Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1957 State: PUBLISHED Published: 2007-04-11T01:00:00 Last Updated: 2024-08-07T13:13:41.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) allow remote attackers to execute arbitrary PHP code via a URL in the pageAll parameter to index.php in (1) template/Vert/, or (2) template/Noir/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35290 - http://securityreason.com/securityalert/2543 - http://www.securityfocus.com/archive/1/465083/100/0/threaded
CVE ID: CVE-2007-1958 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:41.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in TinyMUX before 2.4 allows attackers to cause a denial of service via unspecified vectors related to "too many substring matches in a regexp $-command." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1213 - http://www.tinymux.org/changes.txt
CVE ID: CVE-2007-1959 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:42.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vectors, related to lack of the "'other half' of buffer overflow protection." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1213 - http://www.tinymux.org/changes.txt
CVE ID: CVE-2007-1960 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:42.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34460 - http://www.securityfocus.com/bid/23320 - http://secunia.com/advisories/24790 - https://www.exploit-db.com/exploits/3666
CVE ID: CVE-2007-1961 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:41.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1265 - https://www.exploit-db.com/exploits/3665 - http://osvdb.org/37396 - http://www.securityfocus.com/bid/23319
CVE ID: CVE-2007-1962 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:42.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1263 - http://secunia.com/advisories/24781 - http://osvdb.org/34459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33425 - https://www.exploit-db.com/exploits/3663
CVE ID: CVE-2007-1963 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:42.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, as utilized by index.php, a related issue to CVE-2006-3775. Additional Analyst Notes: - CVE Program Container: References: - http://community.mybboard.net/showthread.php?tid=18002 - http://secunia.com/advisories/24689 - http://www.vupen.com/english/advisories/2007/1244 - https://www.exploit-db.com/exploits/3653 -
a.com/advisories/24689 - http://www.vupen.com/english/advisories/2007/1244 - https://www.exploit-db.com/exploits/3653 - http://osvdb.org/34657 - http://community.mybboard.net/attachment.php?aid=5842 - http://www.securityfocus.com/archive/1/464563/100/0/threaded
CVE ID: CVE-2007-1964 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:42.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any account by providing the account's registered e-mail address in a debug request for a do_lostpw action, which prints the change password verification code in the debug output. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/464267/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33345 - http://securityreason.com/sec
e/1/464267/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33345 - http://securityreason.com/securityalert/2544
CVE ID: CVE-2007-1965 State: PUBLISHED Published: 2007-04-11T10:00:00Z Last Updated: 2024-09-16T16:23:31.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the set_lang parameter to (1) archive.php, (2) article.php, (3) index.php, or (4) topics.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=117570977117962&w=2 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls38 - http://www.securityfocus.com/bid/23314
CVE ID: CVE-2007-1966 State: PUBLISHED Published: 2007-04-11T10:00:00.000Z Last Updated: 2025-04-03T14:50:36.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://marc.info/?l=bugtraq&m=117570977117962&w=2 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls38
CVE ID: CVE-2007-1967 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:42.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in stat12 allows remote attackers to execute arbitrary PHP code via a URL in the langpath parameter. NOTE: this issue was published by an unreliable researcher, and there is little information to determine which product is actually affected. This is probably an invalid report based on analysis by CVE and a third party Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-April/001508.html - http://www.securityfocus.com/a
Container: References: - http://www.attrition.org/pipermail/vim/2007-April/001508.html - http://www.securityfocus.com/archive/1/464582/100/0/threaded - http://securityreason.com/securityalert/2555 - http://www.attrition.org/pipermail/vim/2007-April/001488.html
CVE ID: CVE-2007-1968 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:41.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23311 - http://securityreason.com/securityalert/2548 - http://www.securityfocus.com/archive/1/464716/100/0/threaded - http://www.vupen.com/english/advisories/2007/1302 - https://www.exploit-db.com/exploits/3685 - http://www.attrition.org/piperma
