deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4124
Published: 2007-08-01
Description: The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/37852; http://secunia.com/advisories/26250; http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html
CVE: CVE-2007-4125
Published: 2007-08-01
Description: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause an unspecified denial of service via unknown vectors.
CVSS Score: 7.1 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01087206; http://secunia.com/advisories/26279; http://www.securityfocus.com/bid/25147
CVE: CVE-2007-4126
Published: 2007-08-01
Description: Unspecified vulnerability in the dynamic tracing framework (DTrace) on Sun Solaris 10 before 20070730 allows local users with PRIV_DTRACE_USER privileges to cause a denial of service (panic or hang) via unspecified use of certain DTrace programs.
CVSS Score: 1.5 (LOW)
References: http://osvdb.org/36613; http://secunia.com/advisories/26280; http://sunsolve.sun.com/search/document.do?assetkey=1-26-103021-1
CVE: CVE-2007-4127
Published: 2007-08-01
Description: PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir_abs_src parameter.  NOTE: this issue is disputed by multiple third parties, who report that the product exits if register_globals is enabled, thereby blocking exploitation.  NOTE: CVE-2006-3210.a covers this issue in versions before 1.0
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/46973; http://securityreason.com/securityalert/2938; http://www.attrition.org/pipermail/vim/2007-July/001743.html
CVE: CVE-2007-4128
Published: 2007-08-01
Description: SQL injection vulnerability in index.php in the Firestorm Technologies GMaps (com_gmaps) 1.00 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mapId parameter in a viewmap action.
CVSS Score: 7.5 (HIGH)
References: http://firestorm-technologies.com/; http://osvdb.org/39192; http://www.securityfocus.com/bid/25146
CVE: CVE-2007-2403
Published: 2007-08-03
Description: CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-2404
Published: 2007-08-03
Description: CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 before 20070731 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in an unspecified context.  NOTE: this can be leveraged for cross-site scripting (XSS) attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-2405
Published: 2007-08-03
Description: Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-2406
Published: 2007-08-03
Description: Quartz Composer on Apple Mac OS X 10.4.10 does not initialize a certain object pointer, which might allow user-assisted remote attackers to execute arbitrary code via a crafted Quartz Composer file.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-2407
Published: 2007-08-03
Description: The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
CVSS Score: 4.0 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-2409
Published: 2007-08-03
Description: Cross-domain vulnerability in WebCore on Apple Mac OS X 10.3.9 and 10.4.10 allows remote attackers to obtain sensitive information via a popup window, which is able to read the current URL of the parent window.
CVSS Score: 4.3 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-2410
Published: 2007-08-03
Description: WebCore on Apple Mac OS X 10.3.9 and 10.4.10 retains properties of certain global objects when a new URL is visited in the same window, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
CVSS Score: 4.3 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-3744
Published: 2007-08-03
Description: Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=306172; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=573; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
CVE: CVE-2007-3745
Published: 2007-08-03
Description: The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 contains an unsafe interface that is exposed by JDirect, which allows remote attackers to free arbitrary memory and thereby execute arbitrary code.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-3746
Published: 2007-08-03
Description: The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not properly check the bounds of heap read and write operations, which allows remote attackers to execute arbitrary code via a crafted applet.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-3747
Published: 2007-08-03
Description: The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap addresses, which allows remote attackers to execute arbitrary code via a crafted applet.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-3748
Published: 2007-08-03
Description: Buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet.
CVSS Score: 5.4 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://secunia.com/advisories/26235
CVE: CVE-2007-4139
Published: 2007-08-03
Description: Cross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin/includes/upload.php) in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HTML via the style parameter to wp-admin/upload.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm/; http://osvdb.org/36621; http://secunia.com/advisories/26296
CVE: CVE-2007-4140
Published: 2007-08-03
Description: Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary code via a .mpr file (replay file) that contains a long car name.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/25168; http://www.securityfocus.com/bid/25208; https://exchange.xforce.ibmcloud.com/vulnerabilities/35729
CVE: CVE-2007-4141
Published: 2007-08-03
Description: OpenRat CMS 0.8-beta1 and earlier allows remote attackers to obtain sensitive information via a request containing an XSS sequence in the action parameter to index.php, which reveals the path in an error message.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/39047; http://pridels-team.blogspot.com/2007/08/openrat-vuln.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/35750
CVE: CVE-2007-2408
Published: 2007-08-03
Description: WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked "Enable Java" setting, which allows remote attackers to execute Java applets via a crafted web page.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://docs.info.apple.com/article.html?artnum=306174; http://isc.sans.org/diary.html?storyid=3214; http://www.securityfocus.com/bid/25157
CVE: CVE-2007-3388
Published: 2007-08-03
Description: Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.
