deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-3643
Published: 2007-07-10
Description: admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows remote attackers to perform certain administrative actions.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/38952; http://securityreason.com/securityalert/2871; http://www.securityfocus.com/archive/1/472666/100/0/threaded
CVE: CVE-2007-3646
Published: 2007-07-10
Description: SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a member action.
CVSS Score: 7.5 (HIGH)
References: http://flashgamescript.com/forum/viewtopic.php?t=425; http://osvdb.org/36297; http://secunia.com/advisories/25960
CVE: CVE-2007-3647
Published: 2007-07-10
Description: The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
References: http://corryl.altervista.org/index.php?mod=read&id=[PII_REDACTED]; http://osvdb.org/37477; http://secunia.com/advisories/25976
CVE: CVE-2007-3648
Published: 2007-07-10
Description: SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly related to admin/admin_album.php and admin/admin_downloads.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/41104; http://secunia.com/advisories/26019; http://www.securityfocus.com/bid/24878
CVE: CVE-2007-3649
Published: 2007-07-10
Description: Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/45800; http://www.securityfocus.com/bid/24793; https://exchange.xforce.ibmcloud.com/vulnerabilities/35288
CVE: CVE-2006-4519
Published: 2007-07-10
Description: Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://bugzilla.gnome.org/show_bug.cgi?id=451379; http://developer.gimp.org/NEWS-2.2; http://issues.foresightlinux.org/browse/FL-457
CVE: CVE-2007-3655
Published: 2007-07-10
Description: Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=307177; http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html; http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064552.html
CVE: CVE-2007-3656
Published: 2007-07-10
Description: Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-200
References: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt; ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
CVE: CVE-2007-3657
Published: 2007-07-10
Description: Mozilla Firefox 2.0.0.4 allows remote attackers to cause a denial of service by opening multiple tabs in a popup window.  NOTE: this issue has been disputed by third party researchers, stating that "this does not crash on me, and I can't see a likely mechanism of action that would lead to a DoS condition.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/45812; http://www.securityfocus.com/archive/1/473187; http://www.securityfocus.com/archive/1/473212
CVE: CVE-2007-3658
Published: 2007-07-10
Description: Unspecified vulnerability in Microsoft Register Server (REGSVR) allows attackers to cause a denial of service via a crafted DLL library.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/45806; http://www.eleytt.com/advisories/eleytt_REGSVR.pdf; http://www.securityfocus.com/archive/1/473187
CVE: CVE-2007-3659
Published: 2007-07-10
Description: Buffer overflow in the doBrowserAction function in FreeWRL 1.19.3 allows local users to execute arbitrary code via a crafted BROWSER environment variable.  NOTE: it is not clear whether this issue crosses privilege boundaries.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/45807; http://www.eleytt.com/advisories/eleytt_FREEWRL.pdf; http://www.securityfocus.com/archive/1/473187
CVE: CVE-2007-3660
Published: 2007-07-10
Description: The Nonnoi ASP/Barcode ActiveX control (nonnoi_ASPBarcode.dll) allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/42022; http://www.eleytt.com/advisories/eleytt_NONNOIASPBARCODE.pdf; http://www.securityfocus.com/archive/1/473187
CVE: CVE-2007-3661
Published: 2007-07-10
Description: Eltima Software Virtual Serial Port (VSPAX) ActiveX control (VSPort.DLL) allows remote attackers to cause a denial of service via certain function calls, as demonstrated via the (1) Attach, (2) Write, and (3) WriteStr functions.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/43775; http://www.securityfocus.com/archive/1/473187; http://www.securityfocus.com/bid/24827
CVE: CVE-2007-3662
Published: 2007-07-10
Description: Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/45808; http://www.securityfocus.com/archive/1/473187; http://www.securityfocus.com/archive/1/473212
CVE: CVE-2007-3663
Published: 2007-07-10
Description: Divide-by-zero error in Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/37376; http://www.eleytt.com/advisories/eleytt_MPC.pdf; http://www.securityfocus.com/archive/1/473212
CVE: CVE-2007-3664
Published: 2007-07-10
Description: Multiple unspecified vulnerabilities in Eltima Software RunService ActiveX control (RunService.dll) allow remote attackers to cause a denial of service via certain functions when "improperly used", as demonstrated by the AcceptControls subroutine.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/43776; http://www.securityfocus.com/archive/1/473187; http://osvdb.org/43776
