Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0665 State: PUBLISHED Published: 2007-02-02T21:00:00 Last Updated: 2024-08-07T12:26:54.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WS_FTP script command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31865 - http://osvdb.org/33602 - http://www.securityfocus.com/bid/22275 - http://www.securityfocus.com/archive/1/458293/100/0/threaded
CVE ID: CVE-2007-0666 State: PUBLISHED Published: 2007-02-02T21:00:00 Last Updated: 2024-08-07T12:26:54.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3) edition module. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33646 - http://www.securityfocus.com/archive/1/458932/100/0/threaded - http://osvdb.org/33647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32176 - http://www.securityfocus.com/archive/1/459023/100/0/threaded - http://www.securityfocus.com/archive/
erabilities/32176 - http://www.securityfocus.com/archive/1/459023/100/0/threaded - http://www.securityfocus.com/archive/1/458774/100/0/threaded - http://www.securityfocus.com/archive/1/458942/100/0/threaded
CVE ID: CVE-2007-0667 State: PUBLISHED Published: 2007-02-02T21:00:00 Last Updated: 2024-08-07T12:26:54.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary code via redirects, related to callbacks, a different issue than CVE-2006-5872. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458464/100/0/threaded - http://www.securityfocus.com/archive/1/459264/100/0/threaded - http://securityreason.com/securityalert/2217 - http://www.vupen.com/english/advisories/2007/0407 - http://www.securityfocus
p://securityreason.com/securityalert/2217 - http://www.vupen.com/english/advisories/2007/0407 - http://www.securityfocus.com/bid/22295
CVE ID: CVE-2007-0668 State: PUBLISHED Published: 2007-02-02T21:00:00 Last Updated: 2024-08-07T12:26:54.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Loopback Filesystem (LOFS) in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1372 - http://www.securityfocus.com/bid/22364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32140 - http://www.vupen.com/english/advisories/2007/0462 - http://sunsolve.sun.com/search/docume
ud.com/vulnerabilities/32140 - http://www.vupen.com/english/advisories/2007/0462 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102699-1 - http://osvdb.org/31879 - http://secunia.com/advisories/23996 - http://securitytracker.com/id?1017582
CVE ID: CVE-2007-0669 State: PUBLISHED Published: 2007-02-08T22:00:00 Last Updated: 2024-08-07T12:26:54.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown vectors related to CGI session files. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/584436 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2007-0669 - http://osvdb.org/33168 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.009.html - http://www.vupen.com/english/advisories/2007/0544 - http://archives.neohapsis.com/archives/vulnwatch/2007-q1/00
9.html - http://www.vupen.com/english/advisories/2007/0544 - http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0033.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32389 - http://secunia.com/advisories/24091 - http://www.securityfocus.com/bid/22378
CVE ID: CVE-2007-0670 State: PUBLISHED Published: 2007-02-03T00:00:00 Last Updated: 2024-08-07T12:26:54.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including (1) rdist, (2) rsh, (3) rcp, (4) rsync, and (5) rlogin. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017583 - http://www.osvdb.org/31696 - http://www.securityfocus.com/bid/22456 - http://secunia.com/advisories/23995 - http://www.securityfocus.com/bid/22370 - http://securitytracker.com/id?1017607 - http://www.vupen.com/english/advisories/2
tp://www.securityfocus.com/bid/22370 - http://securitytracker.com/id?1017607 - http://www.vupen.com/english/advisories/2007/0471 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY94301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32184 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://www-1.ibm.com/support/docview.wss?uid=isg1IY94368
CVE ID: CVE-2007-0671 State: PUBLISHED Published: 2007-02-03T01:00:00.000Z Last Updated: 2025-10-22T00:05:56.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2007/0463 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301 - http://osvdb.org/3
7/0463 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301 - http://osvdb.org/31901 - http://www.microsoft.com/technet/security/advisory/932553.mspx - http://www.kb.cert.org/vuls/id/613740 - http://securitytracker.com/id?1017584 - http://www.avertlabs.com/research/blog/?p=191 - http://secunia.com/advisories/24008 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32178 - http://vil.nai.com/vil/content/v_141393.htm - http://www.securityfocus.com/bid/22383
CVE ID: CVE-2007-0672 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer\. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458653/100/0/threaded - http://www.securityfocus.com/bid/22339 - http://supportconnectw.ca.com/public/sams/lifeguard/in
/458653/100/0/threaded - http://www.securityfocus.com/bid/22339 - http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
