Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
chives/security-announce//2008/Jul/msg00003.html - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html - http://www.redhat.com/support/errata/RHSA-2007-1003.html - http://secunia.com/advisories/29242 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:193 - https://issues.rpath.com/browse/RPL-1770 - http://secunia.com/advisories/27186 - http://secunia.com/advisories/27851 - http://www.vupen.com/english/advisories/2008/2268 - http://secunia.com/advisories/30124 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://secunia.com/advisories/27394 - http://www.openbsd.org/errata41.html - http://www.securityfocus.com/archive/1
ml - http://secunia.com/advisories/27394 - http://www.openbsd.org/errata41.html - http://www.securityfocus.com/archive/1/481506/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10904 - http://www.securityfocus.com/archive/1/485936/100/0/threaded - http://secunia.com/advisories/31308 - http://secunia.com/advisories/22130 - http://secunia.com/advisories/27031 - http://lists.vmware.com/pipermail/security-announce/2008/000002.html - http://www.vupen.com/english/advisories/2007/3625 - http://www.securityfocus.com/archive/1/480855/100/0/threaded - http://security.freebsd.org/advisories/FreeBSD-SA-07:08.openssl.asc - https://usn.ubuntu.com/522-
80855/100/0/threaded - http://security.freebsd.org/advisories/FreeBSD-SA-07:08.openssl.asc - https://usn.ubuntu.com/522-1/ - http://www.vupen.com/english/advisories/2008/2361 - http://secunia.com/advisories/27217 - http://secunia.com/advisories/31467 - http://secunia.com/advisories/27961 - http://www.redhat.com/support/errata/RHSA-2007-0964.html - http://secunia.com/advisories/27870 - http://www.securityfocus.com/bid/25831 - http://www.debian.org/security/2007/dsa-1379 - http://www.vupen.com/english/advisories/2007/4042 - http://www.securityfocus.com/archive/1/481488/100/0/threaded - http://secunia.com/advisories/27330 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18
threaded - http://secunia.com/advisories/27330 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4038 - http://secunia.com/advisories/30161 - http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4037 - http://www.vmware.com/security/advisories/VMSA-2008-0013.html - http://secunia.com/advisories/28368 - https://issues.rpath.com/browse/RPL-1769 - http://secunia.com/advisories/27012 - http://securityreason.com/securityalert/3179 - http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm - http://secunia.com/advisories/27229 - http://secunia.com/advisories/27051 - http://secunia.com/a
rity/ASA-2007-485.htm - http://secunia.com/advisories/27229 - http://secunia.com/advisories/27051 - http://secunia.com/advisories/31326 - http://secunia.com/advisories/27078 - http://security.gentoo.org/glsa/glsa-200710-06.xml - http://www.securityfocus.com/archive/1/484353/100/0/threaded - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc - http://www.openssl.org/news/secadv_20071012.txt - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200858-1 - http://www.openbsd.org/errata40.html - http://www.openbsd.org/errata42.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36837 - http://www.redhat.com/support/errata/RHSA-2007-0813.html - http://www.n
ange.xforce.ibmcloud.com/vulnerabilities/36837 - http://www.redhat.com/support/errata/RHSA-2007-0813.html - http://www.novell.com/linux/security/advisories/2007_20_sr.html - http://www.vupen.com/english/advisories/2007/3325 - http://www.vupen.com/english/advisories/2007/4144 - http://www.vmware.com/security/advisories/VMSA-2008-0001.html - http://www.vupen.com/english/advisories/2008/0064 - http://secunia.com/advisories/27021 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103130-1 - http://www.securityfocus.com/archive/1/486859/100/0/threaded
CVE ID: CVE-2007-5136 State: PUBLISHED Published: 2007-09-28T21:00:00 Last Updated: 2024-08-07T15:24:40.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DFD Cart 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39625 - http://sourceforge.net/forum/forum.php?forum_id=738710 - http://www.vupen.com/english/advisories/2007/3255
CVE ID: CVE-2007-5137 State: PUBLISHED Published: 2007-09-28T21:00:00 Last Updated: 2024-08-07T15:24:41.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9540 - https://www.redhat.com/archives
