Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0494 State: PUBLISHED Published: 2007-01-25T20:00:00 Last Updated: 2024-08-07T12:19:30.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 - http://securityt
ces: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 - http://securitytracker.com/id?1017573 - http://docs.info.apple.com/article.html?artnum=305530 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://secunia.com/advisories/23944 - http://security.gentoo.org/glsa/glsa-200702-06.xml - http://secunia.com/advisories/24129 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102969-1 - http://secunia.com/advisories/24048 - http://www.vupen.com/english/advisories/2007/1939 - http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
ty.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.007.html - http://www.vupen.com/english/advisories/2007/3229 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-003.txt.asc - http://support.avaya.com/elmodocs2/security/ASA-2007-125.htm - http://secunia.com/advisories/23943 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:030 - http://secunia.com/advisories/25482 - http://www.redhat.com/support/errata/RHSA-2007-0057.html - http://www.trustix.org/errata/2007/0005 - http://www.debian.org/security/2007/dsa-1254 - http://lists.apple.co
57.html - http://www.trustix.org/errata/2007/0005 - http://www.debian.org/security/2007/dsa-1254 - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://secunia.com/advisories/25402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31838 - http://www.securityfocus.com/bid/22231 - http://secunia.com/advisories/24083 - http://secunia.com/advisories/25649 - http://www.redhat.com/support/errata/RHSA-2007-0044.html - http://secunia.com/advisories/24284 - http://secunia.com/advisories/24930 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY96144 - http://secunia.com/advisories/24648 - http://www.vupen.com/english/advisories/2007/2163 - https://www2.itrc.hp.com/s
4 - http://secunia.com/advisories/24648 - http://www.vupen.com/english/advisories/2007/2163 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://fedoranews.org/cms/node/2537 - http://secunia.com/advisories/25715 - http://secunia.com/advisories/23977 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11523 - http://marc.info/?l=bind-announce&m=116968519300764&w=2 - http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://secunia.com/advisories/26909 - http://www.vupen.com/english/advisories/2007/2002 - http://www.isc.org/index.pl?/sw/bind/bind-security.p
isories/26909 - http://www.vupen.com/english/advisories/2007/2002 - http://www.isc.org/index.pl?/sw/bind/bind-security.php - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495 - http://www.ubuntu.com/usn/usn-418-1 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY95619 - http://secunia.com/advisories/24203 - http://secunia.com/advisories/27706 - http://secunia.com/advisories/24014 - http://secunia.com/advisories/24054 - http://secunia.com/advisories/23974 - http://www.vupen.com/english/advisories/2007/2315 - http://www.vupen.com/english/advisories/2007/2245 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html - https://issue
m/english/advisories/2007/2245 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0016.html - https://issues.rpath.com/browse/RPL-989 - http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY96324 - http://www.vupen.com/english/advisories/2007/1401 - http://fedoranews.org/cms/node/2507 - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://www-1.ibm.com/support/docview.wss?uid=isg1IY95618 - http://secunia.com/advisories/23904 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://secu
- http://secunia.com/advisories/23904 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://secunia.com/advisories/23924 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.494157 - http://secunia.com/advisories/24950 - http://secunia.com/advisories/23972
CVE ID: CVE-2007-0495 State: PUBLISHED Published: 2007-01-25T21:00:00 Last Updated: 2024-08-07T12:19:30.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/config.inc.php in PhpSherpa allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0263 - http://secunia.com/advisories/23817 - https://www.exploit-db.com/exploits/3161 - http://osvdb.org/31599
CVE ID: CVE-2007-0496 State: PUBLISHED Published: 2007-01-25T21:00:00 Last Updated: 2024-08-07T12:19:30.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the g_strRootDir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36797 - https://www.exploit-db.com/exploits/3163 - http://www.vupen.com/english/advisories/2007/0268
CVE ID: CVE-2007-0497 State: PUBLISHED Published: 2007-01-25T21:00:00 Last Updated: 2024-08-07T12:19:30.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the maindir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31634 - http://www.securityfocus.com/archive/1/457800/100/100/threaded - http://www.securityfocus.com/bid/22189 - http://echo.or.id/adv/adv62-y3dips-2007.txt - http://osvdb.org/32938 - http://www.vupen.com/eng
ityfocus.com/bid/22189 - http://echo.or.id/adv/adv62-y3dips-2007.txt - http://osvdb.org/32938 - http://www.vupen.com/english/advisories/2007/0265 - http://secunia.com/advisories/23845
CVE ID: CVE-2007-0498 State: PUBLISHED Published: 2007-01-25T21:00:00 Last Updated: 2024-08-07T12:19:30.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in up.php in MySpeach 2.1 beta and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the my[root] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3165 - http://osvdb.org/31603
