Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3195 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24406 - http://secunia.com/advisories/25586 - http://osvdb.org/36402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34808
CVE ID: CVE-2007-3196 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37331 - http://osvdb.org/38811 - http://securityreason.com/securityalert/2795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34804 - http://www.securityfocus.com/archive/1/470966/100/0/threaded - http://www.securityfocus.com/bid/24397
CVE ID: CVE-2007-3197 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37162 - http://www.vbulletin.org/forum/showthread.php?t=94023&page=38
CVE ID: CVE-2007-3198 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.secvsn.com/content/Advisories/sr-060607-maran.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34812 - http://secunia.com/advisories/25616 - http://www.securityfocus.com/bid/24409 - http://www.vupen.com/english/advisories/2007/2148
ecunia.com/advisories/25616 - http://www.securityfocus.com/bid/24409 - http://www.vupen.com/english/advisories/2007/2148 - http://www.securityfocus.com/archive/1/494549/100/0/threaded - http://www.securityfocus.com/archive/1/471046/100/0/threaded - http://osvdb.org/35374 - http://www.securityfocus.com/bid/30309 - http://securityreason.com/securityalert/2797
CVE ID: CVE-2007-3199 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension and an image content type, as demonstrated by image/jpeg. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24408 - http://osvdb.org/37204 - http://secunia.com/advisories/25614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34801 - https://www.exploit-db.com/exploits/4059 - http://www.vupen.com/english/advi
xforce.ibmcloud.com/vulnerabilities/34801 - https://www.exploit-db.com/exploits/4059 - http://www.vupen.com/english/advisories/2007/2143 - http://corryl.altervista.org/index.php?mod=Download/Exploit#exploit-LRCF-v3.4.rar
CVE ID: CVE-2007-3200 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2118 - http://www.securityfocus.com/bid/24405 - http://osvdb.org/35943 - http://securitytracker.com/id?1018215 - http://secunia.com/advisories/25592 - https://exchange.xforce.ibmcloud.com/vulner
ttp://securitytracker.com/id?1018215 - http://secunia.com/advisories/25592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34806 - https://secure-support.novell.com/KanisaPlatform/Publishing/249/3260550_f.SAL_Public.html
CVE ID: CVE-2007-3201 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user ID, space characters, an invalid WinPT message, additional space characters, and the victim's user ID. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34813 - htt
l Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34813 - http://wald.intevation.org/tracker/index.php?func=detail&aid=327&group_id=14&atid=138 - http://securityreason.com/securityalert/2791 - http://www.securityfocus.com/archive/1/471045/100/0/threaded - http://osvdb.org/41727 - http://www.securityfocus.com/bid/24412
CVE ID: CVE-2007-3202 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37330 - http://securityreason.com/securityalert/2792 - http://www.securityfocus.com/archive/1/471050/100/0/threaded - http://www.securityfocus.com/bid/24419
CVE ID: CVE-2007-3203 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34834 - http://www.securityfocus.com/bid/24437 - http://www.kb.ce
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34834 - http://www.securityfocus.com/bid/24437 - http://www.kb.cert.org/vuls/id/445313 - http://osvdb.org/37232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34974
CVE ID: CVE-2007-3204 State: PUBLISHED Published: 2007-06-12T23:00:00 Last Updated: 2024-08-07T14:05:29.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.4-pre2 allows remote attackers to execute arbitrary SQL commands via the pass parameter. NOTE: this issue reportedly exists because of an initial incomplete fix for CVE-2007-3190. The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34911
CVE Program Container: References: - http://osvdb.org/37169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34911 - http://secunia.com/advisories/25587
CVE ID: CVE-2007-3205 State: PUBLISHED Published: 2007-06-13T10:00:00 Last Updated: 2024-08-07T14:05:29.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39834 - http://securityreason.com/securityal
onal Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39834 - http://securityreason.com/securityalert/2800 - http://www.securityfocus.com/archive/1/471204/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34836 - http://www.securityfocus.com/archive/1/471275/100/0/threaded - http://www.acid-root.new.fr/advisories/14070612.txt - http://www.securityfocus.com/archive/1/471178/100/0/threaded
CVE ID: CVE-2007-3207 State: PUBLISHED Published: 2007-06-18T10:00:00 Last Updated: 2024-08-07T14:05:29.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the NFS mount daemon (XNFS.NLM) in Novell NetWare 6.5 SP6, and probably earlier, allows remote attackers to cause a denial of service (abend) via a long path in a mount request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34878 - http://www.kb.cert.org/vuls/id/578105 - https://secure-support.novell.com/KanisaPlatform/Publishing/23/3008097_f.SAL_Public.html - http://osvdb.org/37317 - http://suppo
