Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1406 State: PUBLISHED Published: 2007-03-10T22:00:00Z Last Updated: 2024-09-16T23:47:02.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://trac.edgewall.org/wiki/ChangeLog
CVE ID: CVE-2007-1407 State: PUBLISHED Published: 2007-03-10T22:00:00Z Last Updated: 2024-09-17T02:20:55.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and attack vectors, related to a "low critical exploit." Additional Analyst Notes: - CVE Program Container: References: - http://opensolution.org/Quick.Cart/forum/?p=readTopic&nr=3878 - http://opensolution.org/download/Quick.Cart/changeLog.txt
CVE ID: CVE-2007-1408 State: PUBLISHED Published: 2007-03-10T22:00:00Z Last Updated: 2024-09-17T01:25:41.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in (1) bank.php, (2) landfill.php, (3) outposts.php, (4) tribes.php, (5) house.php, (6) tribearmor.php, (7) tribeastral.php, (8) tribeware.php, and (9) includes/head.php in Bartek Jasicki Vallheru before 1.3 beta have unknown impact and remote attack vectors, probably related to large integer values containing more than 15 digits. NOTE: the original vendor report is for integer overflows, but this is probably an incorrect usage of the term. Additional Analyst Notes: - CVE Program Container: References
lows, but this is probably an incorrect usage of the term. Additional Analyst Notes: - CVE Program Container: References: - http://vallheru.svn.sourceforge.net/viewvc/vallheru/vallheru2/bank.php?r1=910&r2=918 - http://sourceforge.net/project/shownotes.php?release_id=491871&group_id=118350 - http://sourceforge.net/forum/forum.php?forum_id=672237
CVE ID: CVE-2007-1409 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:59:06.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462249/100/0/threaded - http://www.securityfocus.com/archive/1/462230/100/0/threaded - http://secunia.com/advisories/24566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32881 - http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml
CVE ID: CVE-2007-1410 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:59:06.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kategori.asp in GaziYapBoz Game Portal allows remote attackers to execute arbitrary SQL commands via the kategori parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32884 - http://www.vupen.com/english/advisories/2007/0882 - http://www.securityfocus.com/bid/22871 - https://www.exploit-db.com/exploits/3437
CVE ID: CVE-2007-1411 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:59:07.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary code via long server name arguments to the (1) mssql_connect and (2) mssql_pconnect functions. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2407 - http://www.vupen.com/english/advisories/2007/0867 - http://secunia.com/advisories/24353 - http://www.securityfocus.com/bid/22832 - http://www.securityfocus.com/archive/1/462010/100/0/thre
com/advisories/24353 - http://www.securityfocus.com/bid/22832 - http://www.securityfocus.com/archive/1/462010/100/0/threaded - http://retrogod.altervista.org/php_446_mssql_connect_bof.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32885
CVE ID: CVE-2007-1412 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:59:06.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (script source code) via a long string in the second argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32986 - https://www.exploit-db.com/exploits/3442
CVE ID: CVE-2007-1413 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:59:06.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35517 - https://www.exploit-db.com/exploits/4204 - https://www.exploit-db.com/exploits/3439 - http://retrogod.altervista.org/php_446_snmpget_local_bof.html -
loits/4204 - https://www.exploit-db.com/exploits/3439 - http://retrogod.altervista.org/php_446_snmpget_local_bof.html - http://secunia.com/advisories/24440 - http://www.securityfocus.com/bid/22893
CVE ID: CVE-2007-1414 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:59:07.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code via a URL in the (1) cmd parameter to (a) image_processor.php or (b) picmgmt.inc.php, or the (2) path parameter to (c) include/functions.php, (d) include/plugin_api.inc.php, (e) index.php, or (f) pluginmgr.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2416 - http://www.osvdb.org/35068 - http://www.osvdb.org/35065 - http://www.os
- http://securityreason.com/securityalert/2416 - http://www.osvdb.org/35068 - http://www.osvdb.org/35065 - http://www.osvdb.org/35067 - http://www.securityfocus.com/archive/1/462322/100/0/threaded - http://www.securityfocus.com/bid/22896 - http://www.osvdb.org/35069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32894 - http://www.osvdb.org/35066 - http://www.securityfocus.com/archive/1/463532/100/0/threaded - http://www.osvdb.org/35070
