Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4061 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.nessus.org/news/
iting to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.nessus.org/news/ - https://www.exploit-db.com/exploits/4237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35641 - http://secunia.com/advisories/26243 - http://www.securityfocus.com/bid/25088 - http://www.vupen.com/english/advisories/2007/2702
CVE ID: CVE-2007-4062 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.nessus.org/news/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/35641 - http://secunia.com/advisories/26243 - http://www.securityfocus.com/bid/25088
CVE ID: CVE-2007-4063 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delete comments, (2) delete content revisions, and (3) disable menu items as privileged users, related to improper use of HTTP GET and the Forms API. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2697 - http://www.securityfocus.com/bid/25099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35639 - http://drupal.org/files/sa-2007-017/advisory.txt
d/25099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35639 - http://drupal.org/files/sa-2007-017/advisory.txt - http://secunia.com/advisories/26224 - http://osvdb.org/37898
CVE ID: CVE-2007-4064 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4.7.7, (1) allow remote attackers to inject arbitrary web script or HTML via "some server variables," including PHP_SELF; and (2) allow remote authenticated administrators to inject arbitrary web script or HTML via custom content type names. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2697 - http://drupal.org/files/sa-2007-018/advisory.txt - http://www.securityfocus.co
.vupen.com/english/advisories/2007/2697 - http://drupal.org/files/sa-2007-018/advisory.txt - http://www.securityfocus.com/bid/25097 - http://secunia.com/advisories/26224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35638
CVE ID: CVE-2007-4065 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T14:37:06.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted OGG file, aka trac Changeset 13217. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=249780 - http://www.redhat.com/support/errata/RHSA-2007-0912.html - http://security.gentoo.org/glsa/glsa-200710-03.xml - http://secunia.com/advisories/27170 - http://securitytracker.com/id?1018712 - http://svn.xiph.org/trunk
-200710-03.xml - http://secunia.com/advisories/27170 - http://securitytracker.com/id?1018712 - http://svn.xiph.org/trunk/vorbis/CHANGES - http://www.mandriva.com/security/advisories?name=MDKSA-2007:194 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9173 - http://secunia.com/advisories/24923 - https://trac.xiph.org/changeset/13217 - http://secunia.com/advisories/27439 - http://secunia.com/advisories/27099 - http://secunia.com/advisories/26865 - http://www.novell.com/linux/security/advisories/2007_23_sr.html - http://www.redhat.com/support/errata/RHSA-2007-0845.html
CVE ID: CVE-2007-4066 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T14:37:06.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.exe related to the _psy_noiseguards_8 array. Additional Analyst Notes: - CVE Program Container: References: - https://trac.xiph.org/changeset/13168 - https://trac.xiph.org/changeset/13172 - https://bugzilla.redhat.com/show_bug.cgi?id=249
/trac.xiph.org/changeset/13168 - https://trac.xiph.org/changeset/13172 - https://bugzilla.redhat.com/show_bug.cgi?id=249780 - http://secunia.com/advisories/28614 - http://www.debian.org/security/2008/dsa-1471 - http://www.redhat.com/support/errata/RHSA-2007-0912.html - http://security.gentoo.org/glsa/glsa-200710-03.xml - http://secunia.com/advisories/27170 - http://securitytracker.com/id?1018712 - https://trac.xiph.org/changeset/13170 - http://svn.xiph.org/trunk/vorbis/CHANGES - https://trac.xiph.org/changeset/13211 - https://trac.xiph.org/changeset/13169 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:194 - http://secunia.com/advisories/24923 - https://trac.xiph.org/ticket/853
iva.com/security/advisories?name=MDKSA-2007:194 - http://secunia.com/advisories/24923 - https://trac.xiph.org/ticket/853 - http://secunia.com/advisories/27439 - https://trac.xiph.org/changeset/13162 - https://trac.xiph.org/ticket/300 - http://secunia.com/advisories/27099 - https://trac.xiph.org/changeset/13215 - http://secunia.com/advisories/26865 - http://www.novell.com/linux/security/advisories/2007_23_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11453 - http://www.redhat.com/support/errata/RHSA-2007-0845.html
CVE ID: CVE-2007-4067 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4226 - http://www.attrition.org/pipermail/vim/2007-July/001729.html - http://www.vupen.
