Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
2Cthreat_advisory&tid=299& - http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm - http://osvdb.org/38115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34972 - http://secunia.com/advisories/25747 - http://www.securityfocus.com/bid/24539
CVE ID: CVE-2007-3320 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34971 - http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=300& - http://www.securityfocus.com/bid/24544 - http://secunia.com/a
om/index.php?action=resources%2Cthreat_advisory&tid=300& - http://www.securityfocus.com/bid/24544 - http://secunia.com/advisories/25747 - http://osvdb.org/38116
CVE ID: CVE-2007-3321 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denial of service (device reboot) via a flood of packets to the BOOTP port (68/udp). Additional Analyst Notes: - CVE Program Container: References: - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=301& - https://exchange.xforce.ibmcloud.com/vulnerabilities/34970 - http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm - http://secunia.com/advisories/25747 - http://osvdb.org/38117
CVE ID: CVE-2007-3322 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows remote attackers to cause a denial of service (audio quality loss) via a flood of packets to the RTP port. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-263.htm - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=302& - http://secunia.com/advisories/25747 - https://exchange.xforce.ibmcloud.com/vulner
resources%2Cthreat_advisory&tid=302& - http://secunia.com/advisories/25747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34968 - http://osvdb.org/38118
CVE ID: CVE-2007-3323 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idProduct parameter. NOTE: this might be the same as CVE-2005-2190.2. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34953 - http://www.securityfocus.com/archive/1/471837/100/0/threaded - http://www.securityfocus.com/bid/24562 - http://securityreason.com/securityalert/2819 - http://osvdb.org/36152
CVE ID: CVE-2007-3324 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter to (1) comersus_customerAuthenticateForm.asp or (2) comersus_message.asp, different vectors than CVE-2004-0681. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36154 - http://www.securityfocus.com/archive/1/471837/100/0/threaded - http://www.securityfocus.com/bid/24562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34954 -
7/100/0/threaded - http://www.securityfocus.com/bid/24562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34954 - http://securityreason.com/securityalert/2819 - http://osvdb.org/36153
CVE ID: CVE-2007-3325 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _LIB_DIR parameter, a different vector than CVE-2007-1643 and CVE-2007-2205. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36194 - https://www.exploit-db.com/exploits/4086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34959 - http://www.securityfocus.com/bid/24578
CVE ID: CVE-2007-3326 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to redirect visitors to arbitrary local files via a .. (dot dot) in (1) the loc parameter to admincp/index.php and (2) the Hyperlink information URl field for post Topic in showthread.php, enabling cross-site scripting (XSS) and other attacks, a different vulnerability than CVE-2005-3025.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471838/100/0/threaded - https://exchange.xforce.i
rogram Container: References: - http://www.securityfocus.com/archive/1/471838/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34956 - http://www.securityfocus.com/archive/1/471835/100/0/threaded - http://securityreason.com/securityalert/2820
CVE ID: CVE-2007-3327 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI with a trailing %20 (encoded space). Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2828 - http://www.securityfocus.com/bid/24566 - http://www.securityfocus.com/archive/1/471876/100/0/threaded - http://osvdb.org/38628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34960
CVE ID: CVE-2007-3328 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) module_key parameter to (a) kb/kb.php, (b) quiz/runquiz.php, (c) quiz/quiz.php, (d) forum/forum.php, (e) forum/byname.php, and (f) journal/journalview.php in modules/, and unspecified other scripts; the (2) tag_key parameter to modules/journal/journalview.php; the (3) user_group_key parameter to (g) users/secureaccounts.php; and (4) the request_uri parameter to (h) login.php. Addi
e (3) user_group_key parameter to (g) users/secureaccounts.php; and (4) the request_uri parameter to (h) login.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36921 - http://osvdb.org/36924 - http://osvdb.org/36925 - http://pridels-team.blogspot.com/2007/06/interact-multiple-xss-vuln.html - http://osvdb.org/36923 - http://osvdb.org/36922 - http://osvdb.org/36927 - http://www.securityfocus.com/bid/24573 - http://osvdb.org/36929 - http://osvdb.org/36926 - http://osvdb.org/36928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34958
CVE ID: CVE-2007-3329 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263, and (3) get_inter_block_mpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted (a) Avi, (b) H.263, or (c) MPEG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200708-02.xml - http://secunia.com/advisories/25711 - http://secunia.com/advisories/26353 - http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/bitstream/mbcoding.
