deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4954
Published: 2007-09-18
Description: PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/26849; http://www.securityfocus.com/bid/25691; https://exchange.xforce.ibmcloud.com/vulnerabilities/36639
CVE: CVE-2007-4955
Published: 2007-09-18
Description: PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/26799; http://www.securityfocus.com/bid/25680; https://exchange.xforce.ibmcloud.com/vulnerabilities/36638
CVE: CVE-2007-4956
Published: 2007-09-18
Description: Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to login.php, (2) the id parameter to index.php in a carnet editer action in the Member_Space (espace_membre) module, or (3) the typenav parameter to index.php in a browser aff action in the stats module.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=29; http://osvdb.org/37180; http://osvdb.org/37182
CVE: CVE-2007-4957
Published: 2007-09-18
Description: Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a .. (dot dot) in the (3) repertoire parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/38881; http://osvdb.org/38882; http://secunia.com/advisories/26851
CVE: CVE-2007-2834
Published: 2007-09-18
Description: Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-190
References: http://bugs.gentoo.org/show_bug.cgi?id=192818; http://fedoranews.org/updates/FEDORA-2007-237.shtml; http://fedoranews.org/updates/FEDORA-2007-700.shtml
CVE: CVE-2007-3010
Published: 2007-09-18
Description: masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6755&w=2; http://osvdb.org/40521; http://secunia.com/advisories/26853
CVE: CVE-2007-4750
Published: 2007-09-18
Description: Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbitrary code via a crafted RDZ archive in which the first file has an executable extension.
CVSS Score: 9.3 (HIGH)
CWE: CWE-310
References: http://osvdb.org/40544; http://secunia.com/advisories/26835; http://securityreason.com/securityalert/3150
CVE: CVE-2007-4751
Published: 2007-09-18
Description: RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files.
CVSS Score: 1.9 (LOW)
CWE: CWE-310
References: http://secunia.com/advisories/26835; http://securityreason.com/securityalert/3150; http://securitytracker.com/id?1018703
CVE: CVE-2007-4958
Published: 2007-09-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject arbitrary web script or HTML via the URI for (1) index.php, (2) i_frames/i_login.php, and (3) i_frames/i_top_tags.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26841; http://www.securityfocus.com/bid/25689; http://www.vupen.com/english/advisories/2007/3186
CVE: CVE-2007-4959
Published: 2007-09-18
Description: Cross-site scripting (XSS) vulnerability in catalog_products_with_images.php in osCMax 2.0.0-RC3-0-1 allows remote attackers to inject arbitrary web script or HTML via the URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37094; http://secunia.com/advisories/26833; http://www.securityfocus.com/bid/25684
CVE: CVE-2007-4960
Published: 2007-09-18
Description: Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' (double-quote space) sequence followed by the -autologin and -loginuri arguments, which cause the handler to post login credentials and software installation details to an arbitrary URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255, CWE-310
References: http://secunia.com/advisories/26845; http://www.gnucitizen.org/blog/ie-pwns-secondlife; http://www.securityfocus.com/archive/1/479698/100/0/threaded
CVE: CVE-2007-4961
Published: 2007-09-18
Description: The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending this hash to a Second Life authentication server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: http://osvdb.org/45947; http://www.gnucitizen.org/blog/ie-pwns-secondlife; http://osvdb.org/45947
CVE: CVE-2007-4962
Published: 2007-09-18
Description: Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged for code execution by writing to a Startup folder.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://osvdb.org/40550; http://secunia.com/advisories/26832; http://securityreason.com/securityalert/3140
CVE: CVE-2007-4963
Published: 2007-09-18
Description: Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of space characters in a filename within a (1) .IMG or (2) .ISO file. NOTE: this can be leveraged with a separate directory traversal vulnerability to trick a careful user into overwriting arbitrary files.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/45948; http://securityreason.com/securityalert/3140; http://www.securityfocus.com/archive/1/479695/100/0/threaded
CVE: CVE-2007-4964
Published: 2007-09-18
Description: WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsPerSec field in the header of a .IMG file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/45950; http://securityreason.com/securityalert/3140; http://www.securityfocus.com/archive/1/479695/100/0/threaded
CVE: CVE-2007-4965
Published: 2007-09-18
Description: Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-190
References: http://bugs.gentoo.org/show_bug.cgi?id=192876; http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
CVE: CVE-2007-4966
Published: 2007-09-18
