deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-2230
Published: 2007-04-25
Description: SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via (1) the ofinterest parameter in a light search query, (2) description parameter in the advanced search query, and possibly other vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: ftp://ftp.ca.com/pub/portal/4.71/4.71.001_188_070329/readme_4.71.001_188_070329.txt; http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0648.html; http://secunia.com/advisories/25002
CVE: CVE-2007-2231
Published: 2007-04-25
Description: Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.
CVSS Score: 4.3 (MEDIUM)
References: http://dovecot.org/doc/NEWS; http://dovecot.org/list/dovecot-cvs/2007-March/008488.html; http://dovecot.org/list/dovecot-news/2007-March/000038.html
CVE: CVE-2007-2232
Published: 2007-04-25
Description: The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r) sequences in the cosign cookie parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24845; http://www.securityfocus.com/archive/1/465386/100/100/threaded; http://www.umich.edu/~umweb/software/cosign/cosign-vuln-2007-001.txt
CVE: CVE-2007-2233
Published: 2007-04-25
Description: cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR (\r) sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/24845; http://www.securityfocus.com/archive/1/465386/100/100/threaded; http://www.umich.edu/~umweb/software/cosign/cosign-vuln-2007-002.txt
CVE: CVE-2007-2234
Published: 2007-04-25
Description: include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled ini_get function when checking the register_globals setting, which allows remote attackers to register global parameters, as demonstrated by an SQL injection attack on the search_id parameter to search.php.
CVSS Score: 7.5 (HIGH)
References: http://dev.punbb.org/changeset/933; http://securityreason.com/securityalert/2613; http://www.acid-root.new.fr/advisories/13070411.txt
CVE: CVE-2007-2235
Published: 2007-04-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Referer HTTP header to misc.php or the (2) category name when deleting a category in admin_categories.php.
CVSS Score: 4.3 (MEDIUM)
References: http://dev.punbb.org/changeset/934; http://dev.punbb.org/changeset/938; http://secunia.com/advisories/24843
CVE: CVE-2007-2236
Published: 2007-04-25
Description: footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting (XSS) attack, or via the pun_include tag, as demonstrated by use of admin_options.php to execute PHP code from an uploaded avatar file.
CVSS Score: 6.8 (MEDIUM)
References: http://dev.punbb.org/changeset/937; http://secunia.com/advisories/24843; http://securityreason.com/securityalert/2613
CVE: CVE-2007-2242
Published: 2007-04-25
Description: The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (IPV6_RTHDR_TYPE_0) that create network amplification between two routers.
CVSS Score: 7.8 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305712; http://docs.info.apple.com/article.html?artnum=306375; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
CVE: CVE-2007-2243
Published: 2007-04-25
Description: OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue to CVE-2001-1483.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053906.html; http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053951.html; http://securityreason.com/securityalert/2631
CVE: CVE-2007-2244
Published: 2007-04-25
Description: Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38064; http://osvdb.org/38065; http://osvdb.org/38066
CVE: CVE-2007-2245
Published: 2007-04-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) certain input to the PMA_sanitize function.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/35050; http://secunia.com/advisories/24952; http://secunia.com/advisories/26733
CVE: CVE-2007-2246
Published: 2007-04-25
Description: Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when running sendmail 8.11.1; allows remote attackers to cause a denial of service via unknown attack vectors.  NOTE: due to the lack of details from HP, it is not known whether this issue is a duplicate of another CVE such as CVE-2006-1173 or CVE-2006-4434.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00841370; http://secunia.com/advisories/24990; http://www.kb.cert.org/vuls/id/349305
CVE: CVE-2007-2247
Published: 2007-04-25
Description: SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35639; http://securityreason.com/securityalert/2616; http://www.securityfocus.com/archive/1/466706/100/0/threaded
CVE: CVE-2007-2248
Published: 2007-04-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the (1) group_id parameter in the groups module or (2) the smiley_id parameter in the smileys modsettings module.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/35057; http://osvdb.org/35058; http://secunia.com/advisories/24932
CVE: CVE-2007-2249
Published: 2007-04-25
Description: include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST parameter or (2) userdata array.
