deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4913
Published: 2007-09-17
Description: ips_kernel/class_upload.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to uploads/, where they are saved with a .txt extension and are not executable.  NOTE: there are limited usage scenarios under which this would be a vulnerability, but it is being tracked by CVE since the vendor has stated it is security-relevant.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870; http://forums.invisionpower.com/index.php?showtopic=237075; http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870
CVE: CVE-2007-4914
Published: 2007-09-17
Description: Unspecified vulnerability in the subscriptions manager in Invision Power Board (IPB or IP.Board) 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to (1) class_gw_2checkout.php, (2) class_gw_authorizenet.php, (3) class_gw_nochex.php, (4) class_gw_paypal.php, and (5) class_gw_safshop.php in sources/classes/paymentgateways/.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870; http://forums.invisionpower.com/index.php?showtopic=237075; http://osvdb.org/41319
CVE: CVE-2007-4915
Published: 2007-09-17
Description: The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP Basic Authentication request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/3151; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.ikkisoft.com/stuff/SN-2007-02.txt
CVE: CVE-2007-4916
Published: 2007-09-17
Description: Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo & Imaging Gallery 1.1 and probably other products, allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long first argument.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://goodfellas.shellcode.com.ar/own/VULWAR200706041; http://goodfellas.shellcode.com.ar/own/VULWKU200706142; http://secunia.com/advisories/26800
CVE: CVE-2007-4917
Published: 2007-09-17
Description: Cross-site scripting (XSS) vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the ip parameter in an online action, a different vector than CVE-2007-4334.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3149; http://www.securityfocus.com/archive/1/479439/100/0/threaded; http://www.securityfocus.com/bid/25674
CVE: CVE-2007-4918
Published: 2007-09-17
Description: SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/37087; http://secunia.com/advisories/26785; http://securityreason.com/securityalert/3148
CVE: CVE-2007-4919
Published: 2007-09-17
Description: Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via the id parameter to index.php, and allow (2) remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/modifpost.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/25669; http://www.vupen.com/english/advisories/2007/3178; https://exchange.xforce.ibmcloud.com/vulnerabilities/36602
CVE: CVE-2007-4920
Published: 2007-09-17
Description: SQL injection vulnerability in soporte_derecha_w.php in PHP Webquest 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id_actividad parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/26821; http://www.osvdb.org/37084; http://www.securityfocus.com/bid/25668
CVE: CVE-2007-4921
Published: 2007-09-17
Description: PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-02-ajax-file-browser/; http://osvdb.org/38970; http://www.vupen.com/english/advisories/2007/3175
CVE: CVE-2007-4922
Published: 2007-09-17
Description: SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a play ac action to index.php.  NOTE: some details are obtained from third party information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/25658; http://www.vupen.com/english/advisories/2007/3172; https://exchange.xforce.ibmcloud.com/vulnerabilities/36601
CVE: CVE-2007-4923
Published: 2007-09-17
Description: PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/26809; http://www.osvdb.org/37028; http://www.securityfocus.com/bid/25664
CVE: CVE-2007-4925
Published: 2007-09-18
Description: The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3payment_receive.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://osvdb.org/40523; http://secunia.com/advisories/26780; http://www.fortconsult.net/images/pdf/advisory_feb2007.pdf
CVE: CVE-2007-4926
Published: 2007-09-18
Description: The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by sniffing the wireless network or by leveraging unspecified other vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-310
References: http://airscanner.com/security/07080701_axis.htm; http://securityreason.com/securityalert/3145; http://www.informit.com/articles/article.aspx?p=1016102
CVE: CVE-2007-4927
Published: 2007-09-18
Description: axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service (reboot) via many requests with unique buffer names in the buffername parameter in a start action.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://airscanner.com/security/07080701_axis.htm; http://secunia.com/advisories/26831; http://securityreason.com/securityalert/3145
CVE: CVE-2007-4928
Published: 2007-09-18
Description: The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-310
References: http://airscanner.com/security/07080701_axis.htm; http://securityreason.com/securityalert/3145; http://www.informit.com/articles/article.aspx?p=1016102
CVE: CVE-2007-4929
Published: 2007-09-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML via the camNo parameter to incl/image_incl.shtml, and other unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://airscanner.com/security/07080701_axis.htm; http://secunia.com/advisories/26831; http://securityreason.com/securityalert/3145
CVE: CVE-2007-4930
Published: 2007-09-18
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via (1) axis-cgi/admin/restart.cgi, (2) the user and sgrp parameters to axis-cgi/admin/pwdgrp.cgi in an add action, or (3) the server parameter to admin/restartMessage.shtml.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://airscanner.com/security/07080701_axis.htm; http://secunia.com/advisories/26831; http://securityreason.com/securityalert/3145
CVE: CVE-2007-4931
Published: 2007-09-18
Description: HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for OpenSSL.