CVSS Score: 6.8 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc; http://bugs.gentoo.org/show_bug.cgi?id=185446; http://dist.trolltech.com/developer/download/170529.diff
CVE: CVE-2007-3742
Published: 2007-08-03
Description: WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" (homographs) and possibly perform phishing attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16, CWE-59
References: http://docs.info.apple.com/article.html?artnum=306173; http://docs.info.apple.com/article.html?artnum=306174; http://isc.sans.org/diary.html?storyid=3214
CVE: CVE-2007-3743
Published: 2007-08-03
Description: Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a bookmark with a long title.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=306174; http://isc.sans.org/diary.html?storyid=3214; http://osvdb.org/40882
CVE: CVE-2007-4142
Published: 2007-08-03
Description: Cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36462; http://secunia.com/advisories/26302; http://www-1.ibm.com/support/docview.wss?uid=swg21266789
CVE: CVE-2007-4143
Published: 2007-08-03
Description: user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPal transactions.
CVSS Score: 4.0 (MEDIUM)
References: http://securityreason.com/securityalert/2958; http://www.securityfocus.com/archive/1/474936/100/0/threaded; http://www.securityfocus.com/bid/25116
CVE: CVE-2007-4144
Published: 2007-08-03
Description: Cross-site scripting (XSS) vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT eMail Form Processor Pro allows remote attackers to inject arbitrary web script or HTML via the base_path parameter, possibly related to (1) formprocessorpro.php in the PHP version of the product, and (2) formprocessorpro.pl in the Perl version of the product.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26225; http://securityreason.com/securityalert/2961; http://www.securityfocus.com/archive/1/474615/100/0/threaded
CVE: CVE-2007-4145
Published: 2007-08-03
Description: Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the second argument to the ConnecttoServer method.
CVSS Score: 4.3 (MEDIUM)
References: http://codeaudit.blogspot.com/; http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064995.html; http://securityreason.com/securityalert/2959
CVE: CVE-2007-4146
Published: 2007-08-03
Description: Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/25148.html; http://osvdb.org/40156; http://secunia.com/advisories/28389
CVE: CVE-2007-4147
Published: 2007-08-03
Description: Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to (1) AL_SANITIZE and (2) "Calling the constructor to make sure things are checked, safe mode, etc."
CVSS Score: 7.5 (HIGH)
References: http://www.interspire.com/content/blogs/272/; http://www.interspire.com/forum/showthread.php?p=35997; http://www.securityfocus.com/bid/25150
CVE: CVE-2007-4148
Published: 2007-08-03
Description: Heap-based buffer overflow in the Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to cause a denial of service (persistent daemon crashes) or execute arbitrary code via a long filename in a "LOG." command.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/46977; http://www.portcullis.co.uk/uplds/advisories/vaheapoverflow%20-%2006_040.txt; http://www.securityfocus.com/bid/25153
CVE: CVE-2007-4149
Published: 2007-08-03
Description: The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 does not require authentication for (1) the "LOG." command, which allows remote attackers to create or overwrite arbitrary files; (2) the SETTINGSFILE command, which allows remote attackers to overwrite the ini file, and reconfigure VSAOD or cause a denial of service; or (3) the UNINSTALL command, which allows remote attackers to cause a denial of service (daemon shutdown).  NOTE: vector 1 can be leveraged for code execution by writing to a Startup folder.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/42462; http://www.portcullis.co.uk/uplds/advisories/vafileover-06-039.txt; http://www.portcullis.co.uk/uplds/advisories/vainifileoverwrite%20-%2006_041.txt
CVE: CVE-2007-4150
Published: 2007-08-03
Description: The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: http://osvdb.org/46979; http://www.portcullis.co.uk/uplds/advisories/vapassword%20-%2006-042.txt; http://www.securityfocus.com/bid/25153
CVE: CVE-2007-4151
Published: 2007-08-03
Description: The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to obtain sensitive information via (1) a LOG.ON command, which reveals the logging pathname in the server response; (2) a VER command, which reveals the version number in the server response; and (3) a connection, which reveals the version number in the banner.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/46981; http://osvdb.org/46982; http://osvdb.org/46983
CVE: CVE-2007-4152
Published: 2007-08-03
Description: The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/46980; http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt; http://www.securityfocus.com/bid/25153
CVE: CVE-2007-4153
Published: 2007-08-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin Panel, accessed through options.php; or (2) the opml_url parameter to link-import.php.  NOTE: this might not cross privilege boundaries in some configurations, since the Administrator role has the unfiltered_html capability.
