Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1677 State: PUBLISHED Published: 2007-03-30T00:00:00 Last Updated: 2024-08-07T13:06:25.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0_BETA2, and NetBSD-current before 20070329, allow local users to execute arbitrary code via long parameters to certain functions, as demonstrated by a long sockaddr structure argument to the clnp_route function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017832 - http://osvdb.org/43596 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-004.txt.asc - http://w
7832 - http://osvdb.org/43596 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-004.txt.asc - http://www.securityfocus.com/bid/23193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33381 - http://www.vupen.com/english/advisories/2007/1159
CVE ID: CVE-2007-1678 State: PUBLISHED Published: 2007-03-26T23:00:00 Last Updated: 2024-08-07T13:06:25.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via RSS feeds, which are executed by the chrome: URI handler. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24654 - http://securityreason.com/securityalert/2480 - http://www.securityfocus.com/archive/1/463816/100/0/threaded - http://www.securityfocus.com/bid/23144 - http://www.osvdb.org/33522 - https://exchange.xforce.ibmcloud.com/vulner
aded - http://www.securityfocus.com/bid/23144 - http://www.osvdb.org/33522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33227 - http://www.vupen.com/english/advisories/2007/1112
CVE ID: CVE-2007-1679 State: PUBLISHED Published: 2007-03-26T23:00:00 Last Updated: 2025-01-17T14:17:13.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in (1) imp/search.php and (2) ingo/rule.php. NOTE: this issue has been disputed by the vendor, noting that the search.php issue was resolved in CVE-2006-4255, and attackers can only use rule.php to inject XSS into their own pages Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33228 - http://www.securityfocus.com/archive/1/463819/100/0/threaded - http://securityreason.com/securityalert/2487 - http://www.securityfocus.com/bid/23136 - http://www.securityfocus.com/archive/1/463911/100/0/threaded
CVE ID: CVE-2007-1680 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:06:26.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long (1) socksHostname and (2) hostname properties. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33408 - http://www.securityfocus.com/bid/23291 - http://secunia.com/advisories/24742 - http://www.kb.cert.org/vuls/id/388377 - http://www.zerodayinitiative.c
bid/23291 - http://secunia.com/advisories/24742 - http://www.kb.cert.org/vuls/id/388377 - http://www.zerodayinitiative.com/advisories/ZDI-07-012.html - http://securityreason.com/securityalert/2523 - http://www.vupen.com/english/advisories/2007/1219 - http://osvdb.org/34319 - http://www.securitytracker.com/id?1017867 - http://messenger.yahoo.com/security_update.php?id=031207 - http://www.securityfocus.com/archive/1/464607/100/0/threaded
CVE ID: CVE-2007-1681 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:06:26.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash), obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt, related to syslog. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33731 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102854-1 - http://www.securitytrac
.com/vulnerabilities/33731 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102854-1 - http://www.securitytracker.com/id?1017930 - http://secunia.com/advisories/24927 - http://www.vupen.com/english/advisories/2007/1443 - http://www.securityfocus.com/archive/1/466048/100/0/threaded - http://osvdb.org/34902 - http://www.securityfocus.com/bid/23539 - http://www.nruns.com/security_advisory_sun_java_format_string.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1252
CVE ID: CVE-2007-1682 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T13:06:25.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/914785 - http://secunia.com/advisories/31615 - http://www.securityfocus.com/bid/30826 - http://support.softartisans.com/Support-114.aspx
CVE ID: CVE-2007-1683 State: PUBLISHED Published: 2007-04-26T20:00:00 Last Updated: 2024-08-07T13:06:26.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33928 - http://www.securityfocus.com/bid/23674 - http://www.vupen.com/english/advisories/2007/1551 - http://osvdb.org/34331 - http://secunia.com/advisories/25051 - http://www.kb.cert.org/vuls/id/906777
CVE ID: CVE-2007-1684 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:06:25.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33428 - http://www.securitytracker.com/id?1017855 - http://www.vupen.com/english/advisories/2007/1216 - http://secunia.com/advisories/24762 - http://www.kb.cert.org/vuls/i
http://www.vupen.com/english/advisories/2007/1216 - http://secunia.com/advisories/24762 - http://www.kb.cert.org/vuls/id/556801 - http://www.securityfocus.com/bid/23290
