deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4555
Published: 2007-08-28
Description: Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface.  NOTE: this can be leveraged to create a new admin account.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065441.html; http://osvdb.org/37961; http://secunia.com/advisories/26529
CVE: CVE-2006-7222
Published: 2007-08-28
Description: Buffer overflow in the CFLICStream::_deltachunk function in FLICSource.cpp in Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to execute arbitrary code via a crafted FLI file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/26591; http://www.securityfocus.com/bid/25437; http://www.team509.com/modules.php?name=News&file=article&sid=38
CVE: CVE-2007-4521
Published: 2007-08-28
Description: Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an "invalid/corrupted" MIME body, which triggers a crash when the recipient listens to voicemail.
CVSS Score: 5.0 (MEDIUM)
References: http://downloads.digium.com/pub/asa/AST-2007-021.html; http://secunia.com/advisories/26601; http://secunia.com/advisories/26602
CVE: CVE-2007-4556
Published: 2007-08-28
Description: Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression when altSyntax is enabled, which allows remote attackers to cause a denial of service (infinite loop) or execute arbitrary code via form input beginning with a "%{" sequence and ending with a "}" character.
CVSS Score: 6.8 (MEDIUM)
References: http://forums.opensymphony.com/ann.jspa?annID=54; http://issues.apache.org/struts/browse/WW-2030; http://jira.opensymphony.com/browse/XW-544
CVE: CVE-2007-4557
Published: 2007-08-28
Description: Cross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstrated by a URL within a url field in a STYLE element, possibly due to an incomplete fix for CVE-2004-2103.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://0x000000.com/index.php?i=409; http://0x000000.com/index.php?i=409
CVE: CVE-2007-4558
Published: 2007-08-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-4134.  Reason: This candidate is a duplicate of CVE-2007-4134.  Notes: All CVE users should reference CVE-2007-4134 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-4559
Published: 2007-08-28
Description: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://mail.python.org/pipermail/python-dev/2007-August/074290.html; http://mail.python.org/pipermail/python-dev/2007-August/074292.html; http://secunia.com/advisories/26623
CVE: CVE-2007-4560
Published: 2007-08-28
Description: clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."
CVSS Score: 7.6 (HIGH)
CWE: CWE-78
References: http://docs.info.apple.com/article.html?artnum=307562; http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html; http://secunia.com/advisories/26654
CVE: CVE-2007-4561
Published: 2007-08-28
Description: Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20, CWE-119
References: http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]2961&w=2; http://secunia.com/advisories/26609
CVE: CVE-2007-4562
Published: 2007-08-28
Description: Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service (connection prevention) by sending "data unexpectedly through a port."
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37856; http://secunia.com/advisories/26592; http://www.hitachi-support.com/security_e/vuls_e/HS07-026_e/index-e.html
CVE: CVE-2007-4563
Published: 2007-08-28
Description: Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/37854; http://secunia.com/advisories/26589; http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html
CVE: CVE-2007-4564
Published: 2007-08-28
Description: Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/37855; http://secunia.com/advisories/26589; http://www.hitachi-support.com/security_e/vuls_e/HS07-025_e/index-e.html
CVE: CVE-2007-4565
Published: 2007-08-28
Description: sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service (NULL dereference and application crash) by refusing certain warning messages that are sent over SMTP.
CVSS Score: 5.0 (MEDIUM)
References: http://fetchmail.berlios.de/fetchmail-SA-2007-02.txt; http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html
CVE: CVE-2007-4566
Published: 2007-08-28
Description: Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065453.html; http://secunia.com/advisories/26613; http://securityreason.com/securityalert/3061
CVE: CVE-2007-3846
Published: 2007-08-28
Description: Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on Windows-based systems, allows remote authenticated users to overwrite and create arbitrary files via a ..\ (dot dot backslash) sequence in the filename, as stored in the file repository.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-22
References: http://crisp.cs.du.edu/?q=node/36; http://osvdb.org/40118; http://osvdb.org/40119
CVE: CVE-2007-4577
Published: 2007-08-28
Description: Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/26580; http://securityreason.com/securityalert/3073; http://securitytracker.com/id?1018608
CVE: CVE-2007-4578
Published: 2007-08-28
Description: Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around".  NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://secunia.com/advisories/26580; http://securityreason.com/securityalert/3072; http://securitytracker.com/id?1018608
CVE: CVE-2007-4579
Published: 2007-08-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-2931.  Reason: This candidate is a reservation duplicate of CVE-2007-2931.  Notes: All CVE users should reference CVE-2007-2931 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-4580
