Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3249 State: PUBLISHED Published: 2007-06-18T10:00:00 Last Updated: 2024-08-07T14:05:29.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman Subscriber (mod_letterman) before 1.2.5 module for Joomla! allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34870 - http://www.securityfocus.com/bid/24479 - http://www.vupen.com/english/advisories/2007/2215 - http://osvdb.org/36376 - http://secunia.com/advisories/25670 - http://www.the
w.vupen.com/english/advisories/2007/2215 - http://osvdb.org/36376 - http://secunia.com/advisories/25670 - http://www.thejfactory.com/ - http://marc.info/?l=full-disclosure&m=118184411720509&w=2
CVE ID: CVE-2007-3250 State: PUBLISHED Published: 2007-06-18T10:00:00 Last Updated: 2024-08-07T14:05:29.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mod_banners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands via the mb_tracker cookie. NOTE: the product was patched without updating the version number; later downloads of 2006.4 are not affected. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25684 - http://www.vupen.com/english/advisories/2007/2218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34873 - http://osvdb.org/36305 - http://secur
dvisories/2007/2218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34873 - http://osvdb.org/36305 - http://securityreason.com/securityalert/2806 - http://www.elxis.org/index.php?option=com_mtree&task=viewlink&link_id=98&Itemid=140 - http://www.securityfocus.com/archive/1/471399/100/0/threaded - http://www.securityfocus.com/bid/24478
CVE ID: CVE-2007-3251 State: PUBLISHED Published: 2007-06-18T10:00:00 Last Updated: 2024-08-07T14:14:11.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to (1) include and execute arbitrary local files via a .. (dot dot) in the adminlang cookie to admin/functions.php or (2) read arbitrary local files via the img parameter to admin/show_img.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34792 - http://www.securityfocus.com/bid/24398 - https://www.exploit-db.com/exploits/4054 - https://exchange.xforce.ibm
/34792 - http://www.securityfocus.com/bid/24398 - https://www.exploit-db.com/exploits/4054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34794 - http://osvdb.org/38466 - http://www.vupen.com/english/advisories/2007/2123 - http://secunia.com/advisories/25605 - http://osvdb.org/38467
CVE ID: CVE-2007-3252 State: PUBLISHED Published: 2007-06-18T10:00:00 Last Updated: 2024-08-07T14:14:11.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 8691.mdb, a different vector than CVE-2004-1786. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471411/100/0/threaded - http://osvdb.org/39736 - http://securityreason.com/securityalert/2808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34874
CVE ID: CVE-2007-3253 State: PUBLISHED Published: 2007-06-18T10:00:00 Last Updated: 2024-08-07T14:14:11.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a denial of service via (1) certain email, which stops the SMTP Proxy during scanning; (2) certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing virus scanned web pages; and (3) a disconnection during a streaming session. Additional Analyst Notes: - CVE Program Container: References: - http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html - http://osvdb.org/3
rogram Container: References: - http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html - http://osvdb.org/37346 - http://secunia.com/advisories/25694 - http://osvdb.org/37345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34884 - http://www.securityfocus.com/bid/24492 - http://www.vupen.com/english/advisories/2007/2220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34882
CVE ID: CVE-2007-3254 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:14:12.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to inject arbitrary web script or HTML via (1) a saved Workflow name; (2) a Workflow name, related to deletion of a Workflow template; (3) the Content-Type HTTP header; or (4) the name of an uploaded file. NOTE: items 3 and 4 also affect the same version numbers of Xythos Digital Locker (XDL). Some or all vectors might also affect Xythos WebFile Server. Addi
e same version numbers of Xythos Digital Locker (XDL). Some or all vectors might also affect Xythos WebFile Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472275/100/0/threaded - http://osvdb.org/37624 - http://www.securityfocus.com/bid/24521 - http://osvdb.org/37623 - http://secunia.com/advisories/25783 - http://osvdb.org/37622 - http://osvdb.org/37621 - http://securitytracker.com/id?1018292 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt - http://securityreason.com/securityalert/2845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35083 - http://securitytracker.com/id?1018291
CVE ID: CVE-2007-3255 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:14:11.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users via (1) a saved Workflow name or (2) the Content-Type HTTP header. NOTE: item 2 also affects the same version numbers of Xythos Digital Locker (XDL). One or both vectors might also affect Xythos WebFile Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1
WebFile Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472275/100/0/threaded - http://www.securityfocus.com/bid/24521 - http://osvdb.org/37616 - http://secunia.com/advisories/25783 - http://securitytracker.com/id?1018292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35084 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt - http://securityreason.com/securityalert/2845 - http://securitytracker.com/id?1018291 - http://osvdb.org/37615
CVE ID: CVE-2007-3256 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:14:11.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472275/100/0/threaded - http://www.securityfocus.com/bid/24521 - http://osvdb.org/37614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35086 - http://secunia.com/adviso
/24521 - http://osvdb.org/37614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35086 - http://secunia.com/advisories/25783 - http://securitytracker.com/id?1018292 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt - http://securityreason.com/securityalert/2845 - http://securitytracker.com/id?1018291
CVE ID: CVE-2007-3257 State: PUBLISHED Published: 2007-06-19T16:00:00 Last Updated: 2024-08-07T14:14:11.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0510.html - http://secunia.com/advisories/25894 - http://www.securityfocus.com/archive/1/471455/100/0/threaded - http://www.vupen.com/english/advisories/2007/2282 - http://secunia.com/advisories/26083 - http://s
1455/100/0/threaded - http://www.vupen.com/english/advisories/2007/2282 - http://secunia.com/advisories/26083 - http://security.gentoo.org/glsa/glsa-200711-04.xml - http://secunia.com/advisories/25880 - http://www.securitytracker.com/id?1018284 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://www.debian.org/security/2007/dsa-1325 - http://www.ubuntu.com/usn/usn-475-1 - http://secunia.com/advisories/25766 - http://secunia.com/advisories/25843 - http://secunia.com/advisories/25798 - http://www.gentoo.org/security/en/glsa/glsa-200707-03.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2007:136 - http://secunia.com/advisories/25777 - https://oval.cisecurity.
