Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1486 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in template.class.php in Carbonize Lazarus Guestbook before 1.7.3 allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to admin.php, probably due to a dynamic variable evaluation vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2432 - http://www.securityfocus.com/archive/1/462183/100/100/threaded - http://www.vupen.com/english/advisories/2007/0874 - http://www.securityfocus.com
com/archive/1/462183/100/100/threaded - http://www.vupen.com/english/advisories/2007/0874 - http://www.securityfocus.com/archive/1/463041/100/0/threaded - http://carbonize.co.uk/Lazarus/Forum/index.php?topic=1164.0 - http://www.securityfocus.com/archive/1/462235/100/100/threaded - http://www.attrition.org/pipermail/vim/2007-March/001417.html - http://www.securityfocus.com/archive/1/469218/100/0/threaded
CVE ID: CVE-2007-1487 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a showarticles action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32998 - http://www.vupen.com/english/advisories/2007/0967 - http://osvdb.org/34043 - http://www.securityfocus.com/bid/22995 - https://www.exploit-db.com/exploits/3484 - http://secunia.com/advi
.org/34043 - http://www.securityfocus.com/bid/22995 - https://www.exploit-db.com/exploits/3484 - http://secunia.com/advisories/24521
CVE ID: CVE-2007-1488 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote attackers to "gain unauthorized access to data", possibly involving a sample application. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33016 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102833-1 - http://www.securityfocus.com/bid/22993 - http://www.securitytracker.com/id?1017788 - http://www.vupen.com/english/advisories/2007/0972 - http://secuni
id/22993 - http://www.securitytracker.com/id?1017788 - http://www.vupen.com/english/advisories/2007/0972 - http://secunia.com/advisories/24545 - http://osvdb.org/34080
CVE ID: CVE-2007-1489 State: PUBLISHED Published: 2007-03-16T21:00:00 Last Updated: 2024-08-07T12:59:08.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery (CSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-March/001446.html - http://www.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=crip&id=2 - http://osvdb.org/33273 - http://secunia.com/adviso
www.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=crip&id=2 - http://osvdb.org/33273 - http://secunia.com/advisories/24540 - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=259 - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=256
CVE ID: CVE-2007-1490 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:59:08.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors (aka "shell command injection"). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24434 - http://www.osvdb.org/33300 - http://support.avaya.com/elmodocs2/security/ASA-2007-052.htm
CVE ID: CVE-2007-1491 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:59:08.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-051.htm - http://secunia.com/advisories/24434 - http://www.osvdb.org/33346
CVE ID: CVE-2007-1492 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:59:08.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) via a large cch argument value to the mmioRead function, as demonstrated by a crafted WAV file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0063.html - http://www.securityfocus.com/bid/22938 - http://osvdb.org/34101
CVE ID: CVE-2007-1493 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:59:08.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2007-March/001429.html - http://securityreason.com/securityalert/2430 - http://www.securityfocus.com/archive/1/462453/100/0/threaded
CVE ID: CVE-2007-1494 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:59:08.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NukeSentinel before 2.5.06 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "filters for https:// and http://". Additional Analyst Notes: - CVE Program Container: References: - http://www.nukescripts.net/modules.php?name=Downloads&op=getit&lid=1055 - http://osvdb.org/35078
CVE ID: CVE-2007-1495 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:59:08.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data, a reintroduction of CVE-2006-4855. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22961 - http://securityreason.com/securityalert/2445 - http://www.securityfocus.com/archive/1/462792/100/0/threaded
CVE ID: CVE-2007-1496 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:59:08.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: nfnetlink_log in netfilter in the Linux kernel before 2.6.20.3 allows attackers to cause a denial of service (crash) via unspecified vectors involving the (1) nfulnl_recv_config function, (2) using "multiple packets per netlink message", and (3) bridged packets, which trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0347.html - http://www.ubuntu.com/usn/usn-464-1 - http://www.novell.com/linux/security/advisories/2007_43_kernel.ht
2007-0347.html - http://www.ubuntu.com/usn/usn-464-1 - http://www.novell.com/linux/security/advisories/2007_43_kernel.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.3 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 - http://www.vupen.com/english/advisories/2007/0944 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9831 - http://www.debian.org/security/2007/dsa-1289 - http://secunia.com/advisories/25288 - http://secunia.com/advisories/26620 - http://secunia.com/advisories/25228 - http://secunia.com/advisories/25961 - http://secunia.com/advisories/24492 - http://www.securityfocus.com/bid/22946 - http://secunia.com/a