CVE: CVE-2007-3665
Published: 2007-07-10
Description: Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/45802; http://www.eleytt.com/advisories/eleytt_GHOST1.pdf; http://www.securityfocus.com/archive/1/473187
CVE: CVE-2007-3666
Published: 2007-07-10
Description: Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/43961; http://www.eleytt.com/advisories/eleytt_GHOST2.pdf; http://www.securityfocus.com/archive/1/473187
CVE: CVE-2007-3667
Published: 2007-07-10
Description: Unspecified vulnerability in EXCLEXPT.DLL in ActiveReportsExcelReport allows remote attackers to cause a denial of service via the DDRow Height variable.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/473187; http://www.securityfocus.com/bid/24815; https://exchange.xforce.ibmcloud.com/vulnerabilities/35866
CVE: CVE-2007-3668
Published: 2007-07-10
Description: Multiple unspecified vulnerabilities in NMSDVDXU.DLL in NuMedia NMSDVDX allow remote attackers to cause a denial of service via "improperly initialized" (1) LoadSegmentWord, (2) PartitionType, (3) SectorCount, and (4) BootFilePath variables.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/43777; http://www.securityfocus.com/archive/1/473187; http://www.securityfocus.com/bid/24821
CVE: CVE-2007-3669
Published: 2007-07-10
Description: Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impact, including a denial of service via "improper use" of the SaveToFile function.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/43960; http://www.securityfocus.com/archive/1/473187; http://www.securityfocus.com/bid/24834
CVE: CVE-2007-3670
Published: 2007-07-10
Description: Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe.  NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt; http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.html; http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/
CVE: CVE-2007-3671
Published: 2007-07-10
Description: Unspecified vulnerability in the kernel in Microsoft Windows Vista has unspecified remote attack vectors and impact, as shown in the "0day IPO" presentation at SyScan'07.
CVSS Score: 7.8 (HIGH)
References: http://blogs.zdnet.com/security/?p=358; http://osvdb.org/45809; http://www.immunityinc.com/downloads/0day_IPO.pdf
CVE: CVE-2007-3672
Published: 2007-07-10
Description: Cross-site scripting (XSS) vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified form fields on the blogroll page.
CVSS Score: 4.3 (MEDIUM)
References: http://ar3av.free.fr/faille-dotclear.php; http://osvdb.org/43958; http://secunia.com/advisories/25971
CVE: CVE-2007-0040
Published: 2007-07-10
Description: The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes."
CVSS Score: 10.0 (HIGH)
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://osvdb.org/35960; http://secunia.com/advisories/26002
CVE: CVE-2007-0041
Published: 2007-07-10
Description: The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://osvdb.org/35954; http://secunia.com/advisories/26003
CVE: CVE-2007-0042
Published: 2007-07-10
Description: Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://secunia.com/advisories/26003; http://security-assessment.com/files/advisories/2007-07-11_Multiple_.NET_Null_Byte_Injection_Vulnerabilities.pdf
CVE: CVE-2007-0043
Published: 2007-07-10
Description: The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://osvdb.org/35956; http://secunia.com/advisories/26003
CVE: CVE-2007-1754
Published: 2007-07-10
Description: PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://osvdb.org/35953; http://research.eeye.com/html/advisories/published/AD20070710.html
CVE: CVE-2007-1756
Published: 2007-07-10
Description: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allows user-assisted remote attackers to execute arbitrary code via a crafted Excel file, aka "Calculation Error Vulnerability".
CVSS Score: 9.3 (HIGH)
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://osvdb.org/35957; http://secunia.com/advisories/25995
CVE: CVE-2007-3028
Published: 2007-07-10
Description: The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attributes", which allows remote attackers to cause a denial of service (service unavailability) via a crafted LDAP request, related to "client sent LDAP request logic," aka "Windows Active Directory Denial of Service Vulnerability".  NOTE: this is probably a different issue than CVE-2007-0040.
CVSS Score: 5.0 (MEDIUM)
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://secunia.com/advisories/26002; http://www.kb.cert.org/vuls/id/348953
CVE: CVE-2007-3029
Published: 2007-07-10
Description: Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file containing multiple active worksheets, which results in memory corruption.
CVSS Score: 9.3 (HIGH)
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://osvdb.org/35958; http://secunia.com/advisories/25995
CVE: CVE-2007-3030
Published: 2007-07-10
Description: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability".
