deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4607
Published: 2007-08-31
Description: Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2013-04/0220.html; http://osvdb.org/38335; http://retrogod.altervista.org/postcast-emsmtp_bof.html
CVE: CVE-2007-4608
Published: 2007-08-31
Description: PHP remote file inclusion vulnerability in protection.php in ePersonnel RC_2004_02 allows remote attackers to execute arbitrary PHP code via a URL in the logout_page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38439; http://securityreason.com/securityalert/3077; http://www.securityfocus.com/archive/1/477867/100/0/threaded
CVE: CVE-2007-4609
Published: 2007-08-31
Description: eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessing valid parameter values.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/45836; http://securityreason.com/securityalert/3081; http://www.securityfocus.com/archive/1/477866/100/0/threaded
CVE: CVE-2007-4610
Published: 2007-08-31
Description: Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/26633; http://securityreason.com/securityalert/3079; http://www.securityfocus.com/archive/1/477851/100/0/threaded
CVE: CVE-2007-4611
Published: 2007-08-31
Description: SQL injection vulnerability in viewevent.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38438; http://securityreason.com/securityalert/3079; http://www.securityfocus.com/archive/1/477851/100/0/threaded
CVE: CVE-2007-4612
Published: 2007-08-31
Description: CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter.  NOTE: this can be leveraged for spam by adding To or Cc headers.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://securityreason.com/securityalert/3079; http://www.securityfocus.com/archive/1/477851/100/0/threaded; http://www.securityfocus.com/bid/25457
CVE: CVE-2007-4613
Published: 2007-08-31
Description: SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle attack that injects crafted data and measures the elapsed time before an error response, a different vulnerability than CVE-2006-2461.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://dev2dev.bea.com/pub/advisory/201; http://osvdb.org/45838; http://www.securityfocus.com/bid/22082
CVE: CVE-2007-4614
Published: 2007-08-31
Description: BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://dev2dev.bea.com/pub/advisory/216; http://osvdb.org/45839; http://www.securityfocus.com/bid/22082
CVE: CVE-2007-4615
Published: 2007-08-31
Description: The SSL client implementation in BEA WebLogic Server 7.0 SP7, 8.1 SP2 through SP6, 9.0, 9.1, 9.2 Gold through MP2, and 10.0 sometimes selects the null cipher when others are available, which might allow remote attackers to intercept communications.
CVSS Score: 6.4 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/244; http://secunia.com/advisories/26539; http://securitytracker.com/id?1018619
CVE: CVE-2007-4616
Published: 2007-08-31
Description: The SSL server implementation in BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP1, and 10.0 sometimes selects the null cipher when no other cipher is compatible between the server and client, which might allow remote attackers to intercept communications.
CVSS Score: 6.4 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/245; http://secunia.com/advisories/26539; http://securitytracker.com/id?1018620
CVE: CVE-2007-4617
Published: 2007-08-31
Description: Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP4 allows remote attackers to cause a denial of service (server thread hang) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://dev2dev.bea.com/pub/advisory/246; http://osvdb.org/38518; http://secunia.com/advisories/26539
CVE: CVE-2007-4618
Published: 2007-08-31
Description: Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://dev2dev.bea.com/pub/advisory/247; http://osvdb.org/38517; http://secunia.com/advisories/26539
CVE: CVE-2007-4624
Published: 2007-08-31
Description: Cross-site scripting (XSS) vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the img_url parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36686; http://secunia.com/advisories/26582; http://securityreason.com/securityalert/3078
CVE: CVE-2007-4625
Published: 2007-08-31
Description: Polipo before 1.0.2 allows remote HTTP servers to cause a denial of service (daemon crash) by aborting the response to a POST request.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/39911; http://secunia.com/advisories/26596; http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text
CVE: CVE-2007-4626
Published: 2007-08-31
Description: Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service (daemon crash) via certain network traffic associated with entities larger than 2 Gb.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/26596; http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text; http://secunia.com/advisories/26596
CVE: CVE-2007-4627
Published: 2007-08-31
Description: SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38434; http://www.securityfocus.com/bid/25476; http://www.vupen.com/english/advisories/2007/3037
CVE: CVE-2007-4628
Published: 2007-08-31
Description: SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://14house.blogspot.com/2007/08/phpns-sql-injection.html; http://osvdb.org/38352; http://www.securityfocus.com/bid/25479
