rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-4825 
Directory traversal vulnerability in PHP 5.2.4 and earlier allows attackers to bypass open_basedir restrictions and possibly execute arbitrary code via a .. (dot dot) in the dl function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T01:00:00.000Z
CVE-2007-4826 
bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T10:00:00.000Z
CVE-2007-4827 
Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus requests to TCP port 502.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T18:00:00.000Z
CVE-2007-4828 
Cross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 through 1.9.3, 1.10.0 through 1.10.1, and the 1.11 development versions before 1.11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4829 
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-02T16:00:00.000Z
CVE-2007-4830 
Cross-site scripting (XSS) vulnerability in CMD_BANDWIDTH_BREAKDOWN in DirectAdmin 1.30.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4831 
Multiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the (1) avatar and (2) title parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4832 
Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4833 
Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0.11) has unknown impact and attack vectors, aka PK44789.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4834 
Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2) p_ins.php, and (3) u_ins.php in manager/admin/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4835 
SQL injection vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4836 
Cross-site scripting (XSS) vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an edit action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4837 
SQL injection vulnerability in anket.asp in Proxy Anket 3.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4838 
Multiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote attackers to execute arbitrary code via a long string in a (1) 0x21, (2) 0x22, or (3) 0x23 packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4839 
Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0.11) has unknown impact and attack vectors, aka PK33803.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-4840 
PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the out_charset parameter to the iconv function; or a long string in the charset parameter to the (2) iconv_mime_decode_headers, (3) iconv_mime_decode, or (4) iconv_strlen function.  NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4841 
Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to execute arbitrary commands via a (1) mailto, (2) nntp, (3) news, or (4) snews URI with invalid "%" encoding, related to improper file type handling on Windows XP with Internet Explorer 7 installed, a variant of CVE-2007-3845.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4842 
Directory traversal vulnerability in Enriva Development Magellan Explorer 3.32 build 2305 and earlier allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a filename. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4843 
Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a filename.  NOTE: this can be leveraged for code execution by writing to a Startup folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4844 
X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service (infinite loop) by (1) repeatedly sending a 550 error response, or (2) sending a 550 error response and then disconnecting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4845 
Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute arbitrary SQL commands via the (1) dlid or (2) cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4846 
SQL injection vulnerability in start.php in Webace-Linkscript (wls) 1.3 Special Edition (SE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik go action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4847 
Google Picasa allows remote attackers to read image files stored by Picasa via unspecified vectors involving a picasa:// URI.  NOTE: this information is based upon a vague pre-advisory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4848 
Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4849 
JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during (1) inode creation or (2) ACL setting, which might allow local users to access restricted files or directories after a remount of a filesystem, related to "legacy modes" and an inconsistency between dentry permissions and inode permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T20:00:00.000Z
CVE-2007-4850 
curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-25T00:00:00.000Z
CVE-2007-4861 
SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive information via (1) a direct request for news.php, (2) an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in (3) admin/, (4) rss/, and (5) the root directory of the installation, which reveal the path in various error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-30T21:00:00.000Z
CVE-2007-4862 
Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the config[news_url] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-30T21:00:00.000Z
CVE-2007-4863 
SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-30T21:00:00.000Z
CVE-2007-4872 
SimpNews 2.41.03 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php; or a direct request to (2) admin/dbg_infos.php, (3) admin/heading.php, or (4) evsearch.php; which reveals the path in various error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-27T19:00:00.000Z
CVE-2007-4873 
SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-27T19:00:00.000Z
CVE-2007-4874 
Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web script or HTML via the (1) l_username parameter to admin/layout2b.php, and the (2) backurl parameter to comment.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T20:00:00.000Z
CVE-2007-4879 
Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automatically install TLS client certificates with minimal user interaction, and automatically sends these certificates when requested, which makes it easier for remote web sites to track user activities across domains by requesting the TLS client certificates from other domains.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-13T18:00:00.000Z
CVE-2007-4880 
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-28T00:00:00.000Z