CVE ID: CVE-2007-0673 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458650/100/0/threaded - http://www.securityfocus.com/bid/22337 - http://osvdb.org/32948 - http://securityreason.com/securityalert/2218 - http://supportconnectw.ca
yfocus.com/bid/22337 - http://osvdb.org/32948 - http://securityreason.com/securityalert/2218 - http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
CVE ID: CVE-2007-0674 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attackers to cause a denial of service (device hang) via a malformed JPEG file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32002 - http://www.vupen.com/english/advisories/2007/0434 - http://www.securityfocus.com/bid/22343 - http://osvdb.org/36148 - http://blog.trendmicro.com/trend-micro-finds-more-windows-mobile-flaws/
CVE ID: CVE-2007-0675 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sound object that contains voice commands to an enabled microphone, allowing for interaction with Windows Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.technet.com/msrc/archive/2007/01/31/issue-
Additional Analyst Notes: - CVE Program Container: References: - http://blogs.technet.com/msrc/archive/2007/01/31/issue-regarding-windows-vista-speech-recognition.aspx - http://secunia.com/advisories/30578 - http://lists.immunitysec.com/pipermail/dailydave/2007-January/004012.html - http://www.securityfocus.com/bid/22359 - http://www.us-cert.gov/cas/techalerts/TA08-162B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5489 - http://marc.info/?l=bugtraq&m=121380194923597&w=2 - http://lists.immunitysec.com/pipermail/dailydave/2007-January/004007.html - http://marc.info/?l=bugtraq&m=121380194923597&w=2 - http://www.securitytracker.com/id?1020232 - ht
January/004007.html - http://marc.info/?l=bugtraq&m=121380194923597&w=2 - http://www.securitytracker.com/id?1020232 - http://www.vupen.com/english/advisories/2008/1779/references - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-032 - http://lists.immunitysec.com/pipermail/dailydave/2007-January/004003.html - http://lists.immunitysec.com/pipermail/dailydave/2007-January/004005.html
CVE ID: CVE-2007-0676 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36027 - http://www.vupen.com/english/advisories/2007/0452 - https://www.exploit-db.com/exploits/3234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31998 - http://www.securityfocus.com/bid/22338
CVE ID: CVE-2007-0677 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][framework_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2215 - http://www.vupen.com/english/advisories/2007/0449 - http://osvdb.org/33631 - http://www.securityfocus.com/bid/22336 - http://echo.or.id/adv/adv63-y3dips-2007.txt - http://www.securityfocus.com/arch
http://www.securityfocus.com/bid/22336 - http://echo.or.id/adv/adv63-y3dips-2007.txt - http://www.securityfocus.com/archive/1/458681/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32005 - https://www.exploit-db.com/exploits/3237
CVE ID: CVE-2007-0678 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitrary SQL commands via the kategori_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32020 - http://www.securityfocus.com/bid/22347 - http://www.vupen.com/english/advisories/2007/0453 - http://osvdb.org/36041 - https://www.exploit-db.com/exploits/3233
CVE ID: CVE-2007-0679 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fichier parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32033 - http://osvdb.org/36039 - http://www.securityfocus.com/bid/22345 - http://www.vupen.com/english/advisories/2007/0448 - https://www.exploit-db.com/exploits/3238
CVE ID: CVE-2007-0680 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22344 - http://secunia.com/advisories/24001 - https://www.exploit-db.com/exploits/3235 - http://www.vupen.com/english/advisories/2007/0451 - http://www.xoron.info/bugs/phpbbtweaked.txt - http://osvdb.org/33079 - https://exchange.xforce.ibm
dvisories/2007/0451 - http://www.xoron.info/bugs/phpbbtweaked.txt - http://osvdb.org/33079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32024
CVE ID: CVE-2007-0681 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32035 - https://www.exploit-db.com/exploits/3239
CVE ID: CVE-2007-0682 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in theme/include_mode/template.php in JV2 Folder Gallery 3.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the galleryfilesdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22354 - https://www.exploit-db.com/exploits/3240 - http://osvdb.org/33077 - http://secunia.com/advisories/24012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32043 - http://www.vupen.com/english/advisories/2007/0
ries/24012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32043 - http://www.vupen.com/english/advisories/2007/0447
CVE ID: CVE-2007-0683 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22355 - http://marc.info/?l=bugtraq&m=117036933022782&w=2 - http://www.vupen.com/english/advisories/2007/0445 - http://www.xoron.info/bugs/omegaboard-perl.txt - http://www.xoron.info/bugs/omegaboard-html.txt - https://www.exploit-db.co