m/advisories/25961 - http://secunia.com/advisories/24492 - http://www.securityfocus.com/bid/22946 - http://secunia.com/advisories/25392
CVE ID: CVE-2007-1497 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:59:08.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10457 - http://www.redhat.com/support/errata/RHSA-2007-0347.html - http://www.ubuntu.com/usn/usn-464-1 - http://www.novel
0457 - http://www.redhat.com/support/errata/RHSA-2007-0347.html - http://www.ubuntu.com/usn/usn-464-1 - http://www.novell.com/linux/security/advisories/2007_43_kernel.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.3 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 - http://www.vupen.com/english/advisories/2007/0944 - http://www.debian.org/security/2007/dsa-1289 - http://secunia.com/advisories/25288 - http://secunia.com/advisories/26620 - http://secunia.com/advisories/25228 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 - http://secunia.com/advisories/25961 - http://secunia.com/advisories/24492 - http://secunia.com/advisories/25392 - ht
6 - http://secunia.com/advisories/25961 - http://secunia.com/advisories/24492 - http://secunia.com/advisories/25392 - http://www.osvdb.org/33028 - http://www.securityfocus.com/bid/23976
CVE ID: CVE-2007-1498 State: PUBLISHED Published: 2007-03-16T22:00:00 Last Updated: 2024-08-07T12:59:08.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and ProtectionPilot (PRP) before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument to the (1) ExportSiteList and (2) VerifyPackageCatalog functions, and (3) unspecified vectors involving a swprintf function call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/
printf function call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22952 - http://securityreason.com/securityalert/2444 - http://www.vupen.com/english/advisories/2007/0931 - http://www.kb.cert.org/vuls/id/714593 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052960.html - http://www.securitytracker.com/id?1017757 - http://secunia.com/advisories/24466 - https://knowledge.mcafee.com/article/26/612496_f.SAL_Public.html - https://knowledge.mcafee.com/article/25/612495_f.SAL_Public.html
CVE ID: CVE-2007-1499 State: PUBLISHED Published: 2007-03-17T10:00:00 Last Updated: 2024-08-07T12:59:08.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a res: URI to navcancl.htm with an arbitrary URL as an argument, which displays the URL in the location bar of the "Navigation Canceled" page and injects the script into the "Refresh the page" link, aka Navigation Cancel Page Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22966 - http://securityreason.com/s
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22966 - http://securityreason.com/securityalert/2448 - http://osvdb.org/35352 - http://www.vupen.com/english/advisories/2007/0946 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1715 - http://secunia.com/advisories/25627 - http://aviv.raffon.net/2007/03/14/PhishingUsingIE7LocalResourceVulnerability.aspx - http://www.securityfocus.com/archive/1/471947/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33026 - http://securitytracker.com/id?1018235 - http://secunia.com/advisories/24535 - http://www.vupen.com/english/advisories/2007/2153 - http://www.us
com/id?1018235 - http://secunia.com/advisories/24535 - http://www.vupen.com/english/advisories/2007/2153 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - http://news.com.com/2100-1002_3-6167410.html - http://www.securityfocus.com/archive/1/462939/100/0/threaded - http://www.securityfocus.com/archive/1/462945/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033 - http://www.securityfocus.com/archive/1/462833/100/0/threaded - http://www.securityfocus.com/archive/1/471947/100/0/threaded
CVE ID: CVE-2007-1500 State: PUBLISHED Published: 2007-03-19T22:00:00 Last Updated: 2024-08-07T12:59:08.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24526 - http://www.securityfocus.com/bid/23014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33057 - http://osvdb.org/34267 - http://security.gentoo.org/glsa/glsa-200703-20.xml - http://bugs.gentoo.org/show_bug.cgi?id=159542
CVE ID: CVE-2007-1501 State: PUBLISHED Published: 2007-03-19T22:00:00 Last Updated: 2024-08-07T12:59:08.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Type HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23002 - http://osvdb.org/34990 - https://www.exploit-db.com/exploits/3514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33049
CVE ID: CVE-2007-1502 State: PUBLISHED Published: 2007-03-19T22:00:00 Last Updated: 2024-08-07T12:59:08.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via a (1) long command, (2) long server argument to the (a) connect or (b) server commands, (3) long nick argument to the (c) nick command, or a long (4) nick or (5) message argument to the (d) ctcp, (e) chat, (f) notice, (g) message (msg), or (h) query commands. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2447 - http://www.securityfocus.com/archive/1/463092/100/0/threade
References: - http://securityreason.com/securityalert/2447 - http://www.securityfocus.com/archive/1/463092/100/0/threaded - http://www.securityfocus.com/bid/23011 - http://osvdb.org/35004 - http://osvdb.org/35003 - http://osvdb.org/35002
CVE ID: CVE-2007-1503 State: PUBLISHED Published: 2007-03-19T22:00:00 Last Updated: 2024-08-07T12:59:08.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the create_ctcp_message function using the message argument to the (1) me or (2) ctcp commands, and possibly related vectors involving the (3) whois, (4) mode, and (5) topic commands. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2447 - http://www.securityfocus.com/archive/1/463092/100/0/threaded - http://www.securityfo