CVE: CVE-2007-4629
Published: 2007-08-31
Description: Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://mapserver.gis.umn.edu/download/current/HISTORY.TXT/; http://secunia.com/advisories/26561; http://secunia.com/advisories/26718
CVE: CVE-2007-4630
Published: 2007-08-31
Description: Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/26648; http://securityreason.com/securityalert/3080; http://www.osvdb.org/36709
CVE: CVE-2007-2931
Published: 2007-08-31
Description: Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20, CWE-119
References: http://osvdb.org/40126; http://secunia.com/advisories/26570; http://www.kb.cert.org/vuls/id/166521
CVE: CVE-2007-2954
Published: 2007-08-31
Description: Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://download.novell.com/Download?buildid=VOXNZb-6t_g~; http://osvdb.org/37321; http://secunia.com/advisories/26374
CVE: CVE-2007-4515
Published: 2007-08-31
Description: Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591; http://messenger.yahoo.com/security_update.php?id=082907; http://osvdb.org/37739
CVE: CVE-2007-4631
Published: 2007-08-31
Description: The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.gentoo.org/show_bug.cgi?id=190697; http://fedoranews.org/updates/FEDORA-2007-210.shtml; http://secunia.com/advisories/26738
CVE: CVE-2007-4632
Published: 2007-08-31
Description: Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a (1) VTY/AUX or (2) CONSOLE setting on a device without AAA enabled, which allows remote attackers to bypass authentication and obtain a terminal session, a different vulnerability than CVE-1999-0293 and CVE-2005-2105.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://www.cisco.com/en/US/products/products_security_response09186a00808ae4ca.html; http://www.securityfocus.com/bid/25482; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5866
CVE: CVE-2007-4633
Published: 2007-08-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the (1) user or (2) admin logon page, aka CSCsi10728.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26641; http://securitytracker.com/id?1018624; http://www.cisco.com/en/US/products/products_security_advisory09186a00808ae327.shtml
CVE: CVE-2007-4634
Published: 2007-08-31
Description: Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.
CVSS Score: 9.3 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/26641; http://securitytracker.com/id?1018624; http://www.cisco.com/en/US/products/products_security_advisory09186a00808ae327.shtml
CVE: CVE-2007-4635
Published: 2007-08-31
Description: Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer overflow, as demonstrated by ym8bug.exe.  NOTE: this might be related to CVE-2007-4515.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20, CWE-119
References: http://www.securityfocus.com/bid/25484; http://www.securityfocus.com/bid/25484
CVE: CVE-2007-4636
Published: 2007-08-31
Description: Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other/backup.php, (2) intern/admin/, (3) intern/clan/member_add.php, (4) intern/config/key_2.php, or (5) intern/config/forum.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://osvdb.org/38429; http://osvdb.org/38430; http://osvdb.org/38431
CVE: CVE-2007-4637
Published: 2007-08-31
Description: xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps.
CVSS Score: 6.4 (MEDIUM)
References: https://www.exploit-db.com/exploits/4336; https://www.exploit-db.com/exploits/4336
CVE: CVE-2007-4638
Published: 2007-08-31
Description: Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed map, which triggers an out-of-bounds read during a minimap preview.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/3086; http://www.securityfocus.com/archive/1/478052/100/0/threaded; http://www.securityfocus.com/bid/25478
CVE: CVE-2007-4639
Published: 2007-08-31
Description: EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg_ function, as demonstrated by (1) pldbg_get_stack and (2) pldbg_abort_target, which triggers use of an uninitialized pointer.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-824
References: http://secunia.com/advisories/26640; http://www.securityfocus.com/archive/1/478057/100/0/threaded; http://www.securityfocus.com/bid/25481
CVE: CVE-2007-4640
Published: 2007-08-31
Description: Unrestricted file upload vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to upload and execute arbitrary PHP files in uploads/ via an Uploads action.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-94, CWE-264
References: http://osvdb.org/38670; http://secunia.com/advisories/26598; http://www.securityfocus.com/bid/25491
CVE: CVE-2007-4641
Published: 2007-08-31
Description: Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting code into an Apache log file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/26598; https://exchange.xforce.ibmcloud.com/vulnerabilities/36358; https://www.exploit-db.com/exploits/4341
CVE: CVE-2007-4642
Published: 2007-08-31
