deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-5052
Published: 2007-09-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with (1) the title parameter or (2) a "title=" sequence in the PATH_INFO, or a request to the download module with (3) the cat parameter or (4) a "cat=" sequence in the PATH_INFO.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26913; http://securityreason.com/securityalert/3162; http://www.securityfocus.com/archive/1/480117/100/0/threaded
CVE: CVE-2007-4573
Published: 2007-09-24
Description: The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://fedoranews.org/updates/FEDORA-2007-229.shtml; http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3; http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html
CVE: CVE-2007-4985
Published: 2007-09-24
Description: ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://bugs.gentoo.org/show_bug.cgi?id=186030; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=596; http://secunia.com/advisories/26926
CVE: CVE-2007-4986
Published: 2007-09-24
Description: Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=186030; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=594; http://secunia.com/advisories/26926
CVE: CVE-2007-4987
Published: 2007-09-24
Description: Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=186030; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=595; http://secunia.com/advisories/26926
CVE: CVE-2007-4988
Published: 2007-09-24
Description: Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-681
References: http://bugs.gentoo.org/show_bug.cgi?id=186030; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=597; http://secunia.com/advisories/26926
CVE: CVE-2007-5053
Published: 2007-09-24
Description: Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php; or a URL in the language_home parameter to (3) search/search.php, (4) poll/inlinepoll.php, (5) poll/showpoll.php, (6) links/showlinks.php, or (7) links/submit_links.php in modules/; related to missing checks in (a) modules/moduleSec.php and (b) include/includeSec.php for inclusion of certain URLs, as demonstrated by an ftps:// URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://www.exploit-db.com/exploits/4441; https://www.exploit-db.com/exploits/4441
CVE: CVE-2007-5054
Published: 2007-09-24
Description: Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the gsLanguage parameter to (1) search/search.php, (2) poll/inlinepoll.php, (3) poll/showpoll.php, (4) links/showlinks.php, or (5) links/submit_links.php in modules/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/26931; http://www.vupen.com/english/advisories/2007/3260; https://exchange.xforce.ibmcloud.com/vulnerabilities/36734
CVE: CVE-2007-5055
Published: 2007-09-24
Description: Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/26931; http://www.vupen.com/english/advisories/2007/3260; https://exchange.xforce.ibmcloud.com/vulnerabilities/36735
CVE: CVE-2007-5056
Published: 2007-09-24
Description: Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/40596; http://osvdb.org/41422; http://osvdb.org/41426
CVE: CVE-2007-5057
Published: 2007-09-24
Description: NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the (1) basic and (2) authentication schemes by spoofing the NetSupport Manager.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/26927; http://securityreason.com/securityalert/3163; http://www.netsupportsoftware.com/support/td.asp?td=543&Site=nsltd&Lang=
CVE: CVE-2007-5058
Published: 2007-09-24
Description: Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog screen is open.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38156; http://secunia.com/advisories/26937; http://securityreason.com/securityalert/3164
CVE: CVE-2007-5059
Published: 2007-09-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the (1) uname and (2) pass parameters in a login form, and (3) an unspecified "url value," leading to storage of XSS sequences in the database and display of these sequences in the alert section of the admin panel.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.greensql.net/security; http://www.osvdb.org/38165; http://www.osvdb.org/38166
CVE: CVE-2007-5060
Published: 2007-09-24
Description: Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password_ and rpassword_ parameters, possibly related to timestamp values.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/26941; http://securityreason.com/securityalert/3165; http://www.securityfocus.com/archive/1/480326/100/0/threaded
CVE: CVE-2007-5061
Published: 2007-09-24
Description: SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to index.php in a banners action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/37260; http://secunia.com/advisories/26940; http://www.securityfocus.com/bid/25770
CVE: CVE-2007-5062
Published: 2007-09-24
Description: account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the un parameter in a register action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/41904; http://www.securityfocus.com/bid/25746; https://exchange.xforce.ibmcloud.com/vulnerabilities/36709
CVE: CVE-2007-5063
Published: 2007-09-24
Description: Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing login credentials via a direct request for var/users.txt.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://osvdb.org/41903; https://exchange.xforce.ibmcloud.com/vulnerabilities/36710; https://www.exploit-db.com/exploits/4436
CVE: CVE-2007-5064
Published: 2007-09-24
Description: Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayer_Now.dll, allows remote attackers to execute arbitrary code via a long first argument to the DownURL2 method.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://1v1.name/show-283-1.html; http://osvdb.org/37777; http://secunia.com/advisories/26964
CVE: CVE-2007-5065
Published: 2007-09-24
Description: PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38157; http://www.securityfocus.com/bid/25760; https://exchange.xforce.ibmcloud.com/vulnerabilities/36719
CVE: CVE-2007-5066
Published: 2007-09-24
Description: Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary commands via a crafted URL.