CVE-2007-4881 
SQL injection vulnerability in profile/myprofile.php in psi-labs.com social networking script (psisns), probably 1.0, allows remote attackers to execute arbitrary SQL commands via the u parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T00:00:00.000Z
CVE-2007-4882 
Multiple cross-site scripting (XSS) vulnerabilities in TechExcel CustomerWise (formerly TechExcel CRM) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T00:00:00.000Z
CVE-2007-4883 
Cross-site scripting (XSS) vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier before SVN 20070910 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a similar issue to CVE-2007-4828.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T00:00:00.000Z
CVE-2007-4884 
Media Player Classic (MPC) allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T00:00:00.000Z
CVE-2007-4885 
Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T00:00:00.000Z
CVE-2007-4886 
Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftp, (3) ftps, or (4) ssh2.sftp URL, in the pilih parameter, for which PHP remote file inclusion is blocked only for http URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T00:00:00.000Z
CVE-2007-4887 
The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long string in the library parameter.  NOTE: there are limited usage scenarios under which this would be a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T00:00:00.000Z
CVE-2007-4888 
The "You are not allowed..." error handler in XWiki 1.0 B1 and 1.0 B2 associates the doc variable with the entire document content and metadata regardless of a user's view rights, which allows remote authenticated users to read arbitrary documents via a custom skin that prints the content attribute of the doc variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T00:00:00.000Z
CVE-2007-4889 
The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and open_basedir restrictions via the MySQL (1) LOAD_FILE, (2) INTO DUMPFILE, and (3) INTO OUTFILE functions, a different issue than CVE-2007-3997.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T01:00:00.000Z
CVE-2007-4890 
Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveAs method.  NOTE: contents can be copied from local files via the Load method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T01:00:00.000Z
CVE-2007-4891 
A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T01:00:00.000Z
CVE-2007-4892 
Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attackers to execute arbitrary SQL commands via a PLESKSESSID cookie to (1) login.php3 or (2) auth.php3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4893 
wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a does not properly verify the unfiltered_html privilege, which allows remote attackers to conduct cross-site scripting (XSS) attacks via modified data to (1) post.php or (2) page.php with a no_filter field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4894 
Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the post_type parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4895 
Directory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via the f parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4896 
Multiple cross-site scripting (XSS) vulnerabilities in admin/header.php in Toms Gaestebuch 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang[adminseite], (2) lang[ueberschrift], or (3) einst[metachar] parameter, different vectors than CVE-2007-4711.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4897 
pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the SIPURL::GetHostAddress function in Ekiga (formerly GnomeMeeting).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4898 
Unspecified vulnerability in the Multiwiki plugin in XWiki before 1.1 Enterprise RC2 allows remote authenticated users, with administrative access to one wiki in a multiwiki environment, to obtain sensitive information via unknown attack vectors.  NOTE: Some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4899 
Multiple cross-site scripting (XSS) vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to forum_forum.php, or the search_string parameter to forum_text_search_action.php in a (2) titles or (3) bodies search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4900 
Cross-site scripting (XSS) vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web script or HTML via the username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4901 
The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain the use of mshtml.dll's web script and HTML functionality for incoming instant messages, which allows remote attackers to place HTML into unexpected contexts or execute arbitrary code, as demonstrated by writing arbitrary HTML to a notification window, and writing contents of arbitrary local image files to this window via IMG SRC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-14T18:00:00.000Z
CVE-2007-4902 
Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-17T16:00:00.000Z
CVE-2007-4903 
Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via (1) a long string in the first argument to the AcquireContext method or (2) an unspecified vector to the DeleteContext method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-17T16:00:00.000Z
CVE-2007-4904 
RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-17T16:00:00.000Z
CVE-2007-4905 
Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-17T16:00:00.000Z
CVE-2007-4906 
PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-17T16:00:00.000Z
CVE-2007-4907 
Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a URL in the xcart_dir parameter to (1) config.php, (2) prepare.php, (3) smarty.php, (4) customer/product.php, (5) provider/auth.php, and (6) admin/auth.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-17T16:00:00.000Z
CVE-2007-4908 
Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pilih parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-17T16:00:00.000Z
CVE-2007-4909 
Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a (1) scp, and possibly a (2) sftp or (3) ftp, URL, as demonstrated by a URL specifying login to the remote server with a username of scp, which is interpreted as an HTTP scheme name by the protocol handler in a web browser, but is interpreted as a username by WinSCP.  NOTE: this is related to an incomplete fix for CVE-2006-3015.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-17T17:00:00.000Z