www.vupen.com/english/advisories/2007/1302 - https://www.exploit-db.com/exploits/3685 - http://www.attrition.org/pipermail/vim/2007-April/001503.html
CVE ID: CVE-2007-1969 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:42.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2549 - http://www.securityfocus.com/archive/1/464712/100/0/threaded
CVE ID: CVE-2007-1970 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:42.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34536 - http://www.securityfocus.com/archive/1/464719/100/0/threaded
CVE ID: CVE-2007-1971 State: PUBLISHED Published: 2007-04-11T10:00:00 Last Updated: 2024-08-07T13:13:42.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in fotokategori.asp in Gazi Okul Sitesi 2007 allows remote attackers to execute arbitrary SQL commands via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35266 - http://www.securityfocus.com/bid/23316 - http://securityreason.com/securityalert/2547 - http://www.securityfocus.com/archive/1/464738/100/0/threaded
CVE ID: CVE-2007-1972 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:13:42.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the vendor disputes this vulnerability, stating that it does not exist when the system is properly configured Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466223/100/0/threaded -
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466223/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-07-020.html - http://www.vupen.com/english/advisories/2007/1458 - http://www.securitytracker.com/id?1017935 - http://www.securityfocus.com/bid/23559 - http://securityreason.com/securityalert/2599 - http://www.securityfocus.com/archive/1/466274/100/0/threaded
CVE ID: CVE-2007-1973 State: PUBLISHED Published: 2007-04-11T23:00:00 Last Updated: 2024-08-07T13:13:42.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37635 - http://securityreason.com/securityalert/2563 - http://www.securityfocus.com/archive/1/465232/100/0/threaded - http://research.eeye.com/html/advisories/published/AD20070410a.html
CVE ID: CVE-2007-1974 State: PUBLISHED Published: 2007-04-12T00:00:00 Last Updated: 2024-08-07T13:13:42.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute arbitrary SQL commands via the articleid parameter to print.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.xoops.org/modules/news/article.php?storyid=3717 - http://www.securityfocus.com/bid/23258 - http://osvdb.org/41387
//www.xoops.org/modules/news/article.php?storyid=3717 - http://www.securityfocus.com/bid/23258 - http://osvdb.org/41387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33378 - https://www.exploit-db.com/exploits/3646 - http://www.vupen.com/english/advisories/2007/1209 - http://www.xoops.org/modules/newbb/viewtopic.php?viewmode=flat&order=ASC&topic_id=58229&forum=4&move=next&topic_time=1176217411 - http://www.securityfocus.com/archive/1/488317/100/0/threaded - http://addons.zarilia.com/index.php?page_type=static&id=43 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33380 - http://www.securityfocus.com/bid/23261 - http://www.securityfocus.com/bid/23259 - http://osvdb.org/52230 -
ties/33380 - http://www.securityfocus.com/bid/23261 - http://www.securityfocus.com/bid/23259 - http://osvdb.org/52230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33379 - http://www.attrition.org/pipermail/vim/2007-April/001507.html - https://www.exploit-db.com/exploits/3645 - http://www.vupen.com/english/advisories/2007/1208 - http://www.vupen.com/english/advisories/2007/1207 - https://www.exploit-db.com/exploits/3644
CVE ID: CVE-2007-1975 State: PUBLISHED Published: 2007-04-12T00:00:00 Last Updated: 2024-08-07T13:13:42.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SLAED CMS 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) path parameter to admin/admin.php or the (2) modpath parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35221 - http://securityreason.com/securityalert/2567 - http://osvdb.org/35220 - http://www.securityfocus.com/archive/1/464349/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33343
CVE ID: CVE-2007-1976 State: PUBLISHED Published: 2007-04-12T00:00:00 Last Updated: 2024-08-07T13:13:41.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application's checkSuperglobals function defends against the attack Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3642 - http://www.vupen.com/english/advisories/2007/1206 - http://osvdb.org
ences: - https://www.exploit-db.com/exploits/3642 - http://www.vupen.com/english/advisories/2007/1206 - http://osvdb.org/37429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33368 - http://www.attrition.org/pipermail/vim/2007-April/001490.html - http://www.attrition.org/pipermail/vim/2007-April/001489.html
