Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2986 State: PUBLISHED Published: 2007-06-01T10:00:00 Last Updated: 2024-08-07T13:57:54.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/live_status.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34580 - https://www.exploit-db.com/exploits/4005 - http://www.attrition.org/pipermail/vim/2007-June/001638.html
CVE ID: CVE-2007-2987 State: PUBLISHED Published: 2007-06-01T10:00:00 Last Updated: 2024-08-07T13:57:54.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24217 - http://osvdb.org/36715 - http://www.securityfocus.com/bid/24274 - http://www.vupen.com/english/advisories/2007/1977 - http://www.kb.cert.org/vuls/id/603529 - http://secunia.com/advisorie
http://www.vupen.com/english/advisories/2007/1977 - http://www.kb.cert.org/vuls/id/603529 - http://secunia.com/advisories/25473
CVE ID: CVE-2007-2988 State: PUBLISHED Published: 2007-06-01T10:00:00 Last Updated: 2024-08-07T13:57:54.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a request to admin/create_engine.php followed by a request to admin/generate_tabs.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4004 - http://osvdb.org/42034 - http://www.securityfocus.com/bid/24199 - http://www.securityfocus.com/archive/1/469
oits/4004 - http://osvdb.org/42034 - http://www.securityfocus.com/bid/24199 - http://www.securityfocus.com/archive/1/469808/100/0/threaded - http://securityreason.com/securityalert/2763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34563 - http://www.securityfocus.com/bid/24189
CVE ID: CVE-2007-2989 State: PUBLISHED Published: 2007-06-01T10:00:00 Last Updated: 2024-08-07T13:57:54.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows remote attackers to cause a denial of service (in.iked daemon crash) by sending certain UDP packets with a source port different from 500. NOTE: this issue might overlap CVE-2006-2298. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25465 - http://osvdb.org/36584 - http://support.avaya.com/elmodocs2/security/ASA-2007-227.htm - http://www.vupen.com/english/advisorie
/osvdb.org/36584 - http://support.avaya.com/elmodocs2/security/ASA-2007-227.htm - http://www.vupen.com/english/advisories/2007/1982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34576 - http://www.securityfocus.com/bid/24209 - http://www.vupen.com/english/advisories/2007/2188 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102745-1 - http://www.securitytracker.com/id?1018134 - http://secunia.com/advisories/25661 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1966
CVE ID: CVE-2007-2990 State: PUBLISHED Published: 2007-06-01T10:00:00 Last Updated: 2024-08-07T13:57:54.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service (daemon termination) via unspecified manipulations of the /var/run/.inetd.uds Unix domain socket file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34577 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102921-1 - http://osvdb.org/36585 - http://www.securityfocus.com/bid/24213 - https://oval.cisecurity.org/repository/search/defini
- http://osvdb.org/36585 - http://www.securityfocus.com/bid/24213 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2032 - http://secunia.com/advisories/25450 - http://www.vupen.com/english/advisories/2007/1984 - http://www.securitytracker.com/id?1018133
CVE ID: CVE-2007-2991 State: PUBLISHED Published: 2007-06-04T16:00:00 Last Updated: 2024-08-07T13:57:54.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/send.inc.php in Evenzia CMS allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34682 - http://osvdb.org/38373 - http://www.securityfocus.com/bid/24270 - http://www.securityfocus.com/archive/1/470280/100/0/threaded - http://securityreason.com/securityalert/2757
CVE ID: CVE-2007-2992 State: PUBLISHED Published: 2007-06-04T16:00:00 Last Updated: 2024-08-07T13:57:54.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to execute arbitrary SQL commands via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24275 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0003.html - http://osvdb.org/37020 - https://exchange.xforce.ibmcloud.c
es.neohapsis.com/archives/fulldisclosure/2007-06/0003.html - http://osvdb.org/37020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34678 - http://securityreason.com/securityalert/2759 - http://secunia.com/advisories/25545 - http://www.securityfocus.com/archive/1/470240/100/0/threaded
CVE ID: CVE-2007-2993 State: PUBLISHED Published: 2007-06-04T16:00:00 Last Updated: 2024-08-07T13:57:54.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to inject arbitrary web script or HTML via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24275 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0003.html - http://securityreason.com/securityalert/2
75 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0003.html - http://securityreason.com/securityalert/2759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34677 - http://osvdb.org/37021 - http://secunia.com/advisories/25545 - http://www.securityfocus.com/archive/1/470240/100/0/threaded
CVE ID: CVE-2007-2994 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a fullnews action, a different vector than CVE-2007-0693. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25438 - http://www.securityfocus.com/bid/24212 - http://securityreason.com/securityalert/2762 - http://www.securityfocus.com/archive/1/469881/100/0/threaded