ps://www.exploit-db.com/exploits/4226 - http://www.attrition.org/pipermail/vim/2007-July/001729.html - http://www.vupen.com/english/advisories/2007/2659 - http://www.securityfocus.com/bid/25063 - http://secunia.com/advisories/26213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35590
CVE ID: CVE-2007-4068 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the kat_id parameter to the default URI in a download action or (2) the id parameter to the default URI in a duyurular_detay action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37131 - http://osvdb.org/37132 - https://www.exploit-db.com/exploits/4224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35603 - http://www.securityfocus.com/bid/25061
CVE ID: CVE-2007-4069 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show_cat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4225 - http://osvdb.org/36285 - http://www.vupen.com/english/advisories/2007/2696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35592 - http://www.indexscript.com/forum/showthread.php?t=2266 - http://secunia.com/advisories/26218 - http://www.securityfocus.com/bid
www.indexscript.com/forum/showthread.php?t=2266 - http://secunia.com/advisories/26218 - http://www.securityfocus.com/bid/25064
CVE ID: CVE-2007-4070 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Low Bandwidth X proxy (lbxproxy) on Sun Solaris 8 through 10 before 20070725 allows local users to read arbitrary files with root group ownership via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018462 - http://secunia.com/advisories/26344 - http://www.vupen.com/english/advisories/2007/2661 - http://secunia.com/advisories/26220 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8334 - http:
m/advisories/26220 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8334 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102948-1 - http://support.avaya.com/elmodocs2/security/ASA-2007-339.htm - http://www.securityfocus.com/bid/25070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35607
CVE ID: CVE-2007-4071 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) login parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37133 - http://securityreason.com/securityalert/2946 - http://www.securityfocus.com/archive/1/474529/100/0/threaded - http://www.procheckup.com/Vulner_2007.php - http://tincan.co.uk/?lid=1975 - http://www.securityfocus.com/archive/1/474518/100/0
www.procheckup.com/Vulner_2007.php - http://tincan.co.uk/?lid=1975 - http://www.securityfocus.com/archive/1/474518/100/0/threaded
CVE ID: CVE-2007-4072 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474530/100/0/threaded - http://www.procheckup.com/Vulner_2007.php - http://osvdb.org/38995 - http://tincan.co.uk/?lid=1975
CVE ID: CVE-2007-4073 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail. NOTE: this could be leveraged for spam or phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38994 - http://www.securityfocus.com/archive/1/474521/100/0/threaded - http://securityreason.com/securityalert/2955 - http://www.procheckup.com/Vulner_2007.php - http://tincan.co.uk/?lid=1975
CVE ID: CVE-2007-4074 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute arbitrary commands via the local daemon on port 1314, a different vulnerability than CVE-2001-0956. NOTE: this issue is local in some environments, but remote on others. Additional Analyst Notes: - CVE Program Container: References: - h
is local in some environments, but remote on others. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27271 - http://www.securityfocus.com/archive/1/490465/100/0/threaded - http://www.securityfocus.com/bid/25069 - http://security.gentoo.org/glsa/glsa-200707-10.xml - http://secunia.com/advisories/26229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35606 - http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html - http://bugs.gentoo.org/show_bug.cgi?id=170477
CVE ID: CVE-2007-4075 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25007 - http://osvdb.org/37135
CVE ID: CVE-2007-4076 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the (1) product_id or (2) cat_id parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37136 - http://www.securityfocus.com/bid/25005
CVE ID: CVE-2007-4077 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) msg, (2) page, (3) viewkey, or (4) viewtype parameter to (a) view_video.php; the (5) next parameter to (b) signup.php; the (6) search_id parameter to (c) search_result.php; the (7) category or (8) page parameter to (d) video.php; the (9) receiver parameter to (e) compose.php; the (10) catgy parameter to (f) groups.php; the (11) channelname parameter to (g) siteadmin/
rameter to (e) compose.php; the (10) catgy parameter to (f) groups.php; the (11) channelname parameter to (g) siteadmin/channels.php; or the (12) uname parameter to (h) siteadmin/muser.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37283 - http://osvdb.org/37278 - http://osvdb.org/37284 - http://osvdb.org/37281 - http://osvdb.org/37282 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html - http://osvdb.org/37279 - http://osvdb.org/37277 - http://osvdb.org/37280
