Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0371 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP_BDc.SelectedFolder property value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22110 - https://www.exploit-db.com/exploits/3155 - http://osvdb.org/34647
CVE ID: CVE-2007-0372 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:30.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the active parameter in admin/modules/modules.php; the (2) ad_class, (3) imageurl, (4) clickurl, (5) ad_code, or (6) position parameter in modules/Advertising/admin/index.php; or unspecified vectors in the (7) advertising, (8) weblinks, or (9) reviews section. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33699 - http://www.securityfocus.com/archive/1/459174
yst Notes: - CVE Program Container: References: - http://osvdb.org/33699 - http://www.securityfocus.com/archive/1/459174/100/0/threaded - http://osvdb.org/33698 - http://osvdb.org/33702 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.securityfocus.com/bid/22116 - http://osvdb.org/33701 - http://osvdb.org/33700 - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0373 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword parameter in certain files; the where parameter in (2) plugins/search/content.php or (3) plugins/search/weblinks.php; the text parameter in (4) plugins/search/contacts.php, (5) plugins/search/categories.php, or (6) plugins/search/sections.php; or (7) the email parameter in database/table/user.php, which is not properly handled by the check function. Additional Analyst Notes: - CVE Program
in database/table/user.php, which is not properly handled by the check function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22122 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://osvdb.org/32528 - http://osvdb.org/32527 - http://www.securityfocus.com/archive/1/459203/100/0/threaded - http://osvdb.org/32531 - http://osvdb.org/32529 - http://osvdb.org/32533 - http://osvdb.org/32530 - http://osvdb.org/32532 - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0374 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:28.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32520 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.securityfocus.com/bid/19734 - http://www.securityfocus.com/archive/1/459203/100/0/threaded - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0375 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:28.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for (1) plugins/user/example.php; (2) gmail.php, (3) example.php, or (4) ldap.php in plugins/authentication/; (5) modules/mod_mainmenu/menu.php; or other unspecified PHP scripts, which reveals the path in various error messages, related to a jimport function call at the beginning of each script. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32522 - http://archives.neohapsis.com/archives/fulldisclo
Notes: - CVE Program Container: References: - http://osvdb.org/32522 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://osvdb.org/32526 - http://osvdb.org/32525 - http://www.securityfocus.com/archive/1/459203/100/0/threaded - http://osvdb.org/32523 - http://osvdb.org/32524 - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0376 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/branches/virtuemart-1_0_0/virtuemart/CHANGELOG.php?revision=607 - http://secunia.com/advisories/24058 - http://www.securityfocus.com/bid/22123 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.securityfocus.com
s.com/bid/22123 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.securityfocus.com/archive/1/459195/100/0/threaded - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0377 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in kernel/group.php in core, (2) the lid parameter in class/table_broken.php in the Weblinks module, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/459150/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.securityfocus.com/bid/22399 - http://osvdb.org/336
.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.securityfocus.com/bid/22399 - http://osvdb.org/33684 - http://osvdb.org/33685 - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0378 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34650 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0379 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://osvdb.org/34651 - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0380 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:28.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34652 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0381 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: CVE analysis suggests that the vendor fixed these issues. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34660 - http://www.atutor.ca/atutor/mantis/changelog_page.php - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0382 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in letterman.class.php in the Letterman 1.2.3 (com_letterman) component for Joomla! before 1.0.12 allow remote attackers to execute arbitrary SQL commands via the id parameter, related to the (1) lm_sendMail, (2) saveNewsletter, and (3) cancelNewsletter functions. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33688 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.securityfocus.com/bid/22117 - http://www.securityfocu
ohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.securityfocus.com/bid/22117 - http://www.securityfocus.com/archive/1/459195/100/0/threaded - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0383 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: WDaemon 9.5.4 allows remote attackers to access the /WorldClient.dll URI on TCP port 3000, which has unknown impact. NOTE: The researcher reports that the vendor response was "this is not a security bug. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://osvdb.org/34661 - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0384 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35473 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://noc.postnuke.com/plugins/scmsvn/viewcvs.php/trunk/Historic/PostNuke7x/html/modules/?root=postnuke - http://www.securityfocus.com/bid/22119 - http://www.hackers.ir/advisories/festiv
ostNuke7x/html/modules/?root=postnuke - http://www.securityfocus.com/bid/22119 - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0385 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/index.php, possibly involving an undefined id_cat variable. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35472 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://noc.postnuke.com/plugins/scmsvn/viewcvs.php/trunk/Historic/PostNuke7x/html/modules/?root=postnuke - http://noc.postnuke.com/plugins/scmsvn/viewcvs.php/trunk/Histor
