deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-5715
Published: 2007-10-30
Description: DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present in AllowUsers, as demonstrated by the root username, a different vulnerability than CVE-2007-4323.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: http://bugs.gentoo.org/show_bug.cgi?id=181213; http://osvdb.org/45298; https://bugzilla.redhat.com/show_bug.cgi?id=237449
CVE: CVE-2007-1323
Published: 2007-10-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-2893.  Reason: this candidate was intended for one issue, but some sources used this identifier for a separate issue, and a duplicate identifier had also been created by the time dual use was detected.  Notes: All CVE users should consult CVE-2007-2893 to determine if it is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-4861
Published: 2007-10-30
Description: SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive information via (1) a direct request for news.php, (2) an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in (3) admin/, (4) rss/, and (5) the root directory of the installation, which reveal the path in various error messages.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/45330; http://osvdb.org/45331; http://osvdb.org/45332
CVE: CVE-2007-4862
Published: 2007-10-30
Description: Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the config[news_url] parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/27444; http://securityreason.com/securityalert/3310; http://www.netvigilance.com/advisory0054
CVE: CVE-2007-4863
Published: 2007-10-30
Description: SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/38839; http://securityreason.com/securityalert/3309; http://www.netvigilance.com/advisory0055
CVE: CVE-2007-5716
Published: 2007-10-30
Description: Unspecified vulnerability in the Internet Protocol (IP) functionality in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors, probably related to a UDP packet.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/40816; http://secunia.com/advisories/27395; http://sunsolve.sun.com/search/document.do?assetkey=1-26-103087-1
CVE: CVE-2007-5717
Published: 2007-10-30
Description: Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) on x86 before firmware 2.70 allows remote attackers to execute arbitrary commands as root on the Service Processor (SP) via unspecified vectors, a different vulnerability than CVE-2007-5170.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/40835; http://secunia.com/advisories/27416; http://sunsolve.sun.com/search/document.do?assetkey=1-26-103127-1
CVE: CVE-2007-5718
Published: 2007-10-30
Description: vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448319; http://osvdb.org/41997; http://secunia.com/advisories/27420
CVE: CVE-2007-5719
Published: 2007-10-30
Description: SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.minibb.net/forums/9_4888_0.html; http://www.securityfocus.com/bid/26249; https://exchange.xforce.ibmcloud.com/vulnerabilities/38152
CVE: CVE-2007-5720
Published: 2007-10-30
Description: Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving creation of a profile.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/45297; http://www.securityfocus.com/bid/26242; https://exchange.xforce.ibmcloud.com/vulnerabilities/38185
CVE: CVE-2007-5721
Published: 2007-10-30
Description: PHP remote file inclusion vulnerability in _theme/breadcrumb.php in MySpacePros MySpace Resource Script (MSRS) 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the rootBase parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38838; http://www.securityfocus.com/bid/26240; https://exchange.xforce.ibmcloud.com/vulnerabilities/38167
CVE: CVE-2007-5722
Published: 2007-10-30
Description: Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possibly other products, allows remote attackers to execute arbitrary code via a long first argument to the ConnectAndEnterRoom method, possibly involving the GLCHAT.GLChatCtrl.1 control, as originally exploited in the wild in October 2007.  NOTE: some of these details are obtained from third party information.  NOTE: this was originally reported as a heap-based issue by some sources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38837; http://secunia.com/advisories/27500; http://www.securityfocus.com/bid/26244
CVE: CVE-2007-5723
Published: 2007-10-30
Description: Heap-based buffer overflow in the samp_send function in nuauth/sasl.c in NuFW before 2.2.7 allows remote attackers to cause a denial of service via unspecified input on which base64 encoding is performed. NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/39724; http://secunia.com/advisories/27442; http://www.nufw.org/+NuFW-2-2-7%2C207+.html
CVE: CVE-2007-5724
Published: 2007-10-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1) the category_id parameter to users/kb.php, and possibly (3) the Email Box field in profile.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38300; http://secunia.com/advisories/27449; http://securityreason.com/securityalert/3316
CVE: CVE-2007-5725
Published: 2007-10-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via (1) the email parameter to index.php; or the command parameter to index.php in (2) the default action for the home page, (3) a currencies action, or (4) a basket action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3312; http://www.securityfocus.com/archive/1/482906/100/0/threaded; http://www.securityfocus.com/bid/26232
CVE: CVE-2007-5726
Published: 2007-10-30
Description: Unspecified vulnerability in the Stream Control Transmission Protocol (sctp) functionality in Sun Solaris 10, when at least one SCTP socket is in the LISTEN state, allows remote attackers to cause a denial of service (panic) via unspecified vectors related to "INIT processing."
