deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-1776
Published: 2007-03-30
Description: SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com_ezine) 2.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in a read action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/34511; http://secunia.com/advisories/24675; http://www.securityfocus.com/bid/23165
CVE: CVE-2007-1777
Published: 2007-03-30
Description: Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/25025; http://secunia.com/advisories/25062; http://www.debian.org/security/2007/dsa-1282
CVE: CVE-2007-1778
Published: 2007-03-30
Description: PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 (EN-Forums) module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37195; http://www.securityfocus.com/bid/23176; http://www.vupen.com/english/advisories/2007/1138
CVE: CVE-2007-1779
Published: 2007-03-30
Description: Multiple SQL injection vulnerabilities in the MySQL back-end in Advanced Website Creator (AWC) before 1.9.0 might allow remote attackers to execute arbitrary SQL commands via unspecified parameters, related to use of mysql_escape_string instead of mysql_real_escape_string.
CVSS Score: 7.5 (HIGH)
References: http://forums.awcreator.com/viewtopic.php?t=45; http://osvdb.org/33875; http://secunia.com/advisories/24685
CVE: CVE-2006-7181
Published: 2007-03-30
Description: Multiple PHP remote file inclusion vulnerabilities in Morcego CMS 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) fichero parameter to morcegoCMS.php or the (2) path parameter to adodb/adodb.inc.php.  NOTE: vector 1 has been disputed by a third party who shows that $fichero can not be controlled by an attacker
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://securityreason.com/securityalert/2494; http://www.securityfocus.com/archive/1/448545/100/0/threaded; http://www.securityfocus.com/archive/1/485403/100/0/threaded
CVE: CVE-2006-7182
Published: 2007-03-30
Description: PHP remote file inclusion vulnerability in noticias.php in MNews 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/2493; http://www.securityfocus.com/archive/1/448629/100/0/threaded; http://securityreason.com/securityalert/2493
CVE: CVE-2007-1780
Published: 2007-03-30
Description: Cross-site scripting (XSS) vulnerability in the DHT shell (owdhtshell) in Overlay Weaver 0.5.9 to 0.5.11, when invoked with the -x option, allows remote attackers to inject arbitrary web script or HTML via fields in certain input forms.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://overlayweaver.sourceforge.net/news/; http://secunia.com/advisories/24669
CVE: CVE-2007-1781
Published: 2007-03-30
Description: Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.6 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/34518; http://secunia.com/advisories/24691
CVE: CVE-2007-1782
Published: 2007-03-30
Description: CruiseWorks 1.09e and earlier does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.6 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/34543; http://secunia.com/advisories/24674
CVE: CVE-2007-0038
Published: 2007-03-30
Description: Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0470.html; http://secunia.com/advisories/24659; http://securityreason.com/securityalert/2542
CVE: CVE-2006-7183
Published: 2007-03-30
Description: PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter.
CVSS Score: 10.0 (HIGH)
References: http://www.securityfocus.com/bid/21313; https://exchange.xforce.ibmcloud.com/vulnerabilities/30516; https://www.exploit-db.com/exploits/2850
CVE: CVE-2006-7184
Published: 2007-03-30
Description: Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine (EE) 1.22, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to (1) fetchsettings.php or (2) fstyles.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/20793; http://www.securityfocus.com/bid/20793
CVE: CVE-2006-7185
Published: 2007-03-30
Description: PHP remote file inclusion vulnerability in includes/user_standard.php in CMSmelborp Beta allows remote attackers to execute arbitrary PHP code via a URL in the relative_root parameter.
CVSS Score: 9.3 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/30192; https://www.exploit-db.com/exploits/2766; https://exchange.xforce.ibmcloud.com/vulnerabilities/30192
CVE: CVE-2007-1784
Published: 2007-03-31
Description: The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function.
CVSS Score: 9.3 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=495; http://www-1.ibm.com/support/docview.wss?uid=swg21257029; http://www.securityfocus.com/bid/23201
CVE: CVE-2007-1785
Published: 2007-03-31
Description: The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.
CVSS Score: 7.1 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0467.html; http://secunia.com/advisories/24682; http://securityreason.com/securityalert/2509
CVE: CVE-2007-1786
Published: 2007-03-31
Description: SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/34544; http://secunia.com/advisories/24693; http://www.hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html
CVE: CVE-2007-1787
Published: 2007-03-31
Description: Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) inc_dir or (2) lib_dir parameter.