CVE ID: CVE-2007-1685 State: PUBLISHED Published: 2007-06-08T20:00:00 Last Updated: 2024-08-07T13:06:25.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 2372. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018210 - http://www.securityfocus.com/archive/1/470836/100/0/threaded - http://www.vupen.com/english/advisories/2007/2104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/347
/threaded - http://www.vupen.com/english/advisories/2007/2104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34773 - http://osvdb.org/37186 - http://www.csis.dk/dk/forside/Bluecoat-k9.pdf - http://www.kb.cert.org/vuls/id/271601 - http://www.securityfocus.com/bid/24373 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063848.html - http://secunia.com/advisories/25593 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0190.html
CVE ID: CVE-2007-1687 State: PUBLISHED Published: 2007-04-10T18:00:00 Last Updated: 2024-08-07T13:06:25.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control (iPIX-ImageWell-ipix.dll) allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34321 - http://www.vupen.com/english/advisories/2007/1309 - http://www.kb.cert.org/vuls/id/958609 - http://www.securityfocus.com/bid/23379 - http://secunia.com/advisories/24816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33543 - http://www.secu
379 - http://secunia.com/advisories/24816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33543 - http://www.securitytracker.com/id?1017888
CVE ID: CVE-2007-1688 State: PUBLISHED Published: 2007-09-14T00:00:00 Last Updated: 2024-08-07T13:06:25.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PhPInfo ActiveX control in PhPCtrl.dll in Callisto PhotoParade Player allows remote attackers to execute arbitrary code via the FileVersionof property. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25654 - http://www.vupen.com/english/advisories/2007/3138 - http://secunia.com/advisories/26789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36588 - http://www.kb.cert.org/vuls/id/171449 - http://osvdb.org/37731
CVE ID: CVE-2007-1689 State: PUBLISHED Published: 2007-05-16T20:00:00 Last Updated: 2024-08-07T13:06:26.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1843 - http://www.symantec.com/avcenter/security/Content/2007.05.16.html - http://www.securityfocus.com/bid/23936 - http://osvdb.org/36164 - http://www.securitytracker.com/id?1018073 -
.16.html - http://www.securityfocus.com/bid/23936 - http://osvdb.org/36164 - http://www.securitytracker.com/id?1018073 - http://secunia.com/advisories/25290 - http://www.kb.cert.org/vuls/id/983953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34328 - http://www.securityfocus.com/archive/1/468779/100/0/threaded
CVE ID: CVE-2007-1690 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:06:25.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Second Sight Software ActiveGS ActiveX control (ActiveGS.ocx) allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23554 - http://osvdb.org/34326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33759 - http://www.vupen.com/english/advisories/2007/1454 - http://www.kb.cert.org/vuls/id/118737 - http://secunia.com/advisories/24960
CVE ID: CVE-2007-1691 State: PUBLISHED Published: 2007-04-19T10:00:00 Last Updated: 2024-08-07T13:06:26.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control (ActiveMod.ocx) allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24928 - http://www.securityfocus.com/bid/23554 - http://www.kb.cert.org/vuls/id/962305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33757 - http://osvdb.org/34325 - http://www.vupen.com/english/advisories/2007/1454
CVE ID: CVE-2007-1692 State: PUBLISHED Published: 2007-03-26T23:00:00 Last Updated: 2024-08-07T13:06:25.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might allow remote attackers to intercept web traffic by registering a proxy server using WINS or DNS, then responding to WPAD requests, as demonstrated using Internet Explorer. NOTE: it could be argued that if an attacker already has control over WINS/DNS, then web traffic could already be intercepted by modifying WINS or DNS records, so this would not cross privilege boundaries and would not be a
already be intercepted by modifying WINS or DNS records, so this would not cross privilege boundaries and would not be a vulnerability. It has also been reported that DHCP is an alternate attack vector. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/934864 - http://isc.sans.org/diary.html?storyid=2517 - http://archives.neohapsis.com/archives/isn/2007-q1/0418.html - http://www.vupen.com/english/advisories/2007/1115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33244 - http://news.com.com/Windows+weakness+can+lead+to+network+traffic+hijacks/2100-1002_3-6170229.html
