Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5589 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1) txtusername parameter (aka username field) or the (2) txtpassword parameter (aka password field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47114 - http://secunia.com/advisories/33012 - http://securityreason.com/securityalert/4746 - http://www.
vulnerabilities/47114 - http://secunia.com/advisories/33012 - http://securityreason.com/securityalert/4746 - http://www.securityfocus.com/bid/32686 - https://www.exploit-db.com/exploits/7350
CVE ID: CVE-2008-5590 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forum_topic_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47144 - http://www.securityfocus.com/bid/32672 - http://securityreason.com/securityalert/4743 - https://www.exploit-db.com/exploits/7368
CVE ID: CVE-2008-5591 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter and possibly other "login fields." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7351 - http://securityreason.com/securityalert/4742 - http://secunia.com/advisories/33011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4711
com/securityalert/4742 - http://secunia.com/advisories/33011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47110 - http://www.securityfocus.com/bid/32658
CVE ID: CVE-2008-5592 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users-zza21.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47111 - http://securityreason.com/securityalert/4742 - http://secunia.com/advisories/33011
CVE ID: CVE-2008-5593 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page and (2) admin parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7375 - http://securityreason.com/securityalert/4750 - http://www.securityfocus.com/bid/32680 - http://secunia.com/advisories/33024
CVE ID: CVE-2008-5594 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page and (2) admin parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47149 - https://www.exploit-db.com/exploits/7374 - http://securityreason.com/securityalert/4744 - http://secunia.com/advisories/33024 - http://www.securityfocus.com/bid/32677
CVE ID: CVE-2008-5595 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47123 - http://secunia.com/advisories/33004 - http://packetstormsecurity.org/0812-exploits/aspautodealer-sqldisclose.txt - https://www.exploit-db.com/exploits/7356 - http://securityreason.com/securityalert/4754 - http://www.securityfocus.com/bid/32663
CVE ID: CVE-2008-5596 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for ikonBAnner_AdManager.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4755 - http://secunia.com/advisories/33029 - https://www.exploit-db.com/exploits/7372
CVE ID: CVE-2008-5597 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47128 - http://securityreason.com/securityalert/4756 - https://www.exploit-db.com/exploits/7353
CVE ID: CVE-2008-5598 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (dot dot) in the group parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7377 - http://www.securityfocus.com/bid/32678 - http://securityreason.com/securityalert/4760
CVE ID: CVE-2008-5599 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter (aka passwd field) in a login action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33009 - http://www.securityfocus.com/bid/32660 - http://securityreason.com/securityalert/4757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47126 - https://www.explo
//securityreason.com/securityalert/4757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47126 - https://www.exploit-db.com/exploits/7352
CVE ID: CVE-2008-5600 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33009 - http://securityreason.com/securityalert/4757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47125 - https://www.exploit-db.com/exploits/7352
CVE ID: CVE-2008-5601 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32993 - http://securityreason.com/securityalert/4758 - http://osvdb.org/50439 - https://www.exploit-db.com/exploits/7338
CVE ID: CVE-2008-5602 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47147 - https://www.exploit-db.com/exploits/7370 - http://securityreason.com/securityalert/4761
CVE ID: CVE-2008-5603 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for news.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47143 - https://www.exploit-db.com/exploits/7359 - http://securityreason.com/securityalert/4762 - http://secunia.com/advisories/23573
CVE ID: CVE-2008-5604 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7342 - http://secunia.com/advisories/32984 - http://www.securityfocus.com/bid/32643 - http://osvdb.org/50433 - http://securityreason.com/securityalert/4765 - https://exchange.xforce.ibmcloud.com/vulnerabi
- http://osvdb.org/50433 - http://securityreason.com/securityalert/4765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47097
CVE ID: CVE-2008-5605 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47127 - http://www.securityfocus.com/bid/32662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47268 - http://securityreason.com/securityalert/4763 - https://www.exploit-db.com/exploits/7357
CVE ID: CVE-2008-5606 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4764 - http://secunia.com/advisories/33008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47152 - https://www.exploit-db.com/exploits/7376
CVE ID: CVE-2008-5607 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4759 - http://www.securityfocus.com/bid/32615 - https://www.exploit-db.com/exploits/7331
CVE ID: CVE-2008-5608 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7360 - https://www.exploit-db.com/exploits/7356 - http://securityreason.com/securityalert/4754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47124
CVE ID: CVE-2008-5609 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:56:47.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2870 - http://typo3.org/teams/security/security-bulletins/typo3-20081020-2/ - http://typo3.org/extensions/repository/view/commerce/0.9.7/
CVE ID: CVE-2008-5616 State: PUBLISHED Published: 2008-12-17T01:00:00 Last Updated: 2024-08-07T10:56:47.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34845 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:014 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:013 - http://www.securityfocus.com/bid/32822 - http://www.securityfocus.com/archive/1/499214/100/0/threade
