Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6295 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38891 - http://www.securityfocus.com/bid/26734 - http://osvdb.org/39258 - http://www.vupen.com/english/advisories/2007/4104 - http://secunia.com/advisories/27941 - http://www.securitytracker.com/id?
://www.vupen.com/english/advisories/2007/4104 - http://secunia.com/advisories/27941 - http://www.securitytracker.com/id?1019053 - http://www-1.ibm.com/support/docview.wss?uid=sim5079c9d76e4fcf910852573a800495249
CVE ID: CVE-2007-6296 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484575/100/0/threaded - http://securityreason.com/securityalert/3426
CVE ID: CVE-2007-6297 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML via the (1) LIMIT parameter to chat/deluser.php3, the (2) Link parameter to chat/edituser.php3, or the (3) LastCheck or (4) B parameter to chat/users_popupL.php3. NOTE: the FontName vectors for start_page.css.php3 and style.css.php3 are already covered by CVE-2005-1619. The medium vectors for start_page.css.php3 (start_page.css.php) and style.css.php3 (style.css.php), and the From vector for use
ium vectors for start_page.css.php3 (start_page.css.php) and style.css.php3 (style.css.php), and the From vector for users_popupL.php3 (users_popupL.php), are already covered by CVE-2005-3991. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484575/100/0/threaded - http://www.securityfocus.com/bid/26698 - http://securityreason.com/securityalert/3426
CVE ID: CVE-2007-6298 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27953 - http://osvdb.org/39053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38885 - http://www.securityfocus.com/bid/26736 - http://drupal.org/node/198163
CVE ID: CVE-2007-6299 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:35.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomy_select_nodes function, as demonstrated by the (1) taxonomy_menu, (2) ajaxLoader, and (3) ubrowser contributed modules. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=559532 - http://www.securityfocus.com/bid/26735 - http://secunia.com/advisories/27932 - htt
ect/shownotes.php?release_id=559532 - http://www.securityfocus.com/bid/26735 - http://secunia.com/advisories/27932 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00190.html - http://secunia.com/advisories/27973 - http://secunia.com/advisories/27951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38884 - http://sourceforge.net/project/shownotes.php?release_id=559538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38886 - http://drupal.org/node/198162 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00258.html
CVE ID: CVE-2007-6300 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:35.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized actions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fusionnews.net/forums/viewtopic.php?f=1&t=480 - http://secunia.com/advisories/27918 - http://osvdb.org/40861
CVE ID: CVE-2007-6301 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484680/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38902 - http://secunia.com/advisories/27966 - http://securityreason.com/securityalert/3427 - http://www.securityfocus.com/bid/26745 - http://www.securityfocus.com/archive/1/4
ecurityreason.com/securityalert/3427 - http://www.securityfocus.com/bid/26745 - http://www.securityfocus.com/archive/1/484687/100/0/threaded
CVE ID: CVE-2007-6302 State: PUBLISHED Published: 2007-12-10T19:00:00 Last Updated: 2024-08-07T16:02:36.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162." Additional Analyst Notes: - CVE Program Container: References: - https://secure-support.novell.com/KanisaPlatform/Publishing/990/3639135_f.SAL_Public.html - http://www.vupen.com/english/advisories/2007/4112 - http://www.zerodayinitiative.com/advisories/ZDI-07-072
Public.html - http://www.vupen.com/english/advisories/2007/4112 - http://www.zerodayinitiative.com/advisories/ZDI-07-072.html - http://www.securityfocus.com/bid/26753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38909 - http://www.securityfocus.com/archive/1/484843/100/0/threaded - http://www.messagingarchitects.com/en/support/mplusnetmail/docs/readme.pdf - http://secunia.com/advisories/27974 - http://www.securitytracker.com/id?1019063
CVE ID: CVE-2007-6303 State: PUBLISHED Published: 2007-12-10T21:00:00 Last Updated: 2024-08-07T16:02:36.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0040 - http://lists.mysql.com/announce/502 - http://security.gentoo.org/glsa/glsa-200804-04.xml - http://
ries:rPSA-2008-0040 - http://lists.mysql.com/announce/502 - http://security.gentoo.org/glsa/glsa-200804-04.xml - http://secunia.com/advisories/29706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38989 - http://secunia.com/advisories/29443 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:017 - https://issues.rpath.com/browse/RPL-2187 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.html - http://www.redhat.com/support/errata/RHSA-2007-1157.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html - http://www.vupen.com/english/advisories/2007/4198 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html -
