deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-2886
Published: 2007-05-30
Description: Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service (card hang) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/36525; http://secunia.com/advisories/25409; http://www.securityfocus.com/bid/24131
CVE: CVE-2007-2887
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in index.php in Web Icerik Yonetim Sistemi (WIYS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36329; http://osvdb.org/38346; http://secunia.com/advisories/25407
CVE: CVE-2007-2888
Published: 2007-05-30
Description: Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string (filename) in a .cue file, a related issue to CVE-2007-2761.  NOTE: some details are obtained from third party information.
CVSS Score: 7.6 (HIGH)
References: http://osvdb.org/36570; http://secunia.com/advisories/25384; http://www.securityfocus.com/bid/24140
CVE: CVE-2007-2889
Published: 2007-05-30
Description: SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the scormcontopen parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38061; http://www.securityfocus.com/bid/24136; https://exchange.xforce.ibmcloud.com/vulnerabilities/34483
CVE: CVE-2007-2890
Published: 2007-05-30
Description: SQL injection vulnerability in category.php in cpCommerce 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id_category parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36315; http://secunia.com/advisories/25412; http://www.securityfocus.com/bid/24138
CVE: CVE-2007-2891
Published: 2007-05-30
Description: Multiple PHP remote file inclusion vulnerabilities in FirmWorX 0.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bank_data[root] parameter to modules/bank/includes/design/main.inc.php, or the (2) fm_data[root] parameter to (a) includes/config/master.inc.php or (b) includes/functions/master.inc.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38057; http://osvdb.org/38058; http://osvdb.org/38059
CVE: CVE-2007-2892
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/24135.html; http://osvdb.org/38141; http://www.securityfocus.com/bid/24135
CVE: CVE-2007-2893
Published: 2007-05-30
Description: Heap-based buffer overflow in the bx_ne2k_c::rx_frame function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register values to exceed the device memory size, aka "RX Frame heap overflow."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=188148; http://osvdb.org/36799; http://secunia.com/advisories/25470
CVE: CVE-2007-2894
Published: 2007-05-30
Description: The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
CVSS Score: 2.1 (LOW)
References: http://bugs.gentoo.org/show_bug.cgi?id=188148; http://osvdb.org/42119; http://secunia.com/advisories/25470
CVE: CVE-2007-2895
Published: 2007-05-30
Description: Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value.
CVSS Score: 7.5 (HIGH)
References: http://moaxb.blogspot.com/2007/05/moaxb-24-leadtools-raster-dialog-file.html; http://osvdb.org/36035; http://secunia.com/advisories/25381
CVE: CVE-2007-2896
Published: 2007-05-30
Description: Race condition in the Symantec Enterprise Security Manager (ESM) 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service (CPU consumption and application hang) via certain network scans to ESM ports.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/35077; http://secunia.com/advisories/25390; http://securityresponse.symantec.com/avcenter/security/Content/2007.05.24a.html
CVE: CVE-2007-2897
Published: 2007-05-30
Description: Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang), and possibly obtain sensitive information (device communication traffic); and might allow attackers with physical access to execute arbitrary code after connecting a data stream to a device COM port; via requests for a URI containing a '/' immediately before and after the name of a DOS device, as demonstrated by the /AUX/.aspx URI, which bypasses a blacklist for DOS device requests.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-05/0419.html; http://seclists.org/fulldisclosure/2007/May/0378.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/34418
CVE: CVE-2007-2898
Published: 2007-05-30
Description: SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/36569; http://secunia.com/advisories/25336; http://securityreason.com/securityalert/2752
CVE: CVE-2007-2899
Published: 2007-05-30
Description: Direct static code injection vulnerability in admin_config.php in NavBoard 2.6.0 allows remote attackers to inject arbitrary PHP code into data/config.php via multiple parameters, as demonstrated via the threadperpage parameter in an editconfig action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/42118; http://www.securityfocus.com/bid/24120; https://exchange.xforce.ibmcloud.com/vulnerabilities/34472
CVE: CVE-2007-2900
Published: 2007-05-30
Description: Multiple PHP remote file inclusion vulnerabilities in Scallywag 2005-04-25 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to template.php in (1) skin/dark/, (2) skin/gold/, or (3) skin/original/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38142; http://osvdb.org/38143; http://osvdb.org/38144
CVE: CVE-2007-2901
Published: 2007-05-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the img parameter to main/inc/lib/fckeditor/editor/plugins/ImageManager/editor.php and other unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36521; http://secunia.com/advisories/25397; http://www.securityfocus.com/bid/24125
CVE: CVE-2007-2902
Published: 2007-05-30
Description: SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38145; http://www.securityfocus.com/bid/24125; http://www.vupen.com/english/advisories/2007/1934
CVE: CVE-2007-2903
Published: 2007-05-30
Description: Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument.  NOTE: it is not clear whether this issue crosses privilege boundaries.
