Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3555 State: PUBLISHED Published: 2007-07-04T15:00:00 Last Updated: 2024-08-07T14:21:36.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter, a different vulnerability than CVE-2004-1424. Additional Analyst Notes: - CVE Program Container: References: - http://tracker.moodle.org/browse/MDL-10341 - http://www.osvdb.org/36366 - http://secunia.com/advisories/25929 - http://tracker.moodle.org/secure/IssueNavigator.jspa?mode=hide&requestId=10252 - https://exchange.xforce.ibmcloud.com/vulnerabil
racker.moodle.org/secure/IssueNavigator.jspa?mode=hide&requestId=10252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35239 - http://www.securityfocus.com/archive/1/472727/100/0/threaded - http://securityreason.com/securityalert/2857 - http://www.securityfocus.com/bid/24748 - http://securityvulns.ru/Rdocument391.html - http://www.securitytracker.com/id?1018333 - http://www.debian.org/security/2008/dsa-1691 - http://websecurity.com.ua/1045/
CVE ID: CVE-2007-3556 State: PUBLISHED Published: 2007-07-04T15:00:00 Last Updated: 2024-08-07T14:21:36.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file containing account credentials via a direct request for config.inc. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35243 - http://osvdb.org/45744 - http://securityvulns.ru/Rdocument392.html - http://www.securityfocus.com/archive/1/472727/100/0/threaded - http://securityreason.com/securityalert/2857 - h
2.html - http://www.securityfocus.com/archive/1/472727/100/0/threaded - http://securityreason.com/securityalert/2857 - http://www.securityfocus.com/bid/24749
CVE ID: CVE-2007-3557 State: PUBLISHED Published: 2007-07-04T16:00:00 Last Updated: 2024-08-07T14:21:36.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.php in Wheatblog (wB) 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2405 - http://securityreason.com/securityalert/2856 - http://www.securityfocus.com/archive/1/472575/100/0/threaded - http://secunia.com/advisories/25903 - http://www.securityfocus.com/bid/24715 - https://exchange.xforce.ibmcloud.com/v
- http://secunia.com/advisories/25903 - http://www.securityfocus.com/bid/24715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35211 - http://osvdb.org/37063
CVE ID: CVE-2007-3558 State: PUBLISHED Published: 2007-07-04T16:00:00Z Last Updated: 2024-09-16T18:48:53.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25846 - http://www.securityfocus.com/bid/24710 - http://coppermine-gallery.net/forum/index.php?topic=44845.0
CVE ID: CVE-2007-3559 State: PUBLISHED Published: 2007-07-04T16:00:00 Last Updated: 2024-08-07T14:21:36.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in infusions/shoutbox_panel/shoutbox_panel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts are enabled, allows remote authenticated users to inject arbitrary web script or HTML via the URI, related to the FUSION_QUERY constant. Additional Analyst Notes: - CVE Program Container: References: - http://www.xssed.com/advisory/60/PHP-FUSION_FUSION_QUERY_Cross-Site_Scripting_Vulnerability/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/35225 - http://osvdb.org/36342 - http://sec
ipting_Vulnerability/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/35225 - http://osvdb.org/36342 - http://secunia.com/advisories/25907 - http://www.securityfocus.com/bid/24733
CVE ID: CVE-2007-3560 State: PUBLISHED Published: 2007-07-04T16:00:00 Last Updated: 2024-08-07T14:21:36.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Esqlanelapse before 2.6 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37793 - http://sourceforge.net/project/shownotes.php?group_id=118575&release_id=519061 - http://secunia.com/advisories/25791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35227 - http://www.securityfocus.com/bid/24732
CVE ID: CVE-2007-3561 State: PUBLISHED Published: 2007-07-04T16:00:00 Last Updated: 2024-08-07T14:21:36.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ara.asp in Efendy Blog 1.0 allows remote attackers to inject arbitrary web script or HTML via the ara parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36341 - http://secunia.com/advisories/25917 - http://www.securityfocus.com/bid/24738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35223
CVE ID: CVE-2007-3562 State: PUBLISHED Published: 2007-07-04T16:00:00 Last Updated: 2024-08-07T14:21:36.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24729 - http://www.vupen.com/english/advisories/2007/2411 - http://secunia.com/advisories/25928 - http://www.securityfocus.com/archive/1/472661/100/0/threaded - https://www.exploit-db.com/exploits/4139 - http://osvdb.org/39719 - http://osvdb.org/36353 - https://exchange.xforce.i
- https://www.exploit-db.com/exploits/4139 - http://osvdb.org/39719 - http://osvdb.org/36353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35220
CVE ID: CVE-2007-3563 State: PUBLISHED Published: 2007-07-04T16:00:00 Last Updated: 2024-08-07T14:21:36.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_page action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35209 - https://www.exploit-db.com/exploits/4138 - http://www.securityfocus.com/bid/24728 - http://secunia.com/advisories/25927 - http://www.securityfocus.com/archive/1/472663
://www.securityfocus.com/bid/24728 - http://secunia.com/advisories/25927 - http://www.securityfocus.com/archive/1/472663/100/0/threaded - http://osvdb.org/36354
CVE ID: CVE-2007-3564 State: PUBLISHED Published: 2007-07-18T17:00:00 Last Updated: 2024-08-07T14:21:36.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26231 - http://www.vupen.com/english/advisories/2007/2551 - http://secunia.com/advisories/26128 - http://secunia.com/advisories/26108 - http://www.securityfocus.com/bid/24938 - http://www.trustix.org/errata/2007/0023/ - http://secunia.com