Published: 2007-08-28
Description: Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: http://osvdb.org/39154; http://secunia.com/advisories/26608; http://securityreason.com/securityalert/3071
CVE: CVE-2007-4220
Published: 2007-08-29
Description: Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete arbitrary files via a .. (dot dot) in a Send request, probably related to the (1) Send and (2) Exchange services.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: ftp://ftp-xo.netopia.com/evaluation/docs/timbuktu/win/865/relnotes/TB2Win865Evalrn.pdf; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=589; http://secunia.com/advisories/26588
CVE: CVE-2007-4221
Published: 2007-08-29
Description: Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via (1) a long user name and (2) certain malformed requests; and (3) allow remote Timbuktu servers to have an unknown impact via a malformed HELLO response, related to the Scanner component and possibly related to a malformed computer name.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20, CWE-119
References: ftp://ftp-xo.netopia.com/evaluation/docs/timbuktu/win/865/relnotes/TB2Win865Evalrn.pdf; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=590; http://secunia.com/advisories/26588
CVE: CVE-2007-4581
Published: 2007-08-29
Description: SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38304; http://www.securityfocus.com/bid/25463; https://exchange.xforce.ibmcloud.com/vulnerabilities/36298
CVE: CVE-2007-4582
Published: 2007-08-29
Description: Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll 1.1.45.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allows remote attackers to execute arbitrary code via a long second argument to the SetText method.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38441; http://www.securityfocus.com/bid/25465; https://exchange.xforce.ibmcloud.com/vulnerabilities/36305
CVE: CVE-2007-4583
Published: 2007-08-29
Description: Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allow remote attackers to (1) create or overwrite arbitrary files via a full pathname in the first argument to the SaveXMLFile method or (2) delete arbitrary files via a full pathname in the argument to the DeleteXMLFile method.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/38386; http://osvdb.org/38387; http://secunia.com/advisories/26622
CVE: CVE-2007-4584
Published: 2007-08-29
Description: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the p_mode variable.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/37480; http://secunia.com/advisories/26578; http://secunia.com/advisories/31180
CVE: CVE-2007-4585
Published: 2007-08-29
Description: Directory traversal vulnerability in activateuser.php in 2532|Gigs 1.2.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/36687; http://secunia.com/advisories/26585; http://www.securityfocus.com/bid/25449
CVE: CVE-2007-4586
Published: 2007-08-29
Description: Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iis_getservicestate function, related to the ServiceId argument to the (1) fnStartService, (2) fnGetServiceState, (3) fnStopService, and possibly other functions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/25452; https://exchange.xforce.ibmcloud.com/vulnerabilities/36262; https://www.exploit-db.com/exploits/4318
CVE: CVE-2007-4587
Published: 2007-08-29
Description: Cross-site scripting (XSS) vulnerability in Easy Software Cafeteria escafeWeb (aka Tuigwaa) 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the setting of option.nopage.create in tuigwaa.properties.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/37147; http://secunia.com/advisories/26577
CVE: CVE-2007-4588
Published: 2007-08-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Server Admin Level (NodeWorx) 3.0.2 (1) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php; and allow remote authenticated users to inject arbitrary web script or HTML via the PATH_INFO to (2) nodeworx.php, (3) users.php, (4) lang.php, (5) themes.php, (6) setup.php, (7) siteworx.php, (8) packages.php, (9) backup.php, (10) import.php, (11) scriptworx.php, (12) resellers.php, (13) reseller-packages.php, (14) http.php, (15) mail.php, (16) ftp.php, (17) mysql.php, (18) sshd.php, (19) nfs.php, (20) cron.php, (21) ip.php, (22) firewall.php, (23) updates.php, (24) rrd.php, or (25) cluster.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://interworx.com/forums/showthread.php?t=2501; http://osvdb.org/36739; http://osvdb.org/36740
CVE: CVE-2007-4589
Published: 2007-08-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Webmaster Level (SiteWorx) 3.0.2 (1) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php; and allow remote authenticated users to inject arbitrary web script or HTML via the PATH_INFO to (2) siteworx.php, (3) users.php, (4) ftp.php, (5) mysql.php, (6) domains.php, (7) htaccess.php, (8) scriptworx.php, (9) stats.php, (10) backup.php, (11) restore.php, and (12) httpd.php; and unspecified vectors to (13) cron.php and (14) prefs.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://interworx.com/forums/showthread.php?t=2501; http://osvdb.org/36767; http://osvdb.org/36768
CVE: CVE-2007-4590
Published: 2007-08-29
Description: The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors.
CVSS Score: 3.3 (LOW)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118367; http://osvdb.org/37563; http://secunia.com/advisories/26599
CVE: CVE-2007-4591
Published: 2007-08-29
Description: vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode.
