Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
babimpsec-notice.asp - http://livesploit.com/advisories/LS-20061002.pdf - http://www.securityfocus.com/bid/22010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31442 - http://securitytracker.com/id?1017506 - http://www.zerodayinitiative.com/advisories/ZDI-07-002.html - http://www.securityfocus.com/archive/1/456711 - http://www.securityfocus.com/archive/1/456637 - http://www.vupen.com/english/advisories/2007/0154 - http://osvdb.org/31327 - http://www.kb.cert.org/vuls/id/662400 - http://www.securityfocus.com/archive/1/456616/100/0/threaded - http://www.lssec.com/advisories/LS-20061002.pdf - http://secunia.com/advisories/23648
CVE ID: CVE-2007-0169 State: PUBLISHED Published: 2007-01-11T22:00:00 Last Updated: 2024-08-07T12:12:18.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456619/100/0/threaded - http://supportconnectw.ca.com/publi
tainer: References: - http://www.securityfocus.com/archive/1/456619/100/0/threaded - http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/31443 - http://www.zerodayinitiative.com/advisories/ZDI-07-004.html - http://securitytracker.com/id?1017506 - http://www.securityfocus.com/bid/22006 - http://www.securityfocus.com/bid/22005 - http://www.securityfocus.com/archive/1/456711 - http://www.securityfocus.com/archive/1/456618/100/0/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=467 - http://www.vupen.com/english/advisories/2007/0154 - http://osvdb.org/31327 - http://www.kb.cert.org/vuls/id
php?id=467 - http://www.vupen.com/english/advisories/2007/0154 - http://osvdb.org/31327 - http://www.kb.cert.org/vuls/id/151032 - http://www.kb.cert.org/vuls/id/180336 - http://www.zerodayinitiative.com/advisories/ZDI-07-003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31433 - http://secunia.com/advisories/23648
CVE ID: CVE-2007-0170 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:17.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in AllMyVisitors 0.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the AMV_serverpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31316 - http://www.securityfocus.com/bid/21917 - https://www.exploit-db.com/exploits/3097
CVE ID: CVE-2007-0171 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:17.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in AllMyLinks 0.5.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AML_opensite parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3096 - http://osvdb.org/35909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31314 - http://www.securityfocus.com/bid/21916
CVE ID: CVE-2007-0172 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:17.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMG_serverpath parameter to (1) comments.php and (2) signin.php; and possibly via a URL in unspecified parameters to (3) include/submit.inc.php, (4) admin/index.php, (5) include/cm_submit.inc.php, and (6) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31310 - http://osvd
ntainer: References: - http://osvdb.org/35923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31310 - http://osvdb.org/35915 - http://osvdb.org/35917 - http://www.securityfocus.com/bid/21918 - http://osvdb.org/35919 - http://osvdb.org/35921 - https://www.exploit-db.com/exploits/3093 - http://osvdb.org/35916
CVE ID: CVE-2007-0173 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:16.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when register_globals is enabled and magic_quotes is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0097 - https://www.exploit-db.com/exploits
Program Container: References: - http://www.vupen.com/english/advisories/2007/0097 - https://www.exploit-db.com/exploits/3091 - http://www.securityfocus.com/bid/21914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31309 - http://osvdb.org/35914
CVE ID: CVE-2007-0174 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:18.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the (1) astrVerion parameter to the SendChatRoomOpt function or (2) the astrDownDir parameter to the SendDownLoadFile function. Additional Analyst Notes: - CVE Program Container: References: - http://secway.org/advisory/ad20070109EN.txt - http://www.securityfocus.com/bid/21958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31350 - https://
9EN.txt - http://www.securityfocus.com/bid/21958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31348 - http://osvdb.org/32659 - http://marc.info/?l=full-disclosure&m=116832852700467&w=2 - http://www.securityfocus.com/archive/1/456378/100/0/threaded - http://secunia.com/advisories/23638 - http://www.vupen.com/english/advisories/2007/0093
CVE ID: CVE-2007-0175 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:17.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in htsrv/login.php in b2evolution 1.8.6 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes in the redirect_to parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=410568 - http://secunia.com/advisories/30093 - http://www.debian.org/security/2008/dsa-1568 - http://osvdb.org/32027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31368 - http://www.securityfocus.com/bid/21953
://osvdb.org/32027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31368 - http://www.securityfocus.com/bid/21953 - http://secunia.com/advisories/23656
CVE ID: CVE-2007-0176 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:17.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search/advanced_search.php in GForge 4.5.11 allows remote attackers to inject arbitrary web script or HTML via the words parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456296/100/0/threaded - http://osvdb.org/31248 - http://secunia.com/advisories/28598 - http://securityreason.com/securityalert/2133 - http://secunia.com/advisories/23675 - http://www.eazel.es/advisory006-gforge-cross-site-scripting-vulnerability.html -