CVE ID: CVE-2007-1415 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:59:08.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) class_path parameter to (a) includes/resa_func.inc.php (b) admin/notices/perso.inc.php, or (c) admin/quotas/main.inc.php; the (2) base_path parameter to (d) opac_css/rec_panier.php or (e) opac_css/includes/author_see.inc.php; or the (3) include_path parameter to (f) bull_info.inc.php or (g) misc.inc.php in includes/; (h) options_date_box.php, (i) options_file_box.php, (
rameter to (f) bull_info.inc.php or (g) misc.inc.php in includes/; (h) options_date_box.php, (i) options_file_box.php, (j) options_list.php, (k) options_query_list.php, or (l) options_text.php in includes/options/; (m) options.php, (n) options_comment.php, (o) options_date_box.php, (p) options_list.php, (q) options_query_list.php, or (r) options_text.php in includes/options_empr/; or (s) admin/import/iimport_expl.php, (t) admin/netbase/clean.php, (u) admin/param/param_func.inc.php, (v) admin/sauvegarde/lieux.inc.php, (w) autorites.php, (x) account.php, (y) cart.php, or (z) edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/35115 - http://www.osvdb
edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/35115 - http://www.osvdb.org/35111 - http://www.osvdb.org/35116 - http://www.osvdb.org/35101 - http://www.osvdb.org/35105 - http://www.osvdb.org/35123 - http://www.osvdb.org/35121 - http://www.osvdb.org/35103 - http://www.osvdb.org/35107 - http://www.osvdb.org/35106 - https://www.exploit-db.com/exploits/3443 - http://www.osvdb.org/35125 - http://www.osvdb.org/35117 - http://www.osvdb.org/35112 - http://www.osvdb.org/35120 - http://www.osvdb.org/35124 - http://www.osvdb.org/35110 - http://www.securityfocus.com/archive/1/462452/100/0/threaded - http://www.osvdb.org/35108 - http://www.osvdb.org/35114
- http://www.securityfocus.com/archive/1/462452/100/0/threaded - http://www.osvdb.org/35108 - http://www.osvdb.org/35114 - http://www.osvdb.org/35119 - http://www.securityfocus.com/bid/22895 - http://www.vupen.com/english/advisories/2007/0917 - http://www.osvdb.org/35113 - http://www.osvdb.org/35118 - http://www.osvdb.org/35102 - http://www.osvdb.org/35104 - http://www.osvdb.org/35122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32890 - http://advisories.echo.or.id/adv/adv68-K-159-2007.txt - http://www.osvdb.org/35109
CVE ID: CVE-2007-1416 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:59:06.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in createurl.php in JCcorp (aka James Coyle) URLshrink allows remote attackers to execute arbitrary PHP code via a URL in the formurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33982 - http://www.vupen.com/english/advisories/2007/0902 - http://www.securityfocus.com/bid/22894 - http://secunia.com/advisories/24340 - http://www.securityfocus.com/archive/1/462310/100/0/threaded - http://securityreason.com/securityalert/2415 - http://www.secur
/www.securityfocus.com/archive/1/462310/100/0/threaded - http://securityreason.com/securityalert/2415 - http://www.securityfocus.com/archive/1/463523/100/0/threaded
CVE ID: CVE-2007-1417 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:59:07.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a komm aktion. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3449 - http://osvdb.org/33976 - http://www.securityfocus.com/archive/1/462347/100/0/threaded - http://secunia.com/advisories/24477 - http://securityreason.com/securityalert/2414 - http://www.securityfocus.com/bid/22898 - http://www.vupen.com/english/advisories/2007/0904
CVE ID: CVE-2007-1418 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:59:08.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in skins/ace/popup-notopic.php in MindTouch OpenGarden DekiWiki before Gooseberry++ allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0899 - http://sourceforge.net/project/shownotes.php?group_id=173074&release_id=492249 - http://www.securityfocus.com/bid/22891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32893 - http://secunia.co
http://www.securityfocus.com/bid/22891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32893 - http://secunia.com/advisories/24453
CVE ID: CVE-2007-1419 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:59:08.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Management Extensions Remote API Remote Method Invocation over Internet Inter-ORB Protocol (JMX RMI-IIOP) API in Java Dynamic Management Kit 5.1 before 20070309 does not properly enforce the java.policy, which allows local users to obtain certain MBeans data access by operating a server application accessed by a privileged remote authenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0906 - http://secunia.com/advisories/24497 - http://sunsolve.
