Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1878 State: PUBLISHED Published: 2007-04-06T00:00:00 Last Updated: 2024-08-07T13:13:41.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.03 for Mozilla Firefox allows remote attackers to bypass zone restrictions, read arbitrary file:// URIs, or execute arbitrary code in the browser chrome, as demonstrated via the runFile function, related to lack of HTML escaping in the property name. Additional Analyst Notes: - CVE Program Container: References: - http://www.getfirebug.com/blog/2007/04/04/security-update/ - http://larholm.com/2
- CVE Program Container: References: - http://www.getfirebug.com/blog/2007/04/04/security-update/ - http://larholm.com/2007/04/06/0day-vulnerability-in-firebug/ - http://www.securityfocus.com/bid/23315 - http://secunia.com/advisories/24743 - http://www.securityfocus.com/archive/1/464740/100/0/threaded - http://www.vupen.com/english/advisories/2007/1272 - http://securityreason.com/securityalert/2525 - http://www.securityfocus.com/archive/1/464786/100/0/threaded - http://www.gnucitizen.org/blog/firebug-goes-evil - https://exchange.xforce.ibmcloud.com/vulnerabilities/33451
CVE ID: CVE-2007-1879 State: PUBLISHED Published: 2007-04-06T00:00:00 Last Updated: 2024-08-07T13:13:41.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command. NOTE: this issue might be related to CVE-2007-1112. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=504 - http://secunia.com/advisories/24778 - http
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=504 - http://secunia.com/advisories/24778 - http://www.securitytracker.com/id?1017871 - http://www.kaspersky.com/technews?id=203038694 - http://www.vupen.com/english/advisories/2007/1268 - http://www.securityfocus.com/bid/23325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33464
CVE ID: CVE-2007-1880 State: PUBLISHED Published: 2007-04-06T00:00:00 Last Updated: 2024-08-07T13:13:41.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned "data size argument," which results in a heap overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33851 - http://www.securityfocus.com/bid/23326 - http://secunia.com/advisories/24778 - http:/
es: - http://www.osvdb.org/33851 - http://www.securityfocus.com/bid/23326 - http://secunia.com/advisories/24778 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=505 - http://www.kaspersky.com/technews?id=203038694 - http://www.vupen.com/english/advisories/2007/1268 - http://www.securitytracker.com/id?1017873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33460 - http://www.securitytracker.com/id?1017872 - http://www.kaspersky.com/technews?id=203038693
CVE ID: CVE-2007-1881 State: PUBLISHED Published: 2007-04-06T00:00:00 Last Updated: 2024-08-07T13:13:41.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows local users to gain Ring-0 privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24778 - http://www.kaspersky.com/technews?id=203038694 - http://www.vupen.com/english/advisories/2007/1268 - http://www.osvdb.org/33852 - http://www.kaspersky.com/
d=203038694 - http://www.vupen.com/english/advisories/2007/1268 - http://www.osvdb.org/33852 - http://www.kaspersky.com/technews?id=203038693
CVE ID: CVE-2007-1882 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:13:41.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to execute arbitrary SQL commands via the RunQuery method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24730 - http://osvdb.org/34630 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053406.html - http://www.vupen.com/english/advisories/2007/1246 - http://securityreason.com/securityalert/2527 - http://www.securitytracker.com/id?10
n.com/english/advisories/2007/1246 - http://securityreason.com/securityalert/2527 - http://www.securitytracker.com/id?1017842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33385
CVE ID: CVE-2007-1883 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:13:41.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary memory locations via an interruption that triggers a user space error handler that changes a parameter to an arbitrary pointer, as demonstrated via the iptcembed function, which calls certain convert_to_* functions with its input parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24542 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.php-security.or
://secunia.com/advisories/24542 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.php-security.org/MOPB/MOPB-37-2007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33750 - http://secunia.com/advisories/27102
CVE ID: CVE-2007-1884 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:13:41.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via (1) certain negative argument numbers that arise in the php_formatted_print function because of 64 to 32 bit truncation, and bypass a check for the maximum allowable value; and (2) a width and precision of -1, which make it possible for the php_sprintf_appendstring function to place an internal buffer at an arbitrary memory location. Add
e it possible for the php_sprintf_appendstring function to place an internal buffer at an arbitrary memory location. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33755 - http://www.vupen.com/english/advisories/2007/1991 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://www.osvdb.org/33955 - http://www.php.net/releases/5_2_1.php - http://www.securityfocus.com/bid/23219 - http://www.osvdb.org/34767 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc
us.com/bid/23219 - http://www.osvdb.org/34767 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://www.vupen.com/english/advisories/2007/2374 - http://secunia.com/advisories/25423 - http://www.php-security.org/MOPB/MOPB-38-2007.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/25850
