deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-2397
Published: 2007-07-15
Description: QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305947; http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html; http://osvdb.org/36132
CVE: CVE-2007-2402
Published: 2007-07-15
Description: QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://docs.info.apple.com/article.html?artnum=305947; http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html; http://osvdb.org/36131
CVE: CVE-2007-2417
Published: 2007-07-15
Description: Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets.  NOTE: this issue might overlap CVE-2007-3491.
CVSS Score: 10.0 (HIGH)
References: http://dvlabs.tippingpoint.com/advisory/TPTI-07-12; http://osvdb.org/37934; http://secunia.com/advisories/26058
CVE: CVE-2007-3645
Published: 2007-07-15
Description: archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (crash) via (1) an end-of-file condition within a tar header that follows a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive, which results in a NULL pointer dereference, a different issue than CVE-2007-3644.
CVSS Score: 4.3 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924; http://osvdb.org/38093; http://osvdb.org/38094
CVE: CVE-2007-3673
Published: 2007-07-15
Description: Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.
CVSS Score: 6.9 (MEDIUM)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=554; http://osvdb.org/36117; http://secunia.com/advisories/26042
CVE: CVE-2007-3768
Published: 2007-07-15
Description: The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) via a malformed response to a PASV command.
CVSS Score: 8.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070710/98374694/attachment-0030.txt; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9277&w=2; http://osvdb.org/37909
CVE: CVE-2007-3769
Published: 2007-07-15
Description: Cross-site scripting (XSS) vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code, which is reflected to the user in the resulting error message.  NOTE: this can be leveraged for root access via a sequence of steps involving web script that creates a new FTP user account.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070710/98374694/attachment-0031.txt; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9277&w=2; http://osvdb.org/37911
CVE: CVE-2007-3770
Published: 2007-07-15
Description: The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality.
CVSS Score: 7.8 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=184886; http://osvdb.org/38082; http://secunia.com/advisories/26037
CVE: CVE-2006-4169
Published: 2007-07-15
Description: Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the help parameter to (1) gpg_help.php or (2) gpg_help_base.php.
CVSS Score: 5.5 (MEDIUM)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=555; http://osvdb.org/37932; http://osvdb.org/37933
CVE: CVE-2006-5278
Published: 2007-07-15
Description: Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/26043; http://securitytracker.com/id?1018369; http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml
CVE: CVE-2007-3103
Published: 2007-07-15
Description: The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-59
References: http://bugs.gentoo.org/show_bug.cgi?id=185660; http://bugzilla.redhat.com/242903; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=557
CVE: CVE-2007-3771
Published: 2007-07-15
Description: Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service (service crash) via a long (1) To, (2) From, or (3) Subject header in an outbound SMTP e-mail message.  NOTE: the original vendor advisory referenced CVE-2006-3456, but this was an error.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/36115; http://secunia.com/advisories/26036; http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11b.html
CVE: CVE-2007-3772
Published: 2007-07-15
Description: Directory traversal vulnerability in news/show.php in PsNews 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newspath parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/37684; https://exchange.xforce.ibmcloud.com/vulnerabilities/35374; https://www.exploit-db.com/exploits/4174
CVE: CVE-2007-3773
Published: 2007-07-15
Description: Cross-site request forgery (CSRF) vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://chxsecurity.org/advisories/adv-2-mid.txt; http://osvdb.org/38692; http://securityreason.com/securityalert/2896
CVE: CVE-2007-3774
Published: 2007-07-15
Description: Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Data/Dvbbs7.mdb.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/39747; http://securityreason.com/securityalert/2886; http://www.securityfocus.com/archive/1/473374/100/0/threaded
CVE: CVE-2007-3775
Published: 2007-07-15
Description: Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allows remote attackers to cause a denial of service (loss of cluster services) via unspecified vectors, aka (1) CSCsj09859 and (2) CSCsj19985.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/26039; http://securitytracker.com/id?1018368; http://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml
CVE: CVE-2007-3776
Published: 2007-07-15
Description: Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka (1) CSCsj20668 and (2) CSCsj25962.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/36124; http://secunia.com/advisories/26039; http://securitytracker.com/id?1018368
CVE: CVE-2007-3777
Published: 2007-07-15
Description: avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/37975; http://secunia.com/advisories/25998; http://securityreason.com/securityalert/2887
CVE: CVE-2007-3778
Published: 2007-07-15
Description: The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_check_sign_pgp_mime function in gpg_hook_functions.php.  NOTE: a parameter value can be set in the contents of an e-mail message.
