Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0549 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in list3.php in 212cafeBoard 6.30 Beta allows remote attackers to inject arbitrary web script or HTML via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31650 - http://www.securityfocus.com/archive/1/457611/100/0/threaded
CVE ID: CVE-2007-0550 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or HTML via keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2212 - http://www.securityfocus.com/archive/1/457611/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31651
CVE ID: CVE-2007-0551 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) pth[file][config] and (2) pth[file][image] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33572 - http://securityreason.com/securityalert/2195 - http://www.securityfocus.com/archive/1/457668/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31658
CVE ID: CVE-2007-0552 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in install/default/error404.html in Oh no! Not another CMS (Onnac) 0.0.8.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the error_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://onnac.svn.sourceforge.net/viewvc/onnac/trunk/install/default/error404.html?view=log - http://sourceforge.net/forum/forum.php?forum_id=655260 - http://www.vupen.com/english/advisories/2007/0347 - http://www.securityfocus.com/bid/22256 - http
.php?forum_id=655260 - http://www.vupen.com/english/advisories/2007/0347 - http://www.securityfocus.com/bid/22256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31795 - http://osvdb.org/36811
CVE ID: CVE-2007-0553 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) data[realm] and (2) _url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=479999&group_id=110693 - http://www.vupen.com/english/advisories/2007/0348 - http://www.secur
t/shownotes.php?release_id=479999&group_id=110693 - http://www.vupen.com/english/advisories/2007/0348 - http://www.securityfocus.com/bid/22255 - http://osvdb.org/36812
CVE ID: CVE-2007-0554 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in print.asp in Guo Xu Guos Posting System (GPS) 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458061/100/0/threaded - http://www.vupen.com/english/advisories/2007/0353 - http://www.securityfocus.com/bid/22232 - http://osvdb.org/31635 - http://securityreason.com/securityalert/2209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31759 - http://secunia.co
//securityreason.com/securityalert/2209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31759 - http://secunia.com/advisories/23929 - https://www.exploit-db.com/exploits/3195
CVE ID: CVE-2007-0555 State: PUBLISHED Published: 2007-02-06T01:00:00 Last Updated: 2024-08-07T12:19:30.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-1025 - http://secunia.com/advisories/24050 - http://www.securityfocus.com/bid/22387 - http://secunia.com/advisori
se/RPL-1025 - http://secunia.com/advisories/24050 - http://www.securityfocus.com/bid/22387 - http://secunia.com/advisories/24513 - http://www.debian.org/security/2007/dsa-1261 - http://secunia.com/advisories/24315 - http://www.redhat.com/support/errata/RHSA-2007-0068.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9739 - http://secunia.com/advisories/24158 - http://www.securityfocus.com/archive/1/459448/100/0/threaded - http://www.vupen.com/english/advisories/2007/0774 - http://www.securityfocus.com/archive/1/459280/100/0/threaded - http://www.vupen.com/english/advisories/2007/0478 - http://osvdb.org/33087 - http://secunia.com/advisories/24151 -
ed - http://www.vupen.com/english/advisories/2007/0478 - http://osvdb.org/33087 - http://secunia.com/advisories/24151 - http://www.ubuntu.com/usn/usn-417-2 - http://secunia.com/advisories/24284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32195 - http://secunia.com/advisories/24577 - http://secunia.com/advisories/24033 - http://securitytracker.com/id?1017597 - https://usn.ubuntu.com/417-1/ - https://issues.rpath.com/browse/RPL-830 - http://www.novell.com/linux/security/advisories/2007_10_sr.html - http://www.postgresql.org/support/security - http://fedoranews.org/cms/node/2554 - http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm - http://www.trustix.org/errata/2007/0007 -
cms/node/2554 - http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm - http://www.trustix.org/errata/2007/0007 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:037 - http://www.redhat.com/support/errata/RHSA-2007-0064.html - http://www.redhat.com/support/errata/RHSA-2007-0067.html - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://secunia.com/advisories/24057 - http://secunia.com/advisories/25220 - http://secunia.com/advisories/24042 - http://secunia.com/advisories/24028 - http://lists.rpath.com/pipermail/security-announce/2007-February/000141.html - http://secunia.com/advisories/24094 - http://sunsolve.sun.com/search/document.do?assetkey
ce/2007-February/000141.html - http://secunia.com/advisories/24094 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102825-1 - http://security.gentoo.org/glsa/glsa-200703-15.xml
CVE ID: CVE-2007-0556 State: PUBLISHED Published: 2007-02-06T01:00:00 Last Updated: 2024-08-07T12:19:30.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-1025 - http://secunia.com/advisories/
Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-1025 - http://secunia.com/advisories/24050 - http://www.securityfocus.com/bid/22387 - http://secunia.com/advisories/24513 - http://secunia.com/advisories/24315 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32191 - http://www.redhat.com/support/errata/RHSA-2007-0068.html - http://www.securityfocus.com/archive/1/459448/100/0/threaded - http://www.vupen.com/english/advisories/2007/0774 - http://www.securityfocus.com/archive/1/459280/100/0/threaded - http://www.vupen.com/english/advisories/2007/0478 - http://sec
//www.securityfocus.com/archive/1/459280/100/0/threaded - http://www.vupen.com/english/advisories/2007/0478 - http://secunia.com/advisories/24151 - http://www.ubuntu.com/usn/usn-417-2 - http://secunia.com/advisories/24577 - http://secunia.com/advisories/24033 - http://securitytracker.com/id?1017597 - https://usn.ubuntu.com/417-1/ - https://issues.rpath.com/browse/RPL-830 - http://www.novell.com/linux/security/advisories/2007_10_sr.html - http://www.postgresql.org/support/security - http://fedoranews.org/cms/node/2554 - http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm - http://www.trustix.org/errata/2007/0007 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:037 - http
7.htm - http://www.trustix.org/errata/2007/0007 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:037 - http://www.redhat.com/support/errata/RHSA-2007-0067.html - http://secunia.com/advisories/24057 - http://secunia.com/advisories/25220 - http://secunia.com/advisories/24042 - http://secunia.com/advisories/24028 - http://osvdb.org/33302 - http://lists.rpath.com/pipermail/security-announce/2007-February/000141.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102825-1 - http://security.gentoo.org/glsa/glsa-200703-15.xml
CVE ID: CVE-2007-0557 State: PUBLISHED Published: 2007-01-29T22:00:00 Last Updated: 2024-08-07T12:19:30.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32971 - https://issues.rpath.com/browse/RPL-1002
CVE ID: CVE-2007-0558 State: PUBLISHED Published: 2007-01-30T16:00:00 Last Updated: 2024-08-07T12:19:30.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/mail/main.php in Inter7 vHostAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the MODULES_DIR parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3191 - http://www.vupen.com/english/advisories/2007/0339 - http://osvdb.org/36627
CVE ID: CVE-2007-0559 State: PUBLISHED Published: 2007-01-30T16:00:00 Last Updated: 2024-08-07T12:19:30.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in RPW 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the sql_language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0342 - http://osvdb.org/36626 - https://www.exploit-db.com/exploits/3185
CVE ID: CVE-2007-0560 State: PUBLISHED Published: 2007-01-30T16:00:00 Last Updated: 2024-08-07T12:26:53.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31619 - https://www.exploit-db.com/exploits/3186 - http://secunia.com/advisories/23894 - http://www.securityfocus.com/bid/22212 - http://www.securityfocus.com/archive/1/458058/100/100/threaded - http://www.vupen.com/english/advisories/2007/0341 - https://exchange.xforce.ibmcloud.com/vulnerabilities
/100/threaded - http://www.vupen.com/english/advisories/2007/0341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31723
CVE ID: CVE-2007-0561 State: PUBLISHED Published: 2007-01-30T16:00:00 Last Updated: 2024-08-07T12:26:53.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) admin_linkdb.php, (2) admin_forum_prune.php, (3) admin_extensions.php, (4) admin_board.php, (5) admin_attachments.php, or (6) admin_users.php in admin/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31977 - http://secunia.com/advisories/23952 - http://osvdb.org/31978 - http://www.securityfocus.com/bid/22227 - https://exch
7 - http://secunia.com/advisories/23952 - http://osvdb.org/31978 - http://www.securityfocus.com/bid/22227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31767 - https://www.exploit-db.com/exploits/3192 - http://osvdb.org/31980 - http://www.vupen.com/english/advisories/2007/0338 - http://osvdb.org/31634 - http://osvdb.org/31979 - http://osvdb.org/31981 - http://www.securityfocus.com/archive/1/458059/100/0/threaded
CVE ID: CVE-2007-0562 State: PUBLISHED Published: 2007-01-30T16:00:00 Last Updated: 2024-08-07T12:26:53.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .avi file, which triggers the crash when the user right clicks on the file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3190 - http://osvdb.org/43307
CVE ID: CVE-2007-0563 State: PUBLISHED Published: 2007-01-30T16:00:00 Last Updated: 2024-08-07T12:26:53.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html - http://www.vupen.com/english/advisories/2007/0330 - http://secunia.com/advisories/23896 - http://osvdb.org/32960 - http://s
p://www.vupen.com/english/advisories/2007/0330 - http://secunia.com/advisories/23896 - http://osvdb.org/32960 - http://securitytracker.com/id?1017558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31750 - http://osvdb.org/32961 - http://www.securityfocus.com/bid/22184
CVE ID: CVE-2007-0564 State: PUBLISHED Published: 2007-01-30T16:00:00 Last Updated: 2024-08-07T12:26:53.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html - http://www.vupen.com/english/advisories/2007/0330 - http://secunia.com/advisories/23896 - http://securitytracker.com/id?1017558