/trunk/Historic/PostNuke7x/html/modules/?root=postnuke - http://noc.postnuke.com/plugins/scmsvn/viewcvs.php/trunk/Historic/PostNuke7x/html/modules/FAQ/index.php?root=postnuke&r1=20350&r2=20911 - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0386 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35471 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0387 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 (com_weblinks) allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html - http://osvdb.org/34792 - http://www.securityfocus.com/archive/1/459203/100/0/threaded - http://www.hackers.ir/advisories/festival.txt
CVE ID: CVE-2007-0388 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:30.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids[1] and other boardids[] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33872 - https://www.exploit-db.com/exploits/3143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31550 - https://www.exploit-db.com/exploits/3144
CVE ID: CVE-2007-0389 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Education Solution (ACES) 1.1, allows remote attackers to read arbitrary files via .%252e/ (double-encoded dot dot slash) sequences in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31613 - http://osvdb.org/33552 - http://www.securityfocus.com/bid/22121 - http://www.securityfocus.com/a
vulnerabilities/31613 - http://osvdb.org/33552 - http://www.securityfocus.com/bid/22121 - http://www.securityfocus.com/archive/1/457318/100/0/threaded
CVE ID: CVE-2007-0390 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to inject arbitrary web script or HTML via the tag parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31602 - http://www.securityfocus.com/bid/22115 - http://securityreason.com/securityalert/2170 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051868.html - http://secunia.com/advisories/23824 - http://www.securityfocus.com/archive/1/457331/100/0/threaded - https://exchange.x
http://secunia.com/advisories/23824 - http://www.securityfocus.com/archive/1/457331/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31600
CVE ID: CVE-2007-0391 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457414/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31608 - http://www.vupen.com/english/advisories/2007/0253 - http://www.securityfocus.com/bid/22128 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/05188
07/0253 - http://www.securityfocus.com/bid/22128 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051883.html - http://www.bitdefender.com/KB325-en--Format-string-vulnerability.html
CVE ID: CVE-2007-0392 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457279/100/0/threaded - http://www.securityfocus.com/archive/1/457315/100/0/threaded
CVE ID: CVE-2007-0393 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457279/100/0/threaded - http://www.securityfocus.com/archive/1/457315/100/0/threaded
CVE ID: CVE-2007-0394 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:30.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457279/100/0/threaded - http://www.securityfocus.com/archive/1/457315/100/0/threaded
CVE ID: CVE-2007-0395 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0266 - http://osvdb.org/34621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31564 - http://www.securityfocus.com/bid/22108 - https://www.exploit-db.com/exploits/3152
CVE ID: CVE-2007-0396 State: PUBLISHED Published: 2007-01-19T23:00:00 Last Updated: 2024-08-07T12:19:29.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, allows remote attackers to cause a denial of service (system crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23800 - http://www.vupen.com/english/advisories/2007/0234 - http://osvdb.org/32869 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00837319 - http://securitytracker.com/id?1017527 - http://www.securityfocus.com/bid/22103
Support/Document.jsp?objectID=c00837319 - http://securitytracker.com/id?1017527 - http://www.securityfocus.com/bid/22103 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00837319 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31565
CVE ID: CVE-2007-0397 State: PUBLISHED Published: 2007-01-20T01:00:00 Last Updated: 2024-08-07T12:19:29.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017535 - http://www.securityfocus.com/bid/22111 - http://osvdb.org/32720 - http://ww
s: - http://securitytracker.com/id?1017535 - http://www.securityfocus.com/bid/22111 - http://osvdb.org/32720 - http://www.vupen.com/english/advisories/2007/0245 - http://securitytracker.com/id?1017536 - http://secunia.com/advisories/23836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31567 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807c517f.shtml
CVE ID: CVE-2007-0398 State: PUBLISHED Published: 2007-01-22T18:00:00 Last Updated: 2024-08-07T12:19:29.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in forum.php3 in Arnaud Guyonne (aka Arnotic) a-forum allow remote attackers to inject arbitrary web script or HTML via the (1) Sujet or (2) Pseudo field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457503/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31610 - http://www.attrition.org/pipermail/vim/2007-January/001249.html
CVE ID: CVE-2007-0399 State: PUBLISHED Published: 2007-01-22T18:00:00 Last Updated: 2024-08-07T12:19:29.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) recipient or (2) BCC field when selecting send in a pm action. Additional Analyst Notes: - CVE Program Container: References: - http://aria-security.com/forum/showthread.php?p=128 - http://www.securityfocus.com/archive/1/457627/100/0/threaded - http://www.securityfocus.com/archive/1/457761/100/200/threaded - http://www.securityfocus.com/archi
627/100/0/threaded - http://www.securityfocus.com/archive/1/457761/100/200/threaded - http://www.securityfocus.com/archive/1/458194/100/100/threaded - http://www.securityfocus.com/archive/1/458904/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31612 - http://www.securityfocus.com/bid/22143 - http://securityreason.com/securityalert/2169 - http://osvdb.org/32606 - http://www.securityfocus.com/archive/1/457508/100/0/threaded
CVE ID: CVE-2007-0400 State: PUBLISHED Published: 2007-01-22T18:00:00 Last Updated: 2024-08-07T12:19:30.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/memberlist.php in Easebay Resources Login Manager 3.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31614 - http://securityreason.com/securityalert/2167 - http://www.securityfocus.com/archive/1/457505/100/0/threaded
CVE ID: CVE-2007-0401 State: PUBLISHED Published: 2007-01-22T18:00:00 Last Updated: 2024-08-07T12:19:29.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/memberlist.php in Easebay Resources Login Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the init_row parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2167 - http://www.securityfocus.com/archive/1/457505/100/0/threaded
CVE ID: CVE-2007-0402 State: PUBLISHED Published: 2007-01-22T18:00:00 Last Updated: 2024-08-07T12:19:29.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/edit_member.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2168 - http://osvdb.org/33559 - http://www.securityfocus.com/archive/1/457506/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31618