Provide references for further information: Can you share references or external links related to CVE-2007-0571?

{'name': '33003', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33003'}, {'name': 'ADV-2007-0386', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0386'}, {'name': 'phpmyreports-libhead-file-include(31857)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31857'}, {'name': '22290', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22290'}, {'name': '3212', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3212'}, {'name': '23959', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23959'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0571?


Explain the CVE ID: What does the identifier CVE-2007-0572 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0572.

PHP remote file inclusion vulnerability in include/irc/phpIRC.php in Drunken:Golem Gaming Portal 0.5.1 Alpha 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0572?

{'name': 'drunkengolem-phpirc-file-include(31873)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31873'}, {'name': '36619', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36619'}, {'name': '3207', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3207'}, {'name': 'ADV-2007-0390', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0390'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0572?


Explain the CVE ID: What does the identifier CVE-2007-0573 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0573.

PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racineTBS parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0573?

{'name': 'nsgalphp-config-file-include(31861)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31861'}, {'name': 'ADV-2007-0392', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0392'}, {'name': '32994', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32994'}, {'name': 'VIM 20070130 Source VERIFY: nsGalPHP RFI', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.attrition.org/pipermail/vim/2007-January/001257.html'}, {'name': '3205', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3205'}, {'name': '22277', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22277'}, {'name': '23969', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23969'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0573?


Explain the CVE ID: What does the identifier CVE-2007-0574 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0574.

SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-0574?

{'name': '36631', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36631'}, {'name': '22282', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22282'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0574?


Explain the CVE ID: What does the identifier CVE-2007-0575 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0575.

Multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in ASPCode.net AdMentor allow remote attackers to execute arbitrary SQL commands via the (1) Userid and (2) Password fields.


Provide references for further information: Can you share references or external links related to CVE-2007-0575?

{'tags': ['x_refsource_MISC'], 'url': 'http://forums.avenir-geopolitique.net/viewtopic.php?t=2606'}, {'name': '20070220 AdMentor Script Remote SQL injection Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/460632/100/100/threaded'}, {'name': '2207', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2207'}, {'name': 'admentor-adminlogin-sql-injection(31908)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31908'}, {'name': '20070127 AdMentor (banners) admin SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458303/100/0/threaded'}, {'name': '22281', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22281'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0575?


Explain the CVE ID: What does the identifier CVE-2007-0576 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0576.

PHP remote file inclusion vulnerability in xt_counter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the server_base_dir parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0576?

{'name': '23967', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23967'}, {'name': '32980', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32980'}, {'name': '20070127 Xt-Stats v.2.4.0.b3 - Remote File Include Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2007/Jan/0643.html'}, {'name': 'ADV-2007-0387', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0387'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xt-scripts.com/'}, {'name': 'xtstats-xtcounter-file-include(31871)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31871'}, {'name': '3209', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3209'}, {'name': '22276', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22276'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0576?


Explain the CVE ID: What does the identifier CVE-2007-0577 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0577.

PHP remote file inclusion vulnerability in function.inc.php in ACGVclick 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0577?

{'name': 'ADV-2007-0391', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0391'}, {'name': '23970', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23970'}, {'name': 'acgvclick-function-file-include(31859)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31859'}, {'name': '22278', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22278'}, {'name': '3206', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3206'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0577?


Explain the CVE ID: What does the identifier CVE-2007-0578 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0578.

The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinite loop) by closing the HTTP connection early.


Provide references for further information: Can you share references or external links related to CVE-2007-0578?

{'name': 'MDKSA-2007:032', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2007:032'}, {'name': '22274', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22274'}, {'name': '40128', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/40128'}, {'name': 'ADV-2007-0366', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0366'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mpg123.de/cgi-bin/news.cgi'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=135704&release_id=478747'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0578?


Explain the CVE ID: What does the identifier CVE-2007-0579 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0579.

Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0, and Groupware before 1.0, allows remote attackers to include certain files via unspecified vectors.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-0579?

{'name': '[horde-announce] 20070114 Horde Groupware Webmail Edition 1.0 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/announce/2007/000309.html'}, {'name': '22273', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22273'}, {'name': 'ADV-2007-0368', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0368'}, {'name': '33083', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33083'}, {'name': '[horde-announce] 20070114 Horde Groupware 1.0 (final)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.horde.org/archives/announce/2007/000308.html'}, {'name': 'horde-calendar-file-include(31849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31849'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0579?


Explain the CVE ID: What does the identifier CVE-2007-0580 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0580.

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesion_idioma parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0580?

{'name': '3215', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3215'}, {'name': '22285', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22285'}, {'name': 'ADV-2007-0396', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0396'}, {'name': '33004', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33004'}, {'name': '23949', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23949'}, {'name': 'forodomus-menu-file-include(31853)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31853'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0580?