CVSS Score: 2.1 (LOW)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01164065; http://osvdb.org/45941; http://securitytracker.com/id?1018696
CVE: CVE-2007-4932
Published: 2007-09-18
Description: admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://osvdb.org/40149; http://secunia.com/advisories/26840; http://www.securityfocus.com/bid/25695
CVE: CVE-2007-4933
Published: 2007-09-18
Description: Direct static code injection vulnerability in includes/admin/sub/conf_appearence.php in Shop-Script FREE 2.0 and earlier allows remote attackers to inject arbitrary PHP code into cfg/appearence.inc.php via a save_appearence action in admin.php, as demonstrated with the (1) productscount, (2) colscount, and (3) darkcolor parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/26840; http://www.securityfocus.com/bid/25695; https://www.exploit-db.com/exploits/4419
CVE: CVE-2007-4934
Published: 2007-09-18
Description: Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFL_FILE_ROOT parameter to (1) program_files/livedraft/livedraft.php or (2) program_files/livedraft/admin.php.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-02-phpffl-fantasy-football-league-manager/; http://osvdb.org/37085; http://osvdb.org/37086
CVE: CVE-2007-4935
Published: 2007-09-18
Description: Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFL_FILE_ROOT parameter to (1) admin.php, (2) custom_pages.php, (3) draft.php, (4) faq.php, (5) leagues.php, (6) livedraft.php, (7) login.php, (8) my_team.php, (9) profile.php, (10) signup.php, (11) statistics.php, (12) transactions.php, (13) program_files/admin/custom_pages.php, or (14) program_files/common.php.  NOTE: the program_files/livedraft/admin.php and program_files/livedraft/livedraft.php vectors are covered by CVE-2007-4934.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-02-phpffl-fantasy-football-league-manager/; http://osvdb.org/39650; http://osvdb.org/39651
CVE: CVE-2007-0004
Published: 2007-09-18
Description: The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfs_permission (mode bits) data rather than an NFS ACCESS call to the server, which allows local client processes to obtain a false success status from open calls that the server would deny, and possibly obtain sensitive information about file permissions on the server, as demonstrated in a root_squash environment.  NOTE: it is uncertain whether any scenarios involving this issue cross privilege boundaries.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: https://bugzilla.redhat.com/show_bug.cgi?id=199715; https://bugzilla.redhat.com/show_bug.cgi?id=199715
CVE: CVE-2007-0997
Published: 2007-09-18
Description: Race condition in the tee (sys_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might allow local users to cause a denial of service (system crash), obtain sensitive information (kernel memory contents), or gain privileges via unspecified vectors related to a potentially dropped ipipe lock during a race between two pipe readers.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.18; http://lkml.org/lkml/2006/7/17/140; http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.18
CVE: CVE-2007-1865
Published: 2007-09-18
Description: The ipv6_getsockopt_sticky function in the kernel in Red Hat Enterprise Linux (RHEL) Beta 5.1.0 allows local users to obtain sensitive information (kernel memory contents) via a negative value of the len parameter.  NOTE: this issue has been disputed in a bug comment, stating that "len is ignored when copying header info to the user's buffer.
CVSS Score: 1.9 (LOW)
CWE: CWE-189
References: http://osvdb.org/45909; https://bugzilla.redhat.com/show_bug.cgi?id=232045; http://osvdb.org/45909
CVE: CVE-2007-4137
Published: 2007-09-18
Description: Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow.  NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc; http://bugs.gentoo.org/show_bug.cgi?id=192472; http://dist.trolltech.com/developer/download/175791_3.diff
CVE: CVE-2007-4936
Published: 2007-09-18
Description: Unspecified vulnerability in Office Efficiencies SafeSquid 4.1.x has unknown impact and attack vectors, related to a "serious security flaw," possibly specific to Linux.
