deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-5266
Published: 2007-10-08
Description: Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1 allows remote attackers to cause a denial of service (crash) via a crafted PNG image that prevents a name field from being NULL terminated.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html; http://bugs.gentoo.org/show_bug.cgi?id=195261; http://docs.info.apple.com/article.html?artnum=307562
CVE: CVE-2007-5267
Published: 2007-10-08
Description: Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service (crash) via a crafted PNG image, due to an incorrect fix for CVE-2007-5266.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html; http://docs.info.apple.com/article.html?artnum=307562; http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
CVE: CVE-2007-5268
Published: 2007-10-08
Description: pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
CVSS Score: 4.3 (MEDIUM)
References: http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html; http://bugs.gentoo.org/show_bug.cgi?id=195261; http://docs.info.apple.com/article.html?artnum=307562
CVE: CVE-2007-5269
Published: 2007-10-08
Description: Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html; http://bugs.gentoo.org/show_bug.cgi?id=195261; http://docs.info.apple.com/article.html?artnum=307562
CVE: CVE-2007-5270
Published: 2007-10-08
Description: Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attackers to create or overwrite arbitrary files, and conduct cross-site scripting attacks (XSS) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://drupal.org/node/180591; http://osvdb.org/45493; http://osvdb.org/45494
CVE: CVE-2007-5271
Published: 2007-10-08
Description: Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the bField[bf_data] parameter to (1) interface/editors/-custom.php or (2) interface/editors/custom.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/27069; http://www.securityfocus.com/bid/25933; https://exchange.xforce.ibmcloud.com/vulnerabilities/36972
CVE: CVE-2007-5272
Published: 2007-10-08
Description: SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/37457; http://secunia.com/advisories/27070; http://www.securityfocus.com/bid/25934
CVE: CVE-2007-5273
Published: 2007-10-08
Description: Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.
CVSS Score: 2.6 (LOW)
References: http://crypto.stanford.edu/dns/dns-rebinding.pdf; http://dev2dev.bea.com/pub/advisory/272; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533
CVE: CVE-2007-5274
Published: 2007-10-08
Description: Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound connections via a multi-pin DNS rebinding attack dependent on the LiveConnect API, in which JavaScript download relies on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Machine (JVM), a different issue than CVE-2007-5273.  NOTE: this is similar to CVE-2007-5232.
CVSS Score: 2.6 (LOW)
References: http://crypto.stanford.edu/dns/dns-rebinding.pdf; http://dev2dev.bea.com/pub/advisory/272; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533
CVE: CVE-2007-5275
Published: 2007-10-08
Description: The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser's DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://crypto.stanford.edu/dns/dns-rebinding.pdf; http://lists.apple.com/archives/security-announce/2008//May/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html
CVE: CVE-2007-5276
Published: 2007-10-08
Description: Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.
CVSS Score: 4.3 (MEDIUM)
References: http://crypto.stanford.edu/dns/dns-rebinding.pdf; http://osvdb.org/45526; http://crypto.stanford.edu/dns/dns-rebinding.pdf
CVE: CVE-2007-5277
Published: 2007-10-08
Description: Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80, a different issue than CVE-2006-4560.
CVSS Score: 4.3 (MEDIUM)
References: http://crypto.stanford.edu/dns/dns-rebinding.pdf; http://osvdb.org/45525; http://crypto.stanford.edu/dns/dns-rebinding.pdf
CVE: CVE-2007-5278
Published: 2007-10-08
Description: Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to download files that were uploaded by users, as demonstrated by obtaining a directory listing via a direct request to /upload and then retrieving individual files.  NOTE: in a non-default configuration, the directory listing is denied, but filenames may be predicable.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/25861; https://www.exploit-db.com/exploits/4466; http://www.securityfocus.com/bid/25861
CVE: CVE-2007-5279
Published: 2007-10-09
Description: Heap-based buffer overflow in ConeXware PowerArchiver before 10.20.21 might allow remote attackers to execute arbitrary code via a long filename in a BlackHole archive.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/41552; http://secunia.com/advisories/27000
CVE: CVE-2007-5280
Published: 2007-10-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in (1) success or (2) error messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://appfuse.org/display/APF/Release+Notes+2.0; http://issues.appfuse.org/browse/APF-880; http://osvdb.org/37423
CVE: CVE-2007-5281
Published: 2007-10-09
Description: The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests.  NOTE: this may be the same as CVE-2007-3698.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/27075; http://www.hitachi-support.com/security_e/vuls_e/HS07-031_e/index-e.html; http://www.securityfocus.com/bid/25935
CVE: CVE-2007-5282
Published: 2007-10-09