CVSS Score: 7.5 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=330; http://lists.immunitysec.com/pipermail/dailydave/2007-July/004452.html; http://lists.immunitysec.com/pipermail/dailydave/2007-July/004456.html
CVE: CVE-2007-3779
Published: 2007-07-15
Description: PHP local file inclusion vulnerability in gpg_pop_init.php in the G/PGP (GPG) Plugin before 20070707 for Squirrelmail allows remote attackers to include and execute arbitrary local files, related to the MOD parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37930; http://www.attrition.org/pipermail/vim/2007-July/001703.html; http://www.braverock.com/gpg/cvs/viewcvs.cgi/gpg/gpg_pop_init.php.diff?r1=1.14&r2=1.15
CVE: CVE-2007-3780
Published: 2007-07-15
Description: MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugs.mysql.com/bug.php?id=28984; http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html; http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html
CVE: CVE-2007-3781
Published: 2007-07-15
Description: MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
CVSS Score: 4.0 (MEDIUM)
References: http://bugs.mysql.com/bug.php?id=25578; http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html; http://lists.mysql.com/announce/470
CVE: CVE-2007-3782
Published: 2007-07-15
Description: MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://bugs.mysql.com/bug.php?id=27878; http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html; http://lists.mysql.com/announce/470
CVE: CVE-2007-3783
Published: 2007-07-15
Description: SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action.  NOTE: this is probably different from CVE-2005-1413.4.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064555.html; http://osvdb.org/36246; http://secunia.com/advisories/26020
CVE: CVE-2007-3013
Published: 2007-07-15
Description: SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picture_real_edit.asp, and probably other unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/26063; http://www.osvdb.org/36511; http://www.redteam-pentesting.de/advisories/rt-sa-2007-004.php
CVE: CVE-2007-3014
Published: 2007-07-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) errors/rights.asp or (2) errors/transaction.asp, or (3) the name of a MIME type (mimetype).
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/26063; http://www.osvdb.org/36259; http://www.osvdb.org/36260
CVE: CVE-2007-3784
Published: 2007-07-15
Description: Cross-site scripting (XSS) vulnerability in the Belkin G Plus Router F5D7231-4 with firmware 4.05.03 allows remote attackers to inject arbitrary web script or HTML via a hostname of a DHCP client.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0179.html; http://archives.neohapsis.com/archives/fulldisclosure/2007-07/att-0179/Belkin_Router_fw_40503_xss_06_64.txt; http://osvdb.org/36361
CVE: CVE-2007-3785
Published: 2007-07-15
Description: Absolute path traversal vulnerability in a certain ActiveX control in PGPBBox.dll in EldoS SecureBlackbox (sbb) 5.1.0.112 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/39748; http://www.securityfocus.com/bid/24882; https://exchange.xforce.ibmcloud.com/vulnerabilities/35368
CVE: CVE-2007-3786
Published: 2007-07-15
Description: Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device before firmware 3.1.20070615 allows remote attackers to perform privileged actions as administrators.  NOTE: the vendor disputes the distribution of the vulnerable software, stating that it was a custom build for a former customer
CVSS Score: 9.3 (HIGH)
References: http://labs.calyptix.com/CX-2007-05.php; http://labs.calyptix.com/CX-2007-05.txt; http://osvdb.org/38174
CVE: CVE-2007-3787
Published: 2007-07-15
Description: The eSoft InstaGate EX2 UTM device does not require entry of the old password when changing the admin password, which might allow remote attackers to gain privileges by conducting a CSRF attack, making a password change from an unattended workstation, or other attacks.
CVSS Score: 7.5 (HIGH)
References: http://labs.calyptix.com/CX-2007-05.php; http://labs.calyptix.com/CX-2007-05.txt; http://osvdb.org/38175
CVE: CVE-2007-3788
Published: 2007-07-15
Description: The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow context-dependent attackers to obtain sensitive information by reading this document.
CVSS Score: 7.6 (HIGH)
References: http://labs.calyptix.com/CX-2007-05.php; http://labs.calyptix.com/CX-2007-05.txt; http://osvdb.org/38173
CVE: CVE-2007-3789
Published: 2007-07-15
Description: SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL commands via the Password field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36245; http://www.securityfocus.com/bid/24884; http://osvdb.org/36245
CVE: CVE-2007-3790
Published: 2007-07-15
Description: The com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cause a denial of service via a long argument.