secure-support.novell.com/KanisaPlatform/Publishing/23/3008097_f.SAL_Public.html - http://osvdb.org/37317 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5004900.html - http://www.vupen.com/english/advisories/2007/2221 - http://secunia.com/advisories/25697
CVE ID: CVE-2007-3208 State: PUBLISHED Published: 2007-06-14T19:00:00 Last Updated: 2024-08-07T14:05:29.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Yet another Bulletin Board (YaBB) 2.1 allows remote attackers to obtain administrative access via requests to (1) register.pl or (2) profile.pl that write CRLF sequences to a .vars file. NOTE: this can be leveraged to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018236 - http://www.securityfocus.com/bid/24455 - http://www.yabbforum.com/community/?board=general%3Baction=display%3Bnum=1181678785 - http://osvdb.org/37237
bid/24455 - http://www.yabbforum.com/community/?board=general%3Baction=display%3Bnum=1181678785 - http://osvdb.org/37237 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=538 - http://secunia.com/advisories/25656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34848 - http://osvdb.org/37236
CVE ID: CVE-2007-3209 State: PUBLISHED Published: 2007-06-14T19:00:00 Last Updated: 2024-08-07T14:05:29.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=428157 - http://secunia.com/advisories/25600 - http://osvdb.org/37205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34814 - https://savannah.nongnu.org/bugs/index.php?20131
CVE ID: CVE-2007-3210 State: PUBLISHED Published: 2007-06-14T19:00:00 Last Updated: 2024-08-07T14:05:29.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in nptoken.mox in the Cellosoft Tokens Object 2.0.0.6 extension for Vitalize! allows remote attackers to execute arbitrary code via a long string argument to the RemoveChr method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25604 - http://osvdb.org/37235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34850 - http://www.securityf
ories/25604 - http://osvdb.org/37235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34850 - http://www.securityfocus.com/bid/24458
CVE ID: CVE-2007-3211 State: PUBLISHED Published: 2007-06-14T19:00:00 Last Updated: 2024-08-07T14:05:29.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in 404.php in Domain Technologie Control (DTC) before 0.25.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (REQUEST_URI). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34832 - http://secunia.com/advisories/25504 - http://www.securityfocus.com/b
xchange.xforce.ibmcloud.com/vulnerabilities/34832 - http://secunia.com/advisories/25504 - http://www.securityfocus.com/bid/24441
CVE ID: CVE-2007-3212 State: PUBLISHED Published: 2007-06-14T22:00:00 Last Updated: 2024-08-07T14:05:29.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewmode, (2) fid, and (3) sort_dir parameters, different vectors than CVE-2005-4460. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2146 - http://osvdb.org/36380 - http://www.dragoslungu.com/2007/06/10/beehive-zero-vulnerabilities-myth-busted/ - http://www.securityfocus.com/bid/24413 - http://secunia.com/
.com/2007/06/10/beehive-zero-vulnerabilities-myth-busted/ - http://www.securityfocus.com/bid/24413 - http://secunia.com/advisories/25634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34827
CVE ID: CVE-2007-3213 State: PUBLISHED Published: 2007-06-14T22:00:00 Last Updated: 2024-08-07T14:05:29.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) view and (2) mode parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2147 - http://osvdb.org/36384 - http://www.securityfocus.com/bid/24439 - http://pridels-team.blogspot.com/2007/06/sporum-forum-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34829 - http://secun
gspot.com/2007/06/sporum-forum-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34829 - http://secunia.com/advisories/25617
CVE ID: CVE-2007-3214 State: PUBLISHED Published: 2007-06-14T22:00:00 Last Updated: 2024-08-07T14:05:29.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24398 - https://www.exploit-db.com/exploits/4054 - http://osvdb.org/36607 - http://www.vupen.com/english/advisories/2007/2123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34793 - http://secunia.com/advisories/25605
CVE ID: CVE-2007-3215 State: PUBLISHED Published: 2007-06-14T22:00:00 Last Updated: 2024-08-07T14:05:29.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471065/100/0/threaded - http://www.debian.org/security/2007/dsa-1315 - http://sourceforge.net/project/shownotes.php?release_id=517428&group_id=157374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34818 - http://secunia.com/advisories
e_id=517428&group_id=157374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34818 - http://secunia.com/advisories/25755 - http://securityreason.com/securityalert/2802 - http://osvdb.org/76139 - http://www.securityfocus.com/bid/24417 - https://sourceforge.net/tracker/index.php?func=detail&aid=1734811&group_id=26031&atid=385707 - http://osvdb.org/37206 - http://www.vupen.com/english/advisories/2007/2267 - http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/ - http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce - http://secunia.com/advisories/25626 - http://secunia.com/advisories/25758 - http://www.vupen.com/english/advisories/2007/2161 - http://seclists.org/fulldisclos