Explain the CVE ID: What does the identifier CVE-2007-0581 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0581.

PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0581?

{'name': '22283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22283'}, {'name': 'ADV-2007-0397', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0397'}, {'name': '3214', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3214'}, {'name': '20070418 EclipseBB Remote File Inclusion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/466172/100/0/threaded'}, {'name': '35416', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35416'}, {'name': 'eclipsebb-functions-file-include(31852)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31852'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0581?


Explain the CVE ID: What does the identifier CVE-2007-0582 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0582.

SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands via the User (username) field.


Provide references for further information: Can you share references or external links related to CVE-2007-0582?

{'name': '36618', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36618'}, {'name': '3210', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3210'}, {'name': 'chernobile-default-sql-injection(31939)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31939'}, {'name': '22280', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22280'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0582?


Explain the CVE ID: What does the identifier CVE-2007-0583 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0583.

Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-0583?

{'name': '32986', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32986'}, {'name': 'httpcommander-multiple-xss(31877)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31877'}, {'name': '22298', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22298'}, {'name': '23964', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23964'}, {'name': '32985', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32985'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0583?


Explain the CVE ID: What does the identifier CVE-2007-0584 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0584.

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-neric) allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0584?

{'name': '22287', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22287'}, {'name': '33606', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33606'}, {'name': 'ADV-2007-0394', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0394'}, {'name': 'phpgeneric-membremanager-file-include(31895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31895'}, {'name': '3217', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3217'}, {'name': '36632', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36632'}, {'name': '20070129 PhP Generic library & framework (include_path) Remote File Include Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458556/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0584?


Explain the CVE ID: What does the identifier CVE-2007-0585 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0585.

include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter.  NOTE: some of these details are obtained from third party information.  It is likely that this issue can be exploited to conduct directory traversal attacks.


Provide references for further information: Can you share references or external links related to CVE-2007-0585?

{'name': 'ADV-2007-0399', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0399'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://webfwlog.cvs.sourceforge.net/%2Acheckout%2A/webfwlog/webfwlog/ChangeLog'}, {'name': '33015', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33015'}, {'name': 'webfwlog-debug-file-include(31881)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31881'}, {'name': '23968', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23968'}, {'name': '22291', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22291'}, {'name': '3222', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3222'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0585?


Explain the CVE ID: What does the identifier CVE-2007-0588 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0588.

The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption in the _GetSrcBits32ARGB function. NOTE: this issue might overlap CVE-2007-0462.


Provide references for further information: Can you share references or external links related to CVE-2007-0588?

{'name': 'TA07-072A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-072A.html'}, {'name': 'APPLE-SA-2007-03-13', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=305214'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security-protocols.com/sp-x43-advisory.php'}, {'name': '22228', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22228'}, {'name': '33365', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/33365'}, {'name': 'VU#396820', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/396820'}, {'name': 'ADV-2007-0930', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0930'}, {'name': '1017760', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017760'}, {'name': '24479', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24479'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0588?


Explain the CVE ID: What does the identifier CVE-2007-0589 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0589.

SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to info_user.asp.


Provide references for further information: Can you share references or external links related to CVE-2007-0589?

{'name': '36644', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36644'}, {'name': '3197', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3197'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0589?


Explain the CVE ID: What does the identifier CVE-2007-0590 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0590.

Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the palavra parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0590?

{'name': '3197', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3197'}, {'name': '36645', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36645'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0590?


Explain the CVE ID: What does the identifier CVE-2007-0591 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0591.

PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0591?

{'name': '22241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22241'}, {'name': '23918', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23918'}, {'name': '3198', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3198'}, {'name': '31636', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/31636'}, {'name': 'ADV-2007-0352', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0352'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0591?


Explain the CVE ID: What does the identifier CVE-2007-0592 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0592.

Cross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to admin/login.php and the Admin Panel Database.


Provide references for further information: Can you share references or external links related to CVE-2007-0592?

{'name': '36954', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36954'}, {'name': '20070125 EzDatabase Multiple Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458062/100/0/threaded'}, {'name': '2196', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2196'}, {'name': '36955', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36955'}, {'name': 'ezdatabase-adminpanel-xss(31768)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31768'}, {'name': '22235', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22235'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0592?


Explain the CVE ID: What does the identifier CVE-2007-0593 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0593.

Siteman 1.1.11 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for data/members.txt.


Provide references for further information: Can you share references or external links related to CVE-2007-0593?

