Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5158 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to CVE-2007-3511. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36848 - http://www.securityfocus.com/bid/25836 - http://secunia.com/advisories/27007
xforce.ibmcloud.com/vulnerabilities/36848 - http://www.securityfocus.com/bid/25836 - http://secunia.com/advisories/27007 - http://www.0x000000.com/index.php?i=437
CVE ID: CVE-2007-5159 State: PUBLISHED Published: 2007-10-01T00:00:00Z Last Updated: 2024-09-16T18:24:53.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions (setuid root) to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00368.html - https://bugzilla.redhat.com/show_bug.cgi?id=298651 - https://www.redhat.com
kage-announce/2007-September/msg00368.html - https://bugzilla.redhat.com/show_bug.cgi?id=298651 - https://www.redhat.com/archives/fedora-desktop-list/2007-September/msg00163.html - http://secunia.com/advisories/26938
CVE ID: CVE-2007-5160 State: PUBLISHED Published: 2007-10-01T00:00:00Z Last Updated: 2024-09-17T00:51:22.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Thierry Leriche Restaurant Management System (ReMaSys) 0.5 allow remote attackers to execute arbitrary PHP code via a URL in (1) the DIR_ROOT parameter to (a) global.php, or the (2) DIR_PAGE parameter to (b) template/fr/page.php or (c) page/fr/boxConnection.php. Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-02-remasys/
CVE ID: CVE-2007-5161 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in the internal browser in i-Systems Feedreader 3.10 allows remote attackers to inject arbitrary web script or HTML via an item in a feed, as demonstrated by a WordPress blog update. NOTE: this was originally reported as XSS. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36863 - http://osvdb.org/37409 - http://www.securityfocus.com/bid/25849 - http://www.vupen.com/english/advisories/2007/3316 - http://www.securityfocus.co
http://www.securityfocus.com/bid/25849 - http://www.vupen.com/english/advisories/2007/3316 - http://www.securityfocus.com/archive/1/481208/100/200/threaded - http://marc.info/?l=full-disclosure&m=119115897930583&w=2 - http://www.securityfocus.com/archive/1/480998/100/0/threaded - http://securityreason.com/securityalert/3183 - http://secunia.com/advisories/26996
CVE ID: CVE-2007-5162 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:41.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN) field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site. Additional Analyst Notes: - CVE Program Container: References: - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13499 - http://www.securityfocus.com/bid/25847 - ht
ces: - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13499 - http://www.securityfocus.com/bid/25847 - http://www.securityfocus.com/archive/1/483577/100/0/threaded - http://secunia.com/advisories/27576 - http://secunia.com/advisories/26985 - http://www.vupen.com/english/advisories/2007/3340 - http://www.ubuntu.com/usn/usn-596-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36861 - https://bugzilla.redhat.com/show_bug.cgi?id=313791 - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13500 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00391.html - http://secunia.com/advisories/27044 - http://www.redhat.com/support/errata/RHSA-2007
nounce/2007-October/msg00391.html - http://secunia.com/advisories/27044 - http://www.redhat.com/support/errata/RHSA-2007-0961.html - http://www.redhat.com/support/errata/RHSA-2007-0965.html - http://secunia.com/advisories/27756 - http://www.debian.org/security/2007/dsa-1412 - http://www.isecpartners.com/advisories/2007-006-rubyssl.txt - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13502 - http://secunia.com/advisories/27673 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10738 - http://www.debian.org/security/2007/dsa-1410 - http://secunia.com/advisories/27769 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg0
a-1410 - http://secunia.com/advisories/27769 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00087.html - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:029 - http://secunia.com/advisories/29556 - http://secunia.com/advisories/27818 - http://secunia.com/advisories/27432 - http://www.securityfocus.com/archive/1/480987/100/0/threaded - http://securityreason.com/securityalert/3180 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00097.html - http://secunia.com/advisories/28645 - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13504 - http://www.debian.o
secunia.com/advisories/28645 - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13504 - http://www.debian.org/security/2007/dsa-1411 - http://secunia.com/advisories/27764
CVE ID: CVE-2007-5163 State: PUBLISHED Published: 2007-10-01T00:00:00Z Last Updated: 2024-09-16T20:58:57.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions/layout.php in Nexty 1.01.A Beta allows remote attackers to execute arbitrary PHP code via a URL in the rel parameter. NOTE: this issue is disputed by CVE because the applicable include is in a function that is not called on a direct request Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-02-nexty/
CVE ID: CVE-2007-5164 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:41.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in htmls/forum/includes/topic_review.php in UniversiBO 1.3.4 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: this issue is disputed by CVE because the applicable include is in a function that is not called on a direct request Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39639 - http://arfis.wordpress.com/2007/09/14/rfi-02-universibo/