ww.mandriva.com/security/advisories?name=MDKSA-2007:136 - http://secunia.com/advisories/25777 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11724 - http://www.redhat.com/support/errata/RHSA-2007-0509.html - http://osvdb.org/37489 - http://www.securityfocus.com/bid/24567 - http://mail.gnome.org/archives/evolution-hackers/2007-June/msg00064.html - http://secunia.com/advisories/25906 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/34964 - http://www.debian.org/security/2007/dsa-1321 - http://www.novell.com/linux/security/advisories/2007_42_evolution.html - http://secunia.
an.org/security/2007/dsa-1321 - http://www.novell.com/linux/security/advisories/2007_42_evolution.html - http://secunia.com/advisories/25774 - http://secunia.com/advisories/25958 - http://secunia.com/advisories/25793 - http://bugzilla.gnome.org/show_bug.cgi?id=447414 - http://secunia.com/advisories/25765
CVE ID: CVE-2007-3258 State: PUBLISHED Published: 2007-06-27T17:00:00 Last Updated: 2024-08-07T14:14:11.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=118279128017628&w=2 - http://www.netvigilance.com/advisory0035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35047 - http://www.osvdb.org/35371 - h
vigilance.com/advisory0035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35047 - http://www.osvdb.org/35371 - http://marc.info/?l=full-disclosure&m=118279031307874&w=2
CVE ID: CVE-2007-3259 State: PUBLISHED Published: 2007-06-26T17:00:00 Last Updated: 2024-08-07T14:14:12.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via (1) an invalid month[] parameter to calendar.php, (2) an invalid catview[] parameter to cal_week.php in a week operation, (3) an invalid ycyear[] parameter to yearcal.php, or (4) a direct request to cal_functions.inc.php, which reveals the installation path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35041 - http://secur
tainer: References: - http://osvdb.org/35698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35041 - http://securityreason.com/securityalert/2841 - http://www.securityfocus.com/archive/1/472204/100/0/threaded - http://osvdb.org/35697 - http://osvdb.org/35699 - http://www.osvdb.org/35371 - http://www.netvigilance.com/advisory0036
CVE ID: CVE-2007-3260 State: PUBLISHED Published: 2007-06-19T18:00:00 Last Updated: 2024-08-07T14:14:11.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894 - http://www.securityfocus.com/bid/24486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34900 - http://www.vupen.com/english/advisories/2007/2232 - h
486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34900 - http://www.vupen.com/english/advisories/2007/2232 - http://osvdb.org/37513 - http://www.securitytracker.com/id?1018256 - http://secunia.com/advisories/25689 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894
CVE ID: CVE-2007-3261 State: PUBLISHED Published: 2007-06-19T18:00:00 Last Updated: 2024-08-07T14:14:11.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in widgets/widget_search.php in dKret before 2.6 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF). Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=516770&group_id=185847 - http://www.securityfocus.com/bid/24518 - http://dkret.svn.sourceforge.net/viewvc/dkret/trunk/widgets/widget_search.php?r1=275&r2=281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34930 - http://
ret/trunk/widgets/widget_search.php?r1=275&r2=281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34930 - http://secunia.com/advisories/25731 - http://osvdb.org/36373 - http://www.vupen.com/english/advisories/2007/2243
CVE ID: CVE-2007-3262 State: PUBLISHED Published: 2007-06-19T18:00:00 Last Updated: 2024-08-07T14:14:12.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to cause a denial of service related to a thread hang, and possibly related to a "TCP issue," or to MPAlarmThread and a resultant memory leak. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34903 - http://secunia.com/advisories/25704 - http://osvdb.org/41
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34903 - http://secunia.com/advisories/25704 - http://osvdb.org/41614 - http://www.vupen.com/english/advisories/2007/2234 - http://www.securityfocus.com/bid/24505
CVE ID: CVE-2007-3263 State: PUBLISHED Published: 2007-06-19T18:00:00 Last Updated: 2024-08-07T14:14:13.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository." Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34901 - http://secunia.com/advisories/25704 - http://www.vupen.com/english/advisories/2007/2234 - http://www.se
bilities/34901 - http://secunia.com/advisories/25704 - http://www.vupen.com/english/advisories/2007/2234 - http://www.securityfocus.com/bid/24505 - http://osvdb.org/41613
CVE ID: CVE-2007-3264 State: PUBLISHED Published: 2007-06-19T18:00:00 Last Updated: 2024-08-07T14:14:11.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34904 - http://secunia.com/advisories/25704 - http://www.vupen.com/english/advisories/2007/2234 - http://www.securityfocus.com/bid/24505 - http://osvdb.org/41611
CVE ID: CVE-2007-3265 State: PUBLISHED Published: 2007-06-19T18:00:00 Last Updated: 2024-08-07T14:14:12.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Samples component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27007951 - http://osvdb.org/41612 - http://www.vupen.com/english/advisories/2007/2234 - http://www.securityfocus.com/bid/24505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34905 - http://osvdb.