{'name': 'siteman-members-information-disclosure(31780)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31780'}, {'name': '2205', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2205'}, {'name': '31440', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/31440'}, {'name': '20070125 [x0n3-h4ck] Siteman 1.1.11 Remote Md5 Hash Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458092/100/0/threaded'}, {'name': '31662', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/31662'}, {'name': '23925', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23925'}, {'name': 'siteman-members-info-disclosure(45485)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/45485'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0593?


Explain the CVE ID: What does the identifier CVE-2007-0594 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0594.

Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD.


Provide references for further information: Can you share references or external links related to CVE-2007-0594?

{'name': '20070125 [x0n3-h4ck] Siteman 2.0.x2 Remote Md5 Hash Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458081/100/0/threaded'}, {'name': '33590', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33590'}, {'name': '2206', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2206'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0594?


Explain the CVE ID: What does the identifier CVE-2007-0595 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0595.

Cross-site scripting (XSS) vulnerability in search in High 5 Review Site allows remote attackers to inject arbitrary web script or HTML via the q parameter (aka the search box).


Provide references for further information: Can you share references or external links related to CVE-2007-0595?

{'name': '32974', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32974'}, {'name': 'high5review-search-xss(31797)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31797'}, {'name': 'ADV-2007-0363', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0363'}, {'name': '20070125 high5 Review script Security Risk', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458122/100/0/threaded'}, {'name': '23905', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23905'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0595?


Explain the CVE ID: What does the identifier CVE-2007-0596 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0596.

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PF[top_url] parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0596?

{'tags': ['x_refsource_MISC'], 'url': 'http://acid-root.new.fr/poc/21070125.txt'}, {'name': '20070125 Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458076/100/0/threaded'}, {'name': '33593', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33593'}, {'name': '20070125 Re: Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458123/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0596?


Explain the CVE ID: What does the identifier CVE-2007-0597 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0597.

Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2007-0597?

{'tags': ['x_refsource_MISC'], 'url': 'http://acid-root.new.fr/poc/21070125.txt'}, {'name': '33594', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33594'}, {'name': '20070125 Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458076/100/0/threaded'}, {'name': '20070125 Re: Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458123/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0597?


Explain the CVE ID: What does the identifier CVE-2007-0598 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0598.

SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cookie to forum.php.


Provide references for further information: Can you share references or external links related to CVE-2007-0598?

{'tags': ['x_refsource_MISC'], 'url': 'http://acid-root.new.fr/poc/21070125.txt'}, {'name': '33595', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33595'}, {'name': '20070125 Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458076/100/0/threaded'}, {'name': '20070125 Re: Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458123/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0598?


Explain the CVE ID: What does the identifier CVE-2007-0599 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0599.

Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as copying arbitrary files using index/common_actions.php, via vectors associated with extract operations on the (1) POST, (2) GET, (3) COOKIE, and (4) SERVER superglobal arrays.


Provide references for further information: Can you share references or external links related to CVE-2007-0599?

{'tags': ['x_refsource_MISC'], 'url': 'http://acid-root.new.fr/poc/21070125.txt'}, {'name': '20070125 Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458076/100/0/threaded'}, {'name': '33596', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33596'}, {'name': '20070125 Re: Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458123/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0599?


Explain the CVE ID: What does the identifier CVE-2007-0600 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0600.

SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0600?

{'name': '2208', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2208'}, {'name': '3194', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3194'}, {'name': '23930', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23930'}, {'name': '20070125 makit news/blog poster <=v3(news_page.asp) Remote SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458063/100/0/threaded'}, {'name': 'newsposter-newspage-sql-injection(31747)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31747'}, {'name': '31640', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/31640'}, {'name': '22230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22230'}, {'name': '36633', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36633'}, {'name': 'ADV-2007-0354', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0354'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0600?


Explain the CVE ID: What does the identifier CVE-2007-0601 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0601.

common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences (URL encoded double quotes) and other potentially dangerous manipulations by sending a cookie, which bypasses the blacklist matching against the GET and PUT superglobal arrays.


Provide references for further information: Can you share references or external links related to CVE-2007-0601?

{'tags': ['x_refsource_MISC'], 'url': 'http://acid-root.new.fr/poc/21070125.txt'}, {'name': '33597', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33597'}, {'name': '20070125 Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458076/100/0/threaded'}, {'name': '20070125 Re: Aztek Forum 4.1 Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458123/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0601?


Explain the CVE ID: What does the identifier CVE-2007-0602 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0602.

Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users to gain privileges via a long command line argument, a different vulnerability than CVE-2005-0533.


Provide references for further information: Can you share references or external links related to CVE-2007-0602?

{'name': '2204', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2204'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.devtarget.org/trendmicro-advisory-01-2007.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034124&id=EN-1034124'}, {'name': '1017562', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017562'}, {'name': 'ADV-2007-0367', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0367'}, {'name': '20070125 Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458111/100/0/threaded'}, {'name': '33043', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33043'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.devtarget.org/tmvwall381v3_exp.c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0602?