Description: SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_delete[] parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/26803; http://www.portcullis.co.uk/179.php; http://www.securityfocus.com/bid/25665
CVE: CVE-2007-4967
Published: 2007-09-19
Description: Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtAllocateVirtualMemory, (2) NtConnectPort, (3) NtCreateFile, (4) NtCreateKey, (5) NtCreatePort, (6) NtDeleteFile, (7) NtDeleteValueKey, (8) NtLoadKey, (9) NtOpenFile, (10) NtOpenProcess, (11) NtOpenThread, (12) NtResumeThread, (13) NtSetContextThread, (14) NtSetValueKey, (15) NtSuspendProcess, (16) NtSuspendThread, and (17) NtTerminateThread.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-264
References: http://osvdb.org/45951; http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php; http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
CVE: CVE-2007-4968
Published: 2007-09-19
Description: Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for (1) NtOpenProcess and (2) NtOpenThread.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/45952; http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php; http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
CVE: CVE-2007-4969
Published: 2007-09-19
Description: Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtLoadKey, (4) NtOpenKey, (5) NtQueryValueKey, (6) NtSetValueKey, and (7) NtUnloadKey.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/45953; http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php; http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
CVE: CVE-2007-4970
Published: 2007-09-19
Description: ProcessGuard 3.410 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including (1) NtCreateFile, (2) NtCreateKey, (3) NtDeleteValueKey, (4) NtOpenFile, (5) NtOpenKey, and (6) NtSetValueKey.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/45954; http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php; http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
CVE: CVE-2007-4971
Published: 2007-09-19
Description: ProSecurity 1.40 Beta 2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteFile, (3) NtLoadDriver, (4) NtOpenSection, and (5) NtSetSystemTime.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/45956; http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php; http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
CVE: CVE-2007-4972
Published: 2007-09-19
Description: RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks to the (1) NtCreateKey and (2) NtOpenKey Windows Native API functions.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://osvdb.org/45957; http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php; http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
CVE: CVE-2007-4974
Published: 2007-09-19
Description: Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html; http://secunia.com/advisories/26921; http://secunia.com/advisories/26932
CVE: CVE-2007-3286
Published: 2007-09-19
Description: Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/38258; http://support.avaya.com/elmodocs2/security/ASA-2007-314.htm; http://www.securityfocus.com/bid/25707
CVE: CVE-2007-4827
Published: 2007-09-19
Description: Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus requests to TCP port 502.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://dvlabs.tippingpoint.com/advisory/TPTI-07-15; http://osvdb.org/38259; http://www.automatedsolutions.com/pub/asmbslv/ReadMe.htm
CVE: CVE-2007-4975
Published: 2007-09-19
Description: Cross-site scripting (XSS) vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web script or HTML via the chapter parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26854; http://securityreason.com/securityalert/3155; http://www.securityfocus.com/archive/1/479761/100/0/threaded
CVE: CVE-2007-4976
Published: 2007-09-19
Description: Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://coppermine-gallery.net/forum/index.php?topic=46847.0; http://osvdb.org/37101; http://secunia.com/advisories/26843
CVE: CVE-2007-4977
Published: 2007-09-19
Description: Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://coppermine-gallery.net/forum/index.php?topic=46847.0; http://osvdb.org/37100; http://secunia.com/advisories/26843
CVE: CVE-2007-4978
Published: 2007-09-19
Description: Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter to (1) Decoder.php and (2) Encoder.php in WBXML/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38260; http://osvdb.org/38261; http://www.securityfocus.com/bid/25701
CVE: CVE-2007-4979
Published: 2007-09-19
Description: SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a different module than CVE-2007-4956.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/25700; https://exchange.xforce.ibmcloud.com/vulnerabilities/36661; https://www.exploit-db.com/exploits/4422
CVE: CVE-2007-4980
Published: 2007-09-19
Description: The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers to cause a denial of service via a large integer value in the Content-Length HTTP header, which triggers a fatal Java OutOfMemoryError.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://osvdb.org/40922; http://securityreason.com/securityalert/3154; http://www.securityfocus.com/archive/1/479816/100/0/threaded
CVE: CVE-2007-4981
Published: 2007-09-19