Description: Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat (PKT_CHAT) message that is not properly handled by the (1) D_NetPlayerEvent function in d_net.c or the (2) Msg_Write function in net_msg.c, or (3) many commands that are not properly handled by the NetSv_ReadCommands function in d_netsv.c; or (4) cause a denial of service (daemon crash) via a chat (PKT_CHAT) message without a final '\0' character.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/dumsdei-adv.txt; http://aluigi.org/poc/dumsdei.zip; http://bugs.gentoo.org/show_bug.cgi?id=190835
CVE: CVE-2007-4643
Published: 2007-08-31
Description: Integer underflow in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a PKT_CHAT packet with a data length less than 3, which triggers an erroneous malloc, possibly related to the Sv_HandlePacket function in sv_main.c.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://aluigi.org/poc/dumsdei.zip; http://bugs.gentoo.org/show_bug.cgi?id=190835; http://secunia.com/advisories/26524
CVE: CVE-2007-4644
Published: 2007-08-31
Description: Format string vulnerability in the Cl_GetPackets function in cl_main.c in the client in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote Doomsday servers to execute arbitrary code via format string specifiers in a PSV_CONSOLE_TEXT message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://aluigi.org/poc/dumsdei.zip; http://bugs.gentoo.org/show_bug.cgi?id=190835; http://secunia.com/advisories/26524
CVE: CVE-2007-4645
Published: 2007-08-31
Description: SQL injection vulnerability in index.php in NMDeluxe 2.0.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a newspost do action, a different vulnerability than CVE-2006-1108.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/36688; http://secunia.com/advisories/26652; http://www.securityfocus.com/bid/25488
CVE: CVE-2007-4646
Published: 2007-08-31
Description: Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/26666; http://www.securityfocus.com/bid/25496; http://www.securitytracker.com/id?1018637
CVE: CVE-2007-4647
Published: 2007-08-31
Description: newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/36841; http://secunia.com/advisories/26650; http://www.securityfocus.com/bid/25487
CVE: CVE-2007-4648
Published: 2007-08-31
Description: The nvcoaft51 driver in Norman Virus Control (NVC) 5.82 uses weak permissions (unrestricted write access) for the NvcOa device, which allows local users to gain privileges by (1) triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by (2) sending a crafted KEVENT structure through ioctl 0xBF672028 to overwrite arbitrary memory locations.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3087; http://www.48bits.com/exploits/nvc.rar; http://www.securityfocus.com/archive/1/478224/100/0/threaded
CVE: CVE-2007-4649
Published: 2007-08-31
Description: MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065509.html; http://secunia.com/advisories/26581; http://securityreason.com/securityalert/3085
CVE: CVE-2007-4650
Published: 2007-09-04
Description: Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV and (b) Reupload modules.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://bugs.gentoo.org/show_bug.cgi?id=191587; http://gallery.menalto.com/gallery_2.2.3_released; http://osvdb.org/41657
CVE: CVE-2007-3996
Published: 2007-09-04
Description: Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=201546; http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html; http://rhn.redhat.com/errata/RHSA-2007-0889.html
CVE: CVE-2007-3997
Published: 2007-09-04
Description: The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_basedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/26642; http://secunia.com/advisories/26822; http://secunia.com/advisories/26838
CVE: CVE-2007-3998
Published: 2007-09-04
Description: The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash, or infinite loop) via certain arguments, as demonstrated by a 'chr(0), 0, ""' argument set.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html; http://rhn.redhat.com/errata/RHSA-2007-0889.html; http://secunia.com/advisories/26642
CVE: CVE-2007-4652
Published: 2007-09-04
Description: The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://secunia.com/advisories/26642; http://secunia.com/advisories/26822; http://secunia.com/advisories/26838
CVE: CVE-2007-4653
Published: 2007-09-04
Description: SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter in a search action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38427; http://www.securityfocus.com/bid/25501; https://www.exploit-db.com/exploits/4346
CVE: CVE-2007-4654
Published: 2007-09-04
Description: Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch (CSS) series 11000 devices allows remote attackers to cause a denial of service (connection slot exhaustion and device crash) via a series of large packets designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144), possibly a related issue to CVE-2002-1024.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://osvdb.org/45873; http://securityreason.com/securityalert/3091; http://www.securityfocus.com/archive/1/478165/100/0/threaded
CVE: CVE-2007-4655
Published: 2007-09-04
Description: Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22, CWE-200
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/40146; http://osvdb.org/40147