deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-0623
Published: 2007-01-31
Description: SQL injection vulnerability in index.php in MAXdev MDPro 1.0.76 allows remote attackers to execute arbitrary SQL commands via the startrow parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33011; http://osvdb.org/33612; http://secunia.com/advisories/23948
CVE: CVE-2007-0624
Published: 2007-01-31
Description: user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote) character, and possibly other invalid values, in the uname parameter in a userinfo operation.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33613; http://securityreason.com/securityalert/2198; http://www.securityfocus.com/archive/1/458438/100/0/threaded
CVE: CVE-2007-0625
Published: 2007-01-31
Description: nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/33009; http://secunia.com/advisories/23993; http://www.nomachine.com/news_read.php?idnews=190
CVE: CVE-2007-0626
Published: 2007-01-31
Description: The comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5.1, and vbDrupal, allows remote attackers with "post comments" privileges and access to multiple input filters to execute arbitrary code by previewing comments, which are not processed by "normal form validation routines."
CVSS Score: 6.5 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2007-01/0670.html; http://drupal.org/node/113935; http://osvdb.org/32136
CVE: CVE-2007-0627
Published: 2007-01-31
Description: Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process.
CVSS Score: 4.9 (MEDIUM)
References: http://freshmeat.net/projects/gtalkbot/?branch_id=67830&release_id=245004; http://osvdb.org/33071; http://secunia.com/advisories/23942
CVE: CVE-2007-0628
Published: 2007-01-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) before 20070129 allow remote attackers to inject arbitrary web script or HTML via the (1) goto or (2) gx-charset parameter. NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/33010; http://secunia.com/advisories/23979; http://securitytracker.com/id?1017570
CVE: CVE-2007-0629
Published: 2007-01-31
Description: The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unauthorized assets.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/32992; http://secunia.com/advisories/23981; http://sourceforge.net/project/shownotes.php?group_id=51417&release_id=481584
CVE: CVE-2007-0630
Published: 2007-01-31
Description: Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) from, and (3) q parameters, different vectors than CVE-2007-0569.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33000; http://www.vupen.com/english/advisories/2007/0395; http://osvdb.org/33000
CVE: CVE-2007-0631
Published: 2007-01-31
Description: SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/23965; http://www.osvdb.org/31675; http://www.securityfocus.com/bid/22314
CVE: CVE-2007-0632
Published: 2007-01-31
Description: SQL injection vulnerability in artreplydelete.asp in ASP EDGE 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via a username cookie, a different vector than CVE-2007-0560.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36634; http://www.vupen.com/english/advisories/2007/0341; http://osvdb.org/36634
CVE: CVE-2007-0633
Published: 2007-01-31
Description: PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myNewsConf[path][sys][index] parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33019; http://secunia.com/advisories/23973; http://www.securityfocus.com/bid/22313
CVE: CVE-2007-0634
Published: 2007-01-31
Description: Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system crash) via certain ICMP packets.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/31878; http://secunia.com/advisories/23982; http://securitytracker.com/id?1017574
CVE: CVE-2007-0635
Published: 2007-01-31
Description: Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) config[path] parameter to (a) common_foot.php or (b) blogs.php, or (2) the config[theme] parameter to (c) admin/gallery_head.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33034; http://osvdb.org/33035; http://osvdb.org/33036
CVE: CVE-2007-0636
Published: 2007-01-31
Description: Unspecified vulnerability in inotify before 0.3.5 has unknown impact and attack vectors, related to "access rights to watched files."
CVSS Score: 2.1 (LOW)
References: http://inotify.aiken.cz/?section=incron&page=changelog; http://osvdb.org/38132; http://www.securityfocus.com/bid/22305
CVE: CVE-2007-0637
Published: 2007-01-31
Description: Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the galeria parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by zd_numer.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33033; http://secunia.com/advisories/23956; http://www.securityfocus.com/bid/22324
CVE: CVE-2007-0638
Published: 2007-01-31
Description: show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database contents) via a % (percent) character in the dbfieldv parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33070; http://secunia.com/advisories/23962; http://www.securityfocus.com/bid/22312
CVE: CVE-2007-0639
Published: 2007-01-31
Description: Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via (1) a REMOTE_ADDR cookie or (2) a cookie specifying an element of the msg array with an error number in the first dimension and 0 in the second dimension, as demonstrated by msg[999][0].
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33016; http://retrogod.altervista.org/guppy_4516_cmd.html; http://secunia.com/advisories/23914
CVE: CVE-2007-0640
Published: 2007-01-31
Description: Buffer overflow in ZABBIX before 1.1.5 has unknown impact and attack vectors related to "SNMP IP addresses."