CVSS Score: 9.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/40772; http://secunia.com/advisories/26885; http://www.securityfocus.com/bid/25773
CVE: CVE-2007-5067
Published: 2007-09-24
Description: Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to (1) xigui32.exe or (2) xitami.exe.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/26884; http://www.securityfocus.com/bid/25772; http://www.vupen.com/english/advisories/2007/3258
CVE: CVE-2007-5068
Published: 2007-09-24
Description: SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL commands via the mod parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.osvdb.org/38164; http://www.securityfocus.com/bid/25779; http://www.vupen.com/english/advisories/2007/3254
CVE: CVE-2007-5069
Published: 2007-09-24
Description: Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/26923; http://www.securityfocus.com/archive/1/480441/100/0/threaded; http://www.securityfocus.com/bid/25784
CVE: CVE-2007-5070
Published: 2007-09-24
Description: Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMail MessagePrinter Object allows remote attackers to execute arbitrary code via a long string in the first argument to the SetFont method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38158; https://exchange.xforce.ibmcloud.com/vulnerabilities/36754; https://www.exploit-db.com/exploits/4445
CVE: CVE-2007-5071
Published: 2007-09-24
Description: Incomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upload dangerous files and execute arbitrary code, as demonstrated by a filename ending in .php. or a .htaccess file, a different vector than CVE-2005-2733. NOTE: the vulnerability was also present in a 0.5.1 download available in the early morning of 20070923.  NOTE: the original 20070920 disclosure provided an incorrect filename, img_upload_cgi.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://secunia.com/advisories/26968; http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt; http://www.securityfocus.com/archive/1/480092/100/0/threaded
CVE: CVE-2007-5072
Published: 2007-09-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via certain user_colors array parameters to certain user_style.php files under themes/, as demonstrated by the user_colors[bg_color] parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26968; http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt; http://www.securityfocus.com/archive/1/480569/100/0/threaded
CVE: CVE-2007-5079
Published: 2007-09-25
Description: Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended access restrictions.
CVSS Score: 6.0 (MEDIUM)
References: http://www.redhat.com/support/errata/RHSA-2010-0657.html; https://bugzilla.redhat.com/show_bug.cgi?id=181302; https://exchange.xforce.ibmcloud.com/vulnerabilities/36791
CVE: CVE-2007-4571
Published: 2007-09-26
Description: The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
CVSS Score: 2.1 (LOW)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccec6e2c4a74adf76ed4e2478091a311b1806212; http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.8; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=600
CVE: CVE-2007-5085
Published: 2007-09-26
Description: Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://geronimo.apache.org/2007/09/07/mejb-security-alert.html; http://osvdb.org/38661; http://secunia.com/advisories/26906
CVE: CVE-2007-5086
Published: 2007-09-26
Description: Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 125 do not properly validate certain parameters to System Service Descriptor Table (SSDT) and Shadow SSDT function handlers, which allows local users to cause a denial of service (crash) via the (1) NtUserSendInput, (2) LoadLibraryA, (3) NtOpenProcess, (4) NtOpenThread, (5) NtTerminateProcess, (6) NtUserFindWindowEx, and (7) NtUserBuildHwndList kernel SSDT hooks in kylif.sys; the (8) NtDuplicateObject (DuplicateHandle) kernel SSDT hook; and possibly other kernel SSDT hooks.  NOTE: the NtCreateSection vector is covered by CVE-2007-5043.1.  NOTE: the vendor disputes that the DuplicateHandle vector is a vulnerability in their code, stating that "it is not an error in our code, but an obscure method for manipulating standard Windows routines to circumvent our self-defense mechanisms."
