rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-2107 
SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-1960.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2108 
Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Windows allows remote attackers to have an unknown impact, aka DB01.  NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue occurs because the NTLM SSPI AcceptSecurityContext function grants privileges based on the username provided even though all users are authenticated as Guest, which allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2109 
Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) Rules Manager and Expression Filter components (DB02) and (2) Oracle Streams (DB06).  Note: as of 20070424, Oracle has not disputed reliable claims that DB02 is for a race condition in the RLMGR_TRUNCATE_MAINT trigger in the Rules Manager and Expression Filter components changing the AUTHID of a package from DEFINER to CURRENT_USER after a TRUNCATE call, and DB06 is for SQL injection in the DBMS_APPLY_USER_AGENT.SET_REGISTRATION_HANDLER procedure, which is later passed to the DBMS_APPLY_ADM_INTERNAL.ALTER_APPLY procedure, aka "Oracle Streams".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2110 
Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03.  NOTE: as of 20070424, Oracle has not disputed reliable claims that DB03 occurs because RDBMS uses a NULL Discretionary Access Control List (DACL) for the Oracle process and certain shared memory sections, which allows local users to inject threads and execute arbitrary code via the OpenProcess, OpenThread, and SetThreadContext functions (DB03).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2111 
SQL injection vulnerability in the SYS.DBMS_AQADM_SYS package in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 allows remote authenticated users to inject arbitrary SQL commands via unknown vectors, aka DB04.  NOTE: as of 20070424, Oracle has not disputed reliable claims that DB04 is actually for multiple vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2112 
Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05.  NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue allows remote authenticated users to bypass the AUTH_ALTER_SESSION security policies via a logon trigger ("AFTER LOGON ON DATABASE" trigger directive), a related issue to CVE-2006-0547.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2113 
SQL injection vulnerability in the Upgrade/Downgrade component (DBMS_UPGRADE_INTERNAL) for Oracle Database 10.1.0.5 allows remote authenticated users to execute arbitrary SQL commands via unknown vectors, aka DB07.  NOTE: as of 20070424, Oracle has not disputed reliable claims that DB07 is actually for multiple issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2114 
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors, related to (1) Change Data Capture (CDC), aka DB08, and (2) Oracle Instant Client, aka DB11.  NOTE: as of 20070424, oracle has not disputed reliable claims that these issues are buffer overflows using a long CHANGE_TABLE_NAME parameter to the DBMS_CDC_IPUBLISH.CHGTAB_CACHE procedure (DB08) and Oracle Instant Client genezi utility (DB11).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2115 
Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09.  NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the "java classes in CDC.jar."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2116 
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors, aka DB10.  NOTE: as of 20070424, Oracle has not disputed claims that these are buffer overflows in kkzi.o for the SYS.DBMS_SNAP_INTERNAL package using the (1) SNAP_OWNER or (2) SNAP_NAME parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2117 
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and attack vectors, aka DB12.  NOTE: as of 20070424, Oracle has not disputed reliable claims that this involves a buffer overflow in the ctxsrv server daemon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2118 
Unspecified vulnerability in the Upgrade/Downgrade component of Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors, aka DB13.  NOTE: as of 20070424, Oracle has not disputed reliable claims that this is a buffer overflow involving the "mig utility."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2119 
Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to inject arbitrary HTML or web script via the EXPTYPE parameter, aka SES01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2120 
The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2121 
Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2122 
Unspecified vulnerability in the Wireless component in Oracle Application Server 9.0.4.3 has unknown impact and attack vectors, aka AS03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2123 
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2124 
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.4.1.0 has unknown impact and remote attack vectors, aka AS05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2125 
Unspecified vulnerability in Collaborative Workspace in Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka OCS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2126 
Unspecified vulnerability in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote attack vectors in the (1) Common Applications (APPS01) and (2) iProcurement (APPS02).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2127 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.0 have unknown impact and remote attack vectors via (1) Application Object Library (APPS04), iStore (2) APPS05 and (3) APPS06, (4) iSupport (APPS07), (5) Trade Management (APPS09), (6) Applications Manager (APPS10), and (7) Oracle Report Manager (APPS03).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2128 
Unspecified vulnerability in the Sales Online component for Oracle E-Business Suite 11.5.10 has unknown impact and remote authenticated attack vectors, aka APPS08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2129 
Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has unknown impact and remote attack vectors, aka EM01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2130 
Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2131 
Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors, aka PSE01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2132 