CVSS Score: 5.0 (MEDIUM)
References: http://moaxb.blogspot.com/2007/05/moaxb-23-microsoft-office-2000.html; http://osvdb.org/36034; http://shinnai.altervista.org/viewtopic.php?id=42&t_id=26
CVE: CVE-2007-2904
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/38146; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102909-1; http://www.securitytracker.com/id?1018106
CVE: CVE-2007-2905
Published: 2007-05-30
Description: SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the post_id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36569; http://securityreason.com/securityalert/2752; http://www.securityfocus.com/archive/1/469351/100/0/threaded
CVE: CVE-2007-2906
Published: 2007-05-30
Description: Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service (browser crash) via a Thread subclass that calls super.run from its run method.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/40925; http://sourceforge.net/project/shownotes.php?group_id=107955&release_id=501861; http://osvdb.org/40925
CVE: CVE-2007-2907
Published: 2007-05-30
Description: Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/36913; http://osvdb.org/36915; http://secunia.com/advisories/25512
CVE: CVE-2007-2908
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/35155; http://secunia.com/advisories/25309; http://securityreason.com/securityalert/2751
CVE: CVE-2007-2909
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_calendar366_xss_fix_plugin.xml update.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/35156; http://www.vbulletin.com/forum/showthread.php?postid=1355012; http://osvdb.org/35156
CVE: CVE-2007-2910
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_367_xss_fix_plugin.xml update, a related issue to CVE-2007-2909.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/35157; http://www.vbulletin.com/forum/showthread.php?postid=1355012; http://osvdb.org/35157
CVE: CVE-2007-2911
Published: 2007-05-30
Description: SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached After" field (GPC['search']['datelineafter'] variable), a related issue to CVE-2007-1573.
CVSS Score: 8.5 (HIGH)
References: http://osvdb.org/38147; http://www.vbulletin.com/forum/project.php?issueid=21615; https://exchange.xforce.ibmcloud.com/vulnerabilities/34784
CVE: CVE-2007-2912
Published: 2007-05-30
Description: Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction Permissions is disabled, allows remote attackers to see the infraction "red flag" for a deleted user.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/38616; http://www.vbulletin.com/forum/project.php?issueid=21481; http://osvdb.org/38616
CVE: CVE-2007-2913
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/38148; http://securityreason.com/securityalert/2749; http://www.securityfocus.com/archive/1/469230/100/0/threaded
CVE: CVE-2007-2914
Published: 2007-05-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) awards.php, (2) login.php, (3) register.php, (4) weapons.php, and possibly other unspecified files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/36639; http://osvdb.org/36640; http://osvdb.org/36641
CVE: CVE-2007-2915
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in RM EasyMail Plus allows remote attackers to inject arbitrary web script or HTML via the title field in an email.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36255; http://securityreason.com/securityalert/2746; http://www.securityfocus.com/archive/1/469216/100/0/threaded
CVE: CVE-2007-2916
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in showown.php in GMTT Music Distro 1.2 allows remote attackers to inject arbitrary web script or HTML via the st parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063515.html; http://osvdb.org/36571; http://secunia.com/advisories/25385
CVE: CVE-2007-0690
Published: 2007-05-30
Description: myEvent 1.6 allows remote attackers to obtain sensitive information via (1) a Log In action without a password to login.php, or an invalid (2) view[] or (3) monthno[] parameter to myevent.php, which reveals the path in various error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/38336; http://securityreason.com/securityalert/2744; http://www.netvigilance.com/advisory0024
CVE: CVE-2007-0692
Published: 2007-05-30
Description: DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/2741; http://www.netvigilance.com/advisory0021; http://www.osvdb.org/34226
CVE: CVE-2007-0693
Published: 2007-05-30
Description: SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action.  NOTE: this issue can produce resultant cross-site scripting (XSS).
