deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-0748
Published: 2007-05-13
Description: Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows remote attackers to execute arbitrary code via multiple trackID values in a SETUP RTSP request.
CVSS Score: 10.0 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305495; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=533; http://lists.apple.com/archives/Security-announce/2007/May/msg00002.html
CVE: CVE-2007-0749
Published: 2007-05-13
Description: Multiple stack-based buffer overflows in the is_command function in proxy.c in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allow remote attackers to execute arbitrary code via a long (1) cmd or (2) server value in an RTSP request.
CVSS Score: 10.0 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305495; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=533; http://lists.apple.com/archives/Security-announce/2007/May/msg00002.html
CVE: CVE-2007-2631
Published: 2007-05-13
Description: Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors.  NOTE: this issue might overlap CVE-2007-2589 or CVE-2002-1648.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35890; http://www.securityfocus.com/archive/1/468220/100/0/threaded; http://www.securityfocus.com/archive/1/468253/100/0/threaded
CVE: CVE-2007-2632
Published: 2007-05-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via (1) the edit_plugin parameter to configure_plugin.tpl.php, or (2) certain array parameters to web/phpinfo.php, as demonstrated by 1[] or a[].
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7293&w=2; http://osvdb.org/36212; http://osvdb.org/36213
CVE: CVE-2007-2633
Published: 2007-05-13
Description: Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. (dot dot) in the template parameter.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/35977; http://secunia.com/advisories/25243; http://www.psoft.net/SS/fixes/index.php?id=94
CVE: CVE-2007-2634
Published: 2007-05-13
Description: PHP remote file inclusion vulnerability in common/errormsg.php in aForum 1.32 and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the header parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/35906; http://secunia.com/advisories/25224; https://exchange.xforce.ibmcloud.com/vulnerabilities/34202
CVE: CVE-2007-2635
Published: 2007-05-13
Description: Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests.
CVSS Score: 7.8 (HIGH)
References: http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt; http://osvdb.org/33488; http://secunia.com/advisories/25311
CVE: CVE-2007-2636
Published: 2007-05-13
Description: Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in regular expressions to (1) index.php, (2) feed.php, (3) prefs.php, and (4) todolist.php; and (5) classTodoItem.php and (6) phpTodoUser.php in libs/.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://phptodo.godshell.com/ChangeLog; http://www.securityfocus.com/bid/23928; http://www.vupen.com/english/advisories/2007/1774
CVE: CVE-2007-2637
Published: 2007-05-13
Description: MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/36269; http://secunia.com/advisories/25208; http://secunia.com/advisories/29262
CVE: CVE-2007-2638
Published: 2007-05-13
Description: eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/34774; http://securityreason.com/securityalert/2696; http://www.securityfocus.com/archive/1/468314/100/0/threaded
CVE: CVE-2007-2639
Published: 2007-05-13
Description: Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files outside the TFTP root via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/36252; http://securityreason.com/securityalert/2699; http://www.securityfocus.com/archive/1/468313/100/0/threaded
CVE: CVE-2007-2640
Published: 2007-05-13
Description: LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obtain sensitive information about private cards.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/34772; http://savannah.nongnu.org/forum/forum.php?forum_id=4847; http://secunia.com/advisories/25317
CVE: CVE-2007-2641
Published: 2007-05-13
Description: SQL injection vulnerability in W1L3D4_bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter, a different vector than CVE-2007-0920.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35679; http://secunia.com/advisories/25265; http://securityreason.com/securityalert/2692
CVE: CVE-2007-2642
Published: 2007-05-13
Description: Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang2 parameter.
CVSS Score: 7.8 (HIGH)
References: http://attrition.org/pipermail/vim/2007-May/001615.html; http://osvdb.org/36015; http://secunia.com/advisories/25261
CVE: CVE-2007-2643
Published: 2007-05-13
Description: Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://0day.2600.ir/exploits/3901; http://osvdb.org/36016; http://secunia.com/advisories/25262
CVE: CVE-2007-2644
Published: 2007-05-13
Description: A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
CVSS Score: 9.4 (HIGH)
References: http://moaxb.blogspot.com/2007/05/morovia-barcode-activex-professional.html; http://osvdb.org/37786; http://www.securityfocus.com/bid/23934
CVE: CVE-2006-7203
Published: 2007-05-14
Description: The compat_sys_mount function in fs/compat.c in Linux kernel 2.6.20 and earlier allows local users to cause a denial of service (NULL pointer dereference and oops) by mounting a smbfs file system in compatibility mode ("mount -t smbfs").
