Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4893 State: PUBLISHED Published: 2007-09-14T18:00:00 Last Updated: 2024-08-07T15:08:34.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a does not properly verify the unfiltered_html privilege, which allows remote attackers to conduct cross-site scripting (XSS) attacks via modified data to (1) post.php or (2) page.php with a no_filter field. Additional Analyst Notes: - CVE Program Container: References: - http://trac.wordpress.org/ticket/4720 - http://www.vupen.com/english/advisories/2007/3132 - http://fedoranews.org/updates/FEDORA-2007-214.shtml - https://exchange
tp://www.vupen.com/english/advisories/2007/3132 - http://fedoranews.org/updates/FEDORA-2007-214.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/36576 - http://wordpress.org/development/2007/09/wordpress-223/ - http://secunia.com/advisories/26771 - http://www.securityfocus.com/bid/25639 - https://bugzilla.redhat.com/show_bug.cgi?id=285831 - http://secunia.com/advisories/26796
CVE ID: CVE-2007-4894 State: PUBLISHED Published: 2007-09-14T18:00:00 Last Updated: 2024-08-07T15:08:34.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the post_type parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3132 - https://exchange.xfor
Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36578 - http://www.buayacorp.com/files/wordpress/wordpress-sql-injection-advisory.html - http://fedoranews.org/updates/FEDORA-2007-214.shtml - http://wordpress.org/development/2007/09/wordpress-223/ - http://secunia.com/advisories/26771 - http://trac.wordpress.org/ticket/4770 - https://bugzilla.redhat.com/show_bug.cgi?id=285831 - http://secunia.com/advisories/26796
CVE ID: CVE-2007-4895 State: PUBLISHED Published: 2007-09-14T18:00:00 Last Updated: 2024-08-07T15:08:33.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via the f parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36534 - https://www.exploit-db.com/exploits/4386
CVE ID: CVE-2007-4896 State: PUBLISHED Published: 2007-09-14T18:00:00 Last Updated: 2024-08-07T15:08:34.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/header.php in Toms Gaestebuch 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang[adminseite], (2) lang[ueberschrift], or (3) einst[metachar] parameter, different vectors than CVE-2007-4711. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38660 - http://www.toms-seiten.at/guest/index.php?language=de - http://www.toms-seiten.at/iv_downloads/details.php?dl_id=3&language=de - http://www.securi
guest/index.php?language=de - http://www.toms-seiten.at/iv_downloads/details.php?dl_id=3&language=de - http://www.securityfocus.com/archive/1/479992/100/100/threaded - http://www.securityfocus.com/archive/1/478869/100/0/threaded - http://www.securityfocus.com/bid/25598
CVE ID: CVE-2007-4897 State: PUBLISHED Published: 2007-09-14T18:00:00 Last Updated: 2024-08-07T15:08:33.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the SIPURL::GetHostAddress function in Ekiga (formerly GnomeMeeting). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28385 - http://www.ubuntu.com/usn/usn-561-1 - https://bugzilla.redhat.com/show_bug.cgi?i
- http://secunia.com/advisories/28385 - http://www.ubuntu.com/usn/usn-561-1 - https://bugzilla.redhat.com/show_bug.cgi?id=292831 - http://www.securityfocus.com/archive/1/479185/100/0/threaded - http://blog.s21sec.com/2007/09/sobre-la-vulnerabilidad-del-ekiga.html - http://www.securitytracker.com/id?1018683 - http://secunia.com/advisories/27150 - http://securityreason.com/securityalert/3138 - http://openh323.cvs.sourceforge.net/openh323/opal/src/sip/sipcon.cxx?r1=2.120.2.25&r2=2.120.2.26&pathrev=v2_2_9 - http://marc.info/?l=full-disclosure&m=118959114522339&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36568 - http://secunia.com/advisories/27127 - http://www.securityfocus.com/bid
hange.xforce.ibmcloud.com/vulnerabilities/36568 - http://secunia.com/advisories/27127 - http://www.securityfocus.com/bid/25642 - http://www.s21sec.com/avisos/s21sec-036-en.txt - http://secunia.com/advisories/27518 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10928 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:206 - http://www.redhat.com/support/errata/RHSA-2007-0932.html