om/english/advisories/2007/4198 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html - http://bugs.mysql.com/bug.php?id=29908 - http://www.securityfocus.com/bid/26832 - http://securitytracker.com/id?1019085 - http://secunia.com/advisories/28025 - http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html - http://www.securityfocus.com/archive/1/487606/100/0/threaded - http://secunia.com/advisories/28838 - http://www.ubuntu.com/usn/usn-588-1 - http://secunia.com/advisories/28063 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html - http://secunia.com/advisories/28739
CVE ID: CVE-2007-6304 State: PUBLISHED Published: 2007-12-10T21:00:00 Last Updated: 2024-08-07T16:02:36.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0040 - http://secunia.com/advisories/28343 - http://lists.mysql.com/announce/502 - http://security.gentoo
ries:rPSA-2008-0040 - http://secunia.com/advisories/28343 - http://lists.mysql.com/announce/502 - http://security.gentoo.org/glsa/glsa-200804-04.xml - http://secunia.com/advisories/29706 - http://osvdb.org/42609 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:028 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:017 - https://issues.rpath.com/browse/RPL-2187 - http://www.debian.org/security/2008/dsa-1451 - https://usn.ubuntu.com/559-1/ - http://bugs.mysql.com/bug.php?id=29801 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html - http://www.vupen.com/english/advisories/2007/4198 - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html - http://secun
pen.com/english/advisories/2007/4198 - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html - http://secunia.com/advisories/28637 - http://www.securityfocus.com/bid/26832 - http://securitytracker.com/id?1019085 - http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html - http://www.securityfocus.com/archive/1/487606/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38990 - http://secunia.com/advisories/28838 - http://secunia.com/advisories/28128 - http://secunia.com/advisories/28063 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html - http://secunia.com/advisories/28739
CVE ID: CVE-2007-6305 State: PUBLISHED Published: 2007-12-10T21:00:00 Last Updated: 2024-08-07T16:02:36.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC commands." Additional Analyst Notes: - CVE Program Container: References: - https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01065 - http://www.securitytracker.com/id?1019062 - http://secunia.com/advisories/27961 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4038 - http://www-1.ibm.com/support/docview.wss?uid=isg1MB02226 - http
.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4038 - http://www-1.ibm.com/support/docview.wss?uid=isg1MB02226 - http://www.vupen.com/english/advisories/2007/4144
CVE ID: CVE-2007-6306 State: PUBLISHED Published: 2007-12-11T21:00:00 Last Updated: 2024-08-07T16:02:36.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://www.redhat.com/support/errata/RHSA-2008-0213.html - http://www.rapid7.com/advisories/R7-0031.jsp - http://secunia.com/advisories/3
.com/support/errata/RHSA-2008-0213.html - http://www.rapid7.com/advisories/R7-0031.jsp - http://secunia.com/advisories/31493 - http://secunia.com/advisories/27959 - http://www.redhat.com/support/errata/RHSA-2008-0151.html - http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS?r1=679&r2=680 - http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java?r1=662&r2=661&pathrev=662 - http://www.securityfocus.com/bid/26752 - http://www.securityfocus.com/archive/1/484709/100/0/threaded - http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662
p://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662&r2=661&pathrev=662 - http://osvdb.org/41843 - http://osvdb.org/41844 - http://securityreason.com/securityalert/3430 - http://osvdb.org/41845 - http://www.redhat.com/support/errata/RHSA-2008-0158.html - http://www.redhat.com/support/errata/RHSA-2008-0261.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38922
CVE ID: CVE-2007-6307 State: PUBLISHED Published: 2007-12-11T21:00:00 Last Updated: 2024-08-07T16:02:36.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484727/100/0/threaded - http://www.securityfocus.com/bid/26759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38925 - http://secunia.com/advisories/28002 - http://securityreason.com/securityalert/3431 - http:/
.com/vulnerabilities/38925 - http://secunia.com/advisories/28002 - http://securityreason.com/securityalert/3431 - http://www.timeprog.com/wwwstats/
CVE ID: CVE-2007-6308 State: PUBLISHED Published: 2007-12-11T21:00:00 Last Updated: 2024-08-07T16:02:36.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HttpLogger 0.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27960 - http://jvn.jp/jp/JVN%2302854109/index.html - http://www.securityfocus.com/bid/26810 - http://dsas.blog.klab.org/archives/51149337.html - http://osvdb.org/39114
CVE ID: CVE-2007-6309 State: PUBLISHED Published: 2007-12-11T21:00:00 Last Updated: 2024-08-07T16:02:36.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the galleryID parameter in a usergallery upload action; or the (2) upID, (3) tag, (4) month, (5) userID, or (6) year parameter in a calendar announce action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26787 - http://www.securityfocus.com/archive/1/484795/100/0/threaded - http://secunia.com/advisories/28006 - https://exchan
87 - http://www.securityfocus.com/archive/1/484795/100/0/threaded - http://secunia.com/advisories/28006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38957 - http://securityreason.com/securityalert/3429