CVE ID: CVE-2007-0565 State: PUBLISHED Published: 2007-01-30T16:00:00 Last Updated: 2024-08-07T12:26:53.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: CGI-Rescue Shopping Basket Professional 7.50 and earlier allows remote attackers to inject arbitrary operating system commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31622 - http://secunia.com/advisories/23909 - http://www.securityfocus.com/bid/22245 - http://jvn.jp/jp/JVN%2382258242/index.html
CVE ID: CVE-2007-0566 State: PUBLISHED Published: 2007-01-30T16:00:00 Last Updated: 2024-08-07T12:26:53.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news_detail.asp in ASP NEWS 3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22214 - http://www.securityfocus.com/archive/1/458057/100/100/threaded - http://osvdb.org/33582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31719 - http://www.vupen.com/english/advisories/2007/0340 - https://www.exploit-db.com/exploits/3187
CVE ID: CVE-2007-0567 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in Interactive-Scripts.Com PHP Membership Manager 1.5 allows remote attackers to inject arbitrary web script or HTML via the _p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458226/100/0/threaded - http://osvdb.org/33601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31916 - http://www.securityfocus.com/bid/22263
CVE ID: CVE-2007-0568 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in system/lib/package.php in MyPHPCommander 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the gl_root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22257 - http://secunia.com/advisories/23890 - http://www.vupen.com/english/advisories/2007/0385 - https://www.exploit-db.com/exploits/3201 - http://osvdb.org/32055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31906
CVE ID: CVE-2007-0569 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a shownews action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31855 - https://www.exploit-db.com/exploits/3216 - http://osvdb.org/32999 - http://www.securityfocus.com/bid/22284 - http://secunia.com/advisories/23954
CVE ID: CVE-2007-0570 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ains_main.php in Johannes Gijsbers (aka Taradino) Ad Fundum Integratable News Script (AINS) 0.02b allows remote attackers to execute arbitrary PHP code via a URL in the ains_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0384 - http://www.securityfocus.com/bid/22259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31850 - https://www.exploit-db.com/exploits/3202 - http://osvdb.org/36620
CVE ID: CVE-2007-0571 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/lib/lib_head.php in phpMyReports 3.0.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPathModule parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33003 - http://www.vupen.com/english/advisories/2007/0386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31857 - http://www.securityfocus.com/bid/22290 - https://www.exploit-db.com/exploits/3212 - http://secunia.com/advisories/23959
CVE ID: CVE-2007-0572 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/irc/phpIRC.php in Drunken:Golem Gaming Portal 0.5.1 Alpha 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31873 - http://osvdb.org/36619 - https://www.exploit-db.com/exploits/3207 - http://www.vupen.com/english/advisories/2007/0390
CVE ID: CVE-2007-0573 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racineTBS parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31861 - http://www.vupen.com/english/advisories/2007/0392 - http://osvdb.org/32994 - http://www.attrition.org/pipermail/vim/2007-January/001257.html - https://www.exploit-db.com/exploits/3205 - http://www.securityfocus.com/bid
org/pipermail/vim/2007-January/001257.html - https://www.exploit-db.com/exploits/3205 - http://www.securityfocus.com/bid/22277 - http://secunia.com/advisories/23969
CVE ID: CVE-2007-0574 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36631 - http://www.securityfocus.com/bid/22282
CVE ID: CVE-2007-0575 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in ASPCode.net AdMentor allow remote attackers to execute arbitrary SQL commands via the (1) Userid and (2) Password fields. Additional Analyst Notes: - CVE Program Container: References: - http://forums.avenir-geopolitique.net/viewtopic.php?t=2606 - http://www.securityfocus.com/archive/1/460632/100/100/threaded - http://securityreason.com/securityalert/2207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31908 - http://www.securit
/securityreason.com/securityalert/2207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31908 - http://www.securityfocus.com/archive/1/458303/100/0/threaded - http://www.securityfocus.com/bid/22281
CVE ID: CVE-2007-0576 State: PUBLISHED Published: 2007-01-30T17:00:00 Last Updated: 2024-08-07T12:26:53.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in xt_counter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the server_base_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23967 - http://osvdb.org/32980 - http://seclists.org/bugtraq/2007/Jan/0643.html - http://www.vupen.com/english/advisories/2007/0387 - http://www.xt-scripts.com/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/31871 - https://www.exploit-db.c
387 - http://www.xt-scripts.com/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/31871 - https://www.exploit-db.com/exploits/3209 - http://www.securityfocus.com/bid/22276