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown impact and attack vectors, aka PSE02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2133 
Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 has unknown impact and attack vectors, aka PSEHCM01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2134 
Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23_Q1 and 8.96.I1 has unknown impact and local attack vectors, aka JDE01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T18:00:00.000Z
CVE-2007-2135 
The ADI_BINARY component in the Oracle E-Business Suite allows remote attackers to download arbitrary documents from the APPS.FND_DOCUMENTS table via the ADI_DISPLAY_REPORT function, when passed a certain parameter.  NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T20:00:00.000Z
CVE-2007-2136 
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2137 
Heap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2, as used in Tivoli Universal Agent, Windows OS Monitoring agent, and Enterprise Portal Server, allows remote attackers to execute arbitrary code by sending a long string to a certain TCP port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2138 
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T20:00:00.000Z
CVE-2007-2139 
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-25T20:00:00.000Z
CVE-2007-2140 
PHP remote file inclusion vulnerability in everything.php in Franklin Huang Flip (aka Flip-search-add-on) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2141 
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2142 
Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code via a URL in the PagePrefix parameter to (1) begin.inc.php, (2) connection.inc.php, (3) events.inc.php, (4) footer.inc.php, (5) header.inc.php, (6) menuleft.inc.php, or (7) pages.inc.php in includes/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2143 
PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2144 
PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2145 
The imagecomments function in classes.php in MiniGal b13 allows remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the input parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2146 
The imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the (1) name or (2) email parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2147 
admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows remote attackers to read and modify the classes/vars.php and classes/varstuff.php configuration files via direct requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2148 
Direct static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier allows remote authenticated administrators to inject PHP code into .html files via the html parameter, as demonstrated by head.html and foot.html, which are included and executed upon a direct request for index.php.  NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2149 
Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier stores usernames and unencrypted passwords in (1) classes/vars.php and (2) classes/varstuff.php, and recommends 0666 or 0777 permissions for these files, which allows local users to gain privileges by reading the files, and allows remote attackers to obtain credentials via a direct request for admin/options.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2150 
BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command, a variant of CVE-1999-0017.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2151 
The administration server in McAfee e-Business Server before 8.1.1 and 8.5.x before 8.5.2 allows remote attackers to cause a denial of service (service crash) via a large length value in a malformed authentication packet, which triggers a heap over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2152 
Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte (Unicode) characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2153 
Cross-site scripting (XSS) vulnerability in atmail.php in @Mail 5.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2154 
PHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron Connector 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the CabronServiceFolder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2155 
Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the modify parameter in a template action to admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2156 
Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) datumVonDatumBis.inc.php, (2) footer.inc.php, (3) header.inc.php, and (4) stylesheets.php in templates/; and (5) wochenuebersicht.inc.php, (6) monatsuebersicht.inc.php, (7) jahresuebersicht.inc.php, and (8) tagesuebersicht.inc.php in belegungsplan/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2157 
Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2158 
PHP remote file inclusion vulnerability in index.php in jGallery 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the G_JGALL[inc_path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-19T10:00:00.000Z
CVE-2007-2159 
Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors relating to (1) direct display of data from the database and (2) other portions of the user interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2160 
Multiple cross-site request forgery (CSRF) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7.x-1.2 in the 4.7.x-1.* series, for Drupal allow remote attackers to perform unauthorized actions as an arbitrary user, a related issue to CVE-2006-5476.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2161 
Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2162 
(1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a denial of service (browser crash or system hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2163 
Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2164 
Konqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash or abort) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2165 
The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same as the module that retrieves authentication data, which might allow remote attackers to bypass authentication, as demonstrated by use of SQLAuthTypes Plaintext in mod_sql, with data retrieved from /etc/passwd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2166 
PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot (osp) 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPathToProjectAdmin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-2167 
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z