CVE ID: CVE-2007-6310 State: PUBLISHED Published: 2007-12-11T21:00:00 Last Updated: 2024-08-07T16:02:36.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HTML via the handler parameter to (1) index.php and possibly (2) admin/index.php, and (3) the topic parameter to modules/feed/feed.php (aka modules/feed.php). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4711 - http://sourceforge.net/forum/forum.php?forum_id=762931 - http://securityreason.com/securityalert/3436 - http://www.h-labs.org/
/sourceforge.net/forum/forum.php?forum_id=762931 - http://securityreason.com/securityalert/3436 - http://www.h-labs.org/blog/2007/12/05/falt4_cms_security_report_advisory.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38952 - http://www.securityfocus.com/bid/26786 - http://secunia.com/advisories/28045 - http://www.securityfocus.com/archive/1/484813/100/0/threaded
CVE ID: CVE-2007-6311 State: PUBLISHED Published: 2007-12-11T21:00:00 Last Updated: 2024-08-07T16:02:36.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme RC4 10.9.2007 allows remote attackers to execute arbitrary SQL commands via the nav_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4711 - http://sourceforge.net/forum/forum.php?forum_id=762931 - http://securityreason.com/securityalert/3436 - http://www.h-labs.org/blog/2007/12/05/falt4_cms_security_report_advisory.html - https://exchange.xforce.ibmcloud.com/vulnerabi
/www.h-labs.org/blog/2007/12/05/falt4_cms_security_report_advisory.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38950 - http://www.securityfocus.com/bid/26786 - http://secunia.com/advisories/28045 - http://www.securityfocus.com/archive/1/484813/100/0/threaded
CVE ID: CVE-2007-6312 State: PUBLISHED Published: 2007-12-11T21:00:00 Last Updated: 2024-08-07T16:02:36.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26793 - http://www.websense.com/SupportPortal/SupportKbs/1840.aspx - http://www.securityfocus.com/archive/1/484824/100/0/threaded - http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerabil
focus.com/archive/1/484824/100/0/threaded - http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/ - http://www.vupen.com/english/advisories/2007/4158 - http://www.securitytracker.com/id?1019066 - http://securityreason.com/securityalert/3432 - http://secunia.com/advisories/28019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38936
CVE ID: CVE-2007-6313 State: PUBLISHED Published: 2008-02-18T22:00:00 Last Updated: 2024-08-07T16:02:36.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43179 - http://www.vupen.com/english/advisories/2008/0560/references - http://bugs.mysql.com/31611 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html - http://www.securitytracker.com/id?1019083
CVE ID: CVE-2007-6314 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T16:02:36.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484833/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38972 - http://secunia.com/advisories/28032 - http://aluigi.altervista.org/adv/barradrive-adv.txt - http://securityreason.com/securityalert/3434
m/advisories/28032 - http://aluigi.altervista.org/adv/barradrive-adv.txt - http://securityreason.com/securityalert/3434 - http://www.securityfocus.com/bid/26805
CVE ID: CVE-2007-6315 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T16:02:36.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID, which results in a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484833/100/0/threaded - http://secunia.com/advisories/28032 - http://aluigi.altervista.org/adv/barradrive-adv.txt - http://securityreason.com/securityalert/3434 - http://www.securit
http://aluigi.altervista.org/adv/barradrive-adv.txt - http://securityreason.com/securityalert/3434 - http://www.securityfocus.com/bid/26805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38974
CVE ID: CVE-2007-6316 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T16:02:36.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484833/100/0/threaded - http://secunia.com/advisories/28032 - http://aluigi.altervista.org/adv/barradrive-adv.txt - http://securityreason.com/securityalert/3434 - http:
ories/28032 - http://aluigi.altervista.org/adv/barradrive-adv.txt - http://securityreason.com/securityalert/3434 - http://www.securityfocus.com/bid/26805
CVE ID: CVE-2007-6317 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T16:02:36.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary directories via a ..\ (dot dot backslash) sequence in the dir parameter to /drive/c/bdusers/USER/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484833/100/0/threaded - http://secunia.com/advisor
ogram Container: References: - http://www.securityfocus.com/archive/1/484833/100/0/threaded - http://secunia.com/advisories/28032 - http://aluigi.altervista.org/adv/barradrive-adv.txt - http://securityreason.com/securityalert/3434 - http://www.securityfocus.com/bid/26805
CVE ID: CVE-2007-6318 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T16:02:36.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a multibyte character. Additional Analyst Notes: - CVE Program Container: References: - http://www.abelcheung.org/advisory/20071210-wordpress-charset.txt - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00098.html - http://www.security