Description: Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service (agent process crash) via invalid data from clients other than Cosminexus Manager.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/27074; http://www.hitachi-support.com/security_e/vuls_e/HS07-033_e/index-e.html; http://www.securityfocus.com/bid/25937
CVE: CVE-2007-5283
Published: 2007-10-09
Description: The TSC Domain Manager in Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor 01-00 through 03-00 might allow attackers to cause a denial of service (crash) via invalid messages.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/27035; http://www.hitachi-support.com/security_e/vuls_e/HS07-032_e/index-e.html; http://www.securityfocus.com/bid/25936
CVE: CVE-2007-5284
Published: 2007-10-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-5279.  Reason: This candidate is a duplicate of CVE-2007-5279.  Notes: All CVE users should reference CVE-2007-5279 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-5285
Published: 2007-10-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-5280.  Reason: This candidate is a duplicate of CVE-2007-5280.  Notes: All CVE users should reference CVE-2007-5280 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-5286
Published: 2007-10-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-5281.  Reason: This candidate is a duplicate of CVE-2007-5281.  Notes: All CVE users should reference CVE-2007-5281 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-5287
Published: 2007-10-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-5282.  Reason: This candidate is a duplicate of CVE-2007-5282.  Notes: All CVE users should reference CVE-2007-5282 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-5288
Published: 2007-10-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-5283.  Reason: This candidate is a duplicate of CVE-2007-5283.  Notes: All CVE users should reference CVE-2007-5283 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-5290
Published: 2007-10-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMail Pro ASP before 3.4.64, WebMail Lite ASP before 4.0.11, and WebMail Lite PHP before 4.0.22; allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to login.php and the (2) mode2 parameter to default.asp in an advanced_login mode.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1690&w=2; http://osvdb.org/37649; http://osvdb.org/37650
CVE: CVE-2007-5291
Published: 2007-10-09
Description: Cross-site scripting (XSS) vulnerability in Edit.asp in DB Manager 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://pridels-team.blogspot.com/2007/10/db-manager-xss-vuln.html; http://secunia.com/advisories/27120; http://www.securityfocus.com/bid/25964
CVE: CVE-2007-5292
Published: 2007-10-09
Description: Cross-site scripting (XSS) vulnerability in photos.cfm in Directory Image Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the backwardDirectory parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38629; http://pridels-team.blogspot.com/2007/10/directory-image-gallery-xss-vuln.html; http://www.vupen.com/english/advisories/2007/3425
CVE: CVE-2007-5293
Published: 2007-10-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in IDMOS 1.0-beta (aka Phoenix) allow remote attackers to inject arbitrary web script or HTML via the (1) err_msg parameter to error.php and the (2) content parameter to templates/simple/ia.php.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://osvdb.org/38631; http://osvdb.org/38632; http://securityreason.com/securityalert/3205
CVE: CVE-2007-5294
Published: 2007-10-09
Description: PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to execute arbitrary PHP code via a URL in the site_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38633; http://securityreason.com/securityalert/3205; http://www.securityfocus.com/archive/1/481682/100/0/threaded
CVE: CVE-2007-5295
Published: 2007-10-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in (a) Wikepage Opus 13 2007.2 and (b) TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the (1) PageContent and (2) PageName parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94
References: http://osvdb.org/38634; http://osvdb.org/38635; http://pridels-team.blogspot.com/2007/10/wikepage-xss-vuln.html
CVE: CVE-2007-5296
Published: 2007-10-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in dblisttest.asp in dbList 8.1 allow remote attackers to inject arbitrary web script or HTML via the (1) db, (2) pagesize, (3) sort, (4) strKeyWords, and (5) table parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://pridels-team.blogspot.com/2007/10/dblist-xss-vuln.html; http://secunia.com/advisories/27115; http://www.securityfocus.com/bid/25966
CVE: CVE-2007-5297
Published: 2007-10-09
Description: Cross-site scripting (XSS) vulnerability in index.php in Minki 1.30 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37576; http://pridels-team.blogspot.com/2007/10/minki-xss-vuln.html; http://secunia.com/advisories/27119
CVE: CVE-2007-5298
Published: 2007-10-09
Description: Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP code via a URL in the cfg[document_uri] parameter to (1) _administration/securite.php and (2) _administration/gestion_configurations/save_config.php.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38637; http://osvdb.org/38638; http://securityreason.com/securityalert/3203
CVE: CVE-2007-5299
Published: 2007-10-09
Description: Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow remote attackers to read arbitrary files via a .. (dot dot) in the view_mode parameter to (1) featured_list.php and (2) online_list.php in member/.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/38456; http://osvdb.org/38457; http://secunia.com/advisories/27114