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/40815; http://secunia.com/advisories/27428; http://sunsolve.sun.com/search/document.do?assetkey=1-26-103101-1
CVE: CVE-2007-5727
Published: 2007-10-30
Description: Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows remote attackers to conduct cross-site scripting (XSS) attacks and inject arbitrary web script or HTML via XSS sequences without SCRIPT tags in the description parameter to (1) tcreate.php or (2) tupdate.php, as demonstrated using an onmouseover event in a b tag.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38215; http://osvdb.org/38836; http://secunia.com/advisories/27415
CVE: CVE-2007-5728
Published: 2007-10-30
Description: Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web script or HTML via certain input available in PHP_SELF in (1) redirect.php, possibly related to (2) login.php, different vectors than CVE-2007-2865.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063617.html; http://osvdb.org/36699; http://secunia.com/advisories/25446
CVE: CVE-2007-1321
Published: 2007-10-30
Description: Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/35495; http://secunia.com/advisories/25073; http://secunia.com/advisories/25095
CVE: CVE-2007-4277
Published: 2007-10-30
Description: The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write) for the \\.\Tmfilter device, which allows local users to send arbitrary content to the device via the IOCTL functionality.  NOTE: this can be leveraged for privilege escalation by exploiting a buffer overflow in the handler for IOCTL 0xa0284403.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-119, CWE-264
References: http://esupport.trendmicro.com/support/viewxml.do?ContentID=1035793; http://esupport.trendmicro.com/support/viewxml.do?ContentID=1036190; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=609
CVE: CVE-2007-5729
Published: 2007-10-30
Description: The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0_TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow.  NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the mtu overflow vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html; http://osvdb.org/42986; http://secunia.com/advisories/25073
CVE: CVE-2007-5730
Published: 2007-10-30
Description: Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow.  NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: http://osvdb.org/42985; http://secunia.com/advisories/25073; http://secunia.com/advisories/25095
CVE: CVE-2007-5731
Published: 2007-10-30
Description: Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461.
CVSS Score: 3.5 (LOW)
CWE: CWE-22
References: http://osvdb.org/38673; http://secunia.com/advisories/27467; http://svn.apache.org/viewvc/jakarta/slide/trunk/src/webdav/server/org/apache/slide/webdav/method/LockMethod.java?view=log&sortby=date&pathrev=590976
CVE: CVE-2007-5732
Published: 2007-10-30
Description: Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter.  NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://elouai.com/force-download.php; http://osvdb.org/39011; http://securityreason.com/securityalert/3321
CVE: CVE-2007-5733
Published: 2007-10-30
Description: Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-94
References: http://osvdb.org/39015; http://securityreason.com/securityalert/3322; http://www.securityfocus.com/archive/1/482676/100/0/threaded
CVE: CVE-2007-5734
Published: 2007-10-30
Description: Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/upload_file." destination filenames, via unspecified vectors to upload.cgi, accessed from upload.html.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/39013; http://securityreason.com/securityalert/3323; http://www.securityfocus.com/archive/1/482683/100/0/threaded
CVE: CVE-2007-5735
Published: 2007-10-30
Description: eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain unspecified user information via a direct request for cgi-bin/efileman/efileman_config.pm.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/39012; http://securityreason.com/securityalert/3323; http://www.securityfocus.com/archive/1/482683/100/0/threaded
CVE: CVE-2007-5736
Published: 2007-10-30
Description: Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors.  NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/38922; http://securityreason.com/securityalert/3324; http://www.securityfocus.com/archive/1/482674/100/0/threaded
CVE: CVE-2007-5737
Published: 2007-10-30
Description: Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-94
References: http://osvdb.org/38921; http://securityreason.com/securityalert/3325; http://www.securityfocus.com/archive/1/482687/100/0/threaded
CVE: CVE-2007-5738
Published: 2007-10-30
Description: The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/flashupload/upload.html.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/38920; http://securityreason.com/securityalert/3325; http://www.securityfocus.com/archive/1/482687/100/0/threaded
CVE: CVE-2007-5739
Published: 2007-10-30
Description: Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/38919; http://securityreason.com/securityalert/3325; http://www.securityfocus.com/archive/1/482687/100/0/threaded
