Unknown or Incomplete

• CVE ID: 2007-5694 (see also: NVD)
• Bugtraq ID: 26126
• Secunia Advisory ID: 27503 28008
• FrSIRT Advisory: ADV-2007-3768
• Other Advisory URL: http://securityreason.com/securityalert/3318
  http://www.debian.org/security/2007/dsa-1423
• Vendor Specific News/Changelog Entry: http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view= ......
• Vendor Specific Solution URL: http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml

Unknown or Incomplete

2007/12/07 18:58:59 | [Full-disclosure] [SECURITY] [DSA 1423-1] New sitebar packages fix several vulnerabilities

from: Full-Disclosure digest, knowledge base

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory ... (s) : CVE-2007-5491, CVE-2007-5492, CVE-2007-5693, CVE-2007-5694, CVE-2007-5695, CVE-2007-5692 Debian ... arbitrary PHP code via the edit parameter in an upd cmd action. CVE-2007-5694 A path traversal

2007/12/07 18:56:37 | [SECURITY] [DSA 1423-1] New sitebar packages fix several vulnerabilities

from: HostLix.de

[SECURITY] [DSA 1423-1] New sitebar packages fix several vulnerabilities Debian Security Advisories Kein Kommentar » Package : ... (s) : CVE-2007-5491, CVE-2007-5492, CVE-2007-5693, CVE-2007-5694, CVE-2007-5695, CVE-2007-5692 Debian Bug ... PHP code via the edit parameter in an upd cmd action. CVE-2007-5694 A path traversal

2007/11/06 23:02:12 | [gentoo-announce] [ GLSA 200711-05 ] SiteBar: Multiple issues

from: SnTeam Events From Mailing List

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security ... sanitize the value to the "dir" parameter (CVE-2007-5491, CVE-2007-5694); the translation module also