CVE ID: CVE-2007-0499 State: PUBLISHED Published: 2007-01-25T21:00:00 Last Updated: 2024-08-07T12:19:30.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the env[inc_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3164 - http://secunia.com/advisories/23992 - http://www.securityfocus.com/bid/22161 - http://www.vupen.com/english/advisories/2007/0267 - http://osvdb.org/33014
CVE ID: CVE-2007-0500 State: PUBLISHED Published: 2007-01-25T21:00:00 Last Updated: 2024-08-07T12:19:30.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/includes.php in Bradabra 2.0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23851 - http://www.vupen.com/english/advisories/2007/0264 - http://osvdb.org/31604 - https://www.exploit-db.com/exploits/3162
CVE ID: CVE-2007-0501 State: PUBLISHED Published: 2007-01-25T21:00:00 Last Updated: 2024-08-07T12:19:30.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Generators (adv-random-gen) allows remote attackers to execute arbitrary PHP code via a URL in the gen parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0271 - https://www.exploit-db.com/exploits/3171 - http://osvdb.org/36810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31637 - http://www.securityfocus.com/bid/22151
CVE ID: CVE-2007-0502 State: PUBLISHED Published: 2007-01-25T21:00:00 Last Updated: 2024-08-07T12:19:30.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.php in webSPELL 4.01.02 allows remote attackers to execute arbitrary SQL commands via the picID parameter, a different vector than CVE-2007-0492. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31632 - http://www.vupen.com/english/advisories/2007/0270 - http://osvdb.org/36798 - http://www.securityfocus.com/bid/22149
CVE ID: CVE-2007-0503 State: PUBLISHED Published: 2007-01-25T21:00:00 Last Updated: 2024-08-07T12:19:30.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local users to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-040.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102728-1 - http://www.vupen.com/english/advisories/2007/0287 - http://secunia.com/advisories/23885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31668 - http://www.securityfocus.com/bid
nia.com/advisories/23885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31668 - http://www.securityfocus.com/bid/22175 - http://osvdb.org/31598 - http://securitytracker.com/id?1017541 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1495
CVE ID: CVE-2007-0504 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in poll_frame.php in Vote! Pro 4.0, and possibly other scripts, allows remote attackers to execute arbitrary code via the poll_id parameter, which is supplied to an eval function call, a different vulnerability type than CVE-2005-4632. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0300 - http://osvdb.org/31606 - https://www.exploit-db.com/exploits/3180 - http://secunia.com/advisories/23834
CVE ID: CVE-2007-0505 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23887 - http://www.securityfocus.com/bid/22224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31729 - http://www.vupen.com/english/advisories/2007/0312 - http://osvd
s://exchange.xforce.ibmcloud.com/vulnerabilities/31729 - http://www.vupen.com/english/advisories/2007/0312 - http://osvdb.org/32134 - http://drupal.org/node/112146
CVE ID: CVE-2007-0506 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23887 - http://www.securityfocus.com/bid/22224 - http://osvdb.org/32135 - http://www.vupen.com/english/advisories/2007/0312 - http://drupal.org/no
yfocus.com/bid/22224 - http://osvdb.org/32135 - http://www.vupen.com/english/advisories/2007/0312 - http://drupal.org/node/112146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31727
CVE ID: CVE-2007-0507 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Acidfree module for Drupal before 4.6.x-1.0, and before 4.7.x-1.0 in the 4.7 series, allows remote authenticated users with "create acidfree albums" privileges to execute arbitrary SQL commands via node titles. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22202 - http://drupal.org/node/112145 - http://osvdb.org/32132 - http://www.vupen.com/english/advisories/2007/0313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31724 - http://sec
p://www.vupen.com/english/advisories/2007/0313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31724 - http://secunia.com/advisories/23895
CVE ID: CVE-2007-0508 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitrary PHP code via a URL in the BBC_LANGUAGE_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0318 - http://secunia.com/advisories/23874 - http://osvdb.org/32957 - https://www.exploit-db.com/exploits/3183
CVE ID: CVE-2007-0509 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in MaklerPlus before 1.2 have unknown impact and attack vectors, possibly relating to cross-site scripting (XSS) in the slogan parameter in main.tpl, or information leaks in error messages. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=479940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31734 - http://www.securityfocus.com/bid/22206 - http://www.vupen.com/english/advisories/2007/0321 - http://secunia.com/ad
734 - http://www.securityfocus.com/bid/22206 - http://www.vupen.com/english/advisories/2007/0321 - http://secunia.com/advisories/23864 - http://osvdb.org/32950