CVSS Score: 6.5 (MEDIUM)
References: http://osvdb.org/35059; http://secunia.com/advisories/24932; http://securityreason.com/securityalert/2617
CVE: CVE-2007-2250
Published: 2007-04-25
Description: admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/35060; http://secunia.com/advisories/24932; http://securityreason.com/securityalert/2617
CVE: CVE-2007-2251
Published: 2007-04-25
Description: Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35304; http://secunia.com/advisories/24959; http://sourceforge.net/project/shownotes.php?release_id=503035
CVE: CVE-2007-2252
Published: 2007-04-25
Description: Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/35051; http://secunia.com/advisories/24934; http://www.bugtraq.ir/articles/advisory/exponent_multiple_vulnerabilities/10
CVE: CVE-2007-2253
Published: 2007-04-25
Description: Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/38842; http://osvdb.org/38843; http://www.bugtraq.ir/articles/advisory/exponent_multiple_vulnerabilities/10
CVE: CVE-2007-2254
Published: 2007-04-25
Description: PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter.  NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2618; http://www.attrition.org/pipermail/vim/2007-April/001543.html; http://www.securityfocus.com/archive/1/466648/100/0/threaded
CVE: CVE-2007-2255
Published: 2007-04-25
Description: Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) eng_dir parameter to addmember.php, (2) lang_path parameter to admin/enginelib/class.phpmailer.php, and the (3) spaw_root parameter to admin/includes/spaw/dialogs/colorpicker.php, different vectors than CVE-2006-5291 and CVE-2006-5459.  NOTE: vector 3 might be an issue in SPAW.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35398; http://osvdb.org/35399; http://osvdb.org/35400
CVE: CVE-2007-2256
Published: 2007-04-25
Description: Cross-site scripting (XSS) vulnerability in you.php in TJSChat 0.95 allows remote attackers to inject arbitrary web script or HTML via the user parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/24998; http://securityreason.com/securityalert/2620; http://www.securityfocus.com/archive/1/466649/100/0/threaded
CVE: CVE-2007-2257
Published: 2007-04-25
Description: PHP remote file inclusion vulnerability in subscp.php in Fully Modded phpBB2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35419; http://securityreason.com/securityalert/2621; http://www.securityfocus.com/archive/1/466177/100/0/threaded
CVE: CVE-2007-2258
Published: 2007-04-25
Description: PHP remote file inclusion vulnerability in includes/init.inc.php in PHPMyBibli allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2622; http://www.securityfocus.com/archive/1/466659/100/0/threaded; http://www.securityfocus.com/bid/23599
CVE: CVE-2007-2259
Published: 2007-04-25
Description: SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via the idsalon parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35310; http://secunia.com/advisories/25010; http://securityreason.com/securityalert/2623
CVE: CVE-2007-2260
Published: 2007-04-25
Description: Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to (1) unavailable.php, (2) source.php, (3) log.php, (4) latex.php, (5) indexinfo.php, (6) index.php, (7) importinfo.php, (8) import.php, (9) examplefile.php, (10) clearinfo.php, (11) clear.php, (12) aboutinfo.php, (13) about.php, and other unspecified files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/35621; http://osvdb.org/35622; http://osvdb.org/35623
CVE: CVE-2007-2261
Published: 2007-04-25
Description: PHP remote file inclusion vulnerability in espaces/communiques/annotations.php in C-Arbre 0.6PR7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, a different vector than CVE-2007-1721.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35635; http://securityreason.com/securityalert/2625; http://www.securityfocus.com/archive/1/466682/100/0/threaded
CVE: CVE-2007-2262
Published: 2007-04-25
Description: Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to execute arbitrary PHP code via a URL in the (1) relPath and (2) folder parameters.  NOTE: this product was originally reported as "File117".
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/35612; http://securityreason.com/securityalert/2626; http://www.securityfocus.com/archive/1/466675/100/0/threaded
CVE: CVE-2006-7197
Published: 2007-04-25
Description: The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.
CVSS Score: 7.8 (HIGH)
References: http://issues.apache.org/bugzilla/show_bug.cgi?id=38859; http://www.redhat.com/support/errata/RHSA-2008-0261.html; http://www.securityfocus.com/bid/28477
CVE: CVE-2007-2139
Published: 2007-04-25
Description: Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/35326; http://secunia.com/advisories/24972; http://securityreason.com/securityalert/2628
CVE: CVE-2007-2265
Published: 2007-04-25
Description: Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/35519; http://securityreason.com/securityalert/2629; http://www.securityfocus.com/archive/1/466743/100/0/threaded
CVE: CVE-2007-2266
Published: 2007-04-25
Description: Progress Webspeed Messenger allows remote attackers to read, create, modify, and execute arbitrary files by invoking webutil/_cpyfile.p in the WService parameter to (1) cgiip.exe or (2) wsisa.dll in scripts/, as demonstrated by using the save,editor options to create a new file using the fileName parameter.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/24988; http://www.ishare.nl/; http://www.securityfocus.com/archive/1/466771/100/0/threaded
CVE: CVE-2007-2267
Published: 2007-04-25
Description: Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service (data corruption or send_mondo panic) via unspecified vectors, as demonstrated by EMC Symcli backup software 6.2.1.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/35320; http://secunia.com/advisories/24985; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102874-1
CVE: CVE-2007-2268
Published: 2007-04-25
Description: Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. (dot dot) in the locale_id parameter to (1) login.php3 or (2) login_up.php3.
CVSS Score: 5.0 (MEDIUM)
References: http://forum.swsoft.com/showthread.php?s=&postid=172761#post172761; http://kb.swsoft.com/en/1798; http://secunia.com/advisories/25036
CVE: CVE-2007-2269
Published: 2007-04-25
Description: Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the locale_id parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://forum.swsoft.com/showthread.php?s=&postid=172761#post172761; http://osvdb.org/35475; http://secunia.com/advisories/25036
CVE: CVE-2007-2270
Published: 2007-04-25
Description: The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) character in the From header, and possibly certain other locations, in a SIP INVITE request.