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://osvdb.org/37990; http://secunia.com/advisories/26887; http://www.kaspersky.com/technews?id=203038706
CVE: CVE-2007-5087
Published: 2007-09-26
Description: The ATM module in the Linux kernel before 2.4.35.3, when CLIP support is enabled, allows local users to cause a denial of service (kernel panic) by reading /proc/net/atm/arp before the CLIP module has been loaded.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.35.y.git%3Ba=commitdiff%3Bh=b7ae15e7707050baafe5a35e3d4f2d175197d222; http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3; http://lwn.net/Articles/251162/
CVE: CVE-2007-4874
Published: 2007-09-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web script or HTML via the (1) l_username parameter to admin/layout2b.php, and the (2) backurl parameter to comment.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.boesch-it.de/viewtopic.php?t=2791; http://secunia.com/advisories/26965; http://securityreason.com/securityalert/3166
CVE: CVE-2007-5088
Published: 2007-09-26
Description: Cross-site scripting (XSS) vulnerability in search/cust_bill_event.cgi in Freeside 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the failed parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37274; http://pridels-team.blogspot.com/2007/09/freeside-xss-vuln.html; http://secunia.com/advisories/26963
CVE: CVE-2007-5089
Published: 2007-09-26
Description: PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SKIN_URL parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38574; http://securityreason.com/securityalert/3168; http://www.attrition.org/pipermail/vim/2007-September/001803.html
CVE: CVE-2007-5090
Published: 2007-09-26
Description: Unspecified vulnerability in IBM Rational ClearQuest (CQ), when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/40598; http://secunia.com/advisories/26899; http://www-1.ibm.com/support/docview.wss?uid=swg21268116
CVE: CVE-2007-5091
Published: 2007-09-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the cat_data[color] parameter to (1) preferences/inc/class.uicategories.inc.php and (2) admin/inc/class.uicategories.inc.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26944; http://www.egroupware.org/news; http://www.egroupware.org/viewvc/branches/1.4/admin/inc/class.uicategories.inc.php?r1=23611&r2=24443&pathrev=24443
CVE: CVE-2007-5092
Published: 2007-09-26
Description: Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in an ACCEPT_FILE array parameter to modules.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/37335; http://secunia.com/advisories/26958; http://securityreason.com/securityalert/3169
CVE: CVE-2007-5093
Published: 2007-09-26
Description: The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked.  NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://marc.info/?l=linux-kernel&m=[PII_REDACTED]4808&w=2; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]2548&w=2; http://rhn.redhat.com/errata/RHSA-2008-0972.html
CVE: CVE-2007-5094
Published: 2007-09-26
Description: Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by itself on a line in the header, and a long Content-Transfer-Encoding header line.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://osvdb.org/39390; http://pstgroup.blogspot.com/2007/09/exploitimail-iaspamdll-80x-remote-heap.html; http://www.securityfocus.com/bid/25762
CVE: CVE-2007-5095
Published: 2007-09-26
Description: Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media files, regardless of what default web browser is configured, which might allow remote attackers to exploit vulnerabilities in software that the user does not expect to run, as demonstrated by the HTMLView parameter in an .asx file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://osvdb.org/41093; http://www.gnucitizen.org/blog/backdooring-windows-media-files; http://www.securityfocus.com/archive/1/479825/100/100/threaded
CVE: CVE-2007-5096
Published: 2007-09-26
Description: PHP remote file inclusion vulnerability in modules/webmail2/inc/rfc822.php in guanxiCRM Business Solution 0.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the webmail2_inc_dir parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-02-guanxicrm-business-solution/; http://osvdb.org/38575; http://arfis.wordpress.com/2007/09/14/rfi-02-guanxicrm-business-solution/
CVE: CVE-2007-5097
Published: 2007-09-26
Description: PHP remote file inclusion vulnerability in lib/classes/offl_nflteam.php in Online Fantasy Football League (OFFL) 0.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter.  NOTE: this issue is disputed by CVE because a __FILE__ test protects offl_nflteam.php against direct requests
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-02-online-fantasy-football-league/; http://osvdb.org/38722; http://arfis.wordpress.com/2007/09/14/rfi-02-online-fantasy-football-league/
CVE: CVE-2007-5098
Published: 2007-09-26
Description: Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the set_depth parameter to (1) app.lib/product.control/core.php/product.control.config.php, or (2) customer.browse.list.php or (3) customer.browse.search.php in app.lib/product.control/core.php/customer.area/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/37227; http://osvdb.org/37228; http://osvdb.org/37229
CVE: CVE-2007-5099
Published: 2007-09-26
Description: PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/37225; http://secunia.com/advisories/26910; http://www.securityfocus.com/bid/25782
CVE: CVE-2007-5100
Published: 2007-09-26
Description: Multiple PHP remote file inclusion vulnerabilities in phpBB Plus 1.53, and 1.53a before 20070922, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) language/lang_german/lang_admin_album.php, (2) language/lang_english/lang_main_album.php, and (3) language/lang_english/lang_admin_album.php, different vectors than CVE-2007-5009.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38723; http://osvdb.org/38724; http://osvdb.org/38725
CVE: CVE-2007-5101
Published: 2007-09-26
Description: ChironFS before 1.0 RC7 sets user/group ownership to the mounter account instead of the creator account when files are created, which allows local users to gain privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://code.google.com/p/chironfs/issues/detail?id=6; http://furquim.org/chironfs/Changelog.html; http://osvdb.org/40586