CVE: CVE-2007-5300
Published: 2007-10-09
Description: Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2, and possibly other versions allows remote attackers to cause a denial of service (daemon crash) via a long USER command that triggers a stack-based buffer overflow.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119, CWE-189
References: http://secunia.com/advisories/27091; http://secunia.com/advisories/28342; http://www.debian.org/security/2008/dsa-1452
CVE: CVE-2007-5301
Published: 2007-10-09
Description: Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.80-rc3 allows remote attackers to execute arbitrary code via a .OGG file with long comments.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/27117; http://secunia.com/advisories/29680; http://sourceforge.net/forum/forum.php?forum_id=742584
CVE: CVE-2007-5302
Published: 2007-10-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01183265; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01183597; http://osvdb.org/37603
CVE: CVE-2007-5303
Published: 2007-10-09
Description: Cross-site scripting (XSS) vulnerability in news_page.php in SnewsCMS Rus 2.1 allows remote attackers to inject arbitrary web script or HTML via the page_id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38642; http://www.securityfocus.com/archive/1/481745/100/0/threaded; http://www.securityfocus.com/bid/25963
CVE: CVE-2007-5304
Published: 2007-10-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) repertimage parameter to utilisateurs/vousetesbannis.php, the (2) elseifvotetxtresultatduvote parameter to utilisateurs/votesresultats.php, and the (3) elseifforumtxtmenugeneraleduforum parameter to moduleajouter/depot/adminforum.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38646; http://osvdb.org/38647; http://osvdb.org/38648
CVE: CVE-2007-5305
Published: 2007-10-09
Description: Multiple PHP remote file inclusion vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) contenus parameter to (a) contenus.php; the (2) tpelseifportalrepertoire parameter to (b) votes.php, (c) espaceperso.php, (d) enregistrement.php, (e) commentaire.php, and (f) coeurusr.php in utilisateurs/, and (g) articles/fonctions.php and (h) depot/fonctions.php in moduleajouter/; the (3) corpsdesign parameter to (i) articles/usrarticles.php and (j) depot/usrdepot.php in moduleajouter/; and possibly other files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38649; http://osvdb.org/38650; http://osvdb.org/38651
CVE: CVE-2007-5306
Published: 2007-10-09
Description: ELSEIF CMS Beta 0.6 allows remote attackers to obtain sensitive information (full path) via unspecified vectors to utilisateurs/votesresultats.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/40419; http://securityreason.com/securityalert/3204; http://www.securityfocus.com/archive/1/481683/100/0/threaded
CVE: CVE-2007-5307
Published: 2007-10-09
Description: ELSEIF CMS Beta 0.6 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code by uploading a .php file via externe/swfupload/upload.php.  NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in ELSEIF CMS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://securityreason.com/securityalert/3204; http://www.securityfocus.com/archive/1/481683/100/0/threaded; http://www.securityfocus.com/bid/25951
CVE: CVE-2007-5308
Published: 2007-10-09
Description: SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/37617; http://secunia.com/advisories/27131; http://www.securityfocus.com/bid/25978
CVE: CVE-2007-5309
Published: 2007-10-09
Description: PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery (com_wmtgallery) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38645; http://www.attrition.org/pipermail/vim/2007-October/001823.html; http://www.attrition.org/pipermail/vim/2007-October/001824.html
CVE: CVE-2007-5310
Published: 2007-10-09
Description: PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtportfolio) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38644; http://www.securityfocus.com/bid/25959; https://exchange.xforce.ibmcloud.com/vulnerabilities/36993
CVE: CVE-2007-5311
Published: 2007-10-09
Description: Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ss_uri parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/37652; http://secunia.com/advisories/27109; http://securityreason.com/securityalert/3207
CVE: CVE-2007-5312
Published: 2007-10-09
Description: Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the (1) color parameter to pjirc/css.php and the (2) cat parameter to browse.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37653; http://osvdb.org/37654; http://secunia.com/advisories/27109
CVE: CVE-2007-5313
Published: 2007-10-09
Description: PHP remote file inclusion vulnerability in install/config.php in Picturesolution 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38643; http://www.securityfocus.com/bid/25961; http://www.vupen.com/english/advisories/2007/3431
CVE: CVE-2007-5314
Published: 2007-10-09
Description: PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PEARPATH parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/37620; http://secunia.com/advisories/27140; http://www.vupen.com/english/advisories/2007/3427
CVE: CVE-2007-5315
Published: 2007-10-09
Description: PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the livealbum_dir parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/37618; http://secunia.com/advisories/27139; http://www.vupen.com/english/advisories/2007/3446