sories/25711 - http://secunia.com/advisories/26353 - http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/bitstream/mbcoding.c?r1=1.54&r2=1.55 - http://cvs.xvid.org/cvs/viewvc.cgi/xvidcore/src/bitstream/mbcoding.c - http://osvdb.org/37728 - http://www.securityfocus.com/bid/24561 - http://bugs.gentoo.org/show_bug.cgi?id=183145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34949
CVE ID: CVE-2007-3330 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web script or HTML via a news post, which is stored in news/ without sanitization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34892 - http://securityreason.com/securityalert/2829 - http://osvdb.org/36472 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/064051.html
CVE ID: CVE-2007-3331 State: PUBLISHED Published: 2007-06-21T18:00:00 Last Updated: 2024-08-07T14:14:12.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via (1) a certain HTML form that is posted automatically by JavaScript or (2) a news post. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38617 - http://securityreason.com/securityalert/2829 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/064051.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34893
CVE ID: CVE-2007-3332 State: PUBLISHED Published: 2007-06-21T19:00:00 Last Updated: 2024-08-07T14:14:12.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the name parameter in a modload action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35183 - http://www.securityfocus.com/archive/1/463828/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33214 - http://www.securityfocus.com/bid/23143 - http://securityreason.com/securityalert/2830
CVE ID: CVE-2007-3333 State: PUBLISHED Published: 2007-07-26T22:00:00 Last Updated: 2024-08-07T14:14:12.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code via a large number of terminal control sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26219 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01134 - http://www.vupen.com/english/advisories/2007/2676 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01135 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=570 - http://www.secur
ocview.wss?uid=isg1IZ01135 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=570 - http://www.securitytracker.com/id?1018464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35626 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://www.securityfocus.com/bid/25075
CVE ID: CVE-2007-3334 State: PUBLISHED Published: 2007-06-21T22:00:00 Last Updated: 2024-08-07T14:14:12.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2288 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 - http
vupen.com/english/advisories/2007/2288 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35002 - http://secunia.com/advisories/25756 - http://secunia.com/advisories/25775 - http://osvdb.org/37488 - http://www.vupen.com/english/advisories/2007/2290 - http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/34991 - http://osvdb.org/37487 - http://www.securitytracker.com/id?1018278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34992 - http://www.securityfocus.com
curitytracker.com/id?1018278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34992 - http://www.securityfocus.com/bid/24585
CVE ID: CVE-2007-3335 State: PUBLISHED Published: 2007-06-21T19:00:00 Last Updated: 2024-08-07T14:14:12.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the admin panel in PHPEcho CMS before 1.6 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24461 - http://sourceforge.net/project/shownotes.php?release_id=493155 - http://osvdb.org/34004
CVE ID: CVE-2007-3336 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Computer Associates) products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server Process (iigcc), which calls the (1) QUinsert or (2) QUremove functions with attacker-controlled input. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2288 - http://www.ca.
Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2288 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 - http://secunia.com/advisories/25756 - http://secunia.com/advisories/25775 - http://www.vupen.com/english/advisories/2007/2290 - http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/34993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35000 - http://www.securityfocus.com/bid/24585 - http://osvdb.org/37486 - http://archives.neohapsis.com/archives/bugtraq/2007-06/0302.html - http://www.securityfocus.com/archive/1/472193/100/0/threaded
archives.neohapsis.com/archives/bugtraq/2007-06/0302.html - http://www.securityfocus.com/archive/1/472193/100/0/threaded - http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-1/ - http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-2/
CVE ID: CVE-2007-3337 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2288 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 - http://secunia.com/advisories/25756 - http://secunia.com/advisories/25775 - http://www.vupen.com/english/advisories/2007/2290 -
ecunia.com/advisories/25756 - http://secunia.com/advisories/25775 - http://www.vupen.com/english/advisories/2007/2290 - http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp - http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-file-truncation/ - http://osvdb.org/37485 - http://www.securityfocus.com/archive/1/472200/100/0/threaded - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35451 - http://www.securityfocus.com/bid/24585