CVE ID: CVE-2007-1693 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:06:25.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a Call-Info header without a purpose parameter. Additional Analyst Notes: - CVE Program Container: References: - http://voip.null.ro/cgi-bin/cvsweb.cgi/yate/modules/ysipchan.cpp - http://www.securityfocus.com/archive/1/467289/100/200/threaded - http://securityreason.com/s
yate/modules/ysipchan.cpp - http://www.securityfocus.com/archive/1/467289/100/200/threaded - http://securityreason.com/securityalert/2716 - http://www.securityfocus.com/bid/23746
CVE ID: CVE-2007-1695 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: this issue has been disputed by third-party researchers, stating that the file checks for a global constant and cannot be accessed directly Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463817/100/0/threaded - http://www.securityfocus.com/archive/1/463718/100/0/threaded
CVE ID: CVE-2007-1696 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33197 - http://secunia.com/advisories/24640 - https://www.exploit-db.com/exploits/3556 - http://www.osvdb.org/34491 - http://www.securityfocus.com/bid/23115
CVE ID: CVE-2007-1697 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33179 - http://www.securityfocus.com/bid/23111 - http://www.vupen.com/english/advisories/2007/1099 - https://www.exploit-db.com/exploits/3552 - http://osvdb.org/37220
CVE ID: CVE-2007-1698 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33181 - http://www.vupen.com/english/advisories/2007/1099 - https://www.exploit-db.com/exploits/3552
CVE ID: CVE-2007-1699 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:25.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to ImageManager/Classes/ImageManager.php under the (1) components/ or (2) administrator/components/ directory trees. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3557 - http://osvdb.org/38791 - https://exchange.xforce.ibmcloud.com/vulne
rences: - https://www.exploit-db.com/exploits/3557 - http://osvdb.org/38791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33204 - http://www.securityfocus.com/bid/23116 - http://osvdb.org/38790 - http://www.vupen.com/english/advisories/2007/1100
CVE ID: CVE-2007-1700 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbitrary code via a crafted string in the session_register after unsetting HTTP_SESSION_VARS and _SESSION, which destroys the session data Hashtable. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1991 - http://secunia.com/
st Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1991 - http://secunia.com/advisories/25056 - http://www.debian.org/security/2007/dsa-1283 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://www.php-security.org/MOPB/MOPB-30-2007.html - http://www.securityfocus.com/bid/23119 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://secunia.com/advisories/25062 - http://www.vupen.com/english/advisorie
ment.jsp?lang=en&cc=us&objectID=c01086137 - http://secunia.com/advisories/25062 - http://www.vupen.com/english/advisories/2007/2374 - http://secunia.com/advisories/25423 - http://www.ubuntu.com/usn/usn-455-1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/25850 - http://secunia.com/advisories/25445 - http://secunia.com/advisories/25057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33520 - http://www.novell.com/linux/security/advisories/2007_32_php.html
CVE ID: CVE-2007-1701 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23120 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11034 - http://www.vupen.com/en
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11034 - http://www.vupen.com/english/advisories/2007/1991 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33658 - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://www.vupen.com/english/advisories/2007/2374 - http://secunia.com/advisories/25423 - http://h20000.www2.hp.com/bizsupport/TechSupport/Documen
sh/advisories/2007/2374 - http://secunia.com/advisories/25423 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/25850 - http://secunia.com/advisories/25445 - http://www.php-security.org/MOPB/MOPB-31-2007.html
CVE ID: CVE-2007-1702 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33200 - https://www.exploit-db.com/exploits/3567 - http://www.vupen.com/english/advisories/2007/1106 - http://www.attrition.org/pipermail/vim/2007-March/001472.html - http://www.securityfocus.com/bid/23
visories/2007/1106 - http://www.attrition.org/pipermail/vim/2007-March/001472.html - http://www.securityfocus.com/bid/23125
CVE ID: CVE-2007-1703 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3565 - http://www.vupen.com/english/advisories/2007/1105 - http://osvdb.org/37213 - http://www.securityfocus.com/bid/23126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33194
CVE ID: CVE-2007-1704 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Car Manager (com_resman) 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3564 - http://www.securityfocus.com/bid/23131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33193 - http://osvdb.org/37199 - http://www.vupen.com/english/advisories/2007/1104