CVSS Score: 7.8 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053959.html; http://secunia.com/advisories/25031; http://www.securityfocus.com/bid/23619
CVE: CVE-2007-2271
Published: 2007-04-25
Description: Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the dnld parameter.
CVSS Score: 9.4 (HIGH)
References: http://osvdb.org/35324; http://secunia.com/advisories/24957; http://www.securityfocus.com/bid/23632
CVE: CVE-2007-2272
Published: 2007-04-25
Description: PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the workdir parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/25046; http://www.securityfocus.com/bid/23633; https://exchange.xforce.ibmcloud.com/vulnerabilities/33860
CVE: CVE-2007-2273
Published: 2007-04-25
Description: PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_include parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35319; http://secunia.com/advisories/25015; http://www.securityfocus.com/bid/23636
CVE: CVE-2007-2274
Published: 2007-04-25
Description: The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file.  NOTE: the original disclosure refers to this as a memory leak, but it is not certain.
CVSS Score: 7.8 (HIGH)
CWE: CWE-401
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/34079; https://www.exploit-db.com/exploits/3784; https://exchange.xforce.ibmcloud.com/vulnerabilities/34079
CVE: CVE-2007-2275
Published: 2007-04-25
Description: Unspecified vulnerability in HP StorageWorks Command View Advanced Edition for XP before 5.6.0-01, XP Replication Monitor before 5.6.0-01, and XP Tiered Storage Manager before 5.5.0-02 allows local users to access other accounts via unspecified vectors during registration or addition of new users.
CVSS Score: 4.6 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00911797; http://secunia.com/advisories/25029; http://www.securityfocus.com/bid/23630
CVE: CVE-2007-2276
Published: 2007-04-25
Description: 3Com TippingPoint IPS allows remote attackers to cause a denial of service (device hang) via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop."  NOTE: the vendor disputes this issue, stating that the product has "performed as expected with no DoS emerging.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://osvdb.org/35724; http://www.securityfocus.com/archive/1/466784/100/0/threaded; http://www.securityfocus.com/archive/1/466795/100/0/threaded
CVE: CVE-2007-2277
Published: 2007-04-25
Description: Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://securityreason.com/securityalert/2614; http://www.majorsecurity.de/index_2.php?major_rls=major_rls46; http://www.securityfocus.com/archive/1/466772/100/0/threaded
CVE: CVE-2007-2278
Published: 2007-04-25
Description: Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP code via a URL in (1) the path parameter to library/adodb/adodb.inc.php, (2) the abs_path_editor parameter to library/editor/editor.php, or (3) the cfgfile_to_load parameter to admin/phpMyAdmin/libraries/common.lib.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35755; http://securityreason.com/securityalert/2615; http://www.securityfocus.com/archive/1/466783/100/0/threaded
CVE: CVE-2007-2282
Published: 2007-04-26
Description: Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1017960; http://www.cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml; http://www.kb.cert.org/vuls/id/127545
CVE: CVE-2007-2283
Published: 2007-04-26
Description: Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/35385; http://secunia.com/advisories/25054; http://www.securityfocus.com/bid/23660
CVE: CVE-2007-2284
Published: 2007-04-26
Description: Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/35384; http://secunia.com/advisories/25055; http://www.securityfocus.com/bid/23653
CVE: CVE-2007-2285
Published: 2007-04-26
Description: Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read arbitrary files via a .. (dot dot) in the feed parameter.  NOTE: analysis by third party researchers indicates that this issue might be platform dependent.
CVSS Score: 7.8 (HIGH)
References: http://attrition.org/pipermail/vim/2007-April/001545.html; http://attrition.org/pipermail/vim/2007-April/001546.html; http://attrition.org/pipermail/vim/2007-April/001549.html
CVE: CVE-2007-2286
Published: 2007-04-26
Description: PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execute arbitrary PHP code via a URL in the full_path_to_db parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34166; http://www.securityfocus.com/archive/1/466865/100/0/thread; http://www.securityfocus.com/bid/23651
CVE: CVE-2007-2287
Published: 2007-04-26
Description: PHP remote file inclusion vulnerability in accept.php in comus 2.0 Final allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/34168; http://www.securityfocus.com/archive/1/466870/100/0/threaded; http://www.securityfocus.com/bid/23661
CVE: CVE-2007-2288
Published: 2007-04-26
Description: PHP remote file inclusion vulnerability in info.php in Doruk100.net doruk100net allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34171; http://www.securityfocus.com/archive/1/466842/100/0/threaded; http://www.securityfocus.com/bid/23675
CVE: CVE-2007-2289
Published: 2007-04-26
Description: PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in download engine (Download-Engine) 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spaw_root parameter, a different vector than CVE-2007-2255.  NOTE: this may be an issue in SPAW.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35401; http://www.securityfocus.com/archive/1/466890/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/33918
CVE: CVE-2007-2290
Published: 2007-04-26
Description: Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to (1) b2archives.php, (2) b2categories.php, or (3) b2mail.php.  NOTE: this may overlap CVE-2002-1466.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35550; http://osvdb.org/35551; http://osvdb.org/35552