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9540 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00261.html - http://bugs.gentoo.org/show_bug.cgi?id=192539 - http://secunia.com/advisories/26942 - http://secunia.com/advisories/27086 - http://www.redhat.com/support/errata/RHSA-2008-0136.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:200 - http://www.debian.org/security/2009/dsa-1743 - http://security.gentoo.org/glsa/glsa-200710-07.xml - http://secunia.com/advisories/27295 - http://sourceforge.net/project/shownotes.php?release_id=541207 - http://secunia.com/advisories/27229 - http://www.ubuntu.com/usn/usn-529-1
net/project/shownotes.php?release_id=541207 - http://secunia.com/advisories/27229 - http://www.ubuntu.com/usn/usn-529-1 - http://secunia.com/advisories/27182 - http://www.attrition.org/pipermail/vim/2007-October/001826.html - http://secunia.com/advisories/29069 - http://secunia.com/advisories/27207 - http://www.novell.com/linux/security/advisories/2007_20_sr.html - http://www.securityfocus.com/bid/25826
CVE ID: CVE-2007-5138 State: PUBLISHED Published: 2007-09-28T21:00:00 Last Updated: 2024-08-07T15:24:41.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25833 - https://www.exploit-db.com/exploits/4461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36830
CVE ID: CVE-2007-5139 State: PUBLISHED Published: 2007-09-28T21:00:00 Last Updated: 2024-08-07T15:24:40.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4462 - http://www.securityfocus.com/bid/25835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36829
CVE ID: CVE-2007-5140 State: PUBLISHED Published: 2007-09-28T21:00:00 Last Updated: 2024-08-07T15:24:41.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in IntegraMOD Nederland 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3307 - https://www.exploit-db.com/exploits/4463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36832 - http://www.securityfocus.com/bid/25832 - http://secunia.com/advisories/26991
CVE ID: CVE-2007-5141 State: PUBLISHED Published: 2007-09-28T21:00:00 Last Updated: 2024-08-07T15:24:40.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary SQL commands via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3178 - http://www.waraxe.us/advisory-55.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36836 - http://www.securityfocus.com/archive/1/480814/100/0/threaded
CVE ID: CVE-2007-5142 State: PUBLISHED Published: 2007-09-28T21:00:00Z Last Updated: 2024-09-16T22:09:14.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25828
CVE ID: CVE-2007-5143 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted (1) archive or (2) packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to system32 could also shut off F-Secure Anti-Virus. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36833 - http://www.f-secure.com/security/fsc-2007-6.shtml - http:/
https://exchange.xforce.ibmcloud.com/vulnerabilities/36833 - http://www.f-secure.com/security/fsc-2007-6.shtml - http://www.securityfocus.com/bid/25824 - http://www.securitytracker.com/id?1018745 - http://osvdb.org/41377 - http://www.vupen.com/english/advisories/2007/3277 - http://secunia.com/advisories/26948
CVE ID: CVE-2007-5144 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service (application crash or system crash) and possibly execute arbitrary code by placing a malformed file in a new folder under the Sharing Folders path, and triggering a synchronize operation through the Windows MSN Live online service, possibly related to extended file attributes and possibly related to an incomplete fix for MS07-046, as demonstrated by a (1) .jpg, (2) .g
o extended file attributes and possibly related to an incomplete fix for MS07-046, as demonstrated by a (1) .jpg, (2) .gif, (3) .wmf, (4) .doc, or (5) .ico file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45523 - http://lostmon.blogspot.com/2007/09/windows-live-messenger-jpg-overflow.html - http://www.securityfocus.com/bid/25795
CVE ID: CVE-2007-5145 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in system DLL files in Microsoft Windows XP, as used by Microsoft Windows Explorer (explorer.exe) 6.00.2900.2180, Don Ho Notepad++, unspecified Adobe Macromedia applications, and other programs, allow user-assisted remote attackers to cause a denial of service (application crash) via long strings in the (1) author, (2) title, (3) subject, and (4) comment Properties fields of a file, possibly involving improper handling of extended file attributes by the (a) NtQueryInformationFile, (b) NtQueryDirectory