CVE ID: CVE-2007-5165 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:41.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in init.php in Jens Tkotz myIpacNG-stats (MINGS) 0.05 allows remote attackers to execute arbitrary PHP code via a URL in the MINGS_BASE parameter. NOTE: this issue is disputed by CVE because MINGS_BASE is defined before use Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-02-myipacng-stats/ - http://osvdb.org/41058
CVE ID: CVE-2007-5166 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:41.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SiteSys 1.0a allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) inc/pagehead.inc.php or (2) inc/pageinit.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40073 - http://arfis.wordpress.com/2007/09/14/rfi-02-sitesys/ - http://osvdb.org/40072
CVE ID: CVE-2007-5167 State: PUBLISHED Published: 2007-10-01T00:00:00Z Last Updated: 2024-09-16T21:04:18.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in .systeme/fonctions.php in phpLister 0.5-pre2 allows remote attackers to execute arbitrary PHP code via a URL in the nom_rep_systeme parameter. Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-02-phplister/
CVE ID: CVE-2007-5168 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:42.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) modules/serveur_jeux.php or (2) conf/conf-php.php. NOTE: vector 1 is disputed by CVE because the require_once is only reached when a certain constant has already been defined. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41056 - http://arfis.wordpress.com/2007/09/13/rfi-02-clanlite/ - http://osvdb.org/41055
CVE ID: CVE-2007-5169 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T15:24:41.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in MAIPM6.dll in Adobe PageMaker 7.0.1 and 7.0.2 on Windows allows user-assisted remote attackers to execute arbitrary code via a long font name in a .PMD file. Additional Analyst Notes: - CVE Program Container: References: - http://vuln.sg/pagemaker701-en.html - http://secunia.com/advisories/27158 - http://www.adobe.com/support/security/bulletins/apsb07-15.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/37041 - http://securitytracker.com/id?1018791 - http://www.vupen.com/english/advisor
xforce.ibmcloud.com/vulnerabilities/37041 - http://securitytracker.com/id?1018791 - http://www.vupen.com/english/advisories/2007/3441 - http://osvdb.org/38067 - http://www.securityfocus.com/bid/25989
CVE ID: CVE-2007-5170 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:24:41.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the embedded service processor (SP) before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102942-1 - http://osvdb.org/40832 - http://secunia.com/advisories/27027 - http://securitytracker.com/id?1018756 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-20005
dvisories/27027 - http://securitytracker.com/id?1018756 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200051-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36873 - http://www.securityfocus.com/bid/25863 - http://www.vupen.com/english/advisories/2007/3306
CVE ID: CVE-2007-5171 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:24:42.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36890 - http://secunia.com/advisories/26998 - http://www.securityfocus.com/bid/25887 - http://forums.quicksilverforums.com/index.php?a=topic&t=1332
CVE ID: CVE-2007-5172 State: PUBLISHED Published: 2007-10-01T20:00:00 Last Updated: 2024-08-07T15:24:42.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26998 - http://www.securityfocus.com/bid/25887 - http://forums.quicksilverforums.com/index.php?a=topic&t=1332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36891
CVE ID: CVE-2007-5173 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:41.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openid_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/481215/100/0/threaded - http://secunia.com/advisories/27001 - http://osvdb.org/37419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36876 - http://www.vupen.com/english/advisories/2007/3330 - http://www.securityfocus
xforce.ibmcloud.com/vulnerabilities/36876 - http://www.vupen.com/english/advisories/2007/3330 - http://www.securityfocus.com/bid/25867 - https://www.exploit-db.com/exploits/4471
CVE ID: CVE-2007-5174 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:41.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the do parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4472 - http://actsite.de/index.php/sicherheitsupdate.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36870 - http://secunia.com/advisories/26999 - http://www.securityfocus.com/bid/25869 - http://www.vupen.com/english/advisories/2007/3317 - h
ia.com/advisories/26999 - http://www.securityfocus.com/bid/25869 - http://www.vupen.com/english/advisories/2007/3317 - http://osvdb.org/37401
CVE ID: CVE-2007-5175 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:41.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary PHP code via a URL in the BaseCfg[BaseDir] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36868 - http://www.vupen.com/english/advisories/2007/3318 - https://www.exploit-db.com/exploits/4473 - http://www.securityfocus.com/bid/25868
CVE ID: CVE-2007-5176 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:41.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) NA_DISPLAYNAME parameter in helpdesk/user/rf_create.jsp and the (2) username and (3) LDAPError parameters in index2.jsp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36886 - http://secunia.