CVE ID: CVE-2007-4898 State: PUBLISHED Published: 2007-09-14T18:00:00 Last Updated: 2024-08-07T15:08:33.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Multiwiki plugin in XWiki before 1.1 Enterprise RC2 allows remote authenticated users, with administrative access to one wiki in a multiwiki environment, to obtain sensitive information via unknown attack vectors. NOTE: Some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25647 - http://www.xwiki.org/xwiki/bin/view/Main/ReleaseNotesXWikiEnterprise11RC2 - http://secunia.com/advisories/26
bid/25647 - http://www.xwiki.org/xwiki/bin/view/Main/ReleaseNotesXWikiEnterprise11RC2 - http://secunia.com/advisories/26777 - http://osvdb.org/40500
CVE ID: CVE-2007-4899 State: PUBLISHED Published: 2007-09-14T18:00:00 Last Updated: 2024-08-07T15:08:33.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to forum_forum.php, or the search_string parameter to forum_text_search_action.php in a (2) titles or (3) bodies search. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36577 - http://www.securityfocus.com/bid/25644 - http://www.securityfocu
://exchange.xforce.ibmcloud.com/vulnerabilities/36577 - http://www.securityfocus.com/bid/25644 - http://www.securityfocus.com/archive/1/479182/100/0/threaded
CVE ID: CVE-2007-4900 State: PUBLISHED Published: 2007-09-14T18:00:00 Last Updated: 2024-08-07T15:08:33.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web script or HTML via the username field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/479183/100/0/threaded - http://www.securityfocus.com/bid/25645 - http://secunia.com/advisories/26707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36575 - http://securityreason.com/securityalert/3137 - http://osvdb.org/37099 - http://www.vu
mcloud.com/vulnerabilities/36575 - http://securityreason.com/securityalert/3137 - http://osvdb.org/37099 - http://www.vupen.com/english/advisories/2007/3198
CVE ID: CVE-2007-4901 State: PUBLISHED Published: 2007-09-14T18:00:00 Last Updated: 2024-08-07T15:08:33.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain the use of mshtml.dll's web script and HTML functionality for incoming instant messages, which allows remote attackers to place HTML into unexpected contexts or execute arbitrary code, as demonstrated by writing arbitrary HTML to a notification window, and writing contents of arbitrary local image files to this window via IMG SRC. Additional Analyst Notes: - CVE Program Container
ng contents of arbitrary local image files to this window via IMG SRC. Additional Analyst Notes: - CVE Program Container: References: - http://aviv.raffon.net/2007/09/25/ReadyAIMFire.aspx - http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1924 - http://www.securityfocus.com/archive/1/479435/100/0/threaded - http://www.securityfocus.com/bid/25659 - http://securityreason.com/securityalert/3136 - http://secunia.com/advisories/26786 - http://www.securityfocus.com/archive/1/480587/100/0/threaded - http://www.securityfocus.com/archive/1/479199/100/0/threaded - http://www.securityfocus.com/archive/1/480647/100/0/threaded
CVE ID: CVE-2007-4902 State: PUBLISHED Published: 2007-09-17T16:00:00 Last Updated: 2024-08-07T15:08:34.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36522 - https://www.exploit-db.com/exploits/4388 - http://www.securitytracker.com/id?1018675 - http://osvdb.org/38982
CVE ID: CVE-2007-4903 State: PUBLISHED Published: 2007-09-17T16:00:00 Last Updated: 2024-08-07T15:08:33.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via (1) a long string in the first argument to the AcquireContext method or (2) an unspecified vector to the DeleteContext method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36524 - http://osvdb.org/38979 - https://www.exploit-db.com/exploits/4389
/exchange.xforce.ibmcloud.com/vulnerabilities/36524 - http://osvdb.org/38979 - https://www.exploit-db.com/exploits/4389 - http://www.securityfocus.com/bid/25609
CVE ID: CVE-2007-4904 State: PUBLISHED Published: 2007-09-17T16:00:00 Last Updated: 2024-08-07T15:08:33.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36545 - http://www.securityfocus.com/archive/1/479081/100/0/threaded - http://www.securityfocus.com/bid/25627 - http://archives.neohapsi