me=MDVSA-2009:013 - http://www.securityfocus.com/bid/32822 - http://www.securityfocus.com/archive/1/499214/100/0/threaded - http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?r1=24723&r2=28150&pathrev=28150 - http://www.debian.org/security/2009/dsa-1782 - http://trapkit.de/advisories/TKADV2008-014.txt - http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?view=log&pathrev=28150#rev28150 - http://secunia.com/advisories/33136
CVE ID: CVE-2008-5617 State: PUBLISHED Published: 2008-12-17T02:00:00 Last Updated: 2024-08-07T10:56:47.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.rsyslog.com/Article327.phtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/47080 - http://www.rsyslog.com/Article322.phtml - http://www.rsyslog.com/Topic4.phtml - http://www.securityfocus.com/bid/32630 -
http://www.rsyslog.com/Article322.phtml - http://www.rsyslog.com/Topic4.phtml - http://www.securityfocus.com/bid/32630 - http://secunia.com/advisories/32857
CVE ID: CVE-2008-5618 State: PUBLISHED Published: 2008-12-17T02:00:00Z Last Updated: 2024-09-16T18:34:14.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial of service (disk consumption) via a large number of spurious messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.rsyslog.com/Topic4.phtml
CVE ID: CVE-2008-5619 State: PUBLISHED Published: 2008-12-17T02:00:00 Last Updated: 2024-08-07T10:56:47.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch. Additional Analyst Notes: - CVE Program Container: References: - http://mahara.org/interaction/forum/topic.php?id=533 - https://www.exploit-db.com/exploits/7549 - https://www.exploit-db.com/exploits/7553 - https://ww
orum/topic.php?id=533 - https://www.exploit-db.com/exploits/7549 - https://www.exploit-db.com/exploits/7553 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00802.html - http://www.vupen.com/english/advisories/2008/3418 - https://github.com/PHPMailer/PHPMailer/commit/8beacc646acb67c995aea10ac5585970efc7355a - http://trac.roundcube.net/changeset/2148 - http://osvdb.org/53893 - http://sourceforge.net/forum/forum.php?forum_id=898542 - http://secunia.com/advisories/34789 - http://www.vupen.com/english/advisories/2008/3419 - http://trac.roundcube.net/ticket/1485618 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00783.html - http://www.openwall
cket/1485618 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00783.html - http://www.openwall.com/lists/oss-security/2008/12/12/1 - http://secunia.com/advisories/33170 - http://secunia.com/advisories/33145 - http://www.securityfocus.com/archive/1/499489/100/0/threaded
CVE ID: CVE-2008-5620 State: PUBLISHED Published: 2008-12-17T02:00:00 Last Updated: 2024-08-07T10:56:47.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a large quota image. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47550 - http://sourceforge.net/forum/forum.php?forum_id=898542
CVE ID: CVE-2008-5621 State: PUBLISHED Published: 2008-12-17T02:00:00 Last Updated: 2024-08-07T10:56:47.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tbl_structure.php with a modified table parameter. NOTE: other unspecified pages are also reachable, but they have the same root cause. NOTE: this can be leveraged to conduct SQL injection attacks and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensu
xecute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://www.vupen.com/english/advisories/2008/3501 - http://security.gentoo.org/glsa/glsa-200903-32.xml - http://www.debian.org/security/2009/dsa-1723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47168 - http://securityreason.com/securityalert/4753 - http://www.vupen.com/english/advisories/2008/3402 - http://osvdb.org/50894 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00784.html - http://secunia.com/advisories/33146 - http://www.phpmyadmin.net/home_page/security/PMASA-2008-10.php - http://se
.html - http://secunia.com/advisories/33146 - http://www.phpmyadmin.net/home_page/security/PMASA-2008-10.php - http://secunia.com/advisories/33822 - http://secunia.com/advisories/33246 - http://www.openwall.com/lists/oss-security/2009/02/12/1 - http://www.securityfocus.com/bid/32720 - http://secunia.com/advisories/33912 - https://www.exploit-db.com/exploits/7382 - http://secunia.com/advisories/33076 - http://typo3.org/teams/security/security-bulletins/typo3-20081222-1/
CVE ID: CVE-2008-5622 State: REJECTED Published: 2008-12-17T02:00:00 Last Updated: 2009-02-05T10:00:00 Description: No description available.
CVE ID: CVE-2008-5624 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as demonstrated by a setting of /etc for the error_log variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.securityfocus.c
c.info/?l=bugtraq&m=125631037611762&w=2 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.securityfocus.com/archive/1/501376/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47318 - http://wiki.rpath.com/Advisories:rPSA-2009-0035 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://www.securityfocus.com/bid/32688 - http://secunia.com/advisories/35003 - http://www.php.net/ChangeLog-5.php#5.2.7 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:045 - http://osvdb.org/50483 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://securityreason.com/achievement_securityalert/59 - http://osvdb.org/52207 - http://www.securityfocus.com/arch
=2 - http://securityreason.com/achievement_securityalert/59 - http://osvdb.org/52207 - http://www.securityfocus.com/archive/1/498985/100/0/threaded - http://secunia.com/advisories/35650 - http://www.debian.org/security/2009/dsa-1789
CVE ID: CVE-2008-5625 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.securityfocus.com/archive/1/501376/100/0/threaded - http://wiki.rpath.com/
?l=bugtraq&m=124654546101607&w=2 - http://www.securityfocus.com/archive/1/501376/100/0/threaded - http://wiki.rpath.com/Advisories:rPSA-2009-0035 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47314 - http://www.securityfocus.com/bid/32383 - http://securityreason.com/achievement_securityalert/57 - http://osvdb.org/52205 - http://www.php.net/ChangeLog-5.php#5.2.7 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:045 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://archives.neohapsis.com/archives/bugtraq/2008-11/0152.html - https://www.exploit-db.com/exploits/7171 - http://secunia.com/advisories/35650
CVE ID: CVE-2008-5626 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command, as demonstrated by a -1 argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31739 - http://securityreason.com/securityalert/4766 - https://www.exploit-db.com/exploits/6741 - http://www.vupen.com/english/advisories/2008/2803