rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-4246 
Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers to execute arbitrary code via a modified document, as actively exploited in August 2007 by malware such as Tarodrop.D (Tarodrop.Q), a different vulnerability than CVE-2006-4326, CVE-2006-5424, CVE-2006-6400, and CVE-2007-1938.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4247 
Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service (NULL dereference and persistent application crash) via a malformed ICS file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4248 
The CallCmd function in toolbar_gaming.dll in the Toolbar Gaming toolbar for Internet Explorer allows remote attackers to cause a denial of service (NULL dereference and browser crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4249 
The isChecked function in Toolbar.DLL in the ExportNation toolbar for Internet Explorer allows remote attackers to cause a denial of service (NULL dereference and browser crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4250 
The isChecked function in Toolbar.DLL in Advanced Searchbar before 3.33 allows remote attackers to cause a denial of service (NULL dereference and browser crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4251 
OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4252 
Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4253 
SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2005-4263.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4254 
Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitrary code via a long argument to the NotSafe method.  NOTE: this may overlap CVE-2007-2885 or CVE-2005-2127.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4255 
Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4256 
Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4257 
Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary code via (1) a .spr file (single player replay file) containing a long user name or (2) a .ply file containing a long number plate string, different vectors than CVE-2007-4140.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4258 
SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4259 
EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via (1) a direct request for a URL under OnlineViewing/galleries/ or (2) navigation of the gallery user interface with JavaScript disabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4260 
EZPhotoSales 1.9.3 and earlier has a default "admin" account for galleries, which allows remote attackers to access arbitrary galleries by specifying this username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4261 
EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) a file containing cleartext passwords via a direct request for OnlineViewing/data/galleries.txt, or (2) a file containing username hashes and password hashes via a direct request for OnlineViewing/configuration/config.dat/.  NOTE: vector 2 can be leveraged for administrative access because authentication does not require knowledge of cleartext values, but instead uses the username hash in the ConfigLogin parameter and the password hash in the ConfigPassword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4262 
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4263 
Unspecified vulnerability in the server side of the Secure Copy (SCP) implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T23:00:00.000Z
CVE-2007-4264 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) path and (2) download parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T10:00:00.000Z
CVE-2007-4265 
Multiple cross-site scripting (XSS) vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) projectIssueId parameter in EditProjectIssue.do, the (2) projectId parameter in ProjectSelected.do, the (3) folderId parameter in ProjectDocuments.do and the (4) sortField parameter in ProjectIssues.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T10:00:00.000Z
CVE-2007-4267 
Stack-based buffer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted IOCTL request that adds an AppleTalk zone to a routing table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4268 
Integer signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4269 
Integer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk Session Protocol (ASP) message on an AppleTalk socket, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4270 
Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-18T21:00:00.000Z
CVE-2007-4271 
Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to "/tmp/" and used as a log file.  NOTE: this issue might be related to symlink following.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-18T21:00:00.000Z
CVE-2007-4272 
Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via (1) unspecified vectors where an attacker's umask is honored, (2) /etc/ld.so.preload, (3) certain "cron data file locations", and other unspecified vectors possibly involving the (4) OSSEMEMDBG or (5) TRC_LOG_FILE environment variable in db2licd (db2licm).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-18T21:00:00.000Z
CVE-2007-4273 
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized message file" that enables a format string attack, possibly involving the (1) OSSEMEMDBG or (2) TRC_LOG_FILE environment variable in db2licd (db2licm).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-18T21:00:00.000Z
CVE-2007-4275 
Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to (1) DB2 instance or FMP startup on Linux and Solaris; (2) exec of executables while running as root on non-Windows systems, as demonstrated by AIX; and unspecified vectors involving (3) db2licm and (4) db2pd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-18T21:00:00.000Z
CVE-2007-4276 
Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-18T21:00:00.000Z
CVE-2007-4277 
The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write) for the \\.\Tmfilter device, which allows local users to send arbitrary content to the device via the IOCTL functionality.  NOTE: this can be leveraged for privilege escalation by exploiting a buffer overflow in the handler for IOCTL 0xa0284403.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-30T22:00:00.000Z
CVE-2007-4278 
Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow in an sprintf function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-15T22:00:00.000Z
CVE-2007-4279 
PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4280 
The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4281 
Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4282 
The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies the password being checked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4283 
PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4284 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (MP) 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) Success Template (STPL) and (2) Failure Template (FTPL) parameters, which are not properly handled in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4285 
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4286 
Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a crafted NHRP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4287 
PHP remote file inclusion vulnerability in fc_functions/fc_example.php in FishCart 3.2 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the docroot parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4288 
Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted .au file that triggers a divide-by-zero error, as demonstrated by iapetus.au.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4289 
Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4290 
Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the script_root parameter to (1) delete.php, (2) edit.php, or (3) inc/common.inc.php; or (4) database.php, (5) entries.php, (6) index.php, (7) logout.php, or (8) settings.php in admin/.  NOTE: a third party disputes this vulnerability, noting that these scripts defend against direct requests
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4291 
Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via (1) a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by (2) CSCsi60004 with Proxy Unregistration and (3) CSCsg70474; and a malformed Real-time Transport Protocol (RTP) packet, which causes a device crash, as identified by (4) CSCse68138, related to VOIP RTP Lib, and (5) CSCse05642, related to I/O memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4292 
Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service (device crash) via a malformed SIP packet, aka (1) CSCsf11855, (2) CSCeb21064, (3) CSCse40276, (4) CSCse68355, (5) CSCsf30058, (6) CSCsb24007, and (7) CSCsc60249.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4293 
Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device crash) via (1) "abnormal" MGCP messages, aka CSCsd81407; and (2) a large facsimile packet, aka CSCej20505.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4294 
Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4295 
Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T21:00:00.000Z
CVE-2007-4296 
Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server (ASSP) 1.3.3 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-10T20:00:00.000Z
CVE-2007-4297 
Multiple cross-site scripting (XSS) vulnerabilities in yorumkaydet.asp in Dersimiz Haber Ekleme Modulu allow remote attackers to inject arbitrary web script or HTML via the (1) yazan, (2) mail, and (3) yorum parameters.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-10T20:00:00.000Z
CVE-2007-4301 
Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T19:00:00.000Z
CVE-2007-4302 
Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system call interposition and possibly gain privileges or bypass auditing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4303 
Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4304 
CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4305 
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4306 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the (1) unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php; the (4) session_max_rows or (5) pos parameter to (b) sql.php; the (6) username parameter to (c) server_privileges.php; or the (7) sql_query parameter to (d) main.php.  NOTE: vector 5 might be a regression or incomplete fix for CVE-2006-6942.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4307 
Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow remote attackers to inject arbitrary web script or HTML via the next parameter to (1) addaddress.php, (2) editshipdetails.php, (3) register.php, or (4) login.php in secure/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4308 
The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4309 
IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by setting the notes.ini (1) KFM_ShowEntropy and (2) Debug_Outfile debug variables, a different vulnerability than CVE-2005-2696.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4310 
The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4311 
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z
CVE-2007-4312 
SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter in a "print articles" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-13T21:00:00.000Z