Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6658 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbitrary SQL commands via the p parameter in the Console page. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3510 - http://www.securityfocus.com/bid/27069 - http://osvdb.org/39894 - https://www.exploit-db.com/exploits/4809 - http://www.securityfocus.com/archive/1/485633/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39317
CVE ID: CVE-2007-6659 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) contentshort or (2) contentfull parameter in an addnews action to the default URI; (3) the content parameter in a pm write action to 2z/admin.php; (4) the referer parameter to templates/default/usermenu.tpl, accessed through index.php; or the (5) newavatar or (6) newphoto parameter in a profile action to the default URI under 2z/. Additional Analyst Notes: - CVE Program Container:
newphoto parameter in a profile action to the default URI under 2z/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27057 - http://securityreason.com/securityalert/3514 - http://www.securityfocus.com/archive/1/485590/100/0/threaded - http://secunia.com/advisories/28244 - http://2z-project.ru/forum/viewtopic.php?pid=8309
CVE ID: CVE-2007-6660 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: 2z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid template or (2) a request to the default URI with certain year and month parameters, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27057 - http://securityreason.com/securityalert/3514 - http://www.securityfocus.com/archive/1/485590/100/0/threaded - http://2z-project.ru/forum/viewtopic.php?pid=8309
CVE ID: CVE-2007-6661 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: 2z project 0.9.6.1 allows attackers to change the password without supplying the old password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27057 - http://securityreason.com/securityalert/3514 - http://www.securityfocus.com/archive/1/485590/100/0/threaded - http://2z-project.ru/forum/viewtopic.php?pid=8309
CVE ID: CVE-2007-6662 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39885 - http://securityreason.com/securityalert/3515 - http://www.securityfocus.com/archive/1/485632/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39328
CVE ID: CVE-2007-6663 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU Arcade (com_puarcade) 2.0.3, 2.1.2, and 2.1.3 Beta component for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.pragmaticutopia.com/ - http://osvdb.org/39886 - http://osvdb.org/39787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39332 - http://www.pragmaticutopia.com/index.php?option=com_firebo
https://exchange.xforce.ibmcloud.com/vulnerabilities/39332 - http://www.pragmaticutopia.com/index.php?option=com_fireboard&Itemid=121&func=view&id=4407&catid=2#4408 - http://www.vupen.com/english/advisories/2008/0052 - http://secunia.com/advisories/28295 - http://www.pragmaticutopia.com/index2.php?option=com_content&do_pdf=1&id=224 - http://www.securityfocus.com/bid/27089 - https://www.exploit-db.com/exploits/4827
CVE ID: CVE-2007-6664 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:19.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39887 - https://www.exploit-db.com/exploits/4826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39336 - http://www.securityfocus.com/bid/27088
CVE ID: CVE-2007-6665 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL commands via the txtLoginID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39893 - https://www.exploit-db.com/exploits/4824 - http://www.securityfocus.com/bid/27085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39349
CVE ID: CVE-2007-6666 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4823 - http://osvdb.org/39786 - http://www.securityfocus.com/bid/27084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39341 - http://secunia.com/advisories/28281
CVE ID: CVE-2007-6667 State: PUBLISHED Published: 2008-01-04T11:00:00 Last Updated: 2024-08-07T16:18:20.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4822 - http://www.securityfocus.com/bid/27083 - http://osvdb.org/39781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39347 - http://osvdb.org/39782
CVE ID: CVE-2007-6668 State: PUBLISHED Published: 2008-01-08T02:00:00 Last Updated: 2024-08-07T16:18:20.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading (1) a .php file and (2) a .php%00.jpeg file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40211 - https://www.exploit-db.com/exploits/4741 - http://www.securityfocus.com/bid/27062 - http://secunia.com/advisories/28159
CVE ID: CVE-2007-6669 State: PUBLISHED Published: 2008-01-08T02:00:00 Last Updated: 2024-08-07T16:18:19.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2007/12/xss-flaw-posible-sql-injection-in.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39420 - http://secunia.com/advisories/28258 - http://www.securityfocus.com/bid/27066 - http://osvdb.org/40190
CVE ID: CVE-2007-6670 State: PUBLISHED Published: 2008-01-08T02:00:00 Last Updated: 2024-08-07T16:18:20.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2007/12/xss-flaw-posible-sql-injection-in.html - http://osvdb.org/40191 - http://secunia.com/advisories/28258 - http://www.securityfocus.com/bid/27066