tes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36886 - http://secunia.com/advisories/26892 - http://www.securityfocus.com/bid/25870 - http://osvdb.org/37535 - http://osvdb.org/37536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36885
CVE ID: CVE-2007-5177 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:42.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36875 - http://www.securityfocus.com/bid/25865 - http://osvdb.org/38590 - https://www.exploit-db.com/exploits/4469
CVE ID: CVE-2007-5178 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:41.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mx_root_path parameter. NOTE: some sources incorrectly state that phpbb_root_path is the affected parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3326 - https://exchange.xforce.ibmclo
CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36867 - https://www.exploit-db.com/exploits/4470 - http://www.securityfocus.com/bid/25866 - http://www.attrition.org/pipermail/vim/2007-October/001808.html - http://secunia.com/advisories/27011 - http://osvdb.org/37400 - http://www.attrition.org/pipermail/vim/2007-October/001807.html
CVE ID: CVE-2007-5179 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:41.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inject arbitrary web script or HTML via the (1) ad, (2) sehir, (3) yas, (4) cins, (5) tel, (6) mail, and (7) mesaj parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27034 - http://www.securityfocus.com/bid/25874
CVE ID: CVE-2007-5180 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:42.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands via the (1) Kategori parameter in satilik.asp and the (2) Emlak parameter in detay.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3319 - http://www.securityfocus.com/bid/25880 - http://osvdb.org/37408 - http://secunia.com/advisories/27033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36877 - http://packetstormsecurity.org/0709-exploit
isories/27033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36877 - http://packetstormsecurity.org/0709-exploits/ohesa-sql.txt - http://osvdb.org/37407
CVE ID: CVE-2007-5181 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:41.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilan_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36880 - http://www.vupen.com/english/advisories/2007/3320 - http://secunia.com/advisories/27032 - http://www.securityfocus.com/bid/25875 - http://packetstormsecurity.org/0709-exploits/netkamp-sql.txt
CVE ID: CVE-2007-5182 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:41.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mail.asp in Netkamp Emlak Scripti allows remote attackers to inject arbitrary web script or HTML via the (1) Email parameter, and possibly the (2) Ad, (3) Soyad, (4) Konu, and (5) Mesaj parameters to iletisim.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3320 - http://osvdb.org/37406 - http://secunia.com/advisories/27032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36881 - http://www.securityfocus.com/bid/
ia.com/advisories/27032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36881 - http://www.securityfocus.com/bid/25875 - http://packetstormsecurity.org/0709-exploits/netkamp-sql.txt
CVE ID: CVE-2007-5183 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:42.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mailbox.mws in OdysseySuite, possibly 4.0.729, allows remote attackers to inject arbitrary web script or HTML via the idkey parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37418 - http://www.vupen.com/english/advisories/2007/3346 - http://www.securityfocus.com/bid/25891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36878 - http://pridels-team.blogspot.com/2007/10/odysseysuite-internet-banking-vuln.html - http://secunia.com/advisor
es/36878 - http://pridels-team.blogspot.com/2007/10/odysseysuite-internet-banking-vuln.html - http://secunia.com/advisories/27022
CVE ID: CVE-2007-5184 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:42.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25871 - http://secunia.com/advisories/27014 - http://www.vupen.com/english/advisories/2007/3311 - https://www.exploit-db.com/exploits/4478 - http://osvdb.org/41385 - http://debork.se/poc/001_smbftpd.c - https://exchange.xforce.ibmcloud.com/vulnerabil
its/4478 - http://osvdb.org/41385 - http://debork.se/poc/001_smbftpd.c - https://exchange.xforce.ibmcloud.com/vulnerabilities/36893 - http://sourceforge.net/project/shownotes.php?release_id=543077 - http://www.securityfocus.com/archive/1/481220/100/0/threaded
CVE ID: CVE-2007-5185 State: PUBLISHED Published: 2007-10-03T14:00:00 Last Updated: 2024-08-07T15:24:41.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the HTML_MENU_DirPath parameter to (1) config_HTML_MENU.php and (2) config_PHPLM.php in phpwcms_template/inc_script/frontend_render/navigation/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38591 - https://www.exploit-db.com/exploits/4477 - http://www.securityfocus.com/bid/25879 - http://osvdb.org/38592 - https://exchange.xforce.ibmcloud.c
com/exploits/4477 - http://www.securityfocus.com/bid/25879 - http://osvdb.org/38592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36905 - http://www.vupen.com/english/advisories/2007/3332