deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4656
Published: 2007-09-04
Description: backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.
CVSS Score: 2.1 (LOW)
CWE: CWE-200, CWE-255, CWE-310
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392; http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173; http://osvdb.org/37444
CVE: CVE-2007-4657
Published: 2007-09-04
Description: Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information (memory contents) or cause a denial of service (thread crash) via a large len value to the (1) strspn or (2) strcspn function, which triggers an out-of-bounds read.  NOTE: this affects different product versions than CVE-2007-3996.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-189
References: http://secunia.com/advisories/26642; http://secunia.com/advisories/26822; http://secunia.com/advisories/26838
CVE: CVE-2007-4658
Published: 2007-09-04
Description: The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html; http://rhn.redhat.com/errata/RHSA-2007-0889.html; http://secunia.com/advisories/26642
CVE: CVE-2007-4659
Published: 2007-09-04
Description: The zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a memory_limit violation, which has unknown impact and attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/26642; http://secunia.com/advisories/26822; http://secunia.com/advisories/26838
CVE: CVE-2007-4660
Published: 2007-09-04
Description: Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect size calculation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/26642; http://secunia.com/advisories/27102; http://secunia.com/advisories/27864
CVE: CVE-2007-4661
Published: 2007-09-04
Description: The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow.  NOTE: this is due to an incomplete fix for CVE-2007-2872.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-399
References: http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.58&r2=1.445.2.14.2.59; http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html; http://secunia.com/advisories/26642
CVE: CVE-2007-4662
Published: 2007-09-04
Description: Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/26642; http://secunia.com/advisories/26822; http://secunia.com/advisories/26838
CVE: CVE-2007-4663
Published: 2007-09-04
Description: Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open_basedir restrictions via unspecified vectors involving the glob function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/26642; http://secunia.com/advisories/26838; http://secunia.com/advisories/27102
CVE: CVE-2007-4664
Published: 2007-09-04
Description: Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and attack vectors, aka CORE-1405.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-119
References: http://secunia.com/advisories/26615; http://secunia.com/advisories/29501; http://sourceforge.net/project/shownotes.php?release_id=535898
CVE: CVE-2007-4665
Published: 2007-09-04
Description: Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/26615; http://secunia.com/advisories/29501; http://sourceforge.net/project/shownotes.php?release_id=535898
CVE: CVE-2007-4666
Published: 2007-09-04
Description: Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka CORE-1397.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/26615; http://secunia.com/advisories/29501; http://sourceforge.net/project/shownotes.php?release_id=535898
CVE: CVE-2007-4667
Published: 2007-09-04
Description: Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/26615; http://secunia.com/advisories/29501; http://sourceforge.net/project/shownotes.php?release_id=535898
CVE: CVE-2007-4668
Published: 2007-09-04
Description: Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119, CWE-264
References: http://secunia.com/advisories/29501; http://sourceforge.net/project/shownotes.php?release_id=535898; http://tracker.firebirdsql.org/browse/CORE-1312
CVE: CVE-2007-4669
Published: 2007-09-04
Description: The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200, CWE-264
References: http://secunia.com/advisories/29501; http://sourceforge.net/project/shownotes.php?release_id=535898; http://tracker.firebirdsql.org/browse/CORE-1148
CVE: CVE-2007-4670
Published: 2007-09-05
Description: Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.
CVSS Score: 5.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2007-0889.html; http://secunia.com/advisories/26822; http://secunia.com/advisories/26838
CVE: CVE-2007-3849
Published: 2007-09-05
Description: Red Hat Enterprise Linux (RHEL) 5 ships the rpm for the Advanced Intrusion Detection Environment (AIDE) before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://osvdb.org/40439; http://secunia.com/advisories/26711; http://www.redhat.com/support/errata/RHSA-2007-0539.html
CVE: CVE-2007-4135
Published: 2007-09-05
Description: The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.
CVSS Score: 6.2 (MEDIUM)
References: http://osvdb.org/45825; http://secunia.com/advisories/26674; http://secunia.com/advisories/27043
CVE: CVE-2007-4476
Published: 2007-09-05
Description: Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=196978; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
CVE: CVE-2007-3999
Published: 2007-09-05
Description: Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=307041; http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html; http://lists.rpath.com/pipermail/security-announce/2007-September/000237.html
CVE: CVE-2007-4000
Published: 2007-09-05
Description: The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.