CVE ID: CVE-2007-2995 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in sysmgt.websm.rte in IBM AIX 5.2.0 and 5.3.0 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25458 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY95637 - http://osvdb.org/36741 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY95526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34631 - http://www.securitytracker.com/id?1018178 - http://www.vupen.com/english/advisories/2007/2003
CVE ID: CVE-2007-2996 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges via unspecified vectors related to the installation and "waiting for a legitimate user to execute a binary that ships with Perl." Additional Analyst Notes: - CVE Program Container: References: - ftp://aix.software.ibm.com/aix/efixes/security/perl_ifix.tar.Z - http://www.securitytracker.com/id?1018177 - http://secunia.com/advisories/25478 - http://www-1.ibm.com/support/d
tar.Z - http://www.securitytracker.com/id?1018177 - http://secunia.com/advisories/25478 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY98394 - http://www.securityfocus.com/bid/24241 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY98395 - http://www.vupen.com/english/advisories/2007/2004 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY98396&apar=only - http://osvdb.org/36754
CVE ID: CVE-2007-2997 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to execute arbitrary SQL commands via the password field and other unspecified vectors. NOTE: the vendor disputes this issue, stating "We were able to reproduce this sql injection on an old out-of-date demo on the website but not on the released product. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34567
ainer: References: - http://www.securityfocus.com/bid/24226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34567 - http://www.securityfocus.com/archive/1/471409/100/0/threaded - http://securityreason.com/securityalert/2758 - http://osvdb.org/40145 - http://www.securityfocus.com/archive/1/469900/100/0/threaded - http://www.securityfocus.com/archive/1/471415/100/0/threaded
CVE ID: CVE-2007-2998 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service (system crash) via certain Pascal code. Additional Analyst Notes: - CVE Program Container: References: - http://mail.openvms.org:8100/Lists/alerts/Message/503.html - http://www.vupen.com/english/advisories/2007/2001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34635 - http
- http://www.vupen.com/english/advisories/2007/2001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34635 - http://www.securityfocus.com/bid/24252 - http://osvdb.org/36800 - http://mail.openvms.org:8100/Lists/alerts/Message/504.html - http://secunia.com/advisories/25486
CVE ID: CVE-2007-2999 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account names. Additional Analyst Notes: - CVE Program Container: References: - http://www.notsosecure.com/folder2/2007/05/27/logon-time-restrictions-in-a-domain-in-windows-server-2003-allows-username-enumeration/ - http://secunia.com/advisor
/27/logon-time-restrictions-in-a-domain-in-windows-server-2003-allows-username-enumeration/ - http://secunia.com/advisories/25457 - http://www.securityfocus.com/bid/24248 - http://osvdb.org/36138
CVE ID: CVE-2007-3000 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL commands via (1) the iCategoryUnq parameter to G_Display.php or (2) the iSearchID parameter to Search/DisplayResults.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25487 - http://osvdb.org/36319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34641 - http://www.securityfocus.com/bid/24253 - http://securityreason.com/securityalert/2768 - http://osvdb.org/3631
es/34641 - http://www.securityfocus.com/bid/24253 - http://securityreason.com/securityalert/2768 - http://osvdb.org/36318 - http://www.securityfocus.com/archive/1/470111/100/0/threaded
CVE ID: CVE-2007-3001 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to inject arbitrary web script or HTML via (1) the sUName parameter to UserArea/Authenticate.php, (2) the sAccountUnq parameter to UserArea/NewAccounts/index.php, or the (3) iCategoryUnq, (4) iDBLoc, (5) iTtlNumItems, (6) iNumPerPage, or (7) sSort parameter to G_Display.php, different vectors than CVE-2005-4239. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38878 - https://exchange.xforce.ibmc
. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34643 - http://www.securityfocus.com/bid/24253 - http://securityreason.com/securityalert/2768 - http://osvdb.org/38877 - http://osvdb.org/38879 - http://www.securityfocus.com/archive/1/470111/100/0/threaded
CVE ID: CVE-2007-3002 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP JackKnife (PHPJK) allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid value of the iParentUnq[] parameter, or a request to G_Display.php with an invalid (2) iCategoryUnq[] or (3) sSort[] array parameter, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34644 - http://osvdb.org/45394 - http://osvdb.org/45393 - http://www.securityfocus.com/bid/24253 - http:/
ulnerabilities/34644 - http://osvdb.org/45394 - http://osvdb.org/45393 - http://www.securityfocus.com/bid/24253 - http://securityreason.com/securityalert/2768 - http://www.securityfocus.com/archive/1/470111/100/0/threaded
CVE ID: CVE-2007-3003 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id or (2) year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34627 - http://securityreason.com/securityalert/2769 - http://www.securityfocus.com/archive/1/470112/100/0/threaded - http://www.securityfocus.com/bid/2424
ecurityalert/2769 - http://www.securityfocus.com/archive/1/470112/100/0/threaded - http://www.securityfocus.com/bid/24249 - http://osvdb.org/38345
CVE ID: CVE-2007-3004 State: REJECTED Published: 2007-06-04T17:00:00 Last Updated: 2018-10-19T14:57:01 Description: No description available.