Explain the CVE ID: What does the identifier CVE-2007-0603 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0603.

PGP Desktop before 9.5.1 does not validate data objects received over the (1) \pipe\pgpserv named pipe for PGPServ.exe or the (2) \pipe\pgpsdkserv named pipe for PGPsdkServ.exe, which allows remote authenticated users to gain privileges by sending a data object representing an absolute pointer, which causes code execution at the corresponding address.


Provide references for further information: Can you share references or external links related to CVE-2007-0603?

{'name': '1017563', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017563'}, {'name': '20070125 Medium Risk Vulnerability in PGP Desktop', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0025.html'}, {'name': '2203', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2203'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-pgp-desktop/'}, {'name': '32970', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32970'}, {'name': '22247', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22247'}, {'name': '20070125 Medium Risk Vulnerability in PGP Desktop', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458137/100/0/threaded'}, {'name': '23938', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23938'}, {'name': 'ADV-2007-0356', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0356'}, {'name': '32969', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32969'}, {'name': 'VU#102465', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/102465'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0603?


Explain the CVE ID: What does the identifier CVE-2007-0604 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0604.

Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the MTCommentPreviewIsStatic tag, which can open the "comment entry screen," a different vulnerability than CVE-2007-0231.


Provide references for further information: Can you share references or external links related to CVE-2007-0604?

{'name': '32987', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32987'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sixapart.com/movabletype/beta/distros/MT-3.34-beta-Release-Notes.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0604?


Explain the CVE ID: What does the identifier CVE-2007-0605 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0605.

Cross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0605?

{'name': 'ADV-2007-1726', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/1726'}, {'name': '2663', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2663'}, {'name': '20070507 Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/467937/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.netvigilance.com/advisory0012'}, {'name': '23873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/23873'}, {'name': '33877', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/33877'}, {'name': '25153', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25153'}, {'name': 'advanced-picture-index-xss(34156)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/34156'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0605?


Explain the CVE ID: What does the identifier CVE-2007-0606 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0606.

w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the (1) bn[] array parameter to index.php, which expects a string, and (2) certain parameters to delete_forum.php, which displays the path name in the resulting error message.


Provide references for further information: Can you share references or external links related to CVE-2007-0606?

{'name': 'wagora-deleteforumindex-path-disclosure(33076)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/33076'}, {'name': '20070319 w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/463213/100/0/threaded'}, {'name': '31669', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/31669'}, {'name': '31668', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/31668'}, {'name': '2461', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2461'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.netvigilance.com/advisory0014'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0606?


Explain the CVE ID: What does the identifier CVE-2007-0607 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0607.

W-Agora (Web-Agora) 4.2.1, when register_globals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request.


Provide references for further information: Can you share references or external links related to CVE-2007-0607?

{'name': '2465', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2465'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.netvigilance.com/advisory0015'}, {'name': 'wagora-globals-information-disclosure(33073)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/33073'}, {'name': '20070319 w-agora version 4.2.1 Information Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053054.html'}, {'name': '31670', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/31670'}, {'name': '20070319 w-agora version 4.2.1 Information Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/463215/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0607?


Explain the CVE ID: What does the identifier CVE-2007-0608 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0608.

Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid (1) GB_TBL parameter to (a) lang/codes-english.php or (b) image.php, which reveal the database name; (2) an invalid GB_DB parameter to index.php, coupled with a ../index lang cookie, which reveals the installation path; or (3) a direct request to index.php with no parameters or cookies, which reveals the installation path.


Provide references for further information: Can you share references or external links related to CVE-2007-0608?

{'name': '33879', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/33879'}, {'name': '20070507 Advanced Guestbook version 2.4.2 Multiple Error Information Leak Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/467940/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.netvigilance.com/advisory0011'}, {'name': 'advanced-multiple-script-info-disclosure(34161)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/34161'}, {'name': '2661', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2661'}, {'name': 'ADV-2007-1726', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/1726'}, {'name': '33878', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/33878'}, {'name': '34362', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/34362'}, {'name': '33876', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/33876'}, {'name': '25153', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25153'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0608?


Explain the CVE ID: What does the identifier CVE-2007-0609 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0609.

Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. (dot dot) in a lang cookie, followed by a filename without its .php extension, as demonstrated via a request to index.php.


Provide references for further information: Can you share references or external links related to CVE-2007-0609?