CVSS Score: 8.5 (HIGH)
CWE: CWE-824
References: http://secunia.com/advisories/26676; http://secunia.com/advisories/26680; http://secunia.com/advisories/26700
CVE: CVE-2007-0322
Published: 2007-09-05
Description: Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/26659; http://www.kb.cert.org/vuls/id/907481; http://www.securityfocus.com/bid/25544
CVE: CVE-2007-4471
Published: 2007-09-05
Description: Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the (1) httpGETToFile, (2) httpPOSTFromFile, and possibly other methods, probably involving path traversal vulnerabilities in exposed dangerous methods.  NOTE: this can be leveraged for code execution by writing to a Startup folder.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22, CWE-264
References: http://osvdb.org/37134; http://secunia.com/advisories/26659; http://www.kb.cert.org/vuls/id/979638
CVE: CVE-2007-4711
Published: 2007-09-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML via the (1) homepage, (2) mail, and (3) name parameters in a show action to (a) form.php; the (4) language and (5) anzeigebreite parameters to (b) admin/header.php; and the (6) msg parameter to (c) install.php, different vectors than CVE-2006-0706.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26662; http://securityreason.com/securityalert/3097; http://www.osvdb.org/36735
CVE: CVE-2007-4712
Published: 2007-09-05
Description: PHP remote file inclusion vulnerability in index.php in eNetman 1 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/26656; http://www.osvdb.org/36806; http://www.securityfocus.com/bid/25527
CVE: CVE-2007-4713
Published: 2007-09-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the (1) dtc, (2) vid, (3) n, (4) dt, (5) ed, and (6) bd parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/36807; http://pridels-team.blogspot.com/2007/09/urchin-5x-multiple-xss-vuln.html; http://secunia.com/advisories/26682
CVE: CVE-2007-4714
Published: 2007-09-05
Description: SQL injection vulnerability in error_view.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38426; http://www.securityfocus.com/bid/25511; http://www.vupen.com/english/advisories/2007/3090
CVE: CVE-2007-4715
Published: 2007-09-05
Description: Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitrary PHP code via a URL in the files_dir parameter in (1) es_desp.php, (2) es_custom_menu.php, and (3) es_offer.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38423; http://osvdb.org/38424; http://osvdb.org/38425
CVE: CVE-2007-4716
Published: 2007-09-05
Description: Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/26688; http://sourceforge.net/forum/forum.php?forum_id=731460; http://sourceforge.net/project/shownotes.php?release_id=536503
CVE: CVE-2007-4717
Published: 2007-09-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) dir parameter in admin/adminusers.php, the (2) action parameter in admin/advancedUserSearch.php, and the (3) view parameter in admin/campusProblem.php.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://osvdb.org/38925; http://osvdb.org/38926; http://osvdb.org/38927
CVE: CVE-2007-4718
Published: 2007-09-05
Description: Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/38987; http://secunia.com/advisories/26685; http://www.claroline.net/forum/viewtopic.php?t=13533
CVE: CVE-2007-4719
Published: 2007-09-05
Description: SQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065581.html; http://osvdb.org/38334; http://securityreason.com/securityalert/3099
CVE: CVE-2007-4720
Published: 2007-09-05
Description: Unspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager (NNM) 07-10 through 07-10-05, and NNM Starter Edition Enterprise and 250 08-00 through 08-10, allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/37859; http://secunia.com/advisories/26668; http://www.hitachi-support.com/security_e/vuls_e/HS07-030_e/index-e.html
CVE: CVE-2007-4721
Published: 2007-09-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6113.  Reason: This candidate is a duplicate of CVE-2007-6113.  Notes: All CVE users should reference CVE-2007-6113 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-189
CVE: CVE-2007-4722
Published: 2007-09-05
Description: Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the (1) Play and (2) Buzzer methods.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/37778; http://secunia.com/advisories/26600; http://www.kb.cert.org/vuls/id/298345
CVE: CVE-2007-4723
Published: 2007-09-05
Description: Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence and an account_manage.php/login.php final component for reaching the protected account_manage.php page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/45879; http://securityreason.com/securityalert/3100; http://www.securityfocus.com/archive/1/478263/100/0/threaded
CVE: CVE-2007-4724
Published: 2007-09-05
Description: Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html; http://osvdb.org/41029; http://securityreason.com/securityalert/3094
CVE: CVE-2007-4725
Published: 2007-09-05
Description: Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-400