CVSS Score: 2.1 (LOW)
References: http://codex.wordpress.org/Roles_and_Capabilities; http://mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm/; http://osvdb.org/46994
CVE: CVE-2007-4154
Published: 2007-08-03
Description: SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the page_options parameter to (1) options-general.php, (2) options-writing.php, (3) options-reading.php, (4) options-discussion.php, (5) options-privacy.php, (6) options-permalink.php, (7) options-misc.php, and possibly other unspecified components.
CVSS Score: 6.5 (MEDIUM)
References: http://mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm/; http://secunia.com/advisories/30013; http://www.debian.org/security/2008/dsa-1564
CVE: CVE-2007-4155
Published: 2007-08-03
Description: Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the (1) CreateProcess or (2) CreateProcessEx method.
CVSS Score: 9.3 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html; http://secunia.com/advisories/26890; http://www.securityfocus.com/bid/25131
CVE: CVE-2007-4156
Published: 2007-08-03
Description: Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to member.php in a page action, related to a SELECT statement in common.php; and the (2) loginid parameter (uid variable), and possibly the (3) pwd parameter, to admin/index.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/26270; http://securityreason.com/securityalert/2956; http://www.securityfocus.com/archive/1/475068/100/0/threaded
CVE: CVE-2007-4157
Published: 2007-08-03
Description: PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db.  NOTE: this can be easily leveraged for administrative access because composing the authentication cookie only requires the password hash, not the cleartext version.
CVSS Score: 5.0 (MEDIUM)
References: http://forcehacker.com/forum/viewtopic.php?t=2352; http://osvdb.org/38706; http://osvdb.org/38707
CVE: CVE-2007-4158
Published: 2007-08-03
Description: Memory leak in TIBCO Rendezvous (RV) daemon (rvd) 7.5.2, 7.5.3 and 7.5.4 allows remote attackers to cause a denial of service (memory consumption) via a packet with a length field of zero, a different vulnerability than CVE-2006-2830.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html; http://osvdb.org/37680; http://secunia.com/advisories/26337
CVE: CVE-2007-4159
Published: 2007-08-03
Description: index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html; http://osvdb.org/46993; http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf
CVE: CVE-2007-4160
Published: 2007-08-03
Description: The default configuration of TIBCO Rendezvous (RV) 7.5.2 clients, when -no-multicast is omitted, uses a multicast group as the destination for a network message, which might make it easier for remote attackers to capture message contents by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html; http://osvdb.org/46992; http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf
CVE: CVE-2007-4161
Published: 2007-08-03
Description: rvd in TIBCO Rendezvous (RV) 7.5.2, when -no-lead-wc is omitted, might allow remote attackers to cause a denial of service (network instability) via a subject name with a leading (1) '*' (asterisk) or (2) '>' (greater than) wildcard character.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html; http://osvdb.org/37681; http://secunia.com/advisories/26337
CVE: CVE-2007-4162
Published: 2007-08-03
Description: TIBCO Rendezvous (RV) 7.5.2 does not protect confidentiality or integrity of inter-daemon communication, which allows remote attackers to capture and spoof traffic.
CVSS Score: 7.8 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html; http://osvdb.org/46991; http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf
CVE: CVE-2007-4163
Published: 2007-08-03
Description: Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id, (2) start_id, (3) row[parent_id], and (4) row[cat_id] parameters to unspecified components, related to use of these parameters within include/utils.php.  NOTE: the show_cat.php cat_id vector is already covered by CVE-2007-4069.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/46989; http://www.indexscript.com/forum/showthread.php?t=2266; http://osvdb.org/46989