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/33081; http://secunia.com/advisories/24020; http://www.securityfocus.com/bid/22321
CVE: CVE-2007-0641
Published: 2007-01-31
Description: Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions (SSC) DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38119; http://www.securityfocus.com/bid/22301; http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
CVE: CVE-2007-0642
Published: 2007-01-31
Description: SQL injection vulnerability in tForum 2.00 in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) pass to user_confirm.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://forums.avenir-geopolitique.net/viewtopic.php?t=2607; http://securityreason.com/securityalert/2201; http://www.attrition.org/pipermail/vim/2007-January/001259.html
CVE: CVE-2007-0643
Published: 2007-01-31
Description: Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long line in a .cpp file.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/38131; http://www.securityfocus.com/bid/22315; https://www.exploit-db.com/exploits/3229
CVE: CVE-2007-0644
Published: 2007-02-01
Description: Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in filenames that are not properly handled when calling the (1) NSLog and (2) NSBeginAlertSheet Apple AppKit functions.
CVSS Score: 7.1 (HIGH)
References: http://www.digitalmunition.com/MOAB-30-01-2007.html; http://www.osvdb.org/32710; http://www.securityfocus.com/bid/22326
CVE: CVE-2007-0645
Published: 2007-02-01
Description: Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling certain Apple AppKit functions.
CVSS Score: 6.8 (MEDIUM)
References: http://projects.info-pull.com/moab/MOAB-30-01-2007.html; http://www.digitalmunition.com/MOAB-30-01-2007.html; http://www.osvdb.org/32711
CVE: CVE-2007-0646
Published: 2007-02-01
Description: Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling the NSRunCriticalAlertPanel Apple AppKit function.
CVSS Score: 7.1 (HIGH)
CWE: CWE-134
References: http://docs.info.apple.com/article.html?artnum=305391; http://docs.info.apple.com/article.html?artnum=307041; http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
CVE: CVE-2007-0647
Published: 2007-02-01
Description: Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling the NSBeginAlertSheet Apple AppKit function.
CVSS Score: 7.1 (HIGH)
References: http://www.digitalmunition.com/MOAB-30-01-2007.html; http://www.osvdb.org/32707; http://www.securityfocus.com/bid/22326
CVE: CVE-2007-0648
Published: 2007-02-01
Description: Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/23978; http://securitytracker.com/id?1017575; http://www.cisco.com/warp/public/707/cisco-air-20070131-sip.shtml
CVE: CVE-2007-0649
Published: 2007-02-01
Description: Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct (a) remote file inclusion attacks via the srcdir parameter in custom/import_xml.php or (b) cross-site scripting (XSS) attacks via the rootdir parameter in interface/login/login_frame.php, via vectors associated with extract operations on the (1) POST and (2) GET superglobal arrays.  NOTE: this issue was originally disputed before the extract behavior was identified in post-disclosure analysis. Also, the original report identified "Open Conference Systems," but this was an error.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://attrition.org/pipermail/vim/2007-January/001254.html; http://attrition.org/pipermail/vim/2007-January/001258.html; http://osvdb.org/33603
CVE: CVE-2007-0650
Published: 2007-02-01
Description: Buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attackers to overwrite files and possibly execute arbitrary code via a long filename.  NOTE: other overflows exist but might not be exploitable, such as a heap-based overflow in the check_idx function.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/26982; http://secunia.com/advisories/30168; http://security.gentoo.org/glsa/glsa-200709-17.xml
CVE: CVE-2007-0656
Published: 2007-02-01
Description: PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36018; http://www.securityfocus.com/bid/22320; http://www.vupen.com/english/advisories/2007/0422
CVE: CVE-2007-0657
Published: 2007-02-01
Description: Unspecified vulnerability in Nexuiz 2.2.2 allows remote attackers to read and overwrite arbitrary files via the gamedir command.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33018; http://secunia.com/advisories/23963; http://www.alientrap.org/devwiki/index.php?n=Nexuiz.Patch
CVE: CVE-2007-0658
Published: 2007-02-01
Description: The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal allow remote attackers to bypass the CAPTCHA test via an empty captcha element in $_SESSION.
CVSS Score: 5.0 (MEDIUM)
References: http://cvs.drupal.org/viewcvs/drupal/contributions/modules/captcha/captcha.module?r1=1.25.2.1&r2=1.25.2.2; http://cvs.drupal.org/viewcvs/drupal/contributions/modules/textimage/captcha.inc?r1=1.1&r2=1.1.2.1; http://drupal.org/node/114364
CVE: CVE-2007-0659
Published: 2007-02-01
Description: download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.
CVSS Score: 7.5 (HIGH)
References: http://modxcms.com/forums/index.php/topic%2C10470.0.html; http://secunia.com/advisories/23953; http://www.muddydogpaws.com/Home.html
CVE: CVE-2007-0660
Published: 2007-02-01
Description: Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36476; http://www.dotnetnuke.com/Default.aspx?tabid=825&EntryID=1278; http://www.securityfocus.com/bid/22334
CVE: CVE-2007-0661
Published: 2007-02-01
Description: Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC), Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management Interface (IPMI) is enabled, allow remote attackers to connect and issue arbitrary IPMI commands, possibly triggering a denial of service.