CVE ID: CVE-2007-3005 State: REJECTED Published: 2007-06-04T17:00:00 Last Updated: 2007-07-19T09:00:00 Description: No description available.
CVE ID: CVE-2007-3006 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:55.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .asx playlist file with a REF element containing a long string in the HREF attribute. NOTE: it was later claimed that 4.51 Build 147 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43455 - http://secunia.com/advisories/31666 - https://www.exploit-db.com/exploits/6329 - http://www.securityfocus.com/bid/24247 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
loit-db.com/exploits/6329 - http://www.securityfocus.com/bid/24247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34647 - https://www.exploit-db.com/exploits/4017
CVE ID: CVE-2007-3007 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26231 - http://secunia.com/advisories/27110 - http://secunia.com/advisories/26048 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xm
ia.com/advisories/27110 - http://secunia.com/advisories/26048 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html - http://secunia.com/advisories/25456 - http://www.trustix.org/errata/2007/0023/ - http://www.php.net/releases/5_2_3.php - http://www.securityfocus.com/bid/24259 - http://secunia.com/advisories/27102 - http://osvdb.org/36084 - http://bugs.php.net/bug.php?id=41492 - http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
CVE ID: CVE-2007-3008 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (XST) attacks, a related issue to CVE-2004-2320 and CVE-2005-3398. Additional Analyst Notes: - CVE Program Container: References: - http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34854 - http://www.securityfocus.com/bid/24456 - http://www.osvdb.org/35511 - http://secunia.com/advisories/25636 - htt
/34854 - http://www.securityfocus.com/bid/24456 - http://www.osvdb.org/35511 - http://secunia.com/advisories/25636 - http://www.appwebserver.org/forum/viewtopic.php?t=996
CVE ID: CVE-2007-3009 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:57:54.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a "GET %n://localhost:80/" request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25641 - http://www.securityfocus.com/bid/24454 - http://www.vupen.com/english/advisories/2007/2159
ecunia.com/advisories/25641 - http://www.securityfocus.com/bid/24454 - http://www.vupen.com/english/advisories/2007/2159 - http://www.osvdb.org/35510 - http://www.appwebserver.org/forum/viewtopic.php?t=969
CVE ID: CVE-2007-3010 State: PUBLISHED Published: 2007-09-18T21:00:00.000Z Last Updated: 2025-10-22T00:05:56.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2007/3185 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php - http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm - http://secunia.com
/advisories/rt-sa-2007-001.php - http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm - http://secunia.com/advisories/26853 - http://marc.info/?l=full-disclosure&m=119002152126755&w=2 - http://osvdb.org/40521 - http://www.securityfocus.com/archive/1/479699/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36632 - http://www.securityfocus.com/bid/25694
CVE ID: CVE-2007-3011 State: PUBLISHED Published: 2007-07-05T19:00:00 Last Updated: 2024-08-07T13:57:54.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35257 - http://www.securityfocus.com/archive/1/472800/100/0/threaded - http://www.vupen.com/english/advisories/2007/2441 - http://osvdb.org/37835 - http://www.redteam-
472800/100/0/threaded - http://www.vupen.com/english/advisories/2007/2441 - http://osvdb.org/37835 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-002.php - http://securityreason.com/securityalert/2858 - http://www.securityfocus.com/bid/24762 - http://secunia.com/advisories/25944
CVE ID: CVE-2007-3012 State: PUBLISHED Published: 2007-07-05T19:00:00 Last Updated: 2024-08-07T13:57:54.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive information by canceling the authentication dialog when accessing a sub-page, which still displays the form field contents of the sub-page, as demonstrated using (1) config/ip_management.htm and (2) config/snmp_config.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24761 - http://www.vupen.com/english/advisories/2007/2442 - http://osvdb.org/37837 - http://
//www.securityfocus.com/bid/24761 - http://www.vupen.com/english/advisories/2007/2442 - http://osvdb.org/37837 - http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php - http://secunia.com/advisories/25943 - http://www.securityfocus.com/archive/1/472803/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35264
CVE ID: CVE-2007-3013 State: PUBLISHED Published: 2007-07-15T23:00:00 Last Updated: 2024-08-07T13:57:54.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picture_real_edit.asp, and probably other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redteam-pentesting.de/advisories/rt-sa-2007-004.php - http://www.securityfocus.com/archive/1/473630/100/0/threaded - http://www.securityfocus.com/bid/24894 - http://www.osvdb.org/36511 - http://s