34 - http://www.securityfocus.com/bid/24505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34905 - http://osvdb.org/38468
CVE ID: CVE-2007-3266 State: PUBLISHED Published: 2007-06-19T18:00:00 Last Updated: 2024-08-07T14:14:12.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary local files a .. (dot dot) in the outconfig parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37508 - http://securityreason.com/securityalert/2816 - http://www.securityfocus.com/bid/24516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34921 - http://secunia.com/advisories/25693 - http://www.securityfocus.com/archive/1/471647/100/0/threaded - http://www.mawk.or
http://secunia.com/advisories/25693 - http://www.securityfocus.com/archive/1/471647/100/0/threaded - http://www.mawk.org/mods.php?mods=Core&page=view&id=102
CVE ID: CVE-2007-3267 State: PUBLISHED Published: 2007-06-19T18:00:00 Last Updated: 2024-08-07T14:14:12.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inject arbitrary web script or HTML via the fromaction parameter in a log action, a different vector than CVE-2007-3235. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35137 - http://www.securityfocus.com/bid/24522 - http://osvdb.org/36406 - http://securityreason.com/securityalert/2815 - http://forum.fuzzylime.co.uk/st/content/download/ - http
svdb.org/36406 - http://securityreason.com/securityalert/2815 - http://forum.fuzzylime.co.uk/st/content/download/ - http://www.secvsn.com/content/Advisories/sr-180607-fuzzy.html - http://www.securityfocus.com/archive/1/471649/100/0/threaded
CVE ID: CVE-2007-3268 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T14:14:12.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service (rembo.exe crash and multiple service outage) via a read (RRQ) request with an invalid blksize (blocksize), which triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www3.software.ibm.com/ibmdl/pub/software/tivoli_support/patches/patches_5.1.0/5.1.0-TIV-TPMOSD-FP0003/5.1.0-TIV-TPMOSD-FP0003.README.HTM - http://www.vupen.com/e
tivoli_support/patches/patches_5.1.0/5.1.0-TIV-TPMOSD-FP0003/5.1.0-TIV-TPMOSD-FP0003.README.HTM - http://www.vupen.com/english/advisories/2007/2560 - http://secunia.com/advisories/26093 - http://www.securityfocus.com/bid/24942 - http://www-1.ibm.com/support/docview.wss?uid=swg24016347 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=560 - http://securitytracker.com/id?1018401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35468
CVE ID: CVE-2007-3269 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:12.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via (1) the URI in a GET request or (2) the Title field of a visitor comment, and (3) allow remote authenticated users to inject arbitrary web script or HTML via a message to another user. NOTE: vector (2) might overlap CVE-2006-3571.1. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37546 - http://www.securityfocus.com/archive/1/471490/100/0/thre
- CVE Program Container: References: - http://osvdb.org/37546 - http://www.securityfocus.com/archive/1/471490/100/0/threaded - http://osvdb.org/37544 - http://www.papoo.de/index/menuid/204/reporeid/215 - http://secunia.com/advisories/25708 - http://securityreason.com/securityalert/2825 - http://www.securityfocus.com/bid/24494 - http://osvdb.org/37545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34888
CVE ID: CVE-2007-3270 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:12.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Includes/global.inc.php in phpMyInventory 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the strIncludePrefix parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34926 - http://www.securityfocus.com/bid/24496 - http://osvdb.org/38464 - https://www.exploit-db.com/exploits/4074 - http://www.vupen.com/english/advisories/2007/2240
CVE ID: CVE-2007-3271 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:12.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in templates/2blue/bodyTemplate.php in YourFreeScreamer 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the serverPath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34927 - http://www.vupen.com/english/advisories/2007/2241 - http://secunia.com/advisories/25728 - http://osvdb.org/36891 - https://www.exploit-db.com/exploits/4075 - http://www.securityfocus.com/bid/24500
CVE ID: CVE-2007-3272 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T14:14:11.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter in a register action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34920 - http://www.securityfocus.com/bid/24503 - https://www.exploit-db.com/exploits/4076 - http://osvdb.org/38469