Description: Cross-site scripting (XSS) vulnerability in the save function in Obedit 3.03 allows user-assisted remote attackers to inject arbitrary web script or HTML via unknown vectors, as demonstrated by a SCRIPT element in an unspecified context when saving a document.  NOTE: because the details of the attack are uncertain, it is unclear whether this crosses privilege boundaries.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38263; http://securityreason.com/securityalert/3153; http://www.securityfocus.com/archive/1/479817/100/0/threaded
CVE: CVE-2007-4982
Published: 2007-09-19
Description: Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode ActiveX 3.0.0.1 and earlier allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) SaveAsBMP or (2) SaveAsWMF method.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://osvdb.org/37914; http://osvdb.org/37915; http://secunia.com/advisories/26836
CVE: CVE-2007-4983
Published: 2007-09-19
Description: Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ (dot dot backslash) in the second argument to the DownloadFromMusicStore method.  NOTE: some of these details are obtained from third party information.  NOTE: this can be leveraged for code execution by overwriting JetAudio.exe, which is launched by the control after completion of the method call.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://osvdb.org/37737; http://secunia.com/advisories/26787; http://www.securityfocus.com/bid/25723
CVE: CVE-2007-4984
Published: 2007-09-19
Description: SQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx allows remote attackers to execute arbitrary SQL commands via the s parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38264; http://www.securityfocus.com/bid/25710; https://exchange.xforce.ibmcloud.com/vulnerabilities/36689
CVE: CVE-2007-5008
Published: 2007-09-20
Description: The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected.
CVSS Score: 9.0 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/26873; http://www.securityfocus.com/bid/25740; http://www.securitytracker.com/id?1018709
CVE: CVE-2007-5009
Published: 2007-09-20
Description: PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before 20070922, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1594&w=2; http://osvdb.org/38265; http://secunia.com/advisories/26888
CVE: CVE-2007-5010
Published: 2007-09-20
Description: Cross-site scripting (XSS) vulnerability in WebBatch allows remote attackers to inject arbitrary web script or HTML via the URL to webbatch.exe.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7879&w=2; http://osvdb.org/38285; http://secunia.com/advisories/26889
CVE: CVE-2007-5011
Published: 2007-09-20
Description: webbatch.exe in WebBatch allows remote attackers to obtain sensitive information via the dumpinputdata parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7879&w=2; http://osvdb.org/38286; http://secunia.com/advisories/26889
CVE: CVE-2007-5012
Published: 2007-09-20
Description: Cross-site scripting (XSS) vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for all is enabled, allows remote attackers to inject arbitrary web script or HTML via the author parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37164; http://secunia.com/advisories/26908; http://www.securityfocus.com/bid/25745
CVE: CVE-2007-5013
Published: 2007-09-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) u, (2) p, (3) c, and (4) s parameters, and other unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37183; http://secunia.com/advisories/26886; http://www.securityfocus.com/bid/25742
CVE: CVE-2007-5014
Published: 2007-09-20
Description: Multiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to execute arbitrary PHP code via a URL in (1) the lvc_admin_dir parameter to modules/visitors2/admin/view-archiver.inc.php or (2) the lvc_include_dir parameter to modules/visitors2/include/menus.inc.php. NOTE: the modules/visitors2/include/config.inc.php vector is already covered by CVE-2006-4373.  NOTE: vector 1 is disputed by CVE because PHP encounters a fatal instantiation error on a direct request for the file, before reaching the include statement.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-03-pslash/; http://osvdb.org/38288; http://osvdb.org/38289
CVE: CVE-2007-5015
Published: 2007-09-20
Description: Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP code via a URL in the sl_theme_unix_path parameter to (1) admin_footer.php, (2) info_footer.php, (3) theme_footer.php, (4) browse_footer.php, (5) account_footer.php, or (6) search_footer.php in core/theme/includes/.  NOTE: the vulnerability is present only when the administrator does not follow installation instructions about the requirement for .htaccess Limit support.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/14/rfi-03-streamline-php-media-server/; http://osvdb.org/38290; http://osvdb.org/38291
CVE: CVE-2007-5016
Published: 2007-09-20
Description: SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands via the abc parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/37163; http://secunia.com/advisories/26902; http://www.securityfocus.com/bid/25741
CVE: CVE-2007-5017
Published: 2007-09-20
Description: Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/38296; http://www.securityfocus.com/bid/25727; http://www.securitytracker.com/id?1018715