CVE ID: CVE-2007-1977 State: PUBLISHED Published: 2007-04-12T00:00:00 Last Updated: 2024-08-07T13:13:41.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index_cms.php in holaCMS 1.4.10 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24656 - http://www.securityfocus.com/archive/1/464572/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33392 - http://www.securityfocus.com/bid/23288 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls37 - http://osvdb.org/34685
CVE ID: CVE-2007-1978 State: PUBLISHED Published: 2007-04-12T00:00:00 Last Updated: 2024-08-07T13:13:42.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view_game_list action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33361 - http://osvdb.org/37410 - https://www.exploit-db.com/exploits/3640
CVE ID: CVE-2007-1979 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the get_blogid_from_postid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and 3.05 might also be affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3655 - http://secunia.com/advisories/24761 - http://www.vupen.com/english/advisories/2007/1206 - http:
t-db.com/exploits/3655 - http://secunia.com/advisories/24761 - http://www.vupen.com/english/advisories/2007/1206 - http://www.securityfocus.com/bid/23286
CVE ID: CVE-2007-1980 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33364 - https://www.exploit-db.com/exploits/3639 - http://osvdb.org/37411 - http://www.securityfocus.com/bid/23256 - http://www.vupen.com/english/advisories/2007/1204
CVE ID: CVE-2007-1981 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The safevoid_vsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service (daemon crash) via a long meta list command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1247 - http://secunia.com/advisories/24738 - http://sourceforge.net/forum/forum.php?forum_id=681753 - http://sourceforge.net/project/shownotes.php?release_id=498782
CVE ID: CVE-2007-1982 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) __IncludeFilePHPClass, (2) __ClassPath, and (3) __class parameters to (a) rspa/framework/Controller_v5.php, and (b) rspa/framework/Controller_v4.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24671 - http://www.securityfocus.com/bid/23246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ia.com/advisories/24671 - http://www.securityfocus.com/bid/23246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33356 - http://www.vupen.com/english/advisories/2007/1190 - http://www.bugtraq.ir/articles/advisory/RSPA_File_Inclusion/6 - https://www.exploit-db.com/exploits/3641
CVE ID: CVE-2007-1983 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/default_header.php in Cyboards PHP Lite 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter, a different vector than CVE-2006-2871. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33406 - http://osvdb.org/35300 - http://www.attrition.org/pipermail/vim/2007-April/001509.html - http://www.securityfocus.com/bid/23306
CVE ID: CVE-2007-1984 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in lite-cms 0.2.1 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2559 - http://www.securityfocus.com/archive/1/464672/100/0/threaded
CVE ID: CVE-2007-1985 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpexplorator.php in phpexplorator 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) cmd or (2) lang_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/464695/100/0/threaded - http://securityreason.com/securityalert/2564
CVE ID: CVE-2007-1986 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_path_core parameter to inc/core_profile.header.php, the (2) template_path_core parameter to template/barnraiser_01/maint_contact_view.tpl.php, and the (3) template_path parameter to template/barnraiser_01/default.tpl.php. NOTE: this issue might overlap CVE-2006-5533. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24773
lap CVE-2006-5533. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24773 - http://osvdb.org/34625 - http://osvdb.org/34624 - https://www.exploit-db.com/exploits/3659 - http://osvdb.org/34623 - http://www.securityfocus.com/bid/23303 - http://www.vupen.com/english/advisories/2007/1262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33427
CVE ID: CVE-2007-1987 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _plugin_file parameter to smarty/internals/core.load_pulgins.php or the (2) root_path parameter to index.php. NOTE: CVE disputes (1) because the inclusion occurs within a function that is not called during a direct request. CVE disputes (2) because root_path is defined in config.php before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
d in config.php before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/464709/100/0/threaded - http://osvdb.org/34117 - http://securityreason.com/securityalert/2551
CVE ID: CVE-2007-1988 State: PUBLISHED Published: 2007-04-12T01:00:00 Last Updated: 2024-08-07T13:13:42.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in kernel/filters.inc.php in PHPEcho CMS 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/464707/100/0/threaded - http://osvdb.org/35262 - http://securityreason.com/securityalert/2550