CVE ID: CVE-2007-6671 State: PUBLISHED Published: 2008-01-08T11:00:00 Last Updated: 2024-08-07T16:18:20.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Password parameter, a different product than CVE-2006-6021. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39766 - http://www.securityfocus.com/archive/1/485655/100/0/threaded - http://securityreason.com/securityalert/3518 - http://aria-security.net/forum/showthread.php?p=1189 - h
100/0/threaded - http://securityreason.com/securityalert/3518 - http://aria-security.net/forum/showthread.php?p=1189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39326 - http://www.securityfocus.com/bid/27080 - http://secunia.com/advisories/28283
CVE ID: CVE-2007-6672 State: PUBLISHED Published: 2008-01-08T11:00:00 Last Updated: 2024-08-07T16:18:20.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://jira.codehaus.org/browse/JETTY-386#action_117699 - http://osvdb.org/39855 - http://www.vupen.com/english/advisories/2008/0079 - http://www.igniterealtime.org/community/message/163752 - http://jira.codehaus.org/browse/JETTY/fixforversion/13950 - http://www.kb.cert.org/vuls/id/553235 - http://secun
63752 - http://jira.codehaus.org/browse/JETTY/fixforversion/13950 - http://www.kb.cert.org/vuls/id/553235 - http://secunia.com/advisories/28322 - http://secunia.com/advisories/28547 - http://www.securityfocus.com/bid/27117
CVE ID: CVE-2007-6673 State: PUBLISHED Published: 2008-01-08T11:00:00 Last Updated: 2024-08-07T16:18:20.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTML via the ara parameter to the default URI under Ara/ in a search action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39456 - http://www.securityfocus.com/bid/27067 - http://secunia.com/advisories/28262 - http://www.packetstormsecurity.org/0712-exploits/makale-xss.txt
CVE ID: CVE-2007-6674 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T16:18:20.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitrary web script or HTML via the Arayalim parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39491 - http://secunia.com/advisories/28189 - http://www.packetstormsecurity.org/0801-exploits/rapidshare-xss.txt
CVE ID: CVE-2007-6675 State: PUBLISHED Published: 2008-01-08T19:00:00Z Last Updated: 2024-09-16T19:00:47.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not check permissions, which allows remote attackers to read the comments in restricted modules. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=1808484&group_id=41586&atid=430840 - http://secunia.com/advisories/28264 - http://sourceforge.net/project/shownotes.php?group_id=41586&release_id=564689 - http://www.securityfocus.com/bid/27135
CVE ID: CVE-2007-6676 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T16:18:20.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Uber Uploader (UU) 5.3.6 and earlier does not block uploads of (1) .html, (2) .asp, and other possibly dangerous extensions, which allows remote attackers to use these extensions in uploads via (a) uu_file_upload.php, related to uu_file_upload.js and (b) uber_uploader_file.php, related to uber_uploader_file.js, a different issue than CVE-2007-0123. NOTE: the vendor disputes the severity of the issue, noting that it is the administrator's responsibility to "add file extensions that you may or may no
verity of the issue, noting that it is the administrator's responsibility to "add file extensions that you may or may not want uploaded." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485290/100/100/threaded - http://www.securityfocus.com/archive/1/485235/100/100/threaded - http://securityreason.com/securityalert/3519 - http://osvdb.org/43535
CVE ID: CVE-2007-6677 State: PUBLISHED Published: 2008-01-10T00:00:00 Last Updated: 2024-08-07T16:18:20.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Peter's Random Anti-Spam Image 0.2.4 and earlier plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the comment field in the comment form. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43444 - http://websecurity.com.ua/1535/
CVE ID: CVE-2007-6678 State: REJECTED Published: 2008-01-10T01:00:00 Last Updated: 2008-01-19T10:00:00 Description: No description available.
CVE ID: CVE-2007-6679 State: PUBLISHED Published: 2008-01-10T02:00:00 Last Updated: 2024-08-07T16:18:20.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3955 - http://securitytracker.com/id?1019174 - http://www-1.ibm.com/support/docview.wss?uid=swg27006876 - http://www.vupen.com/english/a
curitytracker.com/id?1019174 - http://www-1.ibm.com/support/docview.wss?uid=swg27006876 - http://www.vupen.com/english/advisories/2008/0241 - http://secunia.com/advisories/28588 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK45768&apar=only - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
CVE ID: CVE-2007-6680 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T16:18:20.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to an error in the support for links in the TSD_FILES_LOCK policy. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27177 - http://www.vupen.com/english/advisories/2008/0060 - http://www.securitytracker.com/id?1019158 - http://secunia.com/advisories/28257 - http://www-1.ibm.com/support/docview.wss?uid=
www.securitytracker.com/id?1019158 - http://secunia.com/advisories/28257 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ12119
CVE ID: CVE-2007-6681 State: PUBLISHED Published: 2008-01-17T00:00:00 Last Updated: 2024-08-07T16:18:20.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a (1) MicroDvd, (2) SSA, and (3) Vplayer file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29284 - http://www.debian.org/security/2008/dsa-1543 - http://securityreason.com/securityalert/3550 - https://www.exploit-db.com/exploits/5667 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14334
