rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-2233 
cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR (\r) sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T15:00:00.000Z
CVE-2007-2234 
include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled ini_get function when checking the register_globals setting, which allows remote attackers to register global parameters, as demonstrated by an SQL injection attack on the search_id parameter to search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T15:00:00.000Z
CVE-2007-2235 
Multiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Referer HTTP header to misc.php or the (2) category name when deleting a category in admin_categories.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T15:00:00.000Z
CVE-2007-2236 
footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting (XSS) attack, or via the pun_include tag, as demonstrated by use of admin_options.php to execute PHP code from an uploaded avatar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T15:00:00.000Z
CVE-2007-2237 
Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T20:00:00.000Z
CVE-2007-2238 
Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2) UpdateComponents methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-16T15:00:00.000Z
CVE-2007-2239 
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-07T19:00:00.000Z
CVE-2007-2240 
The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), does not properly validate digital signatures of downloaded software, which makes it easier for remote attackers to spoof a download.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-15T19:00:00.000Z
CVE-2007-2241 
Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.0a3, when recursion is enabled, allows remote attackers to cause a denial of service (daemon exit) via a sequence of queries processed by the query_addsoa function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T10:00:00.000Z
CVE-2007-2242 
The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (IPV6_RTHDR_TYPE_0) that create network amplification between two routers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2243 
OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue to CVE-2001-1483.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2244 
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2245 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) certain input to the PMA_sanitize function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2246 
Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when running sendmail 8.11.1; allows remote attackers to cause a denial of service via unknown attack vectors.  NOTE: due to the lack of details from HP, it is not known whether this issue is a duplicate of another CVE such as CVE-2006-1173 or CVE-2006-4434.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2247 
SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2248 
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the (1) group_id parameter in the groups module or (2) the smiley_id parameter in the smileys modsettings module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2249 
include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST parameter or (2) userdata array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2250 
admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2251 
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T16:00:00.000Z
CVE-2007-2252 
Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2253 
Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2254 
PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter.  NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2255 
Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) eng_dir parameter to addmember.php, (2) lang_path parameter to admin/enginelib/class.phpmailer.php, and the (3) spaw_root parameter to admin/includes/spaw/dialogs/colorpicker.php, different vectors than CVE-2006-5291 and CVE-2006-5459.  NOTE: vector 3 might be an issue in SPAW.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2256 
Cross-site scripting (XSS) vulnerability in you.php in TJSChat 0.95 allows remote attackers to inject arbitrary web script or HTML via the user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2257 
PHP remote file inclusion vulnerability in subscp.php in Fully Modded phpBB2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2258 
PHP remote file inclusion vulnerability in includes/init.inc.php in PHPMyBibli allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2259 
SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via the idsalon parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2260 
Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to (1) unavailable.php, (2) source.php, (3) log.php, (4) latex.php, (5) indexinfo.php, (6) index.php, (7) importinfo.php, (8) import.php, (9) examplefile.php, (10) clearinfo.php, (11) clear.php, (12) aboutinfo.php, (13) about.php, and other unspecified files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2261 
PHP remote file inclusion vulnerability in espaces/communiques/annotations.php in C-Arbre 0.6PR7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, a different vector than CVE-2007-1721.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2262 
Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to execute arbitrary PHP code via a URL in the (1) relPath and (2) folder parameters.  NOTE: this product was originally reported as "File117".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T17:00:00.000Z
CVE-2007-2263 
Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T17:00:00.000Z
CVE-2007-2264 
Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T17:00:00.000Z
CVE-2007-2265 
Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2266 
Progress Webspeed Messenger allows remote attackers to read, create, modify, and execute arbitrary files by invoking webutil/_cpyfile.p in the WService parameter to (1) cgiip.exe or (2) wsisa.dll in scripts/, as demonstrated by using the save,editor options to create a new file using the fileName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2267 
Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service (data corruption or send_mondo panic) via unspecified vectors, as demonstrated by EMC Symcli backup software 6.2.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2268 
Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. (dot dot) in the locale_id parameter to (1) login.php3 or (2) login_up.php3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2269 
Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the locale_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2270 
The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) character in the From header, and possibly certain other locations, in a SIP INVITE request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2271 
Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the dnld parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2272 
PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the workdir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2273 
PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_include parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2274 
The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file.  NOTE: the original disclosure refers to this as a memory leak, but it is not certain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2275 
Unspecified vulnerability in HP StorageWorks Command View Advanced Edition for XP before 5.6.0-01, XP Replication Monitor before 5.6.0-01, and XP Tiered Storage Manager before 5.5.0-02 allows local users to access other accounts via unspecified vectors during registration or addition of new users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2276 
3Com TippingPoint IPS allows remote attackers to cause a denial of service (device hang) via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop."  NOTE: the vendor disputes this issue, stating that the product has "performed as expected with no DoS emerging.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2277 
Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2278 
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP code via a URL in (1) the path parameter to library/adodb/adodb.inc.php, (2) the abs_path_editor parameter to library/editor/editor.php, or (3) the cfgfile_to_load parameter to admin/phpMyAdmin/libraries/common.lib.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2279 
The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create (1) PreScript or (2) PostScript registry values under Veritas\VxSvc\CurrentVersion\Schedules specifying future command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-04T16:00:00.000Z
CVE-2007-2280 
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-18T19:00:00.000Z
CVE-2007-2281 
Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-18T19:00:00.000Z
CVE-2007-2282 
Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T19:00:00.000Z
CVE-2007-2283 
Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T19:00:00.000Z
CVE-2007-2284 
Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T19:00:00.000Z
CVE-2007-2285 
Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read arbitrary files via a .. (dot dot) in the feed parameter.  NOTE: analysis by third party researchers indicates that this issue might be platform dependent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T19:00:00.000Z
CVE-2007-2286 
PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execute arbitrary PHP code via a URL in the full_path_to_db parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T19:00:00.000Z
CVE-2007-2287 
PHP remote file inclusion vulnerability in accept.php in comus 2.0 Final allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T19:00:00.000Z
CVE-2007-2288 
PHP remote file inclusion vulnerability in info.php in Doruk100.net doruk100net allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T19:00:00.000Z
CVE-2007-2289 
PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in download engine (Download-Engine) 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spaw_root parameter, a different vector than CVE-2007-2255.  NOTE: this may be an issue in SPAW.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T19:00:00.000Z
CVE-2007-2290 
Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to (1) b2archives.php, (2) b2categories.php, or (3) b2mail.php.  NOTE: this may overlap CVE-2002-1466.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T19:00:00.000Z
CVE-2007-2291 
CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to conduct HTTP response splitting attacks via a LF (%0a) in the username attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T20:00:00.000Z
CVE-2007-2292 
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T20:00:00.000Z
CVE-2007-2293 
Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long (1) T38FaxRateManagement or (2) T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP INVITE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T20:00:00.000Z
CVE-2007-2294 
The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a user that does not have a password defined in manager.conf, resulting in a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T20:00:00.000Z
CVE-2007-2295 
Heap-based buffer overflow in the JVTCompEncodeFrame function in Apple Quicktime 7.1.5 and other versions before 7.2 allows remote attackers to execute arbitrary code via a crafted H.264 MOV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T20:00:00.000Z
CVE-2007-2296 
Integer overflow in the FlipFileTypeAtom_BtoN function in Apple Quicktime 7.1.5, and other versions before 7.2, allows remote attackers to execute arbitrary code via a crafted M4V (MP4) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T20:00:00.000Z
CVE-2007-2297 
The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows remote attackers to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T20:00:00.000Z
CVE-2007-2298 
Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertoire_config parameter to index.php in (1) cpe/, (2) direction/, or (3) professeurs/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-26T21:00:00.000Z