{'name': 'advanced-index-directory-traversal(34152)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/34152'}, {'name': '2662', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2662'}, {'name': 'ADV-2007-1726', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/1726'}, {'name': '20070507 Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/467937/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.netvigilance.com/advisory0013'}, {'name': '20070507 Advanced Guestbook version 2.4.2 Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/467941/100/0/threaded'}, {'name': '23876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/23876'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.netvigilance.com/advisory0012'}, {'name': '25153', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25153'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0609?


Explain the CVE ID: What does the identifier CVE-2007-0610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0610.

Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML via the sender parameter.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-0610?

{'name': '23951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23951'}, {'name': '22250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22250'}, {'name': 'cmsimple-sender-xss(31841)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31841'}, {'name': '32976', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32976'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0610?


Explain the CVE ID: What does the identifier CVE-2007-0611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0611.

Multiple cross-site scripting (XSS) vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) inc.page.php and (2) inc.text.php.


Provide references for further information: Can you share references or external links related to CVE-2007-0611?

{'name': '36682', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36682'}, {'name': 'ADV-2007-0360', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0360'}, {'name': '36683', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36683'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=480714&group_id=98260'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0611?


Explain the CVE ID: What does the identifier CVE-2007-0612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0612.

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll; or the (12) TriEditDocument.TriEditDocument or (13) TriEditDocument.TriEditDocument.1 objects in (b) triedit.dll, which cause a NULL pointer dereference.


Provide references for further information: Can you share references or external links related to CVE-2007-0612?

{'name': '20070128 Internet Explorer 7 ActiveX bgColor property NULL pointer dereference (DoS)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0547.html'}, {'name': '20070129 Internet Explorer 7 ActiveX bgColor property NULL pointer dereference (DoS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458443/100/0/threaded'}, {'name': '32628', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32628'}, {'name': 'ie-activex-bgcolor-dos(31867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31867'}, {'name': '2199', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2199'}, {'name': '20070129 Internet Explorer 7 ActiveX bgColor property NULL pointer dereference (DoS)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052057.html'}, {'name': '22288', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22288'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.determina.com/security.research/vulnerabilities/activex-bgcolor.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0612?


Explain the CVE ID: What does the identifier CVE-2007-0613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0613.

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries.


Provide references for further information: Can you share references or external links related to CVE-2007-0613?

{'name': '32698', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/32698'}, {'tags': ['x_refsource_MISC'], 'url': 'http://projects.info-pull.com/moab/MOAB-29-01-2007.html'}, {'name': '22304', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22304'}, {'name': '32699', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/32699'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0613?


Explain the CVE ID: What does the identifier CVE-2007-0614 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0614.

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (persistent application crash) via a crafted phsh hash attribute in a TXT key.


Provide references for further information: Can you share references or external links related to CVE-2007-0614?

{'name': 'APPLE-SA-2007-02-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html'}, {'name': '24198', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24198'}, {'name': '23945', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23945'}, {'name': '1017661', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017661'}, {'tags': ['x_refsource_MISC'], 'url': 'http://projects.info-pull.com/moab/MOAB-29-01-2007.html'}, {'name': '32713', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/32713'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=305102'}, {'name': '22304', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22304'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0614?


Explain the CVE ID: What does the identifier CVE-2007-0615 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0615.

Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edition Management Server and Log Server before 20070124 allows remote attackers to cause a denial of service (application stop) via unexpected data.


Provide references for further information: Can you share references or external links related to CVE-2007-0615?

{'name': 'hitachi-jp1-hibun-request-dos(31733)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31733'}, {'name': '23854', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23854'}, {'name': '22237', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22237'}, {'name': '32963', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hitachi-support.com/security_e/vuls_e/HS06-019_e/01-e.html'}, {'name': 'ADV-2007-0324', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0615?


Explain the CVE ID: What does the identifier CVE-2007-0616 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0616.

Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6 allows remote attackers to list arbitrary directories via ".." sequences in the album parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2007-0616?

{'name': 'zenphoto-template-directory-traversal(32102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32102'}, {'name': '33072', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33072'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/support/topic.php?id=1148'}, {'name': '24026', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24026'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zenphoto.org/support/topic.php?id=1146&replies=3'}, {'name': '22368', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22368'}, {'name': 'ADV-2007-0470', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0470'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0616?


Explain the CVE ID: What does the identifier CVE-2007-0617 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0617.

The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting," which allows remote attackers to add arbitrary e-mail addresses and domains to the spam blocker whitelist via the (1) AddSenderToWhitelist and (2) AddDomainToWhitelist functions.


Provide references for further information: Can you share references or external links related to CVE-2007-0617?

{'name': 'earthlink-spamblocker-security-bypass(31827)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31827'}, {'name': '22238', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22238'}, {'name': '20070125 Earthlink TotalAccess ActiveX Unsafe Methods Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052021.html'}, {'name': '2210', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2210'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0617?