CVE: CVE-2007-5740
Published: 2007-10-31
Description: The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html; http://secunia.com/advisories/27458; http://secunia.com/advisories/27520
CVE: CVE-2007-2263
Published: 2007-10-31
Description: Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38344; http://secunia.com/advisories/27361; http://service.real.com/realplayer/security/10252007_player/en/
CVE: CVE-2007-2264
Published: 2007-10-31
Description: Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/27361; http://securitytracker.com/id?1018866; http://service.real.com/realplayer/security/10252007_player/en/
CVE: CVE-2007-4345
Published: 2007-10-31
Description: Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart MIME e-mail message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/26905; http://secunia.com/secunia_research/2007-81/advisory/; http://www.securityfocus.com/bid/26252
CVE: CVE-2007-4599
Published: 2007-10-31
Description: Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary code via a crafted playlist (PLS) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38341; http://secunia.com/advisories/27361; http://securitytracker.com/id?1018866
CVE: CVE-2007-5080
Published: 2007-10-31
Description: Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/27361; http://service.real.com/realplayer/security/10252007_player/en/; http://www.attrition.org/pipermail/vim/2007-October/001841.html
CVE: CVE-2007-5081
Published: 2007-10-31
Description: Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a crafted RM file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38340; http://secunia.com/advisories/27361; http://securitytracker.com/id?1018866
CVE: CVE-2007-5751
Published: 2007-10-31
Description: Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain credentials.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://osvdb.org/40649; http://secunia.com/advisories/27438; http://secunia.com/advisories/27491
CVE: CVE-2007-5752
Published: 2007-10-31
Description: adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which allows remote attackers to create accounts via a modified form, as demonstrated by an account with admin (userlevel 4) privileges.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/27430; http://securityreason.com/securityalert/3326; http://www.securityfocus.com/archive/1/482919/100/0/threaded
CVE: CVE-2007-5753
Published: 2007-10-31
Description: Unspecified vulnerability in Light FMan PHP (lfman or lightfman) before 2.0rc1 has unknown impact and attack vectors related to "actions."
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/41583; http://sourceforge.net/forum/forum.php?forum_id=749157; http://sourceforge.net/project/shownotes.php?release_id=550239&group_id=179336
CVE: CVE-2007-5754
Published: 2007-10-31
Description: PHP remote file inclusion vulnerability in urlinn_includes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dir_ws parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/26261; https://exchange.xforce.ibmcloud.com/vulnerabilities/38182; https://www.exploit-db.com/exploits/4588
CVE: CVE-2007-2957
Published: 2007-10-31
Description: Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute arbitrary code via a large length value in an authentication packet, which results in a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/26372; http://secunia.com/secunia_research/2007-69/advisory/; http://securitytracker.com/id?1018878
CVE: CVE-2007-4351
Published: 2007-10-31
Description: Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/27233
CVE: CVE-2007-5768
Published: 2007-10-31
Description: The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive information by sniffing the HTTP traffic.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://osvdb.org/43676; http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=363; http://osvdb.org/43676
CVE: CVE-2007-5771
Published: 2007-11-01
Description: Flatnuke 3 (aka FlatnuX) allows remote attackers to obtain administrative access via a myforum%00 cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/43637; http://www.securityfocus.com/archive/1/482774/100/0/threaded; http://www.securityfocus.com/bid/26157
CVE: CVE-2007-5772
Published: 2007-11-01
Description: Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrators to inject arbitrary PHP code into a description.it.php file in a subdirectory of Download/ by saving a description and setting fneditmode to 1.  NOTE: unauthenticated remote attackers can exploit this by leveraging a cookie manipulation issue.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/43636; http://www.securityfocus.com/archive/1/482774/100/0/threaded; https://www.exploit-db.com/exploits/4562
CVE: CVE-2007-5773
Published: 2007-11-01
Description: Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/43635; https://exchange.xforce.ibmcloud.com/vulnerabilities/37413; https://www.exploit-db.com/exploits/4561
CVE: CVE-2007-5774
Published: 2007-11-01
Description: index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/43120; https://exchange.xforce.ibmcloud.com/vulnerabilities/37404; https://www.exploit-db.com/exploits/4561