rityreason.com/securityalert/2447 - http://www.securityfocus.com/archive/1/463092/100/0/threaded - http://www.securityfocus.com/bid/23011 - http://osvdb.org/35001
CVE ID: CVE-2007-1504 State: PUBLISHED Published: 2007-03-19T22:00:00 Last Updated: 2024-08-07T12:59:08.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving web.xml and HTTP 404 and 500 status codes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23020 - http://www.vupen.com/english/advisories/2007/0996 - http://jvn.jp/jp/JVN%2383832818/index.html - http://www.fujitsu.com/global/support/softwar
nglish/advisories/2007/0996 - http://jvn.jp/jp/JVN%2383832818/index.html - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200701e.html - http://secunia.com/advisories/24508 - http://software.fujitsu.com/jp/security/vulnerabilities/jvn-83832818.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33099 - http://osvdb.org/34276
CVE ID: CVE-2007-1505 State: PUBLISHED Published: 2007-03-19T22:00:00 Last Updated: 2024-08-07T12:59:08.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A, V12.0L10B, V12.0L20 and V13.0.0 allows local users to obtain sensitive information by extracting the decoding password from certain "self-decoding" file types. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24549 - http://jvn.jp/jp/JVN%2319795972/index.html - http://osvdb.org/34184 - http://secunia.com/advisories/24537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33029 - http://soft
g/34184 - http://secunia.com/advisories/24537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33029 - http://software.fujitsu.com/jp/security/products-fujitsu/solution/systemwalker_dte_200701.html - http://segroup.fujitsu.com/secure/products/fence/notice/alert20070316.html - http://www.securityfocus.com/bid/23001
CVE ID: CVE-2007-1506 State: PUBLISHED Published: 2007-03-19T22:00:00 Last Updated: 2024-08-07T12:59:08.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the (1) p_oldurl and (2) p_newurl parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463012/100/0/threaded - http://securityreason.com/securityalert/2463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33028 - http://osvdb.org/34299 - http://www.securityfocus.com/bid/22999
CVE ID: CVE-2007-1507 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the local cell, which might allow attackers to gain privileges by spoofing a response to an AFS cache manager FetchStatus request, and setting setuid and root ownership for files in the cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1033 - http://secunia.com/advisories/24582 - http://www.securitytracker.com/id?1017807 - http://www.openafs.org/piper
07/1033 - http://secunia.com/advisories/24582 - http://www.securitytracker.com/id?1017807 - http://www.openafs.org/pipermail/openafs-announce/2007/000186.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33180 - http://www.debian.org/security/2007/dsa-1271 - http://secunia.com/advisories/24720 - http://www.openafs.org/pipermail/openafs-announce/2007/000185.html - http://secunia.com/advisories/24607 - http://security.gentoo.org/glsa/glsa-200704-03.xml - http://www.openafs.org/pipermail/openafs-announce/2007/000187.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:066 - http://secunia.com/advisories/24599 - http://www.securityfocus.com/bid/23060
CVE ID: CVE-2007-1508 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary web script or HTML via the RESULT parameter, a different vector than CVE-2006-5983. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33023 - http://osvdb.org/34273 - http://www.vupen.com/english/advisories/2007/1037 - http://www.securityfocus.com/archive/1/463003/100/0/threaded - http://secunia.com/advisories/24551 - http://www.securityfocus.c
www.securityfocus.com/archive/1/463003/100/0/threaded - http://secunia.com/advisories/24551 - http://www.securityfocus.com/bid/22996
CVE ID: CVE-2007-1509 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote attackers to read arbitrary files via a .. (dot dot) in the datei parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/463011/100/0/threaded - http://osvdb.org/34089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33027 - http://www.securityfocus.com/bid/22997 - http://securityreason.com/securityalert/2458
CVE ID: CVE-2007-1510 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forums.particlesoft.net/viewtopic.php?t=675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33030 - http://osvdb.org/34305 - http://secunia.com/advisories/24559 - http://securityreason.com/securityalert/2460 - https://www.exploit-db.com/exploits/3500 - http://www.securityfocus.com/bid/230
/securityreason.com/securityalert/2460 - https://www.exploit-db.com/exploits/3500 - http://www.securityfocus.com/bid/23005 - http://www.securityfocus.com/archive/1/463027/100/0/threaded - http://www.vupen.com/english/advisories/2007/1006
CVE ID: CVE-2007-1511 State: PUBLISHED Published: 2007-03-20T10:00:00 Last Updated: 2024-08-07T12:59:08.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privileges for creating a stored procedure, to execute arbitrary code via a CREATE PROCEDURE request with a long procedure name. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34282 - http://www.securityfocus.com/archive/1/463042/100/0/threade - http://secunia.com/advisories/24555 - http://www.vupen.com/english/advisories/2007/0999 - http://www.securityfocus.com/bid/23007 - http:/
m/advisories/24555 - http://www.vupen.com/english/advisories/2007/0999 - http://www.securityfocus.com/bid/23007 - http://securityreason.com/securityalert/2470