Explain the CVE ID: What does the identifier CVE-2007-0618 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0618.

Unspecified vulnerability in (1) pop3d, (2) pop3ds, (3) imapd, and (4) imapds in IBM AIX 5.3.0 has unspecified impact and attack vectors, involving an "authentication vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2007-0618?

{'name': '22262', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22262'}, {'name': 'aix-mailservices-rlogin-security-bypass(31875)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31875'}, {'name': 'ADV-2007-0382', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0382'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://aix.software.ibm.com/aix/efixes/security/README'}, {'name': 'IY93084', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY93084&apar=only'}, {'name': '23957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23957'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0618?


Explain the CVE ID: What does the identifier CVE-2007-0619 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0619.

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption.


Provide references for further information: Can you share references or external links related to CVE-2007-0619?

{'name': '1017565', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017565'}, {'name': '23975', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23975'}, {'name': 'ADV-2007-0361', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0361'}, {'name': 'SUSE-SR:2007:003', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2007_3_sr.html'}, {'name': '22258', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22258'}, {'name': '24335', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24335'}, {'name': '20070126 Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=468'}, {'name': 'GLSA-200702-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200702-12.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://morte.jedrea.com/~jedwin/projects/chmlib/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0619?


Explain the CVE ID: What does the identifier CVE-2007-0620 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0620.

download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php.


Provide references for further information: Can you share references or external links related to CVE-2007-0620?

{'name': '23947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23947'}, {'name': '20070126 FdScript <= v1.3.2 Remote File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458231/100/0/threaded'}, {'name': '33001', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33001'}, {'name': '2197', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2197'}, {'name': 'ADV-2007-0383', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0383'}, {'name': '22265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22265'}, {'name': 'fdscript-download-file-disclosure(31915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31915'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0620?


Explain the CVE ID: What does the identifier CVE-2007-0621 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0621.


Provide references for further information: Can you share references or external links related to CVE-2007-0621?


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0621?


Explain the CVE ID: What does the identifier CVE-2007-0622 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0622.

Cross-site request forgery (CSRF) vulnerability in MyBB (aka MyBulletinBoard) 1.2.2 allows remote attackers to send messages to arbitrary users.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-0622?

{'name': '23934', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23934'}, {'name': '32968', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32968'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0622?


Explain the CVE ID: What does the identifier CVE-2007-0623 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0623.

SQL injection vulnerability in index.php in MAXdev MDPro 1.0.76 allows remote attackers to execute arbitrary SQL commands via the startrow parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0623?

{'name': '33011', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33011'}, {'name': '23948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23948'}, {'name': 'ADV-2007-0412', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0412'}, {'name': 'mdpro-startrow-sql-injection(31897)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31897'}, {'name': '20070129 MDPro 1.0.76 - Multiple Remote Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458438/100/0/threaded'}, {'name': '33612', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33612'}, {'name': '22293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22293'}, {'name': '2198', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2198'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0623?


Explain the CVE ID: What does the identifier CVE-2007-0624 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0624.

user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote) character, and possibly other invalid values, in the uname parameter in a userinfo operation.


Provide references for further information: Can you share references or external links related to CVE-2007-0624?

{'name': '20070129 MDPro 1.0.76 - Multiple Remote Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458438/100/0/threaded'}, {'name': '33613', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33613'}, {'name': 'mdpro-user-path-disclosure(31898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31898'}, {'name': '2198', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2198'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0624?


Explain the CVE ID: What does the identifier CVE-2007-0625 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0625.

nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which allows local users to modify server configuration keys in /usr/NX/etc/server.cfg, resulting in an unspecified denial of service.


Provide references for further information: Can you share references or external links related to CVE-2007-0625?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nomachine.com/tr/view.php?id=TR01E01622'}, {'name': 'nxserver-nxconfigure-dos(31941)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31941'}, {'name': 'ADV-2007-0413', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0413'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nomachine.com/news_read.php?idnews=190'}, {'name': '33009', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33009'}, {'name': '22308', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22308'}, {'name': '23993', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23993'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0625?


Explain the CVE ID: What does the identifier CVE-2007-0626 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0626.

The comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5.1, and vbDrupal, allows remote attackers with "post comments" privileges and access to multiple input filters to execute arbitrary code by previewing comments, which are not processed by "normal form validation routines."


Provide references for further information: Can you share references or external links related to CVE-2007-0626?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vbdrupal.org/forum/showthread.php?t=786'}, {'name': '22306', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22306'}, {'name': '23960', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23960'}, {'name': 'ADV-2007-0406', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0406'}, {'name': '32136', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32136'}, {'name': 'ADV-2007-0415', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0415'}, {'name': 'drupal-commentformaddpreview-code-execution(31940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31940'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/113935'}, {'name': '20070129 [DRUPAL-SA-2007-005] Drupal 4.7.6 / 5.1 fixes arbitrary code execution issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2007-01/0670.html'}, {'name': '23990', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23990'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0626?