CVE ID: CVE-2007-4078 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:06.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) r parameter to (a) forgot_uid.php, the (2) query or (3) sk parameter to (b) search_results.php, or (4) the pageId parameter to (c) website_page.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37449 - http://osvdb.org/37448 - http://www.securityfocus.com/bid/25023 - http://osvdb.org/37447 - http://lostmon.blogspot.com/2007/07/alstra
org/37448 - http://www.securityfocus.com/bid/25023 - http://osvdb.org/37447 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html
CVE ID: CVE-2007-4079 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:37.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) q parameter to (a) admin/membersearch.php, or (3) the userid parameter to (b) admin/edituser.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37867 - http://osvdb.org/37868 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html - http://www.securityfocus.com/bid/25022
CVE ID: CVE-2007-4080 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:37.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the p_id parameter in a people_card action. NOTE: this might overlap CVE-2006-2564. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html - http://osvdb.org/37266
CVE ID: CVE-2007-4081 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:37.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in (a) merchants/index.php, including the (1) id or (2) msg parameter in a programedit action; the (3) pgmid parameter in an uploadProducts action; the (4) d, (5) m, or (6) y parameter in a daily action; the (7) err parameter in a ProgramReport action; the (8) i, (9) txtto, (10) txtfrom, or (11) programs parameter in a LinkReport action; or the (12) msg parameter in a
n; the (8) i, (9) txtto, (10) txtfrom, or (11) programs parameter in a LinkReport action; or the (12) msg parameter in an add_money action; and one vector in (b) merchants/temp.php using (13) the rowid parameter. NOTE: vector 7 might overlap CVE-2005-3795.1. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46954 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html - http://osvdb.org/46953 - http://www.securityfocus.com/bid/25026
CVE ID: CVE-2007-4082 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:37.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in contact_author.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37088 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html
CVE ID: CVE-2007-4083 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:37.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to search.php or the (2) typ parameter to register.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37092 - http://osvdb.org/37093 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html
CVE ID: CVE-2007-4084 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:37.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid parameter in an uploadProducts action to merchants/index.php and possibly (2) the rowid parameter to merchants/temp.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37870 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html - http://www.securityfocus.com/bid/25026 - http://osvdb.org/37869
CVE ID: CVE-2007-4085 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:37.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter to forum_answer.php or (2) the cat_id parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37096 - http://osvdb.org/46166 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html - http://osvdb.org/37095
CVE ID: CVE-2007-4086 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:37.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37877 - http://osvdb.org/37873 - http://osvdb.org/37874 - http://osvdb.org/37875 - http://lostmon.blogspot.com/2007/07/alstrasoft-multipl
vdb.org/37873 - http://osvdb.org/37874 - http://osvdb.org/37875 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html - http://osvdb.org/37876 - http://osvdb.org/37878 - http://osvdb.org/37872
CVE ID: CVE-2007-4087 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:38.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category parameter to view_video.php, or (2) an XSS sequence in the UID parameter to (a) uprofile.php, (b) channel_detail.php, (c) uvideos.php, (d) groups_home.php, or (e) ufriends.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46950 - http://osvdb.org/46949 - http://osvdb.org/46948 - http://osvdb.org/46952 - http://osvdb.org/46951 - http://lostmo
6950 - http://osvdb.org/46949 - http://osvdb.org/46948 - http://osvdb.org/46952 - http://osvdb.org/46951 - http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html - http://osvdb.org/46947
CVE ID: CVE-2007-4088 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:46:39.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) f, (3) quote, and (4) act parameters to cp.php; the (5) u parameter to user.php; the (6) f parameter to post.php; the (7) s parameter to topic.php; the (8) quote, (9) t, (10) poll, and (11) p parameters to post.php; the (12) Message Title field of a private message (PM) in mode 6 of cp.php; the (13) title field of a private message (PM) in mode 7 of cp.php; and (14) allow us