oit-db.com/exploits/5667 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14334 - http://www.videolan.org/security/sa0801.php - http://secunia.com/advisories/28233 - http://security.gentoo.org/glsa/glsa-200804-25.xml - http://www.securityfocus.com/bid/27015 - http://mailman.videolan.org/pipermail/vlc-devel/2007-June/033394.html - http://wiki.videolan.org/Changelog/0.8.6f - http://secunia.com/advisories/29800 - http://mailman.videolan.org/pipermail/vlc-devel/2007-June/032672.html - http://www.securityfocus.com/archive/1/485488/30/0/threaded - http://secunia.com/advisories/29766 - http://osvdb.org/42207 - http://aluigi.altervista.org/adv/vlcboffs-adv.txt
eaded - http://secunia.com/advisories/29766 - http://osvdb.org/42207 - http://aluigi.altervista.org/adv/vlcboffs-adv.txt - http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml
CVE ID: CVE-2007-6682 State: PUBLISHED Published: 2008-01-17T00:00:00 Last Updated: 2024-08-07T16:18:20.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29284 - http://www.debian.org/security/2008/dsa-1543 - http://securityreason.com/securityalert/3550 - http://secunia.com/advisories/28233 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
p://secunia.com/advisories/28233 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14790 - https://www.exploit-db.com/exploits/5519 - http://www.securityfocus.com/bid/27015 - http://osvdb.org/42208 - http://trac.videolan.org/vlc/changeset/23839 - http://www.securityfocus.com/archive/1/485488/30/0/threaded - http://secunia.com/advisories/29766 - http://aluigi.altervista.org/adv/vlcboffs-adv.txt - http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml
CVE ID: CVE-2007-6683 State: PUBLISHED Published: 2008-01-17T00:00:00 Last Updated: 2024-08-07T16:18:20.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a playlist, or (2) a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28712 - http://secunia.com/advisories/29284 - http://osvdb.org/42205 - http://www.debian.org/security/2008/dsa-1543 - http://osvdb.org/42206 - http://mailman.videolan.org/pipermail/vlc
2205 - http://www.debian.org/security/2008/dsa-1543 - http://osvdb.org/42206 - http://mailman.videolan.org/pipermail/vlc-devel/2007-December/037726.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14619 - http://secunia.com/advisories/29766 - https://trac.videolan.org/vlc/ticket/1371 - https://trac.videolan.org/vlc/changeset/23197 - http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml
CVE ID: CVE-2007-6684 State: PUBLISHED Published: 2008-01-17T00:00:00 Last Updated: 2024-08-07T16:18:20.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request without a Transport parameter, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29284 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14876 - http://mailman.videolan.org/pipermail/vlc-devel/2007-September/034722.html - http://trac.videolan.org/vlc/changeset/22023 - http://www.gentoo.org/
g/pipermail/vlc-devel/2007-September/034722.html - http://trac.videolan.org/vlc/changeset/22023 - http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml
CVE ID: CVE-2007-6685 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T16:18:20.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers to create albums and upload files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://gallery.menalto.com/gallery_2.2.4_released - http://security.gentoo.org/glsa/glsa-200802-04.xml - http://secunia.com/advisories/28898 - http://osvdb.org/41675 - http://bugs.gentoo.org/show_bug.cgi?id=203217
CVE ID: CVE-2007-6686 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T16:18:20.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller. Additional Analyst Notes: - CVE Program Container: References: - http://gallery.menalto.com/gallery_2.2.4_released - http://security.gentoo.org/glsa/glsa-200802-04.xml - http://secunia.com/advisories/28898 - http://osvdb.org/41674 - http://bugs.gentoo.org/show_bug.cgi?id=203217
CVE ID: CVE-2007-6687 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T16:18:20.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject arbitrary web script or HTML via crafted filenames to the (1) Core or (2) add-item modules; or via (3) HTTP PROPPATCH in the WebDAV module. Additional Analyst Notes: - CVE Program Container: References: - http://gallery.menalto.com/gallery_2.2.4_released - http://security.gentoo.org/glsa/glsa-200802-04.xml - http://osvdb.org/41671 - http://osvdb.org/41672 - http://secunia.com/advisories/28898 - http://bugs.gento
00802-04.xml - http://osvdb.org/41671 - http://osvdb.org/41672 - http://secunia.com/advisories/28898 - http://bugs.gentoo.org/show_bug.cgi?id=203217 - http://osvdb.org/41673
CVE ID: CVE-2007-6688 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T16:18:20.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Installation application in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to "web-accessibility protection of the storage folder." Additional Analyst Notes: - CVE Program Container: References: - http://gallery.menalto.com/gallery_2.2.4_released - http://security.gentoo.org/glsa/glsa-200802-04.xml - http://secunia.com/advisories/28898 - http://osvdb.org/41670 - http://bugs.gentoo.org/show_bug.cgi?id=203217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39987