deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4504
Published: 2007-08-23
Description: Directory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and earlier for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter in a files.display action.
CVSS Score: 5.0 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/36222; https://www.exploit-db.com/exploits/4307; https://exchange.xforce.ibmcloud.com/vulnerabilities/36222
CVE: CVE-2007-4505
Published: 2007-08-23
Description: SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38359; https://exchange.xforce.ibmcloud.com/vulnerabilities/36220; https://www.exploit-db.com/exploits/4306
CVE: CVE-2007-4506
Published: 2007-08-23
Description: SQL injection vulnerability in index.php in the NeoRecruit component (com_neorecruit) 1.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an offer_view action.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36852; http://secunia.com/advisories/26689; http://www.neojoomla.com/en/news-joomla/extensions-neojoomla/mise-a-jour-de-securite-pour-neorecruit-1.4[PII_REDACTED]5.html
CVE: CVE-2007-4507
Published: 2007-08-23
Description: Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to the (1) ntuser_getuserlist, (2) ntuser_getuserinfo, (3) ntuser_getusergroups, or (4) ntuser_getdomaincontroller functions.
CVSS Score: 6.8 (MEDIUM)
References: https://www.exploit-db.com/exploits/4304; https://www.exploit-db.com/exploits/4304
CVE: CVE-2007-4508
Published: 2007-08-23
Description: Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.
CVSS Score: 6.8 (MEDIUM)
References: http://aluigi.altervista.org/adv/asurabof-adv.txt; http://osvdb.org/39799; http://secunia.com/advisories/24023
CVE: CVE-2007-4509
Published: 2007-08-23
Description: SQL injection vulnerability in index.php in the EventList component (com_eventlist) 0.8 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the did parameter in a details action.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38360; https://exchange.xforce.ibmcloud.com/vulnerabilities/36223; https://www.exploit-db.com/exploits/4309
CVE: CVE-2007-4510
Published: 2007-08-23
Description: ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=307562; http://kolab.org/security/kolab-vendor-notice-17.txt; http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
CVE: CVE-2007-4511
Published: 2007-08-23
Description: The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, which causes the (1) SSL and (2) SSL_MutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass intended policy.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/45828; http://www.securityfocus.com/archive/1/477315/100/0/threaded; http://www.securityfocus.com/bid/25400
CVE: CVE-2007-1356
Published: 2007-08-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2007-3847
Published: 2007-08-23
Description: The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: http://bugs.gentoo.org/show_bug.cgi?id=186219; http://docs.info.apple.com/article.html?artnum=307562; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01182588
CVE: CVE-2007-4131
Published: 2007-08-25
Description: Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
CVSS Score: 6.8 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=251921; http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
CVE: CVE-2007-4522
Published: 2007-08-25
Description: Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php.  NOTE: some vectors might be reachable through the url and name parameters to (g) admin/navigation/new_nav_item.php.  NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.
CVSS Score: 6.0 (MEDIUM)
References: http://securityreason.com/securityalert/3058; http://www.freshervisions.com/ripe/articles/ripe-version-0.8.10/; http://www.securityfocus.com/archive/1/477320/100/0/threaded
CVE: CVE-2007-4523
Published: 2007-08-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php, probably involving the Title or textarea field as reachable through admin/pages/new_page.php.  NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/38444; http://osvdb.org/38445; http://osvdb.org/38446
CVE: CVE-2007-4524
Published: 2007-08-25
Description: PHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38351; http://securityreason.com/securityalert/3055; http://www.securityfocus.com/archive/1/477426/100/0/threaded
CVE: CVE-2007-4525
Published: 2007-08-25
Description: PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelette_cache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the squelette_cache variable is initialized before use, and is only used within the scope of a function
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://securityreason.com/securityalert/3056; http://www.securityfocus.com/archive/1/477423/100/0/threaded; http://www.securityfocus.com/archive/1/477728/100/0/threaded
CVE: CVE-2007-4526
Published: 2007-08-25
Description: The Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://osvdb.org/37320; http://secunia.com/advisories/26555; http://securitytracker.com/id?1018602
CVE: CVE-2007-4527
Published: 2007-08-25
Description: Unrestricted file upload vulnerability in phUploader.php in phphq.Net phUploader 1.2 allows remote attackers to upload and execute arbitrary code via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/45829; http://www.securityfocus.com/bid/25405; http://osvdb.org/45829
CVE: CVE-2007-4528
Published: 2007-08-25
Description: The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL and calling a function, as demonstrated by kernel32.dll and the WinExec function.  NOTE: this issue does not cross privilege boundaries in most contexts, so perhaps it should not be included in CVE.