ttp://secunia.com/advisories/25758 - http://www.vupen.com/english/advisories/2007/2161 - http://seclists.org/fulldisclosure/2011/Oct/223
CVE ID: CVE-2007-3216 State: PUBLISHED Published: 2007-06-14T22:00:00 Last Updated: 2024-08-07T14:05:29.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4) rxsSetMessageLogSettings, (5) rxsExportData, (6) rxsSetServerOptions, (7) rxsRenameFile, (8) rxsACIManageSend, (9) rxsExportUser, (10) rxsImportUser, (11) rxsMoveUserData, (12) rxsUseLicenseIni, (13) rxsLicGetSiteId, (14) rxsGetLogFileNames, (15) rxsGetB
rxsImportUser, (11) rxsMoveUserData, (12) rxsUseLicenseIni, (13) rxsLicGetSiteId, (14) rxsGetLogFileNames, (15) rxsGetBackupLog, (16) rxsBackupComplete, (17) rxsSetDataProtectionSecurityData, (18) rxsSetDefaultConfigName, (19) rxsGetMessageLogSettings, (20) rxsHWDiskGetTotal, (21) rxsHWDiskGetFree, (22) rxsGetSubDirs, (23) rxsGetServerDBPathName, (24) rxsSetServerOptions, (25) rxsDeleteFile, (26) rxsACIManageSend, (27) rxcReadBackupSetList, (28) rxcWriteConfigInfo, (29) rxcSetAssetManagement, (30) rxcWriteFileListForRestore, (31) rxcReadSaveSetProfile, (32) rxcInitSaveSetProfile, (33) rxcAddSaveSetNextAppList, (34) rxcAddSaveSetNextFilesPathList, (35) rxcAddNextBackupSetIncWildCard, (36) rx
rofile, (33) rxcAddSaveSetNextAppList, (34) rxcAddSaveSetNextFilesPathList, (35) rxcAddNextBackupSetIncWildCard, (36) rxcGetRevisions, (37) rxrAddMovedUser, (38) rxrSetClientVersion, or (39) rxsSetDataGrowthScheduleAndFilter commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34805 - http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/bsabld-securitynotice.asp - http://secunia.com/advisories/25606 - http://www.securitytracker.com/id?1018216 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35673 - http://osvdb.org/35329 - http://labs.idefense.com/intelligen
www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35673 - http://osvdb.org/35329 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=599 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 - http://www.securityfocus.com/archive/1/480252/100/100/threaded - http://www.vupen.com/english/advisories/2007/2121 - http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp - http://research.eeye.com/html/advisories/published/AD20070920.html - http://www.securitytracker.com/id?1018728 - http://research.eeye.com/html/advisories/upcoming/20070604.html
CVE ID: CVE-2007-3217 State: PUBLISHED Published: 2007-06-14T22:00:00 Last Updated: 2024-08-07T14:05:29.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the path_inc parameter to (1) index.php in gestion/; (2) identification.php, (3) disconnect.php, (4) loginliste.php, (5) loginmodif.php, (6) index.php, and (7) ident.inc.php in ident/; (8) menuadministration.php and (9) menuprincipal.php in menu/; (10) param.inc.php in param/; (11) index.php in plugins/phpgacl/; and (12) index.php and (13) common.inc.php. Additional Analyst
am.inc.php in param/; (11) index.php in plugins/phpgacl/; and (12) index.php and (13) common.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37158 - http://securityreason.com/securityalert/2812 - http://osvdb.org/37155 - http://osvdb.org/37161 - http://www.securityfocus.com/archive/1/470245/100/100/threaded - http://www.securityfocus.com/bid/24266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34679 - http://osvdb.org/37160 - http://osvdb.org/37153 - http://osvdb.org/37151 - http://osvdb.org/37159 - http://osvdb.org/37156 - http://osvdb.org/37157 - http://osvdb.org/37152 - http://osvdb.org/37150 - http://osvdb.org/37154 - http://osvdb.org/37
http://osvdb.org/37157 - http://osvdb.org/37152 - http://osvdb.org/37150 - http://osvdb.org/37154 - http://osvdb.org/37149
CVE ID: CVE-2007-3218 State: PUBLISHED Published: 2007-06-14T22:00:00 Last Updated: 2024-08-07T14:05:29.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in request.php in PHP Live! 3.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the pagex parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels-team.blogspot.com/2007/06/php-live-support-xss-vuln.html - http://www.securityfocus.com/bid/24443 - http://osvdb.org/36814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34828
CVE ID: CVE-2007-3219 State: PUBLISHED Published: 2007-06-14T22:00:00 Last Updated: 2024-08-07T14:05:29.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34841 - http://www.securityfocus.com/bid/24442 - http://secunia.com/advisories/25637 - http://www.osvdb.org/35436 - http://www.vupen.com/english/advisories/2007/2160 - http://forum
nia.com/advisories/25637 - http://www.osvdb.org/35436 - http://www.vupen.com/english/advisories/2007/2160 - http://forums.invisionpower.com/index.php?showtopic=235316
CVE ID: CVE-2007-3220 State: PUBLISHED Published: 2007-06-14T23:00:00 Last Updated: 2024-08-07T14:05:29.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: this may be a duplicate of CVE-2006-4656. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34856 - https://www.exploit-db.com/exploits/4070 - http://secunia.com/advisories/25665 - http://osvdb.o
/vulnerabilities/34856 - https://www.exploit-db.com/exploits/4070 - http://secunia.com/advisories/25665 - http://osvdb.org/36307