CVSS Score: 7.6 (HIGH)
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://osvdb.org/35959; http://secunia.com/advisories/25995
CVE: CVE-2007-3038
Published: 2007-07-10
Description: The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic, aka "Windows Vista Firewall Blocking Rule Information Disclosure Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html; http://osvdb.org/35952; http://secunia.com/advisories/26001
CVE: CVE-2007-3107
Published: 2007-07-10
Description: The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits.
CVSS Score: 2.1 (LOW)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245580; http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22; http://osvdb.org/37118
CVE: CVE-2007-3456
Published: 2007-07-11
Description: Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://docs.info.apple.com/article.html?artnum=307041; http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html; http://osvdb.org/38054
CVE: CVE-2007-3457
Published: 2007-07-11
Description: Adobe Flash Player 8.0.34.0 and earlier insufficiently validates HTTP Referer headers, which might allow remote attackers to conduct a CSRF attack via a crafted SWF file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/26027; http://secunia.com/advisories/26118; http://secunia.com/advisories/26357
CVE: CVE-2007-3677
Published: 2007-07-11
Description: Multiple SQL injection vulnerabilities in Maxsi eVisit Analyst allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) idsp1.pl, (2) ip.pl, and (3) einsite_director.pl. NOTE: this issue can be leveraged for path disclosure from resulting error messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/26110; http://www.attrition.org/pipermail/vim/2007-July/001716.html; http://www.nth-dimension.org.uk/pub/Portcullis-06-057.txt
CVE: CVE-2007-3678
Published: 2007-07-11
Description: Stack-based buffer overflow in the MSWord text-import extension (Word 6-2000 Filter.xnt) in QuarkXPress 7.2 for Windows, when using the Rectangle Text Box tool for importing text, allows user-assisted remote attackers to execute arbitrary code via a long font name.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://osvdb.org/37890; http://secunia.com/advisories/25994; http://vuln.sg/quarkxpress72-en.html
CVE: CVE-2007-3680
Published: 2007-07-11
Description: Stack-based buffer overflow in the odm_searchpath function in libodm in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long ODMPATH environment variable.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: ftp://aix.software.ibm.com/aix/efixes/security/README; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=552; http://osvdb.org/36760
CVE: CVE-2007-3681
Published: 2007-07-11
Description: The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters.
CVSS Score: 6.6 (MEDIUM)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550; http://osvdb.org/37889; http://secunia.com/advisories/25982
CVE: CVE-2007-3682
Published: 2007-07-11
Description: SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/25997; http://www.osvdb.org/35966; http://www.securityfocus.com/bid/24838
CVE: CVE-2007-3683
Published: 2007-07-11
Description: SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary SQL commands via the topic_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/35964; http://secunia.com/advisories/25996; http://www.securityfocus.com/bid/24836
CVE: CVE-2007-3684
Published: 2007-07-11
Description: Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) q and (2) t parameters in (a) db.php and (b) rpc.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/25985; http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml; http://www.osvdb.org/35933
CVE: CVE-2007-3685
Published: 2007-07-11
Description: Cross-site scripting (XSS) vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/25985; http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml; http://www.osvdb.org/35935
CVE: CVE-2007-3686
Published: 2007-07-11
Description: CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/25985; http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml; http://www.osvdb.org/35936
CVE: CVE-2007-3687
Published: 2007-07-11
Description: SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module, allows remote authenticated attackers to execute arbitrary SQL commands via the id parameter in a ScanMember do action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://infernotechnologies.net/; http://osvdb.org/35965; http://secunia.com/advisories/25986
CVE: CVE-2007-3688
Published: 2007-07-11
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in DotClear 1.2.6 allow remote attackers to perform actions as arbitrary users via the (1) tool_url parameter to ecrire/tools.php and multiple fields on the (2) blogconf, (3) blogroll, (4) ecrire/redacteur.php, and (5) ecrire/user_prefs.php pages.
CVSS Score: 2.6 (LOW)
References: http://ar3av.free.fr/faille-dotclear.php; http://archives.neohapsis.com/archives/bugtraq/2007-07/0102.html; http://osvdb.org/37891
CVE: CVE-2007-3689
Published: 2007-07-11
Description: The Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments.
CVSS Score: 7.8 (HIGH)
References: http://drupal.org/node/152804; http://drupal.org/node/158029; http://drupal.org/node/158032
CVE: CVE-2007-3690
Published: 2007-07-11
Description: The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments.
CVSS Score: 7.8 (HIGH)
References: http://drupal.org/node/152806; http://drupal.org/node/158022; http://drupal.org/node/158025