p://www.xoron.info/bugs/omegaboard-perl.txt - http://www.xoron.info/bugs/omegaboard-html.txt - https://www.exploit-db.com/exploits/3242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32057 - http://www.securityfocus.com/archive/1/458825/100/0/threaded
CVE ID: CVE-2007-0684 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in portal.php in Cerulean Portal System 0.7b allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32058 - http://www.vupen.com/english/advisories/2007/0444 - http://www.securityfocus.com/bid/22356 - http://www.xoron.info/bugs/ceruleanportalsystem-perl.txt - https://www.exploit-db.com/exploits/3243 - http://www.securityfocus.com
.xoron.info/bugs/ceruleanportalsystem-perl.txt - https://www.exploit-db.com/exploits/3243 - http://www.securityfocus.com/archive/1/458824/100/0/threaded - http://www.xoron.info/bugs/ceruleanportalsystem-html.txt
CVE ID: CVE-2007-0685 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial of service (application crash and device instability) via unspecified vectors, possibly related to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32001 - http://www.vupen.com/english/advisories/2007/0434 - http://www.securityfocus.com/bid/22343 - http://blog.trendmicro.com/tren
://www.vupen.com/english/advisories/2007/0434 - http://www.securityfocus.com/bid/22343 - http://blog.trendmicro.com/trend-micro-finds-more-windows-mobile-flaws/
CVE ID: CVE-2007-0686 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 (w29n51.sys) allows remote attackers to cause a denial of service (system crash) via crafted disassociation packets, which triggers memory corruption of "internal kernel structures," a different vulnerability than CVE-2006-6651. NOTE: this issue might overlap CVE-2006-3992. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3224 - http://osvdb.org/37996
CVE ID: CVE-2007-0687 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3232 - http://www.securityfocus.com/bid/22335 - http://osvdb.org/36038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32003
CVE ID: CVE-2007-0688 State: PUBLISHED Published: 2007-02-03T01:00:00 Last Updated: 2024-08-07T12:26:54.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in oku.asp in Hunkaray Duyuru Scripti allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24367 - http://www.vupen.com/english/advisories/2007/0446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32042 - https://www.exploit-db.com/exploits/3241 - http://www.securityfocus.com/archive/1/470744/100/0/threaded - http://osvdb.org/34086 - http://secunia.com/advisories/25581
CVE ID: CVE-2007-0689 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T12:26:54.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB 1.2.4 allows remote attackers to obtain sensitive information via the (1) action[] parameter to member.php, (2) imagehash[] parameter to captcha.php, and (3) a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34155 - http://www.securityfocus.com/archive/1/468549/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34336 - http://osvdb.org/35549 - http://osvd
68549/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34336 - http://osvdb.org/35549 - http://osvdb.org/35548 - http://marc.info/?l=full-disclosure&m=117909973216181&w=2 - http://www.netvigilance.com/advisory0017
CVE ID: CVE-2007-0690 State: PUBLISHED Published: 2007-05-30T20:00:00 Last Updated: 2024-08-07T12:26:54.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: myEvent 1.6 allows remote attackers to obtain sensitive information via (1) a Log In action without a password to login.php, or an invalid (2) view[] or (3) monthno[] parameter to myevent.php, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34542 - http://www.securityfocus.com/archive/1/469831/100/0/threaded - http://osvdb.org/38336 - http://www.osvdb.org/34272 - http://www.netvigilance.com/advisory0024 - htt
31/100/0/threaded - http://osvdb.org/38336 - http://www.osvdb.org/34272 - http://www.netvigilance.com/advisory0024 - http://securityreason.com/securityalert/2744
CVE ID: CVE-2007-0691 State: REJECTED Published: 2007-05-08T10:00:00Z Last Updated: 2024-09-16T22:03:39.753Z Description: No description available.
CVE ID: CVE-2007-0692 State: PUBLISHED Published: 2007-05-30T20:00:00 Last Updated: 2024-08-07T12:26:54.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2741 - http://www.netvigilance.com/advisory0021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34540 - http://www.securityfocus.com/archive/1/469826/100/0/threaded - http://www.osvdb.org/34226
CVE ID: CVE-2007-0693 State: PUBLISHED Published: 2007-05-30T20:00:00 Last Updated: 2024-08-07T12:26:54.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34539 - http://www.osvdb.org/34227 - http://www.netvigilance.com/advisory0022 - http://www.vupen.com/english/advisories/2007/1981 - http://www.security
227 - http://www.netvigilance.com/advisory0022 - http://www.vupen.com/english/advisories/2007/1981 - http://www.securityfocus.com/archive/1/469828/100/0/threaded - http://www.securityfocus.com/bid/24201 - http://securityreason.com/securityalert/2740