Explain the CVE ID: What does the identifier CVE-2007-0627 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0627.

Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process.


Provide references for further information: Can you share references or external links related to CVE-2007-0627?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stillhq.com/gtalkbot/000003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.stillhq.com/gtalkbot/'}, {'name': '22322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22322'}, {'name': 'gtalkbot-ps-information-disclosure(31923)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31923'}, {'name': '23942', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23942'}, {'name': 'ADV-2007-0408', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0408'}, {'name': '33071', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33071'}, {'tags': ['x_refsource_MISC'], 'url': 'http://freshmeat.net/projects/gtalkbot/?branch_id=67830&release_id=245004'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0627?


Explain the CVE ID: What does the identifier CVE-2007-0628 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0628.

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) before 20070129 allow remote attackers to inject arbitrary web script or HTML via the (1) goto or (2) gx-charset parameter. NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-0628?

{'name': 'ADV-2007-0411', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0411'}, {'name': '1017570', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017570'}, {'name': '23979', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23979'}, {'name': '33010', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33010'}, {'name': 'java-access-server-unspecified-xss(31936)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31936'}, {'name': '22302', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22302'}, {'name': '102621', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102621-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0628?


Explain the CVE ID: What does the identifier CVE-2007-0629 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0629.

The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user permissions, which allows attackers to delete unauthorized assets.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-0629?

{'name': '23981', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23981'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=51417&release_id=481584'}, {'name': '22294', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22294'}, {'name': 'webgui-wwwpurgelist-security-bypass(31905)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31905'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.plainblack.com/getwebgui/advisories/security-defect-discovered-in-7.x-versions'}, {'name': '32992', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32992'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0629?


Explain the CVE ID: What does the identifier CVE-2007-0630 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0630.

Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) from, and (3) q parameters, different vectors than CVE-2007-0569.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-0630?

{'name': 'ADV-2007-0395', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0395'}, {'name': '33000', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33000'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0630?


Explain the CVE ID: What does the identifier CVE-2007-0631 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0631.

SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0631?

{'name': 'cascadianfaq-index-sql-injection(31968)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31968'}, {'name': '3227', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3227'}, {'name': 'ADV-2007-0424', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0424'}, {'name': '23965', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23965'}, {'name': '31675', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/31675'}, {'name': '22314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22314'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0631?


Explain the CVE ID: What does the identifier CVE-2007-0632 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0632.

SQL injection vulnerability in artreplydelete.asp in ASP EDGE 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via a username cookie, a different vector than CVE-2007-0560.


Provide references for further information: Can you share references or external links related to CVE-2007-0632?

{'name': '36634', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36634'}, {'name': 'ADV-2007-0341', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0341'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0632?


Explain the CVE ID: What does the identifier CVE-2007-0633 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0633.

PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myNewsConf[path][sys][index] parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0633?

{'name': '33019', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33019'}, {'name': '3228', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3228'}, {'name': 'mynews-themefunc-file-include(31971)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31971'}, {'name': '22313', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22313'}, {'name': '23973', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23973'}, {'name': 'ADV-2007-0423', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0423'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0633?


Explain the CVE ID: What does the identifier CVE-2007-0634 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0634.

Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system crash) via certain ICMP packets.


Provide references for further information: Can you share references or external links related to CVE-2007-0634?

{'name': '22323', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22323'}, {'name': '23982', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23982'}, {'name': '102697', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102697-1'}, {'name': 'VU#967236', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/967236'}, {'name': 'ADV-2007-0420', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0420'}, {'name': '1017574', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017574'}, {'name': '31878', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/31878'}, {'name': 'solaris-icmp-dos(32010)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32010'}, {'name': 'oval:org.mitre.oval:def:1249', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1249'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0634?


Explain the CVE ID: What does the identifier CVE-2007-0635 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0635.

Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) config[path] parameter to (a) common_foot.php or (b) blogs.php, or (2) the config[theme] parameter to (c) admin/gallery_head.php.


Provide references for further information: Can you share references or external links related to CVE-2007-0635?

{'name': 'ADV-2007-0430', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0430'}, {'name': '33035', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33035'}, {'name': '33034', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33034'}, {'name': '22319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22319'}, {'name': '23987', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23987'}, {'name': 'encapsms-config-file-include(31978)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31978'}, {'name': '2200', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2200'}, {'name': '33036', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33036'}, {'name': '20070130 EncapsCMS 0.3.6 (common_foot.php) Remote File Include', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458582/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0635?


