deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-1639
Published: 2007-03-23
Description: Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the (1) calendar or (2) file management module, or possibly unspecified other files.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/35163; http://secunia.com/advisories/24509; http://secunia.com/advisories/25748
CVE: CVE-2007-1640
Published: 2007-03-23
Description: Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to (1) language.php and (2) phpadmin/survey.php.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37214; http://osvdb.org/37215; http://www.securityfocus.com/bid/23095
CVE: CVE-2007-1641
Published: 2007-03-23
Description: SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the idnews parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34410; http://secunia.com/advisories/24620; http://www.securityfocus.com/bid/23096
CVE: CVE-2007-1642
Published: 2007-03-24
Description: Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/34525; http://secunia.com/advisories/24707; http://securityreason.com/securityalert/2479
CVE: CVE-2007-1643
Published: 2007-03-24
Description: Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG[directories][userpanel_dir] parameter to userpanel.php or the (2) _LIB_DIR parameter to welcome.php.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/24621; http://www.attrition.org/pipermail/vim/2007-April/001560.html; http://www.securityfocus.com/bid/23099
CVE: CVE-2007-1644
Published: 2007-03-24
Description: The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote attackers to change DNS records for a web proxy server and conduct man-in-the-middle (MITM) attacks on web traffic, conduct pharming attacks by poisoning DNS records, and cause a denial of service (erroneous name resolution).
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/43603; https://exchange.xforce.ibmcloud.com/vulnerabilities/33473; https://www.exploit-db.com/exploits/3544
CVE: CVE-2007-1645
Published: 2007-03-24
Description: Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69.  NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812.
CVSS Score: 10.0 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/33188; https://www.exploit-db.com/exploits/3541; https://exchange.xforce.ibmcloud.com/vulnerabilities/33188
CVE: CVE-2007-1646
Published: 2007-03-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in SubHub 2.3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the searchtext parameter to (a) /search, or the (2) message parameter to (b) /calendar or (c) /subscribe.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/2475; http://www.securityfocus.com/archive/1/463488/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/33161
CVE: CVE-2007-1647
Published: 2007-03-24
Description: Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password hashes, and other sensitive information via a direct request for session (sess_*) files in moodledata/sessions/.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/43558; https://exchange.xforce.ibmcloud.com/vulnerabilities/33147; https://www.exploit-db.com/exploits/3508
CVE: CVE-2007-1648
Published: 2007-03-24
Description: 0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/43557; http://www.securityfocus.com/bid/23101; https://exchange.xforce.ibmcloud.com/vulnerabilities/33224
CVE: CVE-2007-1649
Published: 2007-03-24
Description: PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input string beginning with S:, which does not properly track the number of input bytes being processed.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/24630; http://us2.php.net/releases/5_2_2.php; http://www.mandriva.com/security/advisories?name=MDVSA-2008:126
CVE: CVE-2007-1650
Published: 2007-03-24
Description: pcapsipdump.cpp in pcapsipdump before 0.1.3 allows remote attackers to cause a denial of service (application crash) via a malformed SIP packet, which results in a NULL pointer dereference.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/43556; http://sourceforge.net/project/shownotes.php?release_id=495646&group_id=173277; https://exchange.xforce.ibmcloud.com/vulnerabilities/33515
CVE: CVE-2007-1651
Published: 2007-03-24
Description: Cross-site request forgery (CSRF) vulnerability in OpenID allows remote attackers to restore the login session of a user on an OpenID enabled site via unspecified vectors related to an arbitrary remote web site and cached tokens, after the user has signed into an OpenID server, logged into the OpenID enabled site, and then logged out of the OpenID enabled site.
CVSS Score: 6.8 (MEDIUM)
References: http://janrain.com/blog/2007/03/22/myopenid-security-fix/; http://openid.net/pipermail/security/2007-March/000286.html; http://openid.net/pipermail/security/2007-March/000288.html
CVE: CVE-2007-1652
Published: 2007-03-24
Description: OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached tokens.
CVSS Score: 7.5 (HIGH)
References: http://janrain.com/blog/2007/03/22/myopenid-security-fix/; http://openid.net/pipermail/security/2007-March/000286.html; http://openid.net/pipermail/security/2007-March/000288.html
CVE: CVE-2007-1653
Published: 2007-03-24
Description: GlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service (kernel panic) via certain DNS responses that trigger infinite recursion in TrueDNS packet parsing, as originally observed with certain login.yahoo.com responses.