CVSS Score: 9.3 (HIGH)
References: http://advisories.echo.or.id/adv/adv80-K-159-2007.txt; http://osvdb.org/34626; http://secunia.com/advisories/24729
CVE: CVE-2007-1788
Published: 2007-03-31
Description: Flyspray 0.9.9, when output_buffering is disabled or "set to a low value," allows remote attackers to bypass authentication via a crafted post request.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/24702; http://www.flyspray.org/fsa:1; http://www.securityfocus.com/bid/23214
CVE: CVE-2007-1789
Published: 2007-03-31
Description: Flyspray 0.9.9 allows remote attackers to obtain sensitive information (private project summaries) via direct requests.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/34591; http://secunia.com/advisories/24702; http://www.flyspray.org/changelog
CVE: CVE-2007-1790
Published: 2007-03-31
Description: Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to execute arbitrary PHP code via a URL in the install_root parameter to (1) support.inc.php, (2) function.inc.php, (3) rdal_object.inc.php, (4) rdal_editor.inc.php. (5) login.inc.php, (6) request.inc.php, and (7) categories.inc.php in include/core/; (8) save.inc.php, (9) preview.inc.php, (10) edit_item.inc.php, (11) new_item.inc.php, and (12) item_info.inc.php in include/display/item/; (13) search.inc.php, (14) item_edit.inc.php, (15) register_succsess.inc.php, (16) context_menu.inc.php, (17) item_repost.inc.php, (18) balance.inc.php, (19) featured.inc.php, (20) user.inc.php, (21) buynow.inc.php, (22) install_complete.inc.php, (23) fees_info.inc.php, (24) user_feedback.inc.php, (25) admin_balance.inc.php, (26) activate.inc.php, (27) user_info.inc.php, (28) member.inc.php, (29) add_bid.inc.php, (30) items_filter.inc.php, (31) my_info.inc.php, (32) register.inc.php, (33) leave_feedback.inc.php, and (34) user_auctions.inc.php in include/display/; and (35) design/form.inc.php, (36) processor.inc.php, (37) interfaces.inc.php (38) left_menu.inc.php, (39) login.inc.php, and (40) categories.inc.php in include/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/24696; http://www.osvdb.org/34545; http://www.osvdb.org/34546
CVE: CVE-2007-1791
Published: 2007-03-31
Description: SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34936; http://www.securityfocus.com/bid/23205; https://exchange.xforce.ibmcloud.com/vulnerabilities/33325
CVE: CVE-2006-5820
Published: 2007-04-02
Description: The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/34318; http://secunia.com/advisories/24714; http://securityreason.com/securityalert/2513
CVE: CVE-2007-1793
Published: 2007-04-02
Description: SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions.  NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/34692; http://secunia.com/advisories/24677; http://securityresponse.symantec.com/avcenter/security/Content/2008.12.12.html
CVE: CVE-2007-1794
Published: 2007-04-02
Description: The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used.  NOTE: this issue might be related to CVE-2006-3805.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/24624; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102865-1; http://www.vupen.com/english/advisories/2007/1178
CVE: CVE-2007-1795
Published: 2007-04-02
Description: JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 10.0 (HIGH)
References: http://developers.jccorp.net/modules/newbb/viewtopic.php?topic_id=33&forum=8; http://www.securityfocus.com/bid/23217; https://exchange.xforce.ibmcloud.com/vulnerabilities/33320
CVE: CVE-2007-1796
Published: 2007-04-02
Description: Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact.
CVSS Score: 10.0 (HIGH)
References: http://developers.jccorp.net/modules/newbb/viewtopic.php?topic_id=33&forum=8; http://osvdb.org/34988; https://exchange.xforce.ibmcloud.com/vulnerabilities/33320
CVE: CVE-2007-1797
Published: 2007-04-02
Description: Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=496; http://secunia.com/advisories/24721; http://secunia.com/advisories/24739
CVE: CVE-2007-1798
Published: 2007-04-02
Description: Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/34981; http://www-1.ibm.com/support/docview.wss?uid=isg1IY95054; http://www-1.ibm.com/support/docview.wss?uid=isg1IY96753
CVE: CVE-2007-1799
Published: 2007-04-02
Description: Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to overwrite arbitrary files via modified ".." sequences in a torrent filename, as demonstrated by "../" sequences, due to an incomplete fix for CVE-2007-1384.
CVSS Score: 6.4 (MEDIUM)
References: http://bugs.kde.org/show_bug.cgi?id=143637; http://secunia.com/advisories/24995; http://secunia.com/advisories/25097
CVE: CVE-2007-1800
Published: 2007-04-02
Description: Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attackers to gain network access via a spoofed Network Endpoint Assessment posture, aka "NACATTACK." NOTE: this attack might be limited to authenticated users and devices.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34123; http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Dror; http://www.cisco.com/en/US/products/products_security_response09186a00808110da.html
CVE: CVE-2007-1801
Published: 2007-04-02
Description: Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conf_lang_default parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by inc/lang.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35458; http://www.securityfocus.com/bid/23206; https://exchange.xforce.ibmcloud.com/vulnerabilities/33326
CVE: CVE-2007-1802
Published: 2007-04-02
Description: Cross-site scripting (XSS) vulnerability in MailDwarf 3.01 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/24681; http://www.securityfocus.com/bid/23207
CVE: CVE-2007-1803
Published: 2007-04-02
Description: Unspecified vulnerability in MailDwarf 3.01 and earlier allows remote attackers to send e-mail to addresses different from the configured addresses.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/24681; http://www.securityfocus.com/bid/23207
CVE: CVE-2007-1804
Published: 2007-04-02
Description: PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LENGTH value of FRAME_SIZE_MAX_ALLOW sent on TCP port 9875, which triggers a p->export assertion failure in do_read; (2) a PA_PSTREAM_DESCRIPTOR_LENGTH value of 0 sent on TCP port 9875, which triggers a length assertion failure in pa_memblock_new; or (3) an empty packet on UDP port 9875, which triggers a t assertion failure in pa_sdp_parse; and allows remote authenticated users to cause a denial of service (daemon crash) via a crafted packet on TCP port 9875 that (4) triggers a maxlength assertion failure in pa_memblockq_new, (5) triggers a size assertion failure in pa_xmalloc, or (6) plays a certain sound file.