References: http://akky.cjb.net/security/7-zip3.txt; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/40482
CVE: CVE-2007-4726
Published: 2007-09-05
Description: Directory traversal vulnerability in Web Oddity 0.09b allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/41028; http://www.securityfocus.com/bid/25535; https://exchange.xforce.ibmcloud.com/vulnerabilities/36427
CVE: CVE-2007-4732
Published: 2007-09-06
Description: Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Solaris 8 through 10 allows local users to cause a denial of service (system panic), related to passing a NULL pointer to the pgsignal function.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/37323; http://secunia.com/advisories/26528; http://secunia.com/advisories/26731
CVE: CVE-2007-4733
Published: 2007-09-06
Description: The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet, a related issue to CVE-1999-0077.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://osvdb.org/45877; http://securityreason.com/securityalert/3093; http://securitytracker.com/id?1018641
CVE: CVE-2007-4734
Published: 2007-09-06
Description: Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/40173; http://secunia.com/advisories/26667; http://www.exploit-db.com/exploits/9589
CVE: CVE-2007-4735
Published: 2007-09-06
Description: Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/40307; http://secunia.com/advisories/26665; http://www.securityfocus.com/bid/25512
CVE: CVE-2007-4736
Published: 2007-09-06
Description: SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute arbitrary SQL commands via the category_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38422; http://www.vupen.com/english/advisories/2007/3088; https://exchange.xforce.ibmcloud.com/vulnerabilities/36419
CVE: CVE-2007-4737
Published: 2007-09-06
Description: Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the STPHPLIB_DIR parameter to (1) stphpapplication.php, (2) stphpbtnimage.php, or (3) stphpform.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38929; http://osvdb.org/38930; http://osvdb.org/38931
CVE: CVE-2007-4738
Published: 2007-09-06
Description: Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) db_conf or (2) ADODB_DIR parameter to utils/stphpimage_show.php; or a URL in the STPHPLIB_DIR parameter to (3) stphpbutton.php, (4) stphpcheckbox.php, (5) stphpcheckboxwithcaption.php, (6) stphpcheckgroup.php, (7) stphpcomponent.php, (8) stphpcontrolwithcaption.php, (9) stphpedit.php, (10) stphpeditwithcaption.php, (11) stphphr.php, (12) stphpimage.php, (13) stphpimagewithcaption.php, (14) stphplabel.php, (15) stphplistbox.php, (16) stphplistboxwithcaption.php, (17) stphplocale.php, (18) stphppanel.php, (19) stphpradiobutton.php, (20) stphpradiobuttonwithcaption.php, (21) stphpradiogroup.php, (22) stphprichbutton.php, (23) stphpspacer.php, (24) stphptable.php, (25) stphptablecell.php, (26) stphptablerow.php, (27) stphptabpanel.php, (28) stphptabtitle.php, (29) stphptextarea.php, (30) stphptextareawithcaption.php, (31) stphptoolbar.php, (32) stphpwindow.php, (33) stphpxmldoc.php, or (34) stphpxmlelement.php, a different set of vectors than CVE-2007-4737.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-94
References: http://osvdb.org/39073; http://osvdb.org/39074; http://osvdb.org/39075
CVE: CVE-2007-4739
Published: 2007-09-06
Description: reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file by signing it with an unknown key, related to the update command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://alioth.debian.org/frs/shownotes.php?release_id=1031; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440535; http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5%3Bfilename=interdiff%3Batt=1%3Bbug=440535
CVE: CVE-2007-4740
Published: 2007-09-06
Description: The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://osvdb.org/38923; http://retrogod.altervista.org/telecom_regkey.html; http://securityreason.com/securityalert/3098
CVE: CVE-2007-4741
Published: 2007-09-06
Description: Cross-site scripting (XSS) vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated administrators to inject arbitrary web script or HTML via the sort parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://cvs.claroline.net/cgi-bin/viewcvs.cgi/claroline/claroline/admin/adminusers.php?only_with_tag=V_1_8&r2=1.109.2.1&r1=1.10; http://secunia.com/advisories/26685; http://cvs.claroline.net/cgi-bin/viewcvs.cgi/claroline/claroline/admin/adminusers.php?only_with_tag=V_1_8&r2=1.109.2.1&r1=1.10
CVE: CVE-2007-4742
Published: 2007-09-06
Description: Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value in the sort parameter to admin/adminusers.php, which reveals the path in an error message in some circumstances, as demonstrated by a parameter value containing an XSS sequence.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://cvs.claroline.net/cgi-bin/viewcvs.cgi/claroline/claroline/admin/adminusers.php?only_with_tag=V_1_8&r2=1.109.2.1&r1=1.10; http://osvdb.org/39160; http://www.claroline.net/forum/viewtopic.php?t=13448