rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-2757 
Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to (1) wp-content/themes/redoable/searchloop.php or (2) wp-content/themes/redoable/header.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2758 
Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT image that contains long directory names in a deeply nested directory structure, which triggers (1) a stack-based buffer overflow during extraction, or (2) a heap-based buffer overflow during traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2759 
Multiple SQL injection vulnerabilities in the insert function in the ValuePreference class (grid/ed/ValuePreference.java) in Adempiere before 3.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) m_Attribute or (2) m_Value parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2760 
The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticated read-only users to gain read-write privileges.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2761 
Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via a long filename in a .cue file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2762 
Multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote attackers to execute arbitrary PHP code via a URL in (1) the pear_dir parameter to Base/Application.php, or the (2) sys_dir parameter to (a) Footer.php, (b) widget.BifContainer.php, (c) widget.BifRoot.php, (d) widget.BifRoot2.php, (e) widget.BifRoot3.php, or (f) widget.BifWarning.php in Widgets/Base/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2763 
Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in Sienzo Digital Music Mentor (DMM) 2.6.0.4 allows remote attackers to execute arbitrary code via a long string in the second argument, a different issue than CVE-2007-2564.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2764 
The embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not properly handle a situation in which a non-root user creates a kernel process, which allows attackers to cause a denial of service (oops and device reboot) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2765 
blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of service by adding arbitrary IP addresses to a daemon log file, as demonstrated by logging in through ssh using a login name containing certain strings with an IP address, which is not properly handled by a regular expression, a related issue to CVE-2006-6301.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2766 
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T22:00:00.000Z
CVE-2007-2767 
Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote attackers to list filesystem contents and obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T20:00:00.000Z
CVE-2007-2768 
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T20:00:00.000Z
CVE-2007-2769 
BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T20:00:00.000Z
CVE-2007-2770 
Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long SMTP reply.  NOTE: the user must click through a warning about a possible buffer overflow exploit to trigger this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T21:00:00.000Z
CVE-2007-2771 
Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.ocx) 14.5.0.35 allows remote attackers to execute arbitrary code via a long BitmapDataPath property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T21:00:00.000Z
CVE-2007-2772 
(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted RPC packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T21:00:00.000Z
CVE-2007-2773 
SQL injection vulnerability in plugins/mp3playlist/mp3playlist.php in Zomplog 3.8 and earlier allows remote attackers to execute arbitrary SQL commands via the speler parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2774 
Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) _connect.php or (2) modules/startup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2775 
AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request to admin/managesettings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2776 
AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject a credential variable setting and obtain administrative access via a direct request to admin/changeinfo.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2777 
Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under sptemplates/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2778 
Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter to index.php and other unspecified PHP scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2779 
PHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rInfo[content] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2780 
PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2781 
Cross-site scripting (XSS) vulnerability in include/sessionRegister.php in WikyBlog before 1.4.13 allows remote attackers to inject arbitrary web script or HTML, probably via vectors related to a certain data2 array element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2782 
Packeteer PacketShaper uses fixed increments in TCP initial sequence number (ISN) values, which allows remote attackers to predict the ISN value, and perform session hijacking or disruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2783 
Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors.  NOTE: this issue has no actionable information, and perhaps should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2784 
Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier (globus_nexus-6.6 and earlier) allows remote attackers to cause a denial of service (resource exhaustion and system crash) via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2785 
manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, new_pass, new_pass2, status, super, and certain other parameters in an add action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2786 
Ratbox IRC Daemon (aka ircd-ratbox) 2.2.5 and earlier allows remote attackers to cause a denial of service (resource exhaustion) by making many requests from a single client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2787 
Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in LeadTools Raster Thumbnail Object Library 14.5.0.44 allows remote attackers to execute arbitrary code via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T23:00:00.000Z
CVE-2007-2788 
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T00:00:00.000Z
CVE-2007-2789 
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T00:00:00.000Z
CVE-2007-2790 
Cross-site scripting (XSS) vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T00:00:00.000Z
CVE-2007-2791 
Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to identify valid users via unspecified vectors, probably related to timing attacks and AuthInteractiveFailureRandomTimeout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T00:00:00.000Z
CVE-2007-2792 
SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter to index.php. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T00:00:00.000Z
CVE-2007-2793 
PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConf[path_system] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T00:00:00.000Z
CVE-2007-2795 
Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in IMailsec.dll, which triggers heap corruption in the IMail Server, or (2) a long SUBSCRIBE IMAP command, which triggers a stack-based buffer overflow in the IMAP Daemon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T23:00:00.000Z
CVE-2007-2796 
Arris Cadant C3 CMTS allows remote attackers to cause a denial of service (service termination) via a malformed IP packet with an invalid IP option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-12T18:00:00.000Z
CVE-2007-2797 
xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T17:00:00.000Z
CVE-2007-2798 
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-26T22:00:00.000Z
CVE-2007-2799 
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-23T21:00:00.000Z
CVE-2007-2800 
index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone[], or (4) subject[] parameters, which reveals the installation path in the resulting error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-28T18:00:00.000Z
CVE-2007-2801 
Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) err and (2) warn parameters.  NOTE: the vendor disputes the significance of the issue, stating that "eTicket is not designed to work with register_globals On."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-30T01:00:00.000Z
CVE-2007-2802 
Cross-site scripting (XSS) vulnerability in cp/ps/Main/login/Login in RM EasyMail Plus allows remote attackers to inject arbitrary web script or HTML via the d parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2803 
SQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a haberdetay action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2804 
Multiple cross-site scripting (XSS) vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) brand and (2) Msg parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2805 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2, and possibly other versions, allow remote attackers to inject arbitrary web script or HTML via the (1) ticketID, (2) view, and (3) fuse parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2806 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) galix_cat_detail, (2) galix_gal_detail, and (3) galix_cat_detail_sort parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2807 
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2808 
Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2809 
Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted torrent file.  NOTE: due to the lack of details, it is not clear if this is the same issue as CVE-2007-2274.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2810 
SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2811 
Cross-site scripting (XSS) vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2812 
Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2813 
Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2814 
Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attackers to execute arbitrary code via (1) a long FileName parameter, or unspecified vectors involving the (2) BeginReport, (3) CreatePictureExA, (4) DefineImage, (5) DefineImageEx, (6) DefineImageFox, (7) CopyBufToClipExA, (8) LoadEx, (9) LoadFox, and other functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2815 
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2816 
Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) test1.php, (2) blackorange.php, (3) default.php, (4) frames1.php, (5) frames1_top.php, (7) test2.php, (8) test3.php, (9) test4.php, (10) test5.php, (11) test6.php, (12) frames1_left.php, and (13) frames1_center.php in themes/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2817 
SQL injection vulnerability in read/index.php in ol'bookmarks 0.7.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2818 
Cross-site scripting (XSS) vulnerability in cand_login.asp in CactuSoft Parodia 6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the strJobIDs parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2819 
Cross-site scripting (XSS) vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2820 
Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the (1) SWAT_Init, (2) SWAT_InitEx, (3) SWAT_InitEx2, (4) SWAT_InitEx3, and (5) SWAT_Login functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2821 
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z