CVE ID: CVE-2007-3338 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote attackers to execute arbitrary code via the (1) uuid_from_char or (2) duve_get_args functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472194/100/0/threaded - http://www.vupen.com/english/advisories/2007/2288 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 - http://www.ngssoftwa
h/advisories/2007/2288 - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 - http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-ingres-stack-overflow/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/34995 - http://secunia.com/advisories/25756 - http://secunia.com/advisories/25775 - http://www.vupen.com/english/advisories/2007/2290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34998 - http://www.securityfocus.com/archive/1/472197/100/0/threaded - http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp - http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-stack-overflow/ - http://osvdb.org/37483 - http
ttp://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-stack-overflow/ - http://osvdb.org/37483 - http://www.securityfocus.com/bid/24585
CVE ID: CVE-2007-3339 State: PUBLISHED Published: 2007-06-21T21:00:00 Last Updated: 2024-08-07T14:14:13.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and ColdFusion allow remote attackers to inject arbitrary web script or HTML via the (1) FTVAR_LINKP and (2) FTVAR_URLP parameters to (a) forum/include/error/autherror.cfm, and the (3) FTVAR_SCRIPTRUN parameter to (b) forum/include/common/comfinish.cfm and (c) blog/include/common/comfinish.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37142 - http://osvdb.org
omfinish.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37142 - http://osvdb.org/37141 - http://osvdb.org/37143 - http://www.securityfocus.com/archive/1/471846/100/0/threaded - http://secunia.com/advisories/25707 - http://www.securityfocus.com/archive/1/471853/100/0/threaded - http://securityreason.com/securityalert/2842 - http://www.securityfocus.com/bid/24563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34955 - http://www.securityfocus.com/bid/24564
CVE ID: CVE-2007-3340 State: PUBLISHED Published: 2007-06-21T22:00:00 Last Updated: 2024-08-07T14:14:12.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a large number of requests for nonexistent pages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25760 - http://securityreason.com/securityalert/2822 - http://www.securityfocus.com/bid/24576 - http://www.exploit-db.com/exploits/9478 - http://www.securityfocus.com/archive/1/471917/100/0/threaded - http://osvdb.org/37582 - https://exchange.xforce.ibmcloud.com/vulner
securityfocus.com/archive/1/471917/100/0/threaded - http://osvdb.org/37582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34976
CVE ID: CVE-2007-3341 State: PUBLISHED Published: 2007-06-21T23:00:00 Last Updated: 2024-08-07T14:14:12.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" via unspecified vectors, a different issue than CVE-2007-0217. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=473 - http://osvdb.org/36398
CVE ID: CVE-2007-3342 State: PUBLISHED Published: 2007-06-21T23:00:00 Last Updated: 2024-08-07T14:14:13.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject arbitrary web script or HTML via comments that have (1) a malformed SGML numeric character reference with a '\0' (0x00) character in a javascript: URI or (2) an attribute in an element that lacks the '>' character at the end of the start tag, a different vulnerability than CVE-2007-0231. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2821 - http://osvdb.
ional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2821 - http://osvdb.org/38621 - http://www.sixapart.com/movabletype/beta/distros/MT-3.34-beta-Release-Notes.html - http://www.securityfocus.com/archive/1/458196/100/0/threaded
CVE ID: CVE-2007-3343 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:13.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RaidenHTTPD before 2.0.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25752 - http://www.raidenhttpd.com/jp/security.html - http://www.securityfocus.com/bid/24568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34961 - http://jvn.jp/jp/JVN%2390438169/index.html - http://www.vupen.com/english/advisories/2007/2283 - http://osvdb.org/36369 - h
p://jvn.jp/jp/JVN%2390438169/index.html - http://www.vupen.com/english/advisories/2007/2283 - http://osvdb.org/36369 - http://www.securitytracker.com/id?1018283
CVE ID: CVE-2007-3344 State: PUBLISHED Published: 2007-06-22T18:00:00 Last Updated: 2024-08-07T14:14:12.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in netjukebox 4.01b allow remote attackers to inject arbitrary web script or HTML via the (1) album_id, (2) order, (3) sort, (4) filter, and (5) genre_id parameters to (a) index.php; and the (6) url parameter to (b) ridirect.php. NOTE: the attack also reveals the installation path. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2292 - http://pridels-team.blogspot.com/2007/06/netjukebox-vuln.html - http://www.netju
upen.com/english/advisories/2007/2292 - http://pridels-team.blogspot.com/2007/06/netjukebox-vuln.html - http://www.netjukebox.nl/changelog.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/35007 - http://osvdb.org/36893 - http://www.securityfocus.com/bid/24577 - http://osvdb.org/36892 - http://secunia.com/advisories/25741