CVE ID: CVE-2007-0510 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) graphs.c, (2) output.c, and (3) preserve.c in AWFFull 3.7.1 and earlier have unknown impact and attack vectors. NOTE: some of these details are obtained from third party information. NOTE: There may not be any attack vector that crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.stedee.id.au/awffull#changes - http://secunia.com/advisories/23831 - http://www.stedee.id.au/pipermail/awffull_stedee.id.au/2007-January/000309.html - http://www.vu
a.com/advisories/23831 - http://www.stedee.id.au/pipermail/awffull_stedee.id.au/2007-January/000309.html - http://www.vupen.com/english/advisories/2007/0320 - http://osvdb.org/32956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31731
CVE ID: CVE-2007-0511 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpXMLDOM (phpXD) 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) dom.php, (2) dtd.php, or (3) parser.php in include/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22201 - http://osvdb.org/32954 - http://osvdb.org/32955 - http://secunia.com/advisories/23875 - http://www.vupen.com/english/advisories/2007/0309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
sories/23875 - http://www.vupen.com/english/advisories/2007/0309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31726 - https://www.exploit-db.com/exploits/3184 - http://osvdb.org/32953
CVE ID: CVE-2007-0512 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi TP1/LiNK 05-00 through 05-03-/F, 03-04 through 03-06-/K, and 03-00 through 03-03-/H; and TP1/Server Base 05-00 through 05-00-/M, 03-01-E through 03-01-FD, 03-01 through 03-01-DB, and 05-03; allow attackers to cause a denial of service (process crash) via invalid data to an OpenTP1 port. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32962 - http://www.hitachi-support.com/security_e/vuls_e/HS06-021_e/01-e.html - http://www.vupen.com/english/advisories/2007/0325 - http://www.securityfoc
.com/security_e/vuls_e/HS06-021_e/01-e.html - http://www.vupen.com/english/advisories/2007/0325 - http://www.securityfocus.com/bid/22223 - http://secunia.com/advisories/23866
CVE ID: CVE-2007-0513 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi HiRDB Datareplicator 7HiRDB, 7(64), 6, 6(64), 5.0, and 5.0(64); and various products that bundle HiRDB Datareplicator; allows attackers to cause a denial of service (CPU consumption) via certain data. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-support.com/security_e/vuls_e/HS06-023_e/01-e.html - http://www.securityfocus.com/bid/22244 - http://secunia.com/advisories/23816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31735 - http://osvdb.org/32996 - http://www.vupen.com/
ries/23816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31735 - http://osvdb.org/32996 - http://www.vupen.com/english/advisories/2007/0327
CVE ID: CVE-2007-0514 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32998 - http://secunia.com/advisories/23843 - http://www.vupen.com/english/advisories/2007/0326 - http://osvdb.org/32997 - http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
CVE ID: CVE-2007-0515 State: PUBLISHED Published: 2007-01-26T00:00:00 Last Updated: 2024-08-07T12:19:30.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528 - http://www.
: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A528 - http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html - http://isc.sans.org/diary.html?storyid=2133 - http://www.securityfocus.com/bid/22225 - http://osvdb.org/31900 - http://www.vupen.com/english/advisories/2007/0350 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - http://www.securityfocus.com/bid/22328 - http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-013010-5422-99&tabid=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 - http://www.kb.cert.org/vuls/id/412225 -
s://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 - http://www.kb.cert.org/vuls/id/412225 - http://www.microsoft.com/technet/security/advisory/932114.mspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/31834 - http://www.symantec.com/enterprise/security_response/weblog/2007/01/multiple_organizations_targett.html - http://secunia.com/advisories/23950 - http://securitytracker.com/id?1017564
CVE ID: CVE-2007-0516 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yana Framework before 2.8.5a allows remote authenticated users with permissions to modify a guestbook profile to modify or delete arbitrary guestbook profiles via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://all-community.de/pub/pages/changes.php?language=en - http://secunia.com/advisories/23855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31671 - http://ww
nguage=en - http://secunia.com/advisories/23855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31671 - http://www.osvdb.org/31615
CVE ID: CVE-2007-0517 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password information via a direct request for pwd.txt. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32947 - http://securityreason.com/securityalert/2184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31696 - http://secunia.com/advisories/23888 - http://www.securityfocus.com/archive/1/457825/100/0/threaded
CVE ID: CVE-2007-0518 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded passwords via a direct request for pwd.txt. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23886 - http://securityreason.com/securityalert/2183 - http://osvdb.org/32946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31701 - http://www.securityfocus.com/archive/1/457852/100/0/threaded