ww.securityfocus.com/archive/1/479081/100/0/threaded - http://www.securityfocus.com/bid/25627 - http://archives.neohapsis.com/archives/fulldisclosure/2007-09/0154.html - http://osvdb.org/39904
CVE ID: CVE-2007-4905 State: PUBLISHED Published: 2007-09-17T16:00:00 Last Updated: 2024-08-07T15:08:33.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36539 - https://www.exploit-db.com/exploits/4390 - http://osvdb.org/40505 - http://www.auracms.org/?pilih=news&aksi=lihat&id=117 - http://secunia.com/advisories/26747 - http://www.securityfocus.com/bid/25621
CVE ID: CVE-2007-4906 State: PUBLISHED Published: 2007-09-17T16:00:00 Last Updated: 2024-08-07T15:08:33.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4395 - http://securityreason.com/securityalert/3142 - http://osvdb.org/38978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36556 - http://www.securityfocus.com/archive/1/479086/100/0/threaded
CVE ID: CVE-2007-4907 State: PUBLISHED Published: 2007-09-17T16:00:00 Last Updated: 2024-08-07T15:08:33.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a URL in the xcart_dir parameter to (1) config.php, (2) prepare.php, (3) smarty.php, (4) customer/product.php, (5) provider/auth.php, and (6) admin/auth.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38977 - http://osvdb.org/38976 - https://www.exploit-db.com/exploits/4396 - http://osvdb.org/38974 - http://osvdb.org/38972 - http://osvdb.org/38973 - https://exchange.xforce
b.com/exploits/4396 - http://osvdb.org/38974 - http://osvdb.org/38972 - http://osvdb.org/38973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36574 - http://www.securityfocus.com/bid/25637
CVE ID: CVE-2007-4908 State: PUBLISHED Published: 2007-09-17T16:00:00 Last Updated: 2024-08-07T15:08:34.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pilih parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36541 - https://www.exploit-db.com/exploits/4390 - http://osvdb.org/40504 - http://www.auracms.org/?pilih=news&aksi=lihat&id=117 - http://secunia.com/advisories/26747 - http://www.securityfocus.com/bid/25619
CVE ID: CVE-2007-4909 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a (1) scp, and possibly a (2) sftp or (3) ftp, URL, as demonstrated by a URL specifying login to the remote server with a username of scp, which is interpreted as an HTTP scheme name by the protocol handler in a web browser, but is interpreted as a username by WinSCP. NOTE: this is related to an incomplete fix for CVE-2006-3015. Additional Analyst Not
nterpreted as a username by WinSCP. NOTE: this is related to an incomplete fix for CVE-2006-3015. Additional Analyst Notes: - CVE Program Container: References: - http://winscp.cvs.sourceforge.net/winscp/winscp3/core/SessionData.cpp?r1=1.29&r2=1.30 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36591 - http://securityreason.com/securityalert/3141 - http://www.securityfocus.com/bid/25655 - http://winscp.net/eng/docs/history/ - http://secunia.com/advisories/26820 - http://www.securitytracker.com/id?1018697 - http://www.securityfocus.com/archive/1/479298/100/0/threaded
CVE ID: CVE-2007-4910 State: PUBLISHED Published: 2007-09-17T17:00:00Z Last Updated: 2024-09-16T16:34:05.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap". Additional Analyst Notes: - CVE Program Container: References: - http://www.netinvoicing.com/downloads/ChangeLog - http://secunia.com/advisories/26730 - http://www.securityfocus.com/bid/25661
CVE ID: CVE-2007-4911 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service (daemon crash) via a long .mp3 URI to TCP port 8000. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4403 - http://www.vupen.com/english/advisories/2007/3170 - http://osvdb.org/40520 - http://secunia.com/advisories/26815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36607 - http://www.securityfocus.co
/secunia.com/advisories/26815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36607 - http://www.securityfocus.com/bid/25660
