advisories/2007/1380 - http://www.securityfocus.com/archive/1/465488/100/0/threaded
CVE ID: CVE-2007-2060 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1425 - http://www.securityfocus.com/bid/23523 - http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T - http://secunia.com/advisories/24913 - http://www.kb.cert.org/vuls/id/319464 - http://osvdb.org/34534 - https://addons.mozilla.org
cunia.com/advisories/24913 - http://www.kb.cert.org/vuls/id/319464 - http://osvdb.org/34534 - https://addons.mozilla.org/en-US/firefox/addon/424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33693 - http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/
CVE ID: CVE-2007-2061 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in check_login.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1416 - http://secunia.com/advisories/24882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33645 - http://www.securityfocus.com/archive/1/465611/100/0/threaded - http://www.majorsecurity.de/index_2.php?major_rls=major_rls44 -
www.securityfocus.com/archive/1/465611/100/0/threaded - http://www.majorsecurity.de/index_2.php?major_rls=major_rls44 - http://securityreason.com/securityalert/2572 - http://osvdb.org/34974 - http://www.securityfocus.com/bid/23481
CVE ID: CVE-2007-2062 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary code via a long FILE argument in a CUE file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23475 - https://www.exploit-db.com/exploits/3727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33642 - http://www.securityfocus.com/archive/1/465725/100/0/threaded - http://secunia.com/advisories/24884
CVE ID: CVE-2007-2063 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:49.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users to cause arbitrary processes to be stopped, or (2) when _BPX_BATCH_UMASK is missing from the environment, creates HFS files with insecure permissions, which allows local users to read or modify these files and have other unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1414 - http://www.ssh.com/documents/33/SSH_Tec
ram Container: References: - http://www.vupen.com/english/advisories/2007/1414 - http://www.ssh.com/documents/33/SSH_Tectia_Server_5.4.0_zOS_releasenotes.txt - http://www.osvdb.org/35014 - http://osvdb.org/34998 - http://secunia.com/advisories/24916 - http://www.securityfocus.com/bid/23508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33699 - http://securitytracker.com/id?1017913
CVE ID: CVE-2007-2064 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:23:50.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Robert Ladstaetter ActionPoll 1.1.0, and possibly 1.1.1, allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG_POLLDB parameter to actionpoll.php or (2) the CONFIG_DB parameter to db/DataReaderWriter.php, different vectors than CVE-2001-1297. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2587 - http://www.securityfocus.com/archive/1/465871/100/0/threaded - http://www.securityfocus.com/bid/
om/securityalert/2587 - http://www.securityfocus.com/archive/1/465871/100/0/threaded - http://www.securityfocus.com/bid/23504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33691 - http://www.securityfocus.com/bid/20788
CVE ID: CVE-2007-2065 State: PUBLISHED Published: 2007-04-18T02:20:00Z Last Updated: 2024-09-16T18:23:22.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG_DATAREADERWRITER parameter, a different vector than CVE-2001-1297. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20788
CVE ID: CVE-2007-2066 State: PUBLISHED Published: 2007-04-18T02:20:00Z Last Updated: 2024-09-16T19:09:14.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: UseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with unspecified GET or POST parameters to an unspecified script, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24837 - http://www.usebb.net/community/topic.php?id=1541 - http://www.netvigilance.com/advisory0016