CVSS Score: 7.8 (HIGH)
References: http://glowworm.us/history/release_1_5_3_b4.html; http://osvdb.org/43597; http://glowworm.us/history/release_1_5_3_b4.html
CVE: CVE-2007-1654
Published: 2007-03-24
Description: Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service (crash) or possibly execute arbitrary code via multiple file transfers, related to multiple open file handles in SFTP (1) put and (2) get operations.
CVSS Score: 9.3 (HIGH)
References: http://netsieben.com/files/CHANGELOG; http://osvdb.org/43555; https://exchange.xforce.ibmcloud.com/vulnerabilities/33504
CVE: CVE-2007-1655
Published: 2007-03-24
Description: Buffer overflow in the fun_ladd function in funmath.cpp in TinyMUX before 20070126 might allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors related to lists of numbers.
CVSS Score: 10.0 (HIGH)
References: http://code.google.com/p/tinymux/issues/detail?id=282&can=2&q=; http://osvdb.org/34686; http://secunia.com/advisories/24733
CVE: CVE-2007-1656
Published: 2007-03-24
Description: Multiple SQL injection vulnerabilities in index.php in Katalog Plyt Audio 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fraza and (2) litera parameters, different vectors than CVE-2007-1612.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37184; http://www.vupen.com/english/advisories/2007/1015; http://osvdb.org/37184
CVE: CVE-2007-1657
Published: 2007-03-24
Description: Stack-based buffer overflow in the file_compress function in minigzip (Modules/zlib) in Python 2.5 allows context-dependent attackers to execute arbitrary code via a long file argument.
CVSS Score: 7.5 (HIGH)
References: http://attrition.org/pipermail/vim/2007-March/001430.html; http://osvdb.org/43550; http://www.securityfocus.com/archive/1/462799/100/0/threaded
CVE: CVE-2007-1658
Published: 2007-03-24
Description: Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using C:/windows/system32/winrm (winrm.cmd) and migwiz (migwiz.exe).
CVSS Score: 9.3 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0344.html; http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0345.html; http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0346.html
CVE: CVE-2007-1465
Published: 2007-03-24
Description: Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/34449; http://seclists.org/fulldisclosure/2007/Mar/0409.html; http://secunia.com/advisories/24623
CVE: CVE-2007-1666
Published: 2007-03-24
Description: The processor_request function in the debugger server for DataRescue IDA Pro 5.0 and 5.1 does not verify that authentication has taken place before invoking the perform_request function, which allows remote attackers to perform unauthorized actions.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/; http://secunia.com/advisories/24635; http://www.datarescue.com/freefiles/ida_remdeb_fix_22032007.zip
CVE: CVE-2006-5756
Published: 2007-03-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006.  Notes: none
CVE: CVE-2006-6098
Published: 2007-03-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006.  Notes: none
CVE: CVE-2006-6099
Published: 2007-03-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006.  Notes: none
CVE: CVE-2006-6100
Published: 2007-03-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006.  Notes: none
CVE: CVE-2007-1667
Published: 2007-03-24
Description: Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414045; http://issues.foresightlinux.org/browse/FL-223; http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
CVE: CVE-2006-4175
Published: 2007-03-26
Description: The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=491; http://secunia.com/advisories/24634; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102853-1
CVE: CVE-2007-1678
Published: 2007-03-26
Description: Cross-site scripting (XSS) vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via RSS feeds, which are executed by the chrome: URI handler.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/24654; http://securityreason.com/securityalert/2480; http://www.osvdb.org/33522
CVE: CVE-2007-1679
Published: 2007-03-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in (1) imp/search.php and (2) ingo/rule.php. NOTE: this issue has been disputed by the vendor, noting that the search.php issue was resolved in CVE-2006-4255, and attackers can only use rule.php to inject XSS into their own pages
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/2487; http://www.securityfocus.com/archive/1/463819/100/0/threaded; http://www.securityfocus.com/archive/1/463911/100/0/threaded
CVE: CVE-2007-1692
Published: 2007-03-26
Description: The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might allow remote attackers to intercept web traffic by registering a proxy server using WINS or DNS, then responding to WPAD requests, as demonstrated using Internet Explorer.  NOTE: it could be argued that if an attacker already has control over WINS/DNS, then web traffic could already be intercepted by modifying WINS or DNS records, so this would not cross privilege boundaries and would not be a vulnerability.  It has also been reported that DHCP is an alternate attack vector.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/isn/2007-q1/0418.html; http://isc.sans.org/diary.html?storyid=2517; http://news.com.com/Windows+weakness+can+lead+to+network+traffic+hijacks/2100-1002_3-6170229.html
CVE: CVE-2007-1695
Published: 2007-03-27
Description: PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: this issue has been disputed by third-party researchers, stating that the file checks for a global constant and cannot be accessed directly