References: - http://www.vupen.com/english/advisories/2007/0906 - http://secunia.com/advisories/24497 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102835-1 - http://www.securityfocus.com/bid/22907 - http://osvdb.org/34018 - http://www.securitytracker.com/id?1017745
CVE ID: CVE-2007-1420 State: PUBLISHED Published: 2007-03-12T23:00:00 Last Updated: 2024-08-07T12:59:06.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort function. Additional Analyst Notes: - CVE Program Container: References: - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-36.html - http://secunia.com/advisories/25196 - http://secunia.com/advisories/24609 - https://issu
n/releasenotes-es-5-0-36.html - http://secunia.com/advisories/25196 - http://secunia.com/advisories/24609 - https://issues.rpath.com/browse/RPL-1127 - http://secunia.com/advisories/25389 - http://www.ubuntu.com/usn/usn-440-1 - http://security.gentoo.org/glsa/glsa-200705-11.xml - http://securityreason.com/securityalert/2413 - http://secunia.com/advisories/25946 - http://www.vupen.com/english/advisories/2007/0908 - http://www.securityfocus.com/archive/1/462339/100/0/threaded - http://secunia.com/advisories/24483 - http://www.securitytracker.com/id?1017746 - http://www.sec-consult.com/284.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:139 - http://secunia.com/advisories/3035
sult.com/284.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:139 - http://secunia.com/advisories/30351 - http://bugs.mysql.com/bug.php?id=24630 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9530 - http://www.securityfocus.com/bid/22900 - http://www.redhat.com/support/errata/RHSA-2008-0364.html
CVE ID: CVE-2007-1421 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:06.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Premod SubDog 2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) functions_kb.php, (2) themen_portal_mitte.php, or (3) logger_engine.php in includes/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462444/100/0/threaded - http://securityreason.com/securityalert/2412 - http://osvdb.org/35079 - http://osvdb.org/35081 - http://osvdb.org/35080 - http://www.securityfocu
/securityalert/2412 - http://osvdb.org/35079 - http://osvdb.org/35081 - http://osvdb.org/35080 - http://www.securityfocus.com/bid/22912
CVE ID: CVE-2007-1422 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:08.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in goster.asp in fystyq Duyuru Scripti allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-0688. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34087 - http://www.securityfocus.com/archive/1/462448/100/0/threaded - http://www.securityfocus.com/bid/22910
CVE ID: CVE-2007-1423 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:08.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the g_include parameter to include/include_top.php and certain other PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22908 - http://osvdb.org/33973 - https://www.exploit-db.com/exploits/3448 - http://www.vupen.com/english/advisories/2007/0903 - http://secunia.com/advisories/24476
CVE ID: CVE-2007-1424 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:08.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter to (1) init.php and (2) Ajax/editnews.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22913 - http://www.securityfocus.com/archive/1/462445/100/0/threaded - http://osvdb.org/35712 - http://securityreason.com/securityalert/2411
CVE ID: CVE-2007-1425 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:08.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the list parameter in an archive action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24474 - http://www.vupen.com/english/advisories/2007/0905 - http://www.securityfocus.com/bid/22920 - https://www.exploit-db.com/exploits/3457 - http://osvdb.org/33986