CVSS Score: 4.3 (MEDIUM)
References: https://www.exploit-db.com/exploits/4311; https://www.exploit-db.com/exploits/4311
CVE: CVE-2007-4529
Published: 2007-08-25
Description: The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the (1) AdminAddServer, (2) AdminDeleteServer, (3) AdminStartServer, and (4) AdminStopServer privileges; and administration of arbitrary virtual servers via a request to a .tscmd URI with a modified serverid parameter, as demonstrated by (a) add_server.tscmd, (b) ask_delete_server.tscmd, (c) start_server.tscmd, and (d) stop_server.tscmd.
CVSS Score: 8.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-05/0165.html; http://osvdb.org/36047; http://secunia.com/advisories/25242
CVE: CVE-2007-4530
Published: 2007-08-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote attackers to inject arbitrary web script or HTML via (1) the error_text parameter to error_box.html or (2) the ok_title parameter to ok_box.html.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-05/0165.html; http://osvdb.org/36048; http://osvdb.org/36049
CVE: CVE-2007-4531
Published: 2007-08-25
Description: Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a client denial of service (crash) via (1) a long string to the file transfer port or (2) a long chat message, or (3) a server denial of service (continuous beep and slowdown) via a string containing many 0x07 or other control characters to the file transfer port.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/soldatdos-adv.txt; http://aluigi.org/poc/soldatdos.zip; http://secunia.com/advisories/26564
CVE: CVE-2007-4532
Published: 2007-08-25
Description: Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service (client lockout) via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address.
CVSS Score: 7.8 (HIGH)
References: http://aluigi.altervista.org/adv/soldatdos-adv.txt; http://aluigi.org/poc/soldatdos.zip; http://www.securityfocus.com/archive/1/477624/100/0/threaded
CVE: CVE-2007-4533
Published: 2007-08-25
Description: Format string vulnerability in the Say command in sv_main.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a chat message, related to a call to the BroadcastPrintf function.
CVSS Score: 6.8 (MEDIUM)
References: http://aluigi.altervista.org/adv/vaboom2-adv.txt; http://secunia.com/advisories/26554; http://secunia.com/advisories/26701
CVE: CVE-2007-4534
Published: 2007-08-25
Description: Buffer overflow in the VThinker::BroadcastPrintf function in p_thinker.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via (1) a long string in a chat message and possibly (2) a long name field.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/vaboom2-adv.txt; http://secunia.com/advisories/26554; http://secunia.com/advisories/26701
CVE: CVE-2007-4535
Published: 2007-08-25
Description: The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service (daemon crash) via a string with a negative NewLen value within a certain UDP packet that triggers an assertion error.
CVSS Score: 4.3 (MEDIUM)
References: http://aluigi.altervista.org/adv/vaboom2-adv.txt; http://secunia.com/advisories/26554; http://secunia.com/advisories/26701
CVE: CVE-2007-4536
Published: 2007-08-25
Description: TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying (1) disclaimer.txt, (2) sponsors.txt, and (3) banners.txt, which are used in an include call.  NOTE: there might be local attack vectors that extend to other files.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/40257; http://secunia.com/advisories/26679; http://www.attrition.org/pipermail/vim/2007-August/001774.html
CVE: CVE-2007-2797
Published: 2007-08-27
Description: xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349924; http://secunia.com/advisories/26562; http://secunia.com/advisories/27617
CVE: CVE-2007-2958
Published: 2007-08-27
Description: Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.
CVSS Score: 6.8 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=190104; http://osvdb.org/40184; http://secunia.com/advisories/26550
CVE: CVE-2007-3741
Published: 2007-08-27
Description: The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/42128; http://osvdb.org/42129; http://osvdb.org/42130
CVE: CVE-2007-4537
Published: 2007-08-27
Description: Heap-based buffer overflow in the Huffman decompression algorithm implemented in Skulltag 0.97d-beta4.1 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet.