dvisories/26108 - http://www.securityfocus.com/bid/24938 - http://www.trustix.org/errata/2007/0023/ - http://secunia.com/advisories/26104 - http://www.ubuntu.com/usn/usn-484-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35479 - http://www.curl.haxx.se/docs/adv_20070710.html - http://www.debian.org/security/2007/dsa-1333
CVE ID: CVE-2007-3566 State: PUBLISHED Published: 2007-07-26T18:00:00 Last Updated: 2024-08-07T14:21:36.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35574 - http://www.securityfocus.com/archive/1/474561/100/0/threaded - http://dvlabs.tippingpoint.com/advisory/TPTI-07-13 - http://secunia.com/advisories/26189 - http://www.securityfocus.com/bid/25048
labs.tippingpoint.com/advisory/TPTI-07-13 - http://secunia.com/advisories/26189 - http://www.securityfocus.com/bid/25048 - http://www.vupen.com/english/advisories/2007/2642 - http://securityreason.com/securityalert/2929 - http://www.securitytracker.com/id?1018451 - http://dvlabs.tippingpoint.com/blog/2007/07/24/step-by-step-of-how-tpti-07-013-was-discovered - http://osvdb.org/38602 - http://www.codegear.com/downloads/regusers/interbase
CVE ID: CVE-2007-3567 State: PUBLISHED Published: 2007-07-05T19:00:00 Last Updated: 2024-08-07T14:21:36.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2007-08/0052.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35291 - http://osvdb.org/42460 - http://securityreason.com/securityalert/2859 - http://www.securityfocus.com/archive/1/472756/100/0/threaded - ht
42460 - http://securityreason.com/securityalert/2859 - http://www.securityfocus.com/archive/1/472756/100/0/threaded - http://www.securityfocus.com/bid/24759
CVE ID: CVE-2007-3568 State: PUBLISHED Published: 2007-07-05T19:00:00 Last Updated: 2024-08-07T14:21:36.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service (infinite loop) via a BMP image with a Bits Per Page (BPP) value of 0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018332 - http://www.securiteam.com/unixfocus/5WP030UM0W.html - http://www.securityfocus.com/bid/24750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35325 - http://osvdb.org/39016
CVE ID: CVE-2007-3569 State: PUBLISHED Published: 2007-07-05T19:00:00 Last Updated: 2024-08-07T14:21:36.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the (1) updateform and (2) displayform parameter to (a) gateway/gateway.exe; the (3) TERMS, (4) database, (5) srchad, (6) SuggestedSearch, and (7) searchform parameters to the (b) "Basic Search page"; and (8) username parameter when (c) logging on. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25930 - http://www.securityfocus.c
l Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25930 - http://www.securityfocus.com/archive/1/472738/100/0/threaded - http://osvdb.org/37061 - http://www.vupen.com/english/advisories/2007/2432 - http://osvdb.org/37059 - http://securityreason.com/securityalert/2868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35251 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/055355.html - http://osvdb.org/37060 - http://www.securityfocus.com/bid/24754
CVE ID: CVE-2007-3570 State: PUBLISHED Published: 2007-07-05T19:00:00 Last Updated: 2024-08-07T14:21:36.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via Fullwidth/Halfwidth Unicode encoded data in a HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2390 - http://www.vupen.com/english/advisories/2007/3075 - http://www.novell.com/documentation/novellaccessmanager/readme/accessmanager_readme.html#ban5hsz - https://secure-support.novell.com/Kanisa
om/documentation/novellaccessmanager/readme/accessmanager_readme.html#ban5hsz - https://secure-support.novell.com/KanisaPlatform/Publishing/539/3193302_f.SAL_Public.html
CVE ID: CVE-2007-3571 State: PUBLISHED Published: 2007-07-05T19:00:00 Last Updated: 2024-08-07T14:21:36.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to obtain sensitive information via a certain directive to Apache that causes the HTTP-Header response to be modified, which may reveal the server's internal IP address. Additional Analyst Notes: - CVE Program Container: References: - https://secure-support.novell.com/KanisaPlatform/Publishing/370/3555327_f.SAL_Public.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35365 - http://osvdb.org/45742 - http://www.vupen.com/english/
ml - https://exchange.xforce.ibmcloud.com/vulnerabilities/35365 - http://osvdb.org/45742 - http://www.vupen.com/english/advisories/2007/2388
CVE ID: CVE-2007-3572 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in cgi-bin/runDiagnostics.cgi in the web interface on the Yoggie Pico and Pico Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the param parameter, as demonstrated by URL encoded "`" (backtick) characters (%60 sequences). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35208 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0020.html -
ge.xforce.ibmcloud.com/vulnerabilities/35208 - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0020.html - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0092.html - http://www.vupen.com/english/advisories/2007/2417 - http://www.securityfocus.com/bid/24743 - http://osvdb.org/37808
CVE ID: CVE-2007-3573 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in akocomment allow remote attackers to execute arbitrary SQL commands via the (1) acparentid or (2) acitemid parameter to an unspecified component, different vectors than CVE-2006-1421. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38914 - http://www.securityfocus.com/archive/1/472652/100/0/threaded - http://securityreason.com/securityalert/2860