CVSS Score: 4.0 (MEDIUM)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff_plain%3Bh=822191a2fa1584a29c3224ab328507adcaeac1ab; http://rhn.redhat.com/errata/RHSA-2007-0488.html; http://secunia.com/advisories/25682
CVE: CVE-2007-0689
Published: 2007-05-14
Description: MyBB 1.2.4 allows remote attackers to obtain sensitive information via the (1) action[] parameter to member.php, (2) imagehash[] parameter to captcha.php, and (3) a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6181&w=2; http://osvdb.org/35548; http://osvdb.org/35549
CVE: CVE-2007-0754
Published: 2007-05-14
Description: Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor (STSD) atom size in a QuickTime movie.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=304357; http://dvlabs.tippingpoint.com/advisory/TPTI-07-07; http://securityreason.com/securityalert/2703
CVE: CVE-2007-1901
Published: 2007-05-14
Description: SonicBB 1.0 allows remote attackers to obtain sensitive information via the (1) by[] parameter to search.php, (2) p[] parameter to viewforum.php, and the (3) id parameter to (a) viewforum.php or (b) members.php, which reveal the installation path in the resulting error message.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]3786&w=2; http://osvdb.org/34701; http://osvdb.org/34702
CVE: CVE-2007-1902
Published: 2007-05-14
Description: Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]7534&w=2; http://secunia.com/advisories/25279; http://www.netvigilance.com/advisory0019
CVE: CVE-2007-1903
Published: 2007-05-14
Description: Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0702&w=2; http://secunia.com/advisories/25279; http://www.netvigilance.com/advisory0020
CVE: CVE-2007-2444
Published: 2007-05-14
Description: Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980; http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html; http://osvdb.org/34698
CVE: CVE-2007-2446
Published: 2007-05-14
Description: Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=306172; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
CVE: CVE-2007-2447
Published: 2007-05-14
Description: The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.
CVSS Score: 6.0 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=306172; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
CVE: CVE-2007-2645
Published: 2007-05-14
Description: Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/35978; http://secunia.com/advisories/25235; http://secunia.com/advisories/25540
CVE: CVE-2007-2646
Published: 2007-05-14
Description: Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an NTX file.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36006; http://secunia.com/advisories/25252; http://securityreason.com/securityalert/2706
CVE: CVE-2007-2647
Published: 2007-05-14
Description: Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated users to inject arbitrary PHP code into the conf/config.inc.php file via the (1) gadm_pass, (2) gadm_user, (3) gcfgHote, (4) gcfgPass, (5) gcfgUser, (6) gclassement_rep, (7) gcontour, (8) gfond, (9) ggd_version, (10) ghome, (11) ghor, (12) gimg_copyright, (13) glangage, (14) gmenu_visible, (15) gmini_hasard, (16) gordre_rep, (17) gpage, (18) gracine, (19) grech_inactive, (20) grep_mini, (21) grepertoire, (22) gsite, (23) gslide, (24) gtitre, (25) guse_copyright, (26) gversion, (27) gvert, or (28) gcfgBase parameter.
CVSS Score: 6.5 (MEDIUM)
References: http://0day.2600.ir/exploits/3903; http://osvdb.org/36013; http://secunia.com/advisories/25260
CVE: CVE-2007-2648
Published: 2007-05-14
Description: Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function.
CVSS Score: 9.3 (HIGH)
References: http://moaxb.blogspot.com/2007/05/moaxb-14-clever-database-comparer.html; http://osvdb.org/36019; http://secunia.com/advisories/25227
CVE: CVE-2007-2649
Published: 2007-05-14
Description: Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/36011; http://secunia.com/advisories/25266; http://securityreason.com/securityalert/2705
CVE: CVE-2007-2650
Published: 2007-05-14
Description: The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853; http://kolab.org/security/kolab-vendor-notice-15.txt; http://lurker.clamav.net/message/20[PII_REDACTED]44.0df6c5d3.en.html
CVE: CVE-2007-2651
Published: 2007-05-14
Description: Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (connection loss) or possibly execute arbitrary code via a (1) DNS name response of the exact length as a buffer; or a long (2) channel name, (3) partyline channel name, or unspecified vectors in crafted BOTNET packets.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/41985; http://osvdb.org/41986; http://sourceforge.net/project/shownotes.php?release_id=497807&group_id=116847
CVE: CVE-2007-2652
Published: 2007-05-14
Description: Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspecified vectors involving certain (1) sprintf and (2) vsprintf calls in (a) r_index.c, (b) r_reports.c, (c) r_topsites.c, (d) r_topuser.c, (e) r_typical.c, (f) r_userdatetime.c, and (g) r_users.c in reports/; and (h) w_fs.c, (i) w_internal.c, and (j) w_log_operations.c in work/, probably related to buffer overflows.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/project/shownotes.php?release_id=500691&group_id=191513; http://www.securityfocus.com/bid/23924; http://www.vupen.com/english/advisories/2007/1757
CVE: CVE-2007-2653
Published: 2007-05-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-2438.  Reason: This candidate is a duplicate of CVE-2007-2438.  Notes: All CVE users should reference CVE-2007-2438 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-2654
Published: 2007-05-14
Description: xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894; http://osvdb.org/36716; http://secunia.com/advisories/25220
CVE: CVE-2007-2655
Published: 2007-05-14
Description: Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://osvdb.org/35891; http://secunia.com/advisories/25207; http://www.netwinsite.com/surgemail/help/updates.htm
CVE: CVE-2007-2656
Published: 2007-05-14
Description: Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a denial of service (application crash) and possibly have other impact via a long argument to the DeleteProfile method.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/37787; http://www.securityfocus.com/bid/23941; https://exchange.xforce.ibmcloud.com/vulnerabilities/34239
CVE: CVE-2007-2657
Published: 2007-05-14
Description: Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote attackers to cause a denial of service via a long argument to the SaveBarCode method.