CVE ID: CVE-2007-1885 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:13:41.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via a single character search string in conjunction with a long replacement string, which overflows a 32 bit length counter. NOTE: this is probably the same issue as CVE-2007-0906.6. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1991 - http://www.securityfocus.com/bid/23233 - http://h20000.www2.hp.com/bizsupport/Tec
pen.com/english/advisories/2007/1991 - http://www.securityfocus.com/bid/23233 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://www.php.net/releases/5_2_1.php - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://www.vupen.com/english/advisories/2007/2374 - http://secunia.com/advisories/25423 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/25850 - http://www.php-security.org/MOPB/MOPB-39-2007.html - https://exc
ectID=c01056506 - http://secunia.com/advisories/25850 - http://www.php-security.org/MOPB/MOPB-39-2007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33767
CVE ID: CVE-2007-1886 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:13:41.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the str_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one overflow." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33768 - http://www.vupen.com/english/advisories/2007/1991 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c
om/english/advisories/2007/1991 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://www.vupen.com/english/advisories/2007/2374 - http://secunia.com/advisories/25423 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/25850 - http://www.php-security.org/MOPB/MOPB-39-2007.html
CVE ID: CVE-2007-1887 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:13:41.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqlite_udf_decode_binary function with a 0x01 character. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27110 - http://www.debian.org/security/2007/dsa-1283 - http://www.vupen.com/english/advisories/2007/2016 - http://www.ge
27110 - http://www.debian.org/security/2007/dsa-1283 - http://www.vupen.com/english/advisories/2007/2016 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5348 - http://www.php.net/releases/5_2_1.php - http://www.php-security.org/MOPB/MOPB-41-2007.html - http://secunia.com/advisories/25062 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html - http://www.ubuntu.com/usn/usn-455-1 - http://secunia.com/advisories/24909 - http://www.vupen.com/english/advisories/2007/3386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33766 - http://www.securityfocus.com/bid
ish/advisories/2007/3386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33766 - http://www.securityfocus.com/bid/23235 - http://secunia.com/advisories/27037 - http://www.php.net/releases/5_2_3.php - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/27102 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:089 - http://secunia.com/advisories/25057 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:088
CVE ID: CVE-2007-1888 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:13:41.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sqlite_decode_binary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter. NOTE: some PHP installations use a bundled version of sqlite without this vulnerability. The SQLite developer has argued that this issue could be due to a misuse of the sqlite_decode_binary() API. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39177 - https:/
e_decode_binary() API. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38518 - http://www.php-security.org/MOPB/MOPB-41-2007.html - http://www.sqlite.org/cvstrac/rlog?f=sqlite/src/encode.c - http://www.ubuntu.com/usn/usn-455-1 - http://www.attrition.org/pipermail/vim/2007-April/001540.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:091 - http://secunia.com/advisories/25057
CVE ID: CVE-2007-1889 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:13:41.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msg_receive with the largest positive integer value of maxsize. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25056 - http://www.debian.org/security/2007/dsa-1283 - http://www.php-security.org/MO
s: - http://secunia.com/advisories/25056 - http://www.debian.org/security/2007/dsa-1283 - http://www.php-security.org/MOPB/MOPB-43-2007.html - http://www.securityfocus.com/bid/23238 - http://www.php-security.org/MOPB/MOPB-44-2007.html - http://secunia.com/advisories/25062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33770 - http://www.novell.com/linux/security/advisories/2007_32_php.html
CVE ID: CVE-2007-1890 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T13:13:41.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows context-dependent attackers to execute arbitrary code via certain maxsize values, as demonstrated by 0xffffffff. Additional Analyst Notes: - CVE Program Container: References: - http://www.php-security.org/MOPB/MOPB-43-2007.html - http://www.securityfocus.com/bid/23236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33775
CVE ID: CVE-2007-1891 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:13:41.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx) after 2.0.4.4 but before 2.2.1.0 allows remote attackers to execute arbitrary code, related to misinterpretation of the nSize parameter as a byte count instead of a wide character count. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=514 - http://www.osvdb.org/34323 - http://www.securityfocus.c
s.idefense.com/intelligence/vulnerabilities/display.php?id=514 - http://www.osvdb.org/34323 - http://www.securityfocus.com/archive/1/465908/100/0/threaded - http://secunia.com/advisories/24900 - http://www.securitytracker.com/id?1017925 - http://www.kb.cert.org/vuls/id/120241 - http://www.vupen.com/english/advisories/2007/1415 - http://www.securityfocus.com/bid/23522