CVSS Score: 5.8 (MEDIUM)
References: http://osvdb.org/36854; https://www.exploit-db.com/exploits/4175; http://osvdb.org/36854
CVE: CVE-2007-3791
Published: 2007-07-15
Description: Buffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix allows remote attackers to cause a denial of service and possibly execute arbitrary code via long SMTP commands.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38091; http://secunia.com/advisories/26021; http://secunia.com/advisories/26649
CVE: CVE-2007-3792
Published: 2007-07-15
Description: Multiple PHP remote file inclusion vulnerabilities in AzDG Dating Gold 3.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the int_path parameter to (1) header.php, (2) footer.php, or (3) secure.admin.php in templates/.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36262; http://osvdb.org/36263; http://osvdb.org/36264
CVE: CVE-2007-3793
Published: 2007-07-15
Description: SQL injection vulnerability in Job Management Partner 1/NETM/DM (JP1/NETM/DM) Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37014; http://secunia.com/advisories/26052; http://www.hitachi-support.com/security_e/vuls_e/HS07-019_e/index-e.html
CVE: CVE-2007-3794
Published: 2007-07-15
Description: Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37851; http://secunia.com/advisories/26025; http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html
CVE: CVE-2007-3795
Published: 2007-07-15
Description: Unspecified vulnerability in Hitachi TP1/Server Base before 03-05-/P, 05-00-x before 05-00-/G, 05-01-x before 05-01-/A, and 05-02-x before 05-02-/C on HP-UX 11.0 through 11i v3 allows attackers to cause a denial of service by sending certain data to a port.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/37850; http://secunia.com/advisories/26045; http://www.hitachi-support.com/security_e/vuls_e/HS07-020_e/index-e.html
CVE: CVE-2007-3798
Published: 2007-07-16
Description: Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-252, CWE-252
References: http://bugs.gentoo.org/show_bug.cgi?id=184815; http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11&r2=1.91.2.12; http://docs.info.apple.com/article.html?artnum=307179
CVE: CVE-2007-3799
Published: 2007-07-16
Description: The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://docs.info.apple.com/article.html?artnum=307562; http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html; http://osvdb.org/36855
CVE: CVE-2007-3800
Published: 2007-07-16
Description: Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0 through 3.1, when the Notification Message window is enabled, allows local users to gain privileges via crafted code.
CVSS Score: 6.0 (MEDIUM)
References: http://osvdb.org/36116; http://secunia.com/advisories/26054; http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11c.html
CVE: CVE-2007-3801
Published: 2007-07-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-3699.  Reason: This candidate is a duplicate of CVE-2007-3699.  Notes: All CVE users should reference CVE-2007-3699 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-3802
Published: 2007-07-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-0447.  Reason: This candidate is a duplicate of CVE-2007-0447.  Notes: All CVE users should reference CVE-2007-0447 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-3803
Published: 2007-07-16
Description: The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37974; http://secunia.com/advisories/25957; http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf
CVE: CVE-2007-3804
Published: 2007-07-16
Description: The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via small files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/37973; http://secunia.com/advisories/25957; http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf
CVE: CVE-2007-3805
Published: 2007-07-16
Description: The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not properly validate certificates during IKE negotiation, which allows remote attackers to cause a denial of service (gateway stop) via certain certificates.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://osvdb.org/37972; http://secunia.com/advisories/25957; http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf
CVE: CVE-2007-3017
Published: 2007-07-17
Description: The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from articles sent to admin/applets/wysiwyg/rendereditor.asp, which allows remote authenticated users to inject arbitrary JavaScript via a request to admin/worklist/worklist_edit.asp.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/39745; http://secunia.com/advisories/26063; http://securityreason.com/securityalert/2900
CVE: CVE-2007-3018
Published: 2007-07-17
Description: activeWeb contentserver CMS before 5.6.2964 does not limit the file-creation ability of editors who have restricted accounts, which allows these editors to create files in arbitrary directories.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/39746; http://secunia.com/advisories/26063; http://securityreason.com/securityalert/2899
CVE: CVE-2007-3806
Published: 2007-07-17
Description: The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-399
References: http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167; http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log; http://osvdb.org/36085
CVE: CVE-2007-3807
Published: 2007-07-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in SiteScape Forum before 7.3 allow remote attackers to inject arbitrary web script or HTML via the user name field in the login procedure, and other unspecified vectors.
CVSS Score: 2.6 (LOW)
References: http://osvdb.org/36844; http://secunia.com/advisories/26065; http://securityreason.com/securityalert/2893
CVE: CVE-2007-3808
Published: 2007-07-17
Description: SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories[] parameter in a search action to index.php, a different vector than CVE-2005-2000.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0291.html; http://osvdb.org/36247; http://secunia.com/advisories/26078