CVSS Score: 10.0 (HIGH)
References: http://www.securityfocus.com/archive/1/463718/100/0/threaded; http://www.securityfocus.com/archive/1/463817/100/0/threaded; http://www.securityfocus.com/archive/1/463718/100/0/threaded
CVE: CVE-2007-1696
Published: 2007-03-27
Description: SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24640; http://www.osvdb.org/34491; http://www.securityfocus.com/bid/23115
CVE: CVE-2007-1697
Published: 2007-03-27
Description: PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37220; http://www.securityfocus.com/bid/23111; http://www.vupen.com/english/advisories/2007/1099
CVE: CVE-2007-1698
Published: 2007-03-27
Description: download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/23111; http://www.vupen.com/english/advisories/2007/1099; https://exchange.xforce.ibmcloud.com/vulnerabilities/33181
CVE: CVE-2007-1699
Published: 2007-03-27
Description: Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to ImageManager/Classes/ImageManager.php under the (1) components/ or (2) administrator/components/ directory trees.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/38790; http://osvdb.org/38791; http://www.securityfocus.com/bid/23116
CVE: CVE-2007-1700
Published: 2007-03-27
Description: The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbitrary code via a crafted string in the session_register after unsetting HTTP_SESSION_VARS and _SESSION, which destroys the session data Hashtable.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137; http://secunia.com/advisories/25056
CVE: CVE-2007-1701
Published: 2007-03-27
Description: PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-502
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137; http://secunia.com/advisories/25423
CVE: CVE-2007-1702
Published: 2007-03-27
Description: PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://www.attrition.org/pipermail/vim/2007-March/001472.html; http://www.securityfocus.com/bid/23125; http://www.vupen.com/english/advisories/2007/1106
CVE: CVE-2007-1703
Published: 2007-03-27
Description: SQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37213; http://www.securityfocus.com/bid/23126; http://www.vupen.com/english/advisories/2007/1105
CVE: CVE-2007-1704
Published: 2007-03-27
Description: SQL injection vulnerability in index.php in the Car Manager (com_resman) 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37199; http://www.securityfocus.com/bid/23131; http://www.vupen.com/english/advisories/2007/1104
CVE: CVE-2007-1705
Published: 2007-03-27
Description: SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24631; http://www.vupen.com/english/advisories/2007/1095; https://exchange.xforce.ibmcloud.com/vulnerabilities/33184
CVE: CVE-2007-1706
Published: 2007-03-27
Description: SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizID parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34439; http://secunia.com/advisories/24653; http://www.vupen.com/english/advisories/2007/1101
CVE: CVE-2007-1707
Published: 2007-03-27
Description: PHP remote file inclusion vulnerability in index.php in Net Side Content Management System (Net-Side.net CMS) allows remote attackers to execute arbitrary PHP code via a URL in the cms parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37194; http://www.securityfocus.com/bid/23130; https://www.exploit-db.com/exploits/3562
CVE: CVE-2007-1708
Published: 2007-03-27
Description: PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37198; http://www.securityfocus.com/bid/23139; http://www.vupen.com/english/advisories/2007/1102
CVE: CVE-2007-1709
Published: 2007-03-27
Description: Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows context-dependent attackers to execute arbitrary code via a long argument string.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://retrogod.altervista.org/php521_phpdoc_bof.html; http://securityreason.com/securityalert/2512; http://www.securityfocus.com/archive/1/463843/100/0/threaded
CVE: CVE-2007-1710
Published: 2007-03-27
Description: The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence.
CVSS Score: 4.3 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137; http://secunia.com/advisories/25423
CVE: CVE-2007-1711
Published: 2007-03-27
Description: Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION.  NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007).
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://rhn.redhat.com/errata/RHSA-2007-0154.html
CVE: CVE-2007-1712
Published: 2007-03-27
Description: SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24626; http://www.osvdb.org/34420; http://www.vupen.com/english/advisories/2007/1097
CVE: CVE-2007-1713
Published: 2007-03-27
Description: CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.
CVSS Score: 6.4 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/34495; http://secunia.com/advisories/24652
CVE: CVE-2007-1714
Published: 2007-03-27
Description: Cross-site scripting (XSS) vulnerability in index.php in CcCounter 2.0 allows remote attackers to inject arbitrary web script or HTML via dir parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/34485; http://secunia.com/advisories/24655; http://securityreason.com/securityalert/2481
CVE: CVE-2007-1715
Published: 2007-03-27
Description: PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.  NOTE: the forgot_pass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps CVE-2006-5763.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37179; https://exchange.xforce.ibmcloud.com/vulnerabilities/33196; https://www.exploit-db.com/exploits/3568