CVSS Score: 6.8 (MEDIUM)
References: http://aluigi.altervista.org/adv/skulltaghof-adv.txt; http://secunia.com/advisories/26549; http://securityreason.com/securityalert/3067
CVE: CVE-2007-4538
Published: 2007-08-27
Description: email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the Email::Send::Sendmail function, probably involving shell metacharacters.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/37203; http://secunia.com/advisories/26584; http://secunia.com/advisories/26971
CVE: CVE-2007-4539
Published: 2007-08-27
Description: The WebService (XML-RPC) interface in Bugzilla 2.23.3 through 3.0.0 does not enforce permissions for the time-tracking fields of bugs, which allows remote attackers to obtain sensitive information via certain XML-RPC requests, as demonstrated by the (1) Deadline and (2) Estimated Time fields.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/37202; http://secunia.com/advisories/26584; http://secunia.com/advisories/26971
CVE: CVE-2007-4540
Published: 2007-08-27
Description: Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands via the (1) HTTP_REFERER or (2) HTTP_USER_AGENT HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://myimei.com/security/2007-08-22/olate-download-342downloadphp-sql-injection.html; http://osvdb.org/38581; http://securityreason.com/securityalert/3062
CVE: CVE-2007-4541
Published: 2007-08-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the PHP_SELF variable in modules/core/uim.php and (2) [url] tags in a comment in modules/core/fldm.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://myimei.com/security/2007-08-22/olate-download-342modulescorefldmphpcomments-tag-url-xss.html; http://myimei.com/security/2007-08-22/olate-download-342modulescoreuimphpxss.html; http://osvdb.org/39710
CVE: CVE-2007-4542
Published: 2007-08-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439346; http://mapserver.gis.umn.edu/download/current/HISTORY.TXT/; http://secunia.com/advisories/26561
CVE: CVE-2007-4543
Published: 2007-08-27
Description: Cross-site scripting (XSS) vulnerability in enter_bug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22.x before 2.22.3, and 3.x before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the buildid field in the "guided form."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37201; http://secunia.com/advisories/26584; http://secunia.com/advisories/26971
CVE: CVE-2007-4544
Published: 2007-08-27
Description: Cross-site scripting (XSS) vulnerability in wp-newblog.php in WordPress multi-user (MU) 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the weblog_id parameter (Username field).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/38442; http://securityvulns.ru/Rdocument875.html; http://websecurity.com.ua/1269/
CVE: CVE-2007-4545
Published: 2007-08-27
Description: Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a filename within a (1) ZIP or (2) RAR archive.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/26583; http://securityreason.com/securityalert/3060; http://www.securityfocus.com/archive/1/477432/100/0/threaded
CVE: CVE-2007-4546
Published: 2007-08-27
Description: Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrite or creation.
CVSS Score: 5.8 (MEDIUM)
References: http://osvdb.org/45831; http://securityreason.com/securityalert/3060; http://www.securityfocus.com/archive/1/477432/100/0/threaded
CVE: CVE-2007-4547
Published: 2007-08-27
Description: Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted attackers to obtain sensitive information (memory contents) by reading the extracted files.  NOTE: this issue is only a vulnerability if Unreal is run with privileges, or if the extracted files are made accessible to other users.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/45832; http://securityreason.com/securityalert/3060; http://www.securityfocus.com/archive/1/477432/100/0/threaded
CVE: CVE-2007-4548
Published: 2007-08-27
Description: The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative access by sending a blank username and password with the command line deployer in the deployment module.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://geronimo.apache.org/2007/08/13/apache-geronimo-v20-release-delayed-due-to-security-issue.html; http://geronimo.apache.org/2007/08/21/apache-geronimo-201-released.html; http://www.nabble.com/Geronimo-2.0-Release-suspended-due-to-security-issue-found-before-release-t4263667s134.html
CVE: CVE-2007-4549
Published: 2007-08-28
Description: Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitrary code via an ALPass DB (APW) file containing (1) a long file-key or (2) a "Site Information and Folder entry" with a ciphertext_length value much larger than the plaintext_length value.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/26616; http://vuln.sg/alpass27-en.html; http://www.securityfocus.com/bid/25435
CVE: CVE-2007-4550
Published: 2007-08-28
Description: Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB (APW) file.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-134
References: http://secunia.com/advisories/26616; http://vuln.sg/alpass27-en.html; http://www.securityfocus.com/bid/25435
CVE: CVE-2007-4551
Published: 2007-08-28
Description: PHP remote file inclusion vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://14house.blogspot.com/2007/08/arcadem-rfi-sql-injection-flaws.html; http://forums.agaresmedia.com/viewtopic.php?f=13&t=19; http://osvdb.org/36856
CVE: CVE-2007-4552
Published: 2007-08-28
Description: SQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary SQL commands via the blockpage parameter.  NOTE: as of 20070827, the vendor has made conflicting statements regarding whether this issue exists or not.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://14house.blogspot.com/2007/08/arcadem-rfi-sql-injection-flaws.html; http://forums.agaresmedia.com/viewtopic.php?f=13&t=19; http://osvdb.org/36857
CVE: CVE-2007-4553
Published: 2007-08-28
Description: The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065433.html; http://secunia.com/advisories/26587; http://securityreason.com/securityalert/3075
CVE: CVE-2007-4554
Published: 2007-08-28
Description: Cross-site scripting (XSS) vulnerability in tiki-remind_password.php in Tikiwiki (aka Tiki CMS/Groupware) 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the username parameter.  NOTE: this issue might be related to CVE-2006-2635.7.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26618; http://securityreason.com/securityalert/3064; http://www.securityfocus.com/archive/1/477653/100/0/threaded