Explain the CVE ID: What does the identifier CVE-2007-0636 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0636.

Unspecified vulnerability in inotify before 0.3.5 has unknown impact and attack vectors, related to "access rights to watched files."


Provide references for further information: Can you share references or external links related to CVE-2007-0636?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://inotify.aiken.cz/?section=incron&page=changelog'}, {'name': '38132', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/38132'}, {'name': '22305', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22305'}, {'name': 'ADV-2007-0405', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0405'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0636?


Explain the CVE ID: What does the identifier CVE-2007-0637 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0637.

Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the galeria parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by zd_numer.php.


Provide references for further information: Can you share references or external links related to CVE-2007-0637?

{'name': 'galeria-zdnumer-file-include(31967)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31967'}, {'name': '23956', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23956'}, {'name': '33033', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33033'}, {'name': '3225', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3225'}, {'name': '22324', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22324'}, {'name': 'ADV-2007-0425', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0425'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0637?


Explain the CVE ID: What does the identifier CVE-2007-0638 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0638.

show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database contents) via a % (percent) character in the dbfieldv parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0638?

{'name': '3226', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3226'}, {'name': '33070', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33070'}, {'name': 'phpfootball-show-information-disclosure(31976)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31976'}, {'name': '23962', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23962'}, {'name': '22312', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22312'}, {'name': 'ADV-2007-0429', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0429'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0638?


Explain the CVE ID: What does the identifier CVE-2007-0639 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0639.

Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via (1) a REMOTE_ADDR cookie or (2) a cookie specifying an element of the msg array with an error number in the first dimension and 0 in the second dimension, as demonstrated by msg[999][0].


Provide references for further information: Can you share references or external links related to CVE-2007-0639?

{'name': '23914', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23914'}, {'name': 'guppy-error-code-execution(31882)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31882'}, {'name': '1017569', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017569'}, {'name': 'ADV-2007-0421', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0421'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/guppy_4516_cmd.html'}, {'name': '3221', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3221'}, {'name': '33016', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33016'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0639?


Explain the CVE ID: What does the identifier CVE-2007-0640 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0640.

Buffer overflow in ZABBIX before 1.1.5 has unknown impact and attack vectors related to "SNMP IP addresses."


Provide references for further information: Can you share references or external links related to CVE-2007-0640?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zabbix.com/rn1.1.5.php'}, {'name': 'ADV-2007-0416', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0416'}, {'name': '22321', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22321'}, {'name': 'zabbix-snmp-bo(32038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32038'}, {'name': '33081', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33081'}, {'name': '24020', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0640?


Explain the CVE ID: What does the identifier CVE-2007-0641 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0641.

Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions (SSC) DiskAccess NFS Client allows remote attackers to execute arbitrary code via a long argument, an issue similar to CVE-2006-5854 and CVE-2007-0444.


Provide references for further information: Can you share references or external links related to CVE-2007-0641?

{'name': '22301', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22301'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c'}, {'name': '38119', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/38119'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0641?


Explain the CVE ID: What does the identifier CVE-2007-0642 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0642.

SQL injection vulnerability in tForum 2.00 in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) pass to user_confirm.asp.


Provide references for further information: Can you share references or external links related to CVE-2007-0642?

{'name': '22350', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22350'}, {'name': '20070127 RBL - ASP (scripts with db) SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458495/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forums.avenir-geopolitique.net/viewtopic.php?t=2607'}, {'name': '2201', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2201'}, {'name': 'rbl-userpass-sql-injection(31927)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31927'}, {'name': '36040', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/36040'}, {'name': '20070131 Partial source code verify - "RBL - ASP" scripts SQL injection', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://www.attrition.org/pipermail/vim/2007-January/001259.html'}, {'name': '20070129 RBL - ASP (scripts with db) SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/458560/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0642?


Explain the CVE ID: What does the identifier CVE-2007-0643 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0643.

Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long line in a .cpp file.


Provide references for further information: Can you share references or external links related to CVE-2007-0643?

{'name': '38131', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/38131'}, {'name': '22315', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22315'}, {'name': '3229', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3229'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0643?


Explain the CVE ID: What does the identifier CVE-2007-0644 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0644.

Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in filenames that are not properly handled when calling the (1) NSLog and (2) NSBeginAlertSheet Apple AppKit functions.


Provide references for further information: Can you share references or external links related to CVE-2007-0644?

{'name': '22326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22326'}, {'name': '32710', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/32710'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalmunition.com/MOAB-30-01-2007.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0644?


Explain the CVE ID: What does the identifier CVE-2007-0645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0645.

Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling certain Apple AppKit functions.