rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-3023 
unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3024 
libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cli_gentempstream function in clamd/clamdscan, which might allow local users to read sensitive files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T22:00:00.000Z
CVE-2007-3025 
Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers to cause a denial of service (hang) via unknown vectors related to the isURL function and regular expressions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T22:00:00.000Z
CVE-2007-3026 
Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets with modified length values to TCP ports 19226 or 19227, resulting in a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-25T17:00:00.000Z
CVE-2007-3027 
Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-12T19:00:00.000Z
CVE-2007-3028 
The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attributes", which allows remote attackers to cause a denial of service (service unavailability) via a crafted LDAP request, related to "client sent LDAP request logic," aka "Windows Active Directory Denial of Service Vulnerability".  NOTE: this is probably a different issue than CVE-2007-0040.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-10T22:00:00.000Z
CVE-2007-3029 
Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file containing multiple active worksheets, which results in memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-10T22:00:00.000Z
CVE-2007-3030 
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-10T22:00:00.000Z
CVE-2007-3032 
Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-14T22:00:00.000Z
CVE-2007-3033 
Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zone.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-14T22:00:00.000Z
CVE-2007-3034 
Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-14T21:00:00.000Z
CVE-2007-3035 
Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that is not properly handled during decompression, aka "Windows Media Player Code Execution Vulnerability Decompressing Skins."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-14T21:00:00.000Z
CVE-2007-3036 
Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T01:00:00.000Z
CVE-2007-3037 
Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-14T21:00:00.000Z
CVE-2007-3038 
The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote attackers to bypass firewall blocking rules and obtain sensitive information via crafted IPv6 traffic, aka "Windows Vista Firewall Blocking Rule Information Disclosure Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-10T22:00:00.000Z
CVE-2007-3039 
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103.  NOTE: this is remotely exploitable on Windows 2000 Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-3040 
Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX control, which triggers an overflow within the Agent Service (agentsrv.exe) process, a different issue than CVE-2007-1205.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T01:00:00.000Z
CVE-2007-3041 
Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01, 6 SP1, and 7 allows remote attackers to execute arbitrary code via unknown vectors related to Microsoft Visual Basic 6 objects and memory corruption, aka "ActiveX Object Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-14T21:00:00.000Z
CVE-2007-3042 
Cross-site scripting (XSS) vulnerability in Meneame before 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-05T23:00:00.000Z
CVE-2007-3043 
Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C, uCosminexus Collaboration Portal up to 06-30-/D, and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-05T23:00:00.000Z
CVE-2007-3044 
Unspecified vulnerability in the Map I/O Service (xpwmap) in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-05T23:00:00.000Z
CVE-2007-3045 
Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attackers to cause a denial of service via certain data to a port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-05T23:00:00.000Z
CVE-2007-3046 
Buffer overflow in Advanced Software Production Line Vortex Library before 1.0.3 allows remote attackers to cause a denial of service (listener crash) via unspecified vectors related to the select I/O implementation and the file set buffer.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-05T23:00:00.000Z
CVE-2007-3047 
The Vonage VoIP Telephone Adapter has a default administrator username "user" and password "user," which allows remote attackers to obtain administrative access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-05T23:00:00.000Z
CVE-2007-3048 
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt.  NOTE: multiple third parties report inability to reproduce this issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-05T23:00:00.000Z
CVE-2007-3049 
Cross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager (BWFM) May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3050 
Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3051 
SQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to execute arbitrary SQL commands via the revokebb_user cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3052 
SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3053 
Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3054 
Cross-site scripting (XSS) vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3055 
Cross-site scripting (XSS) vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3056 
Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3057 
PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.  NOTE: this issue is probably a duplicate of CVE-2006-4656.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3058 
Multiple PHP remote file inclusion vulnerabilities in Madirish Webmail 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[basedir] parameter to (1) calendar.php, (2) compose.php, and (3) index.php, different vectors than CVE-2007-2826.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3059 
SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sc_language parameter to sendcard.php, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3060 
Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to (a) chat.php, (2) LANG[DEFAULT_BRANDING] and (3) PHPLIVE_VERSION parameters to (b) help.php, the (4) admin[name] parameter to (c) admin/header.php, and the (5) BASE_URL parameter to (d) super/info.php, and in some cases, the LANG[DEFAULT_BRANDING], PHPLIVE_VERSION, and (6) nav_line parameters to setup/footer.php, different vectors than CVE-2006-6769.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3061 
Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) cactushop6.mdb or (2) cactushop5.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3062 
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3063 
SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3064 
Cross-site scripting (XSS) vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3065 
SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the editcomment parameter, a different version and vector than CVE-2006-2862.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3066 
Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to (1) view.inc.php, (2) users.inc.php, (3) updatecms.inc.php, and (4) polls.inc.php in inc/; and other unspecified files, different vectors than CVE-2006-3983.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3067 
Cross-site scripting (XSS) vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the (1) keyshow, (2) sortkey, and (3) show parameters to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3068 
Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T01:00:00.000Z
CVE-2007-3069 
xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3070 
Cross-site scripting (XSS) vulnerability in index.php in BDigital Web Solutions WebStudio allows remote attackers to inject arbitrary web script or HTML via the pageid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3071 
Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3072 
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrary files via ..%5C (dot dot encoded backslash) sequences in a resource:// URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3073 
Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary files via ..%2F (dot dot encoded slash) sequences in a resource:// URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3074 
Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox installation directory via a resource:// URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3075 
Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal sequences in a URI with a certain scheme, possibly related to "..%5C" (encoded backslash) sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3076 
A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3077 
SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3078 
Multiple cross-site scripting (XSS) vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter (Authors and Publication titles) to (1) authoractions.php or (2) publicationactions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3079 
listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3080 
SQL injection vulnerability in haberoku.asp in Hunkaray Okul Portaly 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3081 
PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3082 
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sc_language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3083 
Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3084 
PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter, a different vector than CVE-2006-5441.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3085 
Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpath parameter to (a) useronline.php, (b) ucp.php, (c) setcookie.php, (d) sendpm.php, (e) search.php, (f) register.php, (g) profile.php, (h) post.php, (i) pmpshow.php, (j) pm.php, (k) ntopic.php, (l) nreply.php, (m) news.php, (n) memberslist.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (u) editpost.php, (v) delpost.php, (w) delpm.php, (x) confirm.php, (y) board.php, (z) admin2.php, (aa) admin.php, or (bb) templates/pb/css/formstyles.php; or the (2) temppath parameter to (a) useronline.php, (c) setcookie.php, (e) search.php, (f) register.php, (h) post.php, (l) nreply.php, (m) news.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (w) delpm.php, (x) confirm.php, or (y) board.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3086 
Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service (system hang) by capturing the outpost_ipc_hdr mutex.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3087 
Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2007-3088 
SQL injection vulnerability in index.php in Comicsense allows remote attackers to execute arbitrary SQL commands via the epi parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z