CVE ID: CVE-2007-1892 State: PUBLISHED Published: 2007-04-18T02:20:00 Last Updated: 2024-08-07T13:13:41.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx) before 2.2.1.0 allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2007-1891. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34324 - http://www.securityfocus.com/archive/1/465908/100/0/threaded - http://secunia.com/advisories/24900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33697 - http://www.vupen.com/english/advisories/
advisories/24900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33697 - http://www.vupen.com/english/advisories/2007/1415 - http://www.securityfocus.com/bid/23522
CVE ID: CVE-2007-1893 State: PUBLISHED Published: 2007-04-09T20:00:00 Last Updated: 2024-08-07T13:13:42.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functionality, which can be used to "publish a previously saved post." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1245 - http://secunia.com/advisories/25108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33470 - http://trac.wordpress.org/ticket/4091 - http://www.nots
8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33470 - http://trac.wordpress.org/ticket/4091 - http://www.notsosecure.com/folder2/2007/04/03/wordpress-212-xmlrpc-security-issues/ - http://secunia.com/advisories/24751 - http://www.debian.org/security/2007/dsa-1285
CVE ID: CVE-2007-1894 State: PUBLISHED Published: 2007-04-09T20:00:00 Last Updated: 2024-08-07T13:13:41.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-includes/general-template.php in WordPress before 20070309 allows remote attackers to inject arbitrary web script or HTML via the year parameter in the wp_title function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24485 - http://www.securityfocus.com/bid/22902 - http://trac.wordpress.org/changeset/5003 - http://secunia.com/advisories/25108 - http://www.securityfocus.com/archive/1/462374/100/0/threaded - http://trac.wordpress.org/
secunia.com/advisories/25108 - http://www.securityfocus.com/archive/1/462374/100/0/threaded - http://trac.wordpress.org/ticket/4093 - http://securityreason.com/securityalert/2526 - http://www.debian.org/security/2007/dsa-1285 - http://chxsecurity.org/advisories/adv-1-mid.txt
CVE ID: CVE-2007-1895 State: PUBLISHED Published: 2007-04-09T20:00:00 Last Updated: 2024-08-07T13:13:41.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers to execute arbitrary PHP code via an ftp URL in a my_ms[root] cookie, a different vector than CVE-2007-0491 and CVE-2006-4630. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3657 - http://secunia.com/advisories/24760 - http://www.vupen.com/english/advisories/2007/1261 - http://osvdb.org/34145
CVE ID: CVE-2007-1896 State: PUBLISHED Published: 2007-04-09T20:00:00 Last Updated: 2024-08-07T13:13:41.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) and trailing %00 (NULL) in a my_ms[root] cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3657 - http://secunia.com/advisories/24760 - http://secunia.com/advisories/24766 - http://www.vupen.com/english/advisories/2007/1261 - http://osvdb.org/34146
CVE ID: CVE-2007-1897 State: PUBLISHED Published: 2007-04-09T20:00:00 Last Updated: 2024-08-07T13:13:41.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users to execute arbitrary SQL commands via a string parameter value in an XML RPC mt.setPostCategories method call, related to the post_id variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3656 - http://www.vupen.com/english/advisories/2007/1245 - http://secunia.com/advisories/25108 - http://trac.wordpress.org/ticket/4091 - http://www.notsosecure.
sories/2007/1245 - http://secunia.com/advisories/25108 - http://trac.wordpress.org/ticket/4091 - http://www.notsosecure.com/folder2/2007/04/03/wordpress-212-xmlrpc-security-issues/ - http://secunia.com/advisories/24751 - http://www.securityfocus.com/bid/23294 - http://www.debian.org/security/2007/dsa-1285
CVE ID: CVE-2007-1898 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:13:41.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTINGS[allowed_email_hosts][], and subject parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34292 - http://www.netvigilance.com/advisory0026 - http://securityreason.com/securityalert/2710 - http://www.vupen.com/english/advisories/2007/1831 - http://www.securityfocus.com/archive/1/468644/100/0/threaded - http://www.securitytracker.com/
sh/advisories/2007/1831 - http://www.securityfocus.com/archive/1/468644/100/0/threaded - http://www.securitytracker.com/id?1018063 - http://www.osvdb.org/34088 - http://www.securityfocus.com/bid/23989
CVE ID: CVE-2007-1899 State: PUBLISHED Published: 2008-07-09T00:00:00 Last Updated: 2024-08-07T13:13:41.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a viewuser action to index.php, and allow remote authenticated administrators to execute arbitrary SQL commands via (2) the post_id parameter in an edit action to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30892 - https://www.exploit-db.com/exploits/5975 - http://descriptions.securescout.com/tc/17969 - http://
com/advisories/30892 - https://www.exploit-db.com/exploits/5975 - http://descriptions.securescout.com/tc/17969 - http://www.netvigilance.com/advisory0040
CVE ID: CVE-2007-1900 State: PUBLISHED Published: 2007-04-10T18:00:00 Last Updated: 2024-08-07T13:13:41.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to inject arbitrary e-mail headers via an e-mail address with a '\n' character, which causes a regular expression to ignore the subsequent part of the address string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26231 - http://secunia.com/advisories/25056 - http://secunia.com/advisories/27110 - http://www.debian.org/security/2007/dsa-1283 - ht