CVSS Score: 6.9 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6360&w=2; http://secunia.com/advisories/26606; http://tarrysingh.blogspot.com/2007/08/security-vmware-workstation-6.html
CVE: CVE-2007-4593
Published: 2007-08-29
Description: Unspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) via unspecified vectors, as demonstrated by the DC2 test suite, possibly a related issue to CVE-2007-4591.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://osvdb.org/40087; http://secunia.com/advisories/26606; http://osvdb.org/40087
CVE: CVE-2007-4594
Published: 2007-08-29
Description: Entrust Entelligence Security Provider (ESP) 8 does not properly validate certificates in certain circumstances involving (1) a chain that omits the root Certification Authority (CA) certificate, or an application that specifies disregarding (2) unknown revocation statuses during path validation or (3) certain errors in the certification path, which might allow context-dependent attackers to spoof certificate authentication.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-255
References: http://secunia.com/advisories/26630; http://www.securityfocus.com/bid/25471; https://exchange.xforce.ibmcloud.com/vulnerabilities/36331
CVE: CVE-2007-4595
Published: 2007-08-29
Description: Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.12 allows remote attackers to inject arbitrary web script or HTML in certain circumstances involving (1) lack of charset specification within a META element or (2) a META element that specifies an unrecognized charset, which trigger automatic character set recognition by the web browser, as demonstrated by improper handling of UTF-7 data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://mayaa.seasar.org/news/vulnerability20070816.html; http://osvdb.org/36655
CVE: CVE-2007-4596
Published: 2007-08-30
Description: The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the Perl eval function.  NOTE: this might only be a vulnerability in limited environments.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://www.exploit-db.com/exploits/4314; https://www.exploit-db.com/exploits/4314
CVE: CVE-2007-4597
Published: 2007-08-30
Description: SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL commands via the s[cid] parameter in a search_list action, a different vector than CVE-2007-2549.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38440; http://www.securityfocus.com/bid/25445; https://www.exploit-db.com/exploits/4313
CVE: CVE-2007-4598
Published: 2007-08-30
Description: IBM SurePOS 500 has (1) a default password of "12345" for the manager and (2) blank default passwords for operator accounts.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-255
References: http://isc.sans.org/diary.html?storyid=3323; http://osvdb.org/45835; http://www.collegeid.com/SurePOS%20500%20Manual.pdf
CVE: CVE-2007-4132
Published: 2007-08-30
Description: Unspecified vulnerability in Red Hat Network Satellite Server 5.0.0 allows remote authenticated users to execute arbitrary code via unknown vectors in a "back-end XMLRPC handler."
CVSS Score: 6.5 (MEDIUM)
References: http://osvdb.org/40438; http://secunia.com/advisories/26687; http://www.redhat.com/support/errata/RHSA-2007-0868.html
CVE: CVE-2007-4134
Published: 2007-08-30
Description: Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: ftp://ftp.berlios.de/pub/star/alpha/AN-1.5a84; ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc; http://secunia.com/advisories/26626
CVE: CVE-2007-4601
Published: 2007-08-30
Description: A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to bypass intended access restrictions when a service uses libwrap but does not specify server connection information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/405342; http://osvdb.org/40140; http://secunia.com/advisories/26567
CVE: CVE-2007-4467
Published: 2007-08-31
Description: Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified "initialization parameters." NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://osvdb.org/37711; http://secunia.com/advisories/26644; http://securitytracker.com/id?1018618
CVE: CVE-2007-4602
Published: 2007-08-31
Description: SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS (Micro-CMS) 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/36684; http://secunia.com/advisories/26638; https://exchange.xforce.ibmcloud.com/vulnerabilities/36291
CVE: CVE-2007-4603
Published: 2007-08-31
Description: Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter in a showarticle action or (2) the catid parameter in a showcat action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://14house.blogspot.com/2007/08/acg-news-sql-injection.html; http://secunia.com/advisories/26637; http://www.osvdb.org/36690
CVE: CVE-2007-4604
Published: 2007-08-31
Description: SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38329; http://www.securityfocus.com/bid/25477; https://exchange.xforce.ibmcloud.com/vulnerabilities/36323
CVE: CVE-2007-4605
Published: 2007-08-31
Description: PHP remote file inclusion vulnerability in convert/mvcw.php in Virtual War (VWar) 1.5.0 R15 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter, a different vector than CVE-2006-1503, CVE-2006-1636, and CVE-2006-1747.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/36316; https://www.exploit-db.com/exploits/4332; https://exchange.xforce.ibmcloud.com/vulnerabilities/36316
CVE: CVE-2007-4606
Published: 2007-08-31
Description: PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (PNC) 4.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter, a different vector than CVE-2006-1602.  NOTE: it is possible that this issue stems from a problem in VWar itself.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/36317; https://www.exploit-db.com/exploits/4333; https://exchange.xforce.ibmcloud.com/vulnerabilities/36317