- http://secunia.com/advisories/23675 - http://www.eazel.es/advisory006-gforge-cross-site-scripting-vulnerability.html - http://www.securityfocus.com/bid/21946 - http://www.debian.org/security/2008/dsa-1475 - http://securitytracker.com/id?1017482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31346
CVE ID: CVE-2007-0177 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:17.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, when wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0096 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_7_2/phase3/RELEASE-NOTES - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_9/phase3/RELEASE-
/mediawiki/tags/REL1_7_2/phase3/RELEASE-NOTES - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_9/phase3/RELEASE-NOTES - http://secunia.com/advisories/24889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31359 - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_8_3/phase3/RELEASE-NOTES - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_9_0RC2/phase3/RELEASE-NOTES - http://osvdb.org/31525 - http://sourceforge.net/forum/forum.php?forum_id=652721 - http://www.securityfocus.com/bid/21956 - http://secunia.com/advisories/23647
CVE ID: CVE-2007-0178 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:17.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the s[phppath] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31374 - http://osvdb.org/33455 - http://securityreason.com/securityalert/2132 - http://www.securityfocus.com/bid/21967 - http://www.securityfocus.com/archive/1/456404/100/0/threaded
CVE ID: CVE-2007-0179 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:17.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31266 - http://www.securityfocus.com/archive/1/456384/100/0/threaded - http://securityreason.com/securityalert/2131 - http://www.securityfocus.com/bid/21962
CVE ID: CVE-2007-0180 State: PUBLISHED Published: 2007-01-11T00:00:00 Last Updated: 2024-08-07T12:12:17.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in EF Commander 5.75 allows user-assisted attackers to execute arbitrary code via a crafted ISO file containing a file within several nested directories, which produces a large filename that triggers the overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31365 - http://osvdb.org/32660 - http://www.securityfocus.com/bid/21969 - http://vuln.sg/efcommander575-en.html
CVE ID: CVE-2007-0181 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/common_function.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the _config[site_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3100 - http://www.vupen.com/english/advisories/2007/0136 - http://secunia.com/advisories/23687 - http://www.securityfocus.com/archive/1/456264/100/0/threaded - http://www.securityfocus.com/bid/21965 - https://exchange.xforce.ibm
securityfocus.com/archive/1/456264/100/0/threaded - http://www.securityfocus.com/bid/21965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31347
CVE ID: CVE-2007-0182 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a URL in the _config[site_path] parameter to (1) admin_password.php, (2) add_welcome_text.php, (3) admin_email.php, (4) add_templates.php, (5) admin_paypal_email.php, (6) approve_member.php, (7) delete_member.php, (8) index.php, (9) list_members.php, (10) membership_pricing.php, or (11) send_email.php in admin/; (12) config.php or (13) db_config.php in include/; or (14) add_category.php, (1
g.php, or (11) send_email.php in admin/; (12) config.php or (13) db_config.php in include/; or (14) add_category.php, (15) add_news.php, (16) change_catalog_template.php, (17) couple_milestone.php, (18) couple_profile.php, (19) delete_category.php, (20) index.php, (21) login.php, (22) logout.php, (23) register.php, (24) upload_photo.php, (25) user_catelog_password.php, (26) user_email.php, (27) user_extend.php, or (28) user_membership_password.php in user/. NOTE: the include/common_function.php vector is already covered by another candidate from the same date. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33419 - http://www.osvdb.org/33433 - http://www
alyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33419 - http://www.osvdb.org/33433 - http://www.osvdb.org/33436 - http://www.osvdb.org/33432 - http://www.osvdb.org/33430 - http://www.osvdb.org/33439 - http://www.osvdb.org/33426 - http://www.osvdb.org/32668 - http://www.osvdb.org/33413 - http://www.osvdb.org/33411 - http://www.osvdb.org/33415 - http://www.osvdb.org/33420 - http://www.osvdb.org/33438 - http://www.osvdb.org/33425 - http://www.osvdb.org/33418 - http://www.osvdb.org/33427 - http://securityreason.com/securityalert/2136 - http://www.osvdb.org/33434 - http://www.securityfocus.com/archive/1/456389/100/0/threaded - http://www.osvdb.org/33423 - http://www.osvdb
org/33434 - http://www.securityfocus.com/archive/1/456389/100/0/threaded - http://www.osvdb.org/33423 - http://www.osvdb.org/33417 - http://www.osvdb.org/33412 - http://www.osvdb.org/33421 - http://www.osvdb.org/33428 - http://www.osvdb.org/33422 - http://www.securityfocus.com/bid/21965 - http://www.osvdb.org/33437 - http://www.osvdb.org/33414 - http://www.osvdb.org/33429 - http://www.osvdb.org/33435 - http://www.osvdb.org/33431 - http://www.osvdb.org/33416
CVE ID: CVE-2007-0183 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32662 - http://www.securityfocus.com/bid/21977 - http://secunia.com/advisories/23605
CVE ID: CVE-2007-0184 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:18.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32657 - http://secunia.com/advisories/23641 - http://getahead.ltd.uk/dwr/changelog - http://www.vupen.com/english/advisories/2007/0095 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.securityfocus.com/bid/21955 - https://exchange.x
nsuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.securityfocus.com/bid/21955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31377
CVE ID: CVE-2007-0185 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32658 - http://secunia.com/advisories/23641 - http://getahead.ltd.uk/dwr/changelog - http://www.vupen.com/english/advisories/2007/0095 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.securityfocus.com/bid/219
0095 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.securityfocus.com/bid/21955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31382
CVE ID: CVE-2007-0186 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN allow remote attackers to inject arbitrary web script or HTML via (1) the xcho parameter to my.logon.php3; the (2) topblue, (3) midblue, (4) wtopblue, and certain other Custom color parameters in a per action to vdesk/admincon/index.php; the (5) h321, (6) h311, (7) h312, and certain other Front Door custom text color parameters in a per action to vdesk/admincon/index.php; the (8) ua parameter in a bro action to vdesk/admincon/index.php; the (9) app_para
r action to vdesk/admincon/index.php; the (8) ua parameter in a bro action to vdesk/admincon/index.php; the (9) app_param and (10) app_name parameters to webyfiers.php; (11) double eval functions; (12) JavaScript contained in an <FP_DO_NOT_TOUCH> element; and (13) the vhost parameter to my.activation.php. NOTE: it is possible that this candidate overlaps CVE-2006-3550. Additional Analyst Notes: - CVE Program Container: References: - http://www.mnin.org/advisories/2007_firepass.pdf - http://secunia.com/advisories/23627 - http://www.osvdb.org/32738 - https://tech.f5.com/home/solutions/sol6920.html - https://tech.f5.com/home/solutions/sol6919.html - http://www.osvdb.org/32739 - http://secunia.c
solutions/sol6920.html - https://tech.f5.com/home/solutions/sol6919.html - http://www.osvdb.org/32739 - http://secunia.com/advisories/23643 - http://www.osvdb.org/32737 - http://www.osvdb.org/32743 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html - http://www.osvdb.org/32740 - http://www.osvdb.org/32741 - http://www.osvdb.org/32742 - http://www.securityfocus.com/bid/21957
CVE ID: CVE-2007-0187 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via (1) a trailing null byte, (2) multiple leading slashes, (3) Unicode encoding, (4) URL-encoded directory traversal or same-directory characters, or (5) upper case letters in the domain name. Additional Analyst Notes: - CVE Program Container: References: - http://www.mnin.org/advisories/2007_firepass.pdf - http://secunia.com/advisories/23626 - http://secunia.com/advisories/23640 - http://osvdb.org/39167 - https://tech.f5.com/home/solution
.com/advisories/23626 - http://secunia.com/advisories/23640 - http://osvdb.org/39167 - https://tech.f5.com/home/solutions/sol6924.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0141.html - https://tech.f5.com/home/solutions/sol6916.html - http://www.securityfocus.com/bid/21957
CVE ID: CVE-2007-0188 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: F5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client uses a single integer (dword) representation of an IP address ("dotless IP address"), which allows remote authenticated users to connect to the FirePass administrator console and certain other network resources. Additional Analyst Notes: - CVE Program Container: References: - http://www.mnin.org/advisories/2007_firepass.pdf - https://tech.f5.com/home/solutions/sol6922.html - http://secunia.com/advisories/23640 - http://www.osvdb.org/
pass.pdf - https://tech.f5.com/home/solutions/sol6922.html - http://secunia.com/advisories/23640 - http://www.osvdb.org/32734 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html - http://www.securityfocus.com/bid/21957
CVE ID: CVE-2007-0189 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in GeoBB Georgian Bulletin Board allows remote attackers to execute arbitrary PHP code via a URL in the action parameter. NOTE: CVE disputes this issue, since GeoBB 1.0 sets $action to a whitelisted value Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31335 - http://www.securityfocus.com/archive/1/456251/100/0/threaded - http://securityreason.com/securityalert/2141 - http://osvdb.org/33440 - http://www.at
/archive/1/456251/100/0/threaded - http://securityreason.com/securityalert/2141 - http://osvdb.org/33440 - http://www.attrition.org/pipermail/vim/2007-January/001230.html
CVE ID: CVE-2007-0190 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in edit_address.php in edit-x ecommerce allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31384 - http://securityreason.com/securityalert/2139 - http://www.vupen.com/english/advisories/2007/0158 - http://www.securityfocus.com/bid/21974 - http://www.securityfocus.com/archive/1/456439/100/0/threaded
CVE ID: CVE-2007-0191 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web script or HTML via two certain fields in a contents_new operation in the ad_contents section. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456042/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31304 - http://securityreason.com/securityalert/2138 - http://osvdb.org/33399
CVE ID: CVE-2007-0192 State: PUBLISHED Published: 2007-01-11T02:00:00 Last Updated: 2024-08-07T12:12:17.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the save_main operation in the ad_perms section in admin.php in MKPortal allows remote attackers to modify privilege settings, as demonstrated using a getURL of admin.php within a .swf file contained in an IFRAME element, aka the "All Guests are Admin" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455894/100/100/threaded - http://securityreason.com/securityalert/2137 - http://osvdb.org/33400