possibly involving improper handling of extended file attributes by the (a) NtQueryInformationFile, (b) NtQueryDirectoryFile, (c) NtSetInformationFile, (d) FileAllInformation, (e) FileNameInformation, and other FILE_INFORMATION_CLASS functions in ntdll.dll and the (f) GetFileAttributesExW and (g) GetFileAttributesW functions in kernel32.dll, a related issue to CVE-2007-1347. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41064 - http://lostmon.blogspot.com/2007/06/buffer-overflow-in-extended-file.html - http://osvdb.org/41065
CVE ID: CVE-2007-5146 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in dedi-group Der Dirigent 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the dedi_path parameter to (1) inc.generate_code.php, (2) fnc.type_forms.php, or (3) fnc.type.php in backend/inc/, or (4) frontend.php or (5) backend.php in projekt01/cms/inc/; or (6) the this_dir parameter to backend/inc/class.filemanager.php. NOTE: vectors 4 and 5 are disputed by CVE because PHP encounters a fatal function-call error on a direct request for the file, before reach
5 are disputed by CVE because PHP encounters a fatal function-call error on a direct request for the file, before reaching the include statement. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45536 - http://osvdb.org/45538 - http://osvdb.org/45540 - http://osvdb.org/45539 - http://osvdb.org/45537 - http://arfis.wordpress.com/2007/09/14/rfi-02-der-dirigent/ - http://osvdb.org/45535
CVE ID: CVE-2007-5147 State: PUBLISHED Published: 2007-10-01T00:00:00Z Last Updated: 2024-09-16T20:06:59.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Puzzle Apps CMS 2.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the MODULEDIR parameter to (1) core/modules/my/my.module.php or (2) core/modules/xml/xml.module.php; the COREROOT parameter to (3) config.loader.php, (4) platform.loader.php, (5) core.loader.php, (6) person.loader.php, or (7) module.loader.php in core/ or (8) install/steps/step_3.php; or the THISDIR parameter to (9) people.lib.php, (10) general.lib.php, (11) content.lib.php, or (12) tem
teps/step_3.php; or the THISDIR parameter to (9) people.lib.php, (10) general.lib.php, (11) content.lib.php, or (12) templates.lib.php in core/modules/admin/libs/ or (13) core/modules/webstat/MEC/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-02-puzzle-apps-cms/
CVE ID: CVE-2007-5148 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/logout.php or certain PHP scripts under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, (7) purchasing/, (8) reporting/, (9) sales/, or (10) taxes/. NOTE: the config.php vector is already covered by CVE-2007-4279, and the login.php and language.php vectors are already covered by CVE-2007-5117. NOTE: this issue is disp
CVE-2007-4279, and the login.php and language.php vectors are already covered by CVE-2007-5117. NOTE: this issue is disputed by CVE because path_to_root is defined before use in all of the other files reported in the original disclosure Additional Analyst Notes: - CVE Program Container: References: - http://arfis.wordpress.com/2007/09/14/rfi-02-frontaccounting/ - http://osvdb.org/45524
CVE ID: CVE-2007-5149 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:41.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in NewsCMS/news/newstopic_inc.php in North Country Public Radio Public Media Manager (PMM) 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the indir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25860 - http://osvdb.org/37399 - http://arfis.wordpress.com/2007/09/14/rfi-02-public-media-manager/ - http://www.vupen.com/english/advisories/2007/3310 - http://www.securityfocus.com/archive/1/481073/100/0/threa
manager/ - http://www.vupen.com/english/advisories/2007/3310 - http://www.securityfocus.com/archive/1/481073/100/0/threaded - https://www.exploit-db.com/exploits/4465 - http://secunia.com/advisories/27020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36866
CVE ID: CVE-2007-5150 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:41.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the is_god function in includes/nukesentinel.php in NukeSentinel 2.5.11 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie, a different vector than CVE-2007-5125. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-56.html - http://www.securityfocus.com/bid/25827 - http://www.nukescripts.net/index.php?op=NEArticle&sid=4076 - http://securityreason.com/securityalert/3181 - http://www.securityfocus.com/archi