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/25438; http://securityreason.com/securityalert/2740; http://www.netvigilance.com/advisory0022
CVE: CVE-2007-0694
Published: 2007-05-30
Description: Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web script or HTML via the copyright parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/25438; http://securityreason.com/securityalert/2739; http://www.netvigilance.com/advisory0023
CVE: CVE-2007-2932
Published: 2007-05-31
Description: Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the blog parameter in a content search action.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/en/jp/JVN65660590/index.html; http://osvdb.org/38060; http://securityreason.com/securityalert/2743
CVE: CVE-2007-2933
Published: 2007-05-31
Description: SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the form_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38150; https://exchange.xforce.ibmcloud.com/vulnerabilities/34562; https://www.exploit-db.com/exploits/4003
CVE: CVE-2007-2934
Published: 2007-05-31
Description: Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/38350; http://www.attrition.org/pipermail/vim/2007-May/001632.html; http://www.securityfocus.com/bid/24178
CVE: CVE-2007-2935
Published: 2007-05-31
Description: core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dict parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36657; http://secunia.com/advisories/25421; http://www.fundanemt.org/newsarchive/?number=23
CVE: CVE-2007-2936
Published: 2007-05-31
Description: Multiple PHP remote file inclusion vulnerabilities in Frequency Clock 0.1b (Beta 0.1) allow remote attackers to execute arbitrary PHP code via a URL in the securelib parameter to (1) conf.php or (2) cp2.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38151; http://osvdb.org/38152; http://www.securityfocus.com/bid/24176
CVE: CVE-2007-2937
Published: 2007-05-31
Description: PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the site_url parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38153; http://www.securityfocus.com/bid/24170; https://www.exploit-db.com/exploits/3995
CVE: CVE-2007-2938
Published: 2007-05-31
Description: Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to the (1) Send485CMD method, and possibly the (2) SetLoginID, (3) AddSite, (4) SetScreen, and (5) SetVideoServer methods.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/36700; http://secunia.com/advisories/25430; http://www.securityfocus.com/bid/24172
CVE: CVE-2007-2939
Published: 2007-05-31
Description: Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter to (1) ITX.php, (2) IT_Error.php, or (3) IT.php in include/pear/.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/38086; http://osvdb.org/38087; http://osvdb.org/38088
CVE: CVE-2007-2940
Published: 2007-05-31
Description: Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b (1.0 Beta) allow remote attackers to execute arbitrary PHP code via a URL in the pachtofile parameter to (1) skin/html/table.php or (2) login.php.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/38051; http://osvdb.org/38052; http://www.securityfocus.com/bid/24167
CVE: CVE-2007-2941
Published: 2007-05-31
Description: Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map (vBGSiteMap) 2.41 for vBulletin allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) vbgsitemap/vbgsitemap-config.php or (2) vbgsitemap/vbgsitemap-vbseo.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38084; http://osvdb.org/38085; http://www.securityfocus.com/bid/24169
CVE: CVE-2007-2942
Published: 2007-05-31
Description: SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36273; http://secunia.com/advisories/25451; http://www.securityfocus.com/bid/24173
CVE: CVE-2007-2943
Published: 2007-05-31
Description: PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/38050; http://www.vupen.com/english/advisories/2007/1963; https://www.exploit-db.com/exploits/3987
CVE: CVE-2007-2944
Published: 2007-05-31
Description: WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/wabcmsn.mdb.  NOTE: this issue was originally reported for "webCMS," but this was an error by an unreliable researcher.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/36698; http://secunia.com/advisories/25453; http://www.attrition.org/pipermail/vim/2007-May/001637.html
CVE: CVE-2007-2945
Published: 2007-05-31
Description: RMForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for rmforum.mdb.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/36696; http://secunia.com/advisories/25455; http://securityreason.com/securityalert/2754
CVE: CVE-2007-2946
Published: 2007-05-31
Description: Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog File_D Object (LTRDFD14e.DLL) 14.5.0.44 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long DestinationPath property value.
CVSS Score: 10.0 (HIGH)
References: http://moaxb.blogspot.com/2007/05/moaxb-25-leadtools-raster-dialog-filed.html; http://osvdb.org/36036; http://secunia.com/advisories/25396
CVE: CVE-2007-2947
Published: 2007-05-31
Description: Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the root_prefix parameter to (1) index.php, (2) email_subscribe.php, (3) download.php, or (4) development.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38045; http://osvdb.org/38046; http://osvdb.org/38047
CVE: CVE-2007-2959
Published: 2007-05-31
Description: SQL injection vulnerability in manufacturer.php in cpCommerce before 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id_manufacturer parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38042; http://securityreason.com/securityalert/2747; http://www.securityfocus.com/archive/1/469910/100/0/threaded
CVE: CVE-2007-2960
Published: 2007-05-31
Description: Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin_name parameter to template.php in (1) skin/dark/, (2) skin/gold/, or (3) skin/original/, a different vector than CVE-2007-2900.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38039; http://osvdb.org/38040; http://osvdb.org/38041
CVE: CVE-2007-2961
Published: 2007-05-31
Description: Unrestricted file upload vulnerability in FileCloset before 1.1.5 allows remote attackers to upload arbitrary PHP files via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36738; http://secunia.com/advisories/25459; http://sourceforge.net/forum/forum.php?forum_id=700075
CVE: CVE-2007-2962
Published: 2007-05-31
Description: Cross-site scripting (XSS) vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the order parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36414; http://secunia.com/advisories/25484; http://securityreason.com/securityalert/2748