CVE ID: CVE-2007-3574 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the (1) c4_trap_ip_, (2) devname, (3) snmp_getcomm, or (4) snmp_setcomm parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://secunia.com/advisories/27738/ - http://www.se
ed - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://secunia.com/advisories/27738/ - http://www.securityfocus.com/data/vulnerabilities/exploits/24682.html - http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/ - http://www.securityfocus.com/bid/24682 - http://osvdb.org/40878 - http://osvdb.org/40877
CVE ID: CVE-2007-3575 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/functions in FreeDomain.co.nr Clone allows remote attackers to execute arbitrary SQL commands via the logindomain parameter to members.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472656/100/0/threaded - http://osvdb.org/45741 - http://securityreason.com/securityalert/2862 - http://www.securityfocus.com/bid/24737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35366
CVE ID: CVE-2007-3576 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 executes web script from URIs of arbitrary scheme names ending with the "script" character sequence, using the (1) vbscript: handler for scheme names with 7 through 9 characters, and the (2) javascript: handler for scheme names with 10 or more characters, which might allow remote attackers to bypass certain XSS protection schemes. NOTE: other researchers dispute the significance of this issue, stating "this only works when typed in the address bar. Additional Analyst Notes: - CVE Program Container
of this issue, stating "this only works when typed in the address bar. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/php-ids/browse_thread/thread/3ec15f69d6b3dba0 - http://osvdb.org/45813 - http://sla.ckers.org/forum/read.php?2%2C13209%2C13218 - http://www.0x000000.com/?i=375 - http://ha.ckers.org/blog/20070702/ie60-protocol-guessing/
CVE ID: CVE-2007-3577 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPIDS before 20070703 does not properly handle use of the substr method in (1) document.location.search and (2) document.referrer; (3) certain use of document.location.hash; (4) certain "window[eval" and similar expressions; (5) certain Function expressions; (6) certain '=' expressions, as demonstrated by a 'whatever="something"' sequence; and (7) certain "with" expressions, which allows remote attackers to inject arbitrary web script. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45759 - h
inject arbitrary web script. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45759 - http://sla.ckers.org/forum/read.php?2%2C13209%2C13218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35489 - http://groups.google.com/group/php-ids/browse_thread/thread/3ec15f69d6b3dba0
CVE ID: CVE-2007-3578 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPIDS before 20070703 does not properly handle (1) arithmetic expressions and (2) unclosed comments, which allows remote attackers to inject arbitrary web script. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45757 - http://sla.ckers.org/forum/read.php?2%2C13209%2C13218 - http://osvdb.org/45758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35519 - http://groups.google.com/group/php-ids/browse_thread/thread/3ec15f69d6b3dba0
CVE ID: CVE-2007-3579 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to the DOM, which allows remote attackers to inject arbitrary web script. Additional Analyst Notes: - CVE Program Container: References: - http://sla.ckers.org/forum/read.php?2%2C13209%2C13218 - http://osvdb.org/45756 - http://groups.google.com/group/php-ids/browse_thread/thread/3ec15f69d6b3dba0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35520
CVE ID: CVE-2007-3580 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, which allows user-assisted remote attackers to inject arbitrary web script. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/php-ids/browse_thread/thread/3ec15f69d6b3dba0 - http://sla.ckers.org/forum/read.php?2%2C13209%2C13218 - http://osvdb.org/45755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35521
CVE ID: CVE-2007-3581 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the password by sniffing the network, as demonstrated by starting Excel with the Palo plugin, opening a cube, and performing an Insert View. Additional Analyst Notes: - CVE Program Container: References: - http://85.10.222.122/mantis/public_show_bug.php?bug_id=452 - http://osvdb.org/45754
CVE ID: CVE-2007-3582 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35252 - http://www.securityfocus.com/bid/24756 - http://secunia.com/advisories/25921 - http://www.vupen.com/english/advisories/2007/2431 - https://www.exploit-db.com/exploits/4141 - http://osvdb.org/36300
CVE ID: CVE-2007-3583 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idnew parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35253 - http://osvdb.org/36365 - http://www.securityfocus.com/bid/24755 - http://www.vupen.com/english/advisories/2007/2434 - https://www.exploit-db.com/exploits/4142 - http://secunia.com/advisories/25925
CVE ID: CVE-2007-3584 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL commands via the order parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45777 - https://www.exploit-db.com/exploits/4147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35256
CVE ID: CVE-2007-3585 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4144 - http://www.securityfocus.com/bid/24757 - http://osvdb.org/43962