CVE ID: CVE-2007-1426 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:08.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown) via requests that contain a large amount of data in the "a" variable, which "fills up the message queue." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0901 - http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup - http://www.securityfocus.com/bid/22924 - http://sourceforge.net/project/shownotes.php?group_id=85523&release_id=49257
- http://www.securityfocus.com/bid/22924 - http://sourceforge.net/project/shownotes.php?group_id=85523&release_id=492572 - http://secunia.com/advisories/24480 - http://www.osvdb.org/32868
CVE ID: CVE-2007-1427 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:07.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the pdf_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22921 - http://securityreason.com/securityalert/2410 - http://www.securityfocus.com/archive/1/462577/100/0/threaded - https://www.exploit-db.com/exploits/3458
CVE ID: CVE-2007-1428 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:07.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22916 - http://osvdb.org/33985 - http://secunia.com/advisories/24454 - https://www.exploit-db.com/exploits/3455 - http://www.vupen.com/english/advisories/2007/0918
CVE ID: CVE-2007-1429 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:07.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2409 - http://www.securityfocus.com/archive/1/462556/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_15_sr.html
CVE ID: CVE-2007-1430 State: PUBLISHED Published: 2007-03-13T01:00:00 Last Updated: 2024-08-07T12:59:08.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/adodb-connection.inc.php in ClipShare 1.5.3 allows remote attackers to execute arbitrary PHP code via a URL in the cmd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22928 - http://securityreason.com/securityalert/2408 - http://www.securityfocus.com/archive/1/462555/100/0/threaded
CVE ID: CVE-2007-1431 State: PUBLISHED Published: 2007-03-13T19:00:00 Last Updated: 2024-08-07T12:59:08.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in PennMUSH 1.8.3 before 1.8.3p1 and 1.8.2 before 1.8.2p3 allow attackers to cause a denial of service (crash) related to the (1) speak and (2) buy functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24504 - http://www.vupen.com/english/advisories/2007/0921 - http://osvdb.org/34005 - http://www.securityfocus.com/bid/22935 - http://www.pennmush.org/archives/pennmush-announce/2007/000137.html
CVE ID: CVE-2007-1432 State: PUBLISHED Published: 2007-03-13T19:00:00 Last Updated: 2024-08-07T12:59:09.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments in (1) the user_permissions parameter to add_users.php, and unspecified parameters to (2) addblog.php, (3) editblog.php, (4) editlinks.php, (5) edit_users.php, and (6) add_links.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0916 - http://securityreason.com/securityalert/2417 - http://www.securityfocus.com/archive/1/462441
lish/advisories/2007/0916 - http://securityreason.com/securityalert/2417 - http://www.securityfocus.com/archive/1/462441/100/0/threaded - http://www.securityfocus.com/bid/22911
CVE ID: CVE-2007-1433 State: PUBLISHED Published: 2007-03-13T19:00:00 Last Updated: 2024-08-07T12:59:08.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to (1) scripts/addblog_comment.php and (2) detail.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0916 - http://securityreason.com/securityalert/2417 - http://www.securityfocus.com/archive/1/462441/100/0/threaded - http://www.securityfocus.com/bid/22911
CVE ID: CVE-2007-1434 State: PUBLISHED Published: 2007-03-13T19:00:00 Last Updated: 2024-08-07T12:59:08.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) userdetail.php, id and (2) url parameter to (b) jump.php, and id variable to (c) detail.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0916 - http://securityreason.com/securityalert/2417 - http://www.securityfocus.com/archive/1/462441/100/0/threaded - http://www.securityfocus.com/bid/
om/securityalert/2417 - http://www.securityfocus.com/archive/1/462441/100/0/threaded - http://www.securityfocus.com/bid/22911