rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-6160 
Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via the aarstal parameter in a yeardetail action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6161 
index.php in Tilde CMS 4.x and earlier allows remote attackers to obtain sensitive information via a certain search parameter value in a search action, which reveals the path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6162 
Cross-site scripting (XSS) vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a category action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6163 
SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the pword (aka Password) parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6164 
Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) reviews.php, (2) links.php and (3) articles.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6165 
Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment containing an apparently-safe file type and script in a resource fork, which does not warn the user that a separate program is going to be executed.  NOTE: this is a regression error related to CVE-2006-0395.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6166 
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6167 
Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6168 
SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6169 
SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname parameter, a different vector than CVE-2007-6163.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6170 
SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via (1) ANI and (2) DNIS arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6171 
SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6172 
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewimage.php and (2) comments.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6173 
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action, a different vector than CVE-2007-6055.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6174 
PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6175 
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6176 
kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) domain or (2) tld parameter in a check_owner action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6177 
PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the webappcfg[APPPATH] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6178 
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu (EHCP) 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to (1) dbutil.bck.php and (2) dbutil.php in config/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6179 
Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the ccms_library_path parameter to (1) markdown.php and (2) gallery.php in decoder/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6180 
Race condition in the Remote Procedure Call kernel module (rpcmod) in Sun Solaris 8 through 10 allows local users to cause a denial of service (NULL dereference and panic) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6181 
Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby causes scp.exe on this machine to execute, and then overwrite heap memory with characters from the filename. NOTE: it is also reported that a related issue might exist in 1.5.7 through 1.5.19.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6182 
The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain privileges via shell metacharacters in command line arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6183 
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6184 
Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6185 
Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a download action, as demonstrated by a certain PHP file containing database credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6186 
Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T00:00:00.000Z
CVE-2007-6187 
Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the filepath parameter to (1) css_file.php, (2) js_file.php, or (3) xml_file.php in noah/modules/nosystem/templates/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6188 
Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) languages_n.php, (2) languages_f.php, or (3) languages.php in inc/; and (4) allow remote attackers to read arbitrary local files via a .. (dot dot) in the uri parameter to frames/nogui/sc_download.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6189 
A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string and decoded twice, leading to improper memory allocation and a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6190 
The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an ExecuteItem element that specifies a Real-Time Transport Protocol (RTP) audio stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6191 
Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[PM_INCPHP] parameter to (1) incphp/globals.php or (2) plugins/export/mc_table.php.  NOTE: it could be argued that this vulnerability is caused by a problem in PHP and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in p.mapper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6192 
The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6193 
The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attackers to obtain sensitive network configuration information if this address is not the same as the address being used by the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6194 
Unspecified vulnerability in HP Select Identity 4.01 before 4.01.012 and 4.1x before 4.13.003 allows remote attackers to obtain unspecified access via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-06T02:00:00.000Z
CVE-2007-6195 
Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-15T01:00:00.000Z
CVE-2007-6196 
Cross-site scripting (XSS) vulnerability in util.php in Calacode @Mail before 5.2 allows remote attackers to inject arbitrary web script or HTML via the func parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-01T01:00:00.000Z
CVE-2007-6197 
The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-01T01:00:00.000Z
CVE-2007-6198 
portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-01T01:00:00.000Z
CVE-2007-6199 
rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-01T01:00:00.000Z
CVE-2007-6200 
Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-01T01:00:00.000Z
CVE-2007-6201 
Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-01T02:00:00.000Z
CVE-2007-6202 
SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pag_sub[] parameter to plug.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-01T02:00:00.000Z
CVE-2007-6203 
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-03T22:00:00.000Z
CVE-2007-6204 
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T21:00:00.000Z
CVE-2007-6205 
Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-11T20:00:00.000Z
CVE-2007-6206 
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T00:00:00.000Z
CVE-2007-6207 
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T00:00:00.000Z
CVE-2007-6208 
sylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary files via a symlink attack on the sylprint.[USER].[PID] temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T00:00:00.000Z
CVE-2007-6209 
Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T00:00:00.000Z
CVE-2007-6210 
zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T01:00:00.000Z
CVE-2007-6211 
Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option.  NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to override a non-setuid default during installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T01:00:00.000Z
CVE-2007-6212 
Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the layer parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T15:00:00.000Z
CVE-2007-6213 
Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) Root and (2) Path parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T15:00:00.000Z
CVE-2007-6214 
Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. (dot dot) in the sFilePath parameter.  NOTE: exploitation requires that the product is configured, but has zero files in the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T15:00:00.000Z
CVE-2007-6215 
Multiple directory traversal vulnerabilities in play.php in Web-MeetMe 3.0.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) roomNo and possibly the (2) bookid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T15:00:00.000Z
CVE-2007-6216 
Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some programs that access hardware resources, as demonstrated by the (1) cfgadm and (2) format programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T15:00:00.000Z
CVE-2007-6217 
Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to execute arbitrary SQL commands via the (1) login (aka Username) and (2) password parameters. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T15:00:00.000Z
CVE-2007-6218 
Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) level parameter to (a) install_module.php and (b) uninstall_module.php in upload/xax/admin/modules/, (c) upload/xax/admin/patch/index.php, and (d) install_module.php and (e) uninstall_module.php in upload/xax/ossigeno/admin/; and the (2) ossigeno parameter to (f) ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php, different vectors than CVE-2007-5234.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T17:00:00.000Z
CVE-2007-6219 
Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T17:00:00.000Z
CVE-2007-6220 
typespeed before 0.6.4 allows remote attackers to cause a denial of service (application crash) via unspecified network behavior that triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T17:00:00.000Z
CVE-2007-6221 
TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T17:00:00.000Z
CVE-2007-6222 
The CheckCustomerAccess function in functions.php in CRM-CTT Interleave before 4.2.0 (formerly CRM-CTT) does not properly verify user privileges, which allows remote authenticated users with the LIMITTOCUSTOMERS privilege to bypass intended access restrictions and edit non-active user settings.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T17:00:00.000Z
CVE-2007-6223 
SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the make_id parameter in a search action in browse mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-04T17:00:00.000Z