CVSS Score: 7.8 (HIGH)
References: http://moaxb.blogspot.com/2007/05/moaxb-12-precisionid-barcode-activex.html; http://osvdb.org/36012; http://secunia.com/advisories/25258
CVE: CVE-2007-2658
Published: 2007-05-14
Description: Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows remote attackers to cause a denial of service via a long argument to the SaveEnhWMF method.
CVSS Score: 7.8 (HIGH)
References: http://moaxb.blogspot.com/2007/05/moaxb-13-id-automation-linear-barcode.html; http://osvdb.org/36020; http://secunia.com/advisories/25231
CVE: CVE-2007-2659
Published: 2007-05-14
Description: Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. (dot dot) in the directory parameter in a downloadfile action.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/41990; http://www.securityfocus.com/bid/23952; http://www.vupen.com/english/advisories/2007/1799
CVE: CVE-2007-2660
Published: 2007-05-14
Description: PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.  NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php.  NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/36010; http://secunia.com/advisories/25230; http://www.attrition.org/pipermail/vim/2007-May/001618.html
CVE: CVE-2007-2661
Published: 2007-05-14
Description: SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36008; http://secunia.com/advisories/25229; http://www.securityfocus.com/bid/23956
CVE: CVE-2007-2662
Published: 2007-05-14
Description: SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the top-level URI.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36014; http://secunia.com/advisories/25247; http://www.securityfocus.com/bid/23960
CVE: CVE-2007-2663
Published: 2007-05-14
Description: PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the languagePath parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37816; http://www.securityfocus.com/bid/23959; http://www.vupen.com/english/advisories/2007/1798
CVE: CVE-2007-2664
Published: 2007-05-14
Description: PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, possibly related to the __autoload function.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36060; http://secunia.com/advisories/25254; http://www.vupen.com/english/advisories/2007/1797
CVE: CVE-2007-2665
Published: 2007-05-14
Description: PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the Include parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38257; http://www.securityfocus.com/bid/23947; https://www.exploit-db.com/exploits/3906
CVE: CVE-2007-2666
Published: 2007-05-14
Description: Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines.  NOTE: this was originally reported as a vulnerability in notepad++.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://osvdb.org/36007; http://scintilla.cvs.sourceforge.net/scintilla/scintilla/src/LexRuby.cxx?view=log#rev1.13; http://secunia.com/advisories/25245
CVE: CVE-2007-2667
Published: 2007-05-14
Description: Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/36156; http://secunia.com/advisories/25330; http://www.securityfocus.com/bid/23953
CVE: CVE-2007-2668
Published: 2007-05-14
Description: Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involving the process_connection_request function in webdesproxy.c.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/40741; http://www.securityfocus.com/bid/23962; http://www.vupen.com/english/advisories/2007/1802
CVE: CVE-2007-2669
Published: 2007-05-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to (1) settings.php or (2) cat.php.  NOTE: certain parameter values also trigger path disclosure.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/35536; http://osvdb.org/35537; http://pridels0.blogspot.com/2007/05/phpchain-vuln.html
CVE: CVE-2007-2670
Published: 2007-05-14
Description: PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/35538; http://pridels0.blogspot.com/2007/05/phpchain-vuln.html; http://secunia.com/advisories/25128
CVE: CVE-2007-2671
Published: 2007-05-14
Description: Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access.
CVSS Score: 7.1 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/062773.html; http://osvdb.org/35700; http://securityreason.com/securityalert/2704