.net/index.php?op=NEArticle&sid=4076 - http://securityreason.com/securityalert/3181 - http://www.securityfocus.com/archive/1/480812/100/0/threaded
CVE ID: CVE-2007-5151 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:42.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the abget_admin function in includes/nukesentinel.php in NukeSentinel 2.5.12 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26990 - http://www.vupen.com/english/advisories/2007/3308 - http://www.securityfocus.com/bid/25830 - http://www.waraxe.us/advisory-58.html - http://www.securityfocus.com/archive/1/480846/100/0/threaded
CVE ID: CVE-2007-5152 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:41.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform administrative tasks. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103069-1 - http://www.vupen.com/english/advisories/2007/3282 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200839-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200839-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36846 - http://osvdb.org/37758 - http://www.securitytracker.com/id?1018753 - http://secunia.com/advisories/26976 - http://www.securityfocus.com/bid/25842
CVE ID: CVE-2007-5153 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103069-1 - http://www.vupen.com/english/advisories/2007/3282 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200839-1 - http://securitytracker.com/id?1018753 - http://osvdb.org/37757 - http
un.com/search/document.do?assetkey=1-66-200839-1 - http://securitytracker.com/id?1018753 - http://osvdb.org/37757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36847 - http://secunia.com/advisories/26976 - http://www.securityfocus.com/bid/25842
CVE ID: CVE-2007-5154 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2370075625/index.html - http://osvdb.org/41380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36850 - http://secunia.com/advisories/27004 - http://www.securityfocus.com/bid/25843
CVE ID: CVE-2007-5155 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:41.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://vuln.sg/iceows420b-en.html - http://www.securityfocus.com/bid/25844 - http://osvdb.org/41381 - http://secunia.com/advisories/26973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36843 - http://www.vupen.com/engl
://secunia.com/advisories/26973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36843 - http://www.vupen.com/english/advisories/2007/3312
CVE ID: CVE-2007-5156 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:40.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php." and has an unknown extension, which is recognized as a .php file by the Apache HTTP server, a different vulnerability than CVE-2006-0658 and CVE-2006-2529. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec
ty than CVE-2006-0658 and CVE-2006-2529. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30677 - http://sourceforge.net/forum/forum.php?forum_id=743930 - http://dev.fckeditor.net/ticket/1325 - https://www.exploit-db.com/exploits/5688 - http://www.waraxe.us/advisory-57.html - http://www.securityfocus.com/bid/29422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42733 - https://www.exploit-db.com/exploits/5618 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42425 - http://sourceforge.net/project/shownotes.php?release_id=546000 - http://secunia.com/advisories/27123 - http
ties/42425 - http://sourceforge.net/project/shownotes.php?release_id=546000 - http://secunia.com/advisories/27123 - http://securityreason.com/securityalert/3182 - http://dev.fckeditor.net/changeset/973 - http://www.securityfocus.com/archive/1/480830/100/0/threaded - http://secunia.com/advisories/27174 - http://www.vupen.com/english/advisories/2007/3464 - http://www.vupen.com/english/advisories/2007/3465 - http://downloads.securityfocus.com/vulnerabilities/exploits/30677.php
CVE ID: CVE-2007-5157 State: PUBLISHED Published: 2007-10-01T00:00:00 Last Updated: 2024-08-07T15:24:41.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser (PhFiTo) 1.3.0 in phpFidoNode allows remote attackers to execute arbitrary PHP code via a URL in the SRC_PATH parameter to phfito-post. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25839 - http://www.vupen.com/english/advisories/2007/3313 - https://www.exploit-db.com/exploits/4464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36849 - http://osvdb.org/39643