CVSS Score: 7.5 (HIGH)
References: http://www.safesquid.com/html/viewtopic.php?t=2322; http://www.securityfocus.com/bid/25649; http://www.safesquid.com/html/viewtopic.php?t=2322
CVE: CVE-2007-4937
Published: 2007-09-18
Description: CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/26805; http://securityreason.com/securityalert/3147; http://www.securityfocus.com/archive/1/479194/100/0/threaded
CVE: CVE-2007-4938
Published: 2007-09-18
Description: Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://osvdb.org/45940; http://secunia.com/advisories/27016; http://securityreason.com/securityalert/3144
CVE: CVE-2007-4939
Published: 2007-09-18
Description: Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with an "indx truck size" of 0xffffffff, and certain wLongsPerEntry and nEntriesInuse values.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/26806; http://secunia.com/advisories/26807; http://secunia.com/advisories/26808
CVE: CVE-2007-4940
Published: 2007-09-18
Description: Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://securityreason.com/securityalert/3144; http://www.securityfocus.com/archive/1/479222/100/0/threaded; http://www.securityfocus.com/bid/25650
CVE: CVE-2007-4941
Published: 2007-09-18
Description: KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "indx truck size" and nEntriesInuse values.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://osvdb.org/45939; http://securityreason.com/securityalert/3144; http://www.securityfocus.com/archive/1/479222/100/0/threaded
CVE: CVE-2007-4942
Published: 2007-09-18
Description: PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806.  NOTE: the provenance of this information is unknown.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/26750; http://www.attrition.org/pipermail/vim/2007-September/001788.html; http://www.osvdb.org/36953
CVE: CVE-2007-4943
Published: 2007-09-18
Description: Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/29274; http://www.vupen.com/english/advisories/2007/3111; http://www.securityfocus.com/bid/29274
CVE: CVE-2007-4944
Published: 2007-09-18
Description: The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information (memory contents) via JavaScript.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/45946; http://security.gentoo.org/glsa/glsa-200708-17.xml; http://www.opera.com/docs/changelogs/freebsd/922/
CVE: CVE-2007-4945
Published: 2007-09-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web script or HTML via (1) a student's email address, (2) the year parameter to genbrws/Student/cal_month.php3, and other unspecified vectors related to the calendar.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26768; http://www.securityfocus.com/bid/25662; http://www.securityfocus.com/bid/25663
CVE: CVE-2007-4946
Published: 2007-09-18
Description: LetterGrade allows remote attackers to obtain sensitive information (installation path or account existence) via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/43160; http://secunia.com/advisories/26768; https://exchange.xforce.ibmcloud.com/vulnerabilities/36622
CVE: CVE-2007-0326
Published: 2007-09-18
Description: Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX control before 2.0.0.10, as used by multiple retailers, allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/37958; http://secunia.com/advisories/26830; http://www.kb.cert.org/vuls/id/854769
CVE: CVE-2007-4947
Published: 2007-09-18
Description: Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7) help8.php, (8) help9.php, or (10) index.php in doc/admin/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/; http://osvdb.org/43150; http://osvdb.org/43151
CVE: CVE-2007-4948
Published: 2007-09-18
Description: Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer (webmex) 3.2.2 allow remote attackers to execute arbitrary PHP code via (1) a URL in the path_include parameter to includes/rss.class.php, (2) a URL in the path_template parameter to (a) templates/main.tpl.php or (b) templates/folder_messages_link_message_name.tpl.php, or (4) a URL in the path_templates parameter to templates/sidebar.tpl.php.  NOTE: the vulnerability is present only when the administrator does not follow installation instructions about the requirement for .htaccess support. NOTE: the includes/core.lib.php vector is already covered by CVE-2006-5252.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-03-webmedia-explorer/; http://osvdb.org/43140; http://osvdb.org/43141
CVE: CVE-2007-4949
Published: 2007-09-18
Description: Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7pl1 allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to (1) ekilat.com-int.tpl.php, (2) phpreactor.org-top.tpl.php, or (3) ekilat.com-top.tpl.php in examples/.  NOTE: this issue has been disputed by CVE, since the vulnerability is present only when the product is incorrectly installed by placing examples/ under the web root
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-03-phpreactor/; http://osvdb.org/43139; http://arfis.wordpress.com/2007/09/14/rfi-03-phpreactor/
CVE: CVE-2007-4950
Published: 2007-09-18
Description: PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal 0.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.  NOTE: this issue is disputed by CVE, since DOCUMENT_ROOT cannot be modified by an attacker
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-03-phportal/; http://www.securityfocus.com/bid/25717; https://exchange.xforce.ibmcloud.com/vulnerabilities/42477
CVE: CVE-2007-4951
Published: 2007-09-18
Description: PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG_PATH parameter.  NOTE: this issue has been disputed by CVE, since YAPIG_PATH is defined before use
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-03-yapig-yet-another-php-image-gallery/; http://osvdb.org/42519; http://arfis.wordpress.com/2007/09/14/rfi-03-yapig-yet-another-php-image-gallery/
CVE: CVE-2007-4952
Published: 2007-09-18
Description: SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/25692; https://www.exploit-db.com/exploits/4418; http://www.securityfocus.com/bid/25692
CVE: CVE-2007-4953
Published: 2007-09-18
Description: SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the keyword parameter in a search site action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/25688; https://exchange.xforce.ibmcloud.com/vulnerabilities/36640; https://www.exploit-db.com/exploits/4417