CVE ID: CVE-2007-4912 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ips_kernel/class_ajax.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to inject arbitrary web script or HTML into user profile fields via unspecified vectors related to character sets other than iso-8859-1 or utf-8. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36589 - http://www.securityfocus.com/bid/25656 - http://forums.invisionpower.com/index.php?act=attach&type=post
bilities/36589 - http://www.securityfocus.com/bid/25656 - http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870 - http://secunia.com/advisories/26788 - http://forums.invisionpower.com/index.php?showtopic=237075
CVE ID: CVE-2007-4913 State: PUBLISHED Published: 2007-09-17T17:00:00Z Last Updated: 2024-09-17T02:21:05.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: ips_kernel/class_upload.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to uploads/, where they are saved with a .txt extension and are not executable. NOTE: there are limited usage scenarios under which this would be a vulnerability, but it is being tracked by CVE since the vendor has stated it is security-relevant. Additional Analyst Notes: - CVE Program Container: References: - http://forums.invisionpower.com/index.php?
ty-relevant. Additional Analyst Notes: - CVE Program Container: References: - http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870 - http://forums.invisionpower.com/index.php?showtopic=237075
CVE ID: CVE-2007-4914 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the subscriptions manager in Invision Power Board (IPB or IP.Board) 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to (1) class_gw_2checkout.php, (2) class_gw_authorizenet.php, (3) class_gw_nochex.php, (4) class_gw_paypal.php, and (5) class_gw_safshop.php in sources/classes/paymentgateways/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ib
es/classes/paymentgateways/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36590 - http://www.securityfocus.com/bid/25656 - http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870 - http://osvdb.org/41322 - http://osvdb.org/41321 - http://osvdb.org/41323 - http://osvdb.org/41320 - http://secunia.com/advisories/26788 - http://forums.invisionpower.com/index.php?showtopic=237075 - http://osvdb.org/41319
CVE ID: CVE-2007-4915 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:34.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP Basic Authentication request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securenetwork.it/ricerca/advisory/download/SN-2007-02.txt - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://
ork.it/ricerca/advisory/download/SN-2007-02.txt - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://securityreason.com/securityalert/3151 - http://www.ikkisoft.com/stuff/SN-2007-02.txt - https://www.exploit-db.com/exploits/4542 - http://www.securityfocus.com/bid/25676 - http://www.securityfocus.com/archive/1/479434/100/0/threaded
CVE ID: CVE-2007-4916 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument. Additional Analyst Notes: - CVE Program Container: References: - htt
y execute arbitrary code via a long first argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25697 - http://www.securityfocus.com/archive/1/479442/100/0/threaded - http://www.securityfocus.com/archive/1/479443/100/0/threaded - http://www.securitytracker.com/id?1018698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36608 - http://www.securityfocus.com/bid/25673 - http://www.kb.cert.org/vuls/id/611008 - http://goodfellas.shellcode.com.ar/own/VULWKU200706142 - http://goodfellas.shellcode.com.ar/own/VULWAR200706041 - http://securityreason.com/securityalert/3143 - http://secunia.com/advisories/26800 - http://www.vupen.com/english/ad
1 - http://securityreason.com/securityalert/3143 - http://secunia.com/advisories/26800 - http://www.vupen.com/english/advisories/2007/3182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36609
CVE ID: CVE-2007-4917 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the ip parameter in an online action, a different vector than CVE-2007-4334. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36616 - http://www.securityfocus.com/archive/1/479439/100/0/threaded - http://www.securityfocus.com/bid/25674