CVSS Score: 5.4 (MEDIUM)
References: http://lz1.intel.com/psirt/advisory.aspx?intelid=INTEL-SA-00012&languageid=en-fr; http://osvdb.org/33044; http://secunia.com/advisories/23989
CVE: CVE-2007-0662
Published: 2007-02-01
Description: PHP remote file inclusion vulnerability in includes/usercp_viewprofile.php in Hailboards 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33078; http://secunia.com/advisories/24002; http://www.securityfocus.com/bid/22333
CVE: CVE-2007-0663
Published: 2007-02-01
Description: SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter, a different vector than CVE-2007-0631.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://www.vupen.com/english/advisories/2007/0424; http://www.vupen.com/english/advisories/2007/0424
CVE: CVE-2007-0456
Published: 2007-02-02
Description: Unspecified vulnerability in the LLT dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc; http://fedoranews.org/cms/node/2565; http://osvdb.org/33073
CVE: CVE-2007-0457
Published: 2007-02-02
Description: Unspecified vulnerability in the IEEE 802.11 dissector in Wireshark (formerly Ethereal) 0.10.14 through 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc; http://fedoranews.org/cms/node/2565; http://osvdb.org/33074
CVE: CVE-2007-0458
Published: 2007-02-02
Description: Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors, a different issue than CVE-2006-5468.
CVSS Score: 4.3 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc; http://fedoranews.org/cms/node/2565; http://osvdb.org/33075
CVE: CVE-2007-0459
Published: 2007-02-02
Description: packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service (application crash or hang) via fragmented HTTP packets.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc; http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1200; http://fedoranews.org/cms/node/2565
CVE: CVE-2007-0664
Published: 2007-02-02
Description: thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=142047; http://osvdb.org/31965; http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html
CVE: CVE-2007-0665
Published: 2007-02-02
Description: Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WS_FTP script command.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33602; http://www.securityfocus.com/archive/1/458293/100/0/threaded; http://www.securityfocus.com/bid/22275
CVE: CVE-2007-0666
Published: 2007-02-02
Description: Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3) edition module.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33646; http://osvdb.org/33647; http://www.securityfocus.com/archive/1/458774/100/0/threaded
CVE: CVE-2007-0667
Published: 2007-02-02
Description: The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary code via redirects, related to callbacks, a different issue than CVE-2006-5872.
CVSS Score: 6.5 (MEDIUM)
References: http://securityreason.com/securityalert/2217; http://www.securityfocus.com/archive/1/458464/100/0/threaded; http://www.securityfocus.com/archive/1/459264/100/0/threaded
CVE: CVE-2007-0668
Published: 2007-02-02
Description: The Loopback Filesystem (LOFS) in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service.
CVSS Score: 6.2 (MEDIUM)
References: http://osvdb.org/31879; http://secunia.com/advisories/23996; http://securitytracker.com/id?1017582
CVE: CVE-2007-0670
Published: 2007-02-03
Description: Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including (1) rdist, (2) rsh, (3) rcp, (4) rsync, and (5) rlogin.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: ftp://aix.software.ibm.com/aix/efixes/security/README; http://secunia.com/advisories/23995; http://securitytracker.com/id?1017583
CVE: CVE-2007-0671
Published: 2007-02-03
Description: Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
CVSS Score: 8.8 (HIGH)
References: http://osvdb.org/31901; http://secunia.com/advisories/24008; http://securitytracker.com/id?1017584
CVE: CVE-2007-0672
Published: 2007-02-03
Description: LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer\.
CVSS Score: 7.8 (HIGH)
References: http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp; http://www.securityfocus.com/archive/1/458653/100/0/threaded; http://www.securityfocus.com/bid/22339
CVE: CVE-2007-0673
Published: 2007-02-03
Description: LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://osvdb.org/32948; http://securityreason.com/securityalert/2218; http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
CVE: CVE-2007-0674
Published: 2007-02-03
Description: Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attackers to cause a denial of service (device hang) via a malformed JPEG file.
CVSS Score: 7.1 (HIGH)
References: http://blog.trendmicro.com/trend-micro-finds-more-windows-mobile-flaws/; http://osvdb.org/36148; http://www.securityfocus.com/bid/22343
CVE: CVE-2007-0675
Published: 2007-02-03
Description: A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sound object that contains voice commands to an enabled microphone, allowing for interaction with Windows Explorer.
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: http://blogs.technet.com/msrc/archive/2007/01/31/issue-regarding-windows-vista-speech-recognition.aspx; http://lists.immunitysec.com/pipermail/dailydave/2007-January/004003.html; http://lists.immunitysec.com/pipermail/dailydave/2007-January/004005.html
CVE: CVE-2007-0676
Published: 2007-02-03
Description: SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36027; http://www.securityfocus.com/bid/22338; http://www.vupen.com/english/advisories/2007/0452