CVSS Score: 7.8 (HIGH)
References: http://aluigi.altervista.org/adv/pulsex-adv.txt; http://aluigi.org/poc/pulsex.zip; http://secunia.com/advisories/25431
CVE: CVE-2007-1805
Published: 2007-04-02
Description: SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34466; http://www.securityfocus.com/bid/23253; https://exchange.xforce.ibmcloud.com/vulnerabilities/33372
CVE: CVE-2007-1806
Published: 2007-04-02
Description: SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the idcat parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24709; http://www.securityfocus.com/bid/23250; https://exchange.xforce.ibmcloud.com/vulnerabilities/33370
CVE: CVE-2007-1807
Published: 2007-04-02
Description: SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34465; http://www.securityfocus.com/bid/23229; http://www.vupen.com/english/advisories/2007/1202
CVE: CVE-2007-1808
Published: 2007-04-02
Description: SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the camid parameter in a showcam action.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34456; http://secunia.com/advisories/24748; http://www.securityfocus.com/bid/23245
CVE: CVE-2007-1809
Published: 2007-04-02
Description: Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter to (1) cls_headline_prod.php, (2) cls_listorders.php, or (3) cls_viewpastorders.php in include/, different vectors than CVE-2007-1513.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35226; http://osvdb.org/35227; http://osvdb.org/35228
CVE: CVE-2007-1810
Published: 2007-04-02
Description: SQL injection vulnerability in product_details.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34455; http://secunia.com/advisories/24749; http://www.securityfocus.com/bid/23272
CVE: CVE-2007-1811
Published: 2007-04-02
Description: SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34470; https://exchange.xforce.ibmcloud.com/vulnerabilities/33359; https://www.exploit-db.com/exploits/3625
CVE: CVE-2007-1812
Published: 2007-04-02
Description: PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire_visiteur parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34597; http://secunia.com/advisories/24701; http://www.attrition.org/pipermail/vim/2007-April/001483.html
CVE: CVE-2007-1813
Published: 2007-04-02
Description: SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the katid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34471; https://exchange.xforce.ibmcloud.com/vulnerabilities/33369; https://www.exploit-db.com/exploits/3623
CVE: CVE-2007-1814
Published: 2007-04-02
Description: SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34469; http://www.securityfocus.com/bid/23229; https://exchange.xforce.ibmcloud.com/vulnerabilities/33350
CVE: CVE-2007-1815
Published: 2007-04-02
Description: SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34468; http://www.securityfocus.com/bid/23229; https://exchange.xforce.ibmcloud.com/vulnerabilities/33366
CVE: CVE-2007-1816
Published: 2007-04-02
Description: SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34467; http://www.securityfocus.com/bid/23229; https://exchange.xforce.ibmcloud.com/vulnerabilities/33367
CVE: CVE-2007-1817
Published: 2007-04-02
Description: SQL injection vulnerability in index.php in the Lykos Reviews (lykos_reviews) 1.00 module for Xoops allows remote attackers to execute arbitrary SQL commands via the uid parameter in a u action.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34463; http://www.securityfocus.com/bid/23232; http://www.vupen.com/english/advisories/2007/1189
CVE: CVE-2007-1818
Published: 2007-04-02
Description: PHP remote file inclusion vulnerability in MOD_forum_fields_parse.php in the Forum picture and META tags 1.7 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35445; http://www.securityfocus.com/bid/23222; http://www.vupen.com/english/advisories/2007/1188
CVE: CVE-2007-1819
Published: 2007-04-02
Description: Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00901872; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=497; http://secunia.com/advisories/24692
CVE: CVE-2007-1820
Published: 2007-04-02
Description: Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or remove messages, or reconfigure the mailbox, by spoofing Calling Number Identification (CNID, aka Caller ID).
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/34983; http://www.kb.cert.org/vuls/id/726548; http://www.kb.cert.org/vuls/id/AAMN-5N2QFX