Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6190 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in EEBCMS 0.95 allows remote attackers to inject arbitrary web script or HTML via the content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45828 - http://packetstormsecurity.org/0810-exploits/eebcms-xss.txt
CVE ID: CVE-2008-6191 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users to decrypt certain .bin files. NOTE: it is not clear whether this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31540 - http://www.kb.cert.org/vuls/id/778427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44538 - http://www.securityfocus.com/bid/30736
CVE ID: CVE-2008-6192 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in unspecified Portlets in Sun Java System Portal Server 7.0 and 7.1 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239308-1 - http://www.securityfocus.com/bid/30738 - http://www.vupen.com/english/advisories/2008/2404 - http://www.securitytracker.com/id?1020706 - http://secunia.com/advisories/31538 - https://exchange.xfo
ories/2008/2404 - http://www.securitytracker.com/id?1020706 - http://secunia.com/advisories/31538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44531
CVE ID: CVE-2008-6193 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48843
CVE ID: CVE-2008-6194 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consumption) via DNS packets. NOTE: this issue reportedly exists because of an incorrect fix for CVE-2007-3898. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491815/100/0/threaded - http://www.securityfocus.com/archive/1/491831/100/0/threaded
CVE ID: CVE-2008-6195 State: PUBLISHED Published: 2009-02-20T00:00:00 Last Updated: 2024-08-07T11:20:25.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48852 - http://www.securityfocus.com/archive/1/490390/100/0/threaded - http://community.landesk.com/support/docs/DOC-2659 - http://www.secu
securityfocus.com/archive/1/490390/100/0/threaded - http://community.landesk.com/support/docs/DOC-2659 - http://www.securityfocus.com/bid/28577
CVE ID: CVE-2008-6196 State: PUBLISHED Published: 2009-02-20T00:00:00 Last Updated: 2024-08-07T11:20:25.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITE_BASE parameter to (1) browser.php, (2) image_editor.php and (3) skin_chooser.php in configuration/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28563/exploit - http://www.securityfocus.com/bid/28563 -
ogram Container: References: - http://www.securityfocus.com/bid/28563/exploit - http://www.securityfocus.com/bid/28563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41630
CVE ID: CVE-2008-6197 State: PUBLISHED Published: 2009-02-20T00:00:00 Last Updated: 2024-08-07T11:20:25.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute arbitrary SQL commands via the id_gal parameter in a gal action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41621 - https://www.exploit-db.com/exploits/5350 - http://www.securityfocus.com/bid/28590
CVE ID: CVE-2008-6198 State: PUBLISHED Published: 2009-02-20T00:00:00 Last Updated: 2024-08-07T11:20:25.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41685 - http://www.securityfocus.com/bid/28652
CVE ID: CVE-2008-6199 State: PUBLISHED Published: 2009-02-20T00:00:00 Last Updated: 2024-08-07T11:20:25.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: 2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information via a direct request to backup.php, which creates backup.sql under the web root with insufficient access control. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41912
CVE ID: CVE-2008-6200 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject arbitrary web script or HTML via (1) the query string and (2) a new wiki entry. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48839 - http://www.securityfocus.com/archive/1/490561/100/0/threaded - http://www.securityfocus.com/bid/28680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48838
CVE ID: CVE-2008-6201 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5449 - http://secunia.com/advisories/29802 - http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=49 - http://www.vupen.com/english/adv
http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=news&ac=commentaires&id=49 - http://www.vupen.com/english/advisories/2008/1241/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41950 - http://www.securityfocus.com/archive/1/490861 - http://www.securityfocus.com/bid/28788
CVE ID: CVE-2008-6202 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) urun.asp, (2) admin/bayi_listele.asp, (3) admin/urun_grup_listele.asp, and (4) admin/urun_listele.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48835 - https://www.exploit-db.com/exploits/5373
CVE ID: CVE-2008-6203 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28831 - http://www.securityfocus.com/bid/28831/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/42739
CVE ID: CVE-2008-6204 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to secure/admin/guncelle.asp, (2) kulad and sifre parameters to secure/admin/giris.asp, and (3) username and password to secure/admin/default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1161/references - https://www.exploit-db.com/exploits/5409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41727 -
161/references - https://www.exploit-db.com/exploits/5409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41727 - http://www.securityfocus.com/bid/28709
CVE ID: CVE-2008-6205 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in seeurl.php in Xavier Flahaut URLStreet 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) language, (2) order, and (3) filter parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/28650.html - http://www.securityfocus.com/bid/28650 - https://exchange.xforce.ibmc
ityfocus.com/vulnerabilities/exploits/28650.html - http://www.securityfocus.com/bid/28650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41731
CVE ID: CVE-2008-6206 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter to (1) graph.php and (2) robotstats.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41690 - http://www.securityfocus.com/bid/28615/exp
.com/bid/28615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41690 - http://www.securityfocus.com/bid/28615/exploit
CVE ID: CVE-2008-6207 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in form_upload.php in PHPG Upload 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42119
CVE ID: CVE-2008-6208 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in submitnews.php in e107 CMS 0.7.11 allows remote attackers to inject arbitrary web script or HTML via the (1) author_name, (2) itemtitle, and (3) item parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42248 - http://www.securityfocus.com/bid/28982 - http://www.juniper.net/security/auto/vulnera
mcloud.com/vulnerabilities/42248 - http://www.securityfocus.com/bid/28982 - http://www.juniper.net/security/auto/vulnerabilities/vuln28982.html
CVE ID: CVE-2008-6209 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_product.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6377 - https://www.exploit-db.com/exploits/5359 - http://www.securityfocus.com/bid/28620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41666
CVE ID: CVE-2008-6210 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL commands via the img_id parameter in the gallerypic page. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5415 - http://www.juniper.net/security/auto/vulnerabilities/vuln28711.html - http://www.securityfocus.com/bid/28711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41740
CVE ID: CVE-2008-6211 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the lang parameter to (1) admin.php, (2) index.php, (3) sess.php, (4) stats.php, (5) detail.php, (6) resize.php, and (7) show.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.juniper.net/security/auto/vulnerabilities/vuln28587.html - ht
t Notes: - CVE Program Container: References: - http://www.juniper.net/security/auto/vulnerabilities/vuln28587.html - http://www.securityfocus.com/bid/28587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41637 - http://downloads.securityfocus.com/vulnerabilities/exploits/28587.html
CVE ID: CVE-2008-6212 State: PUBLISHED Published: 2009-02-20T01:00:00 Last Updated: 2024-08-07T11:20:25.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the (1) sel_mese and (2) sel_anno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28824 - http://www.juniper.net/security/auto/vulnerabilities/vuln28824.html - http://www.securityfocus.com/bid/
.com/bid/28824 - http://www.juniper.net/security/auto/vulnerabilities/vuln28824.html - http://www.securityfocus.com/bid/28824/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/42729
CVE ID: CVE-2008-6213 State: PUBLISHED Published: 2009-02-20T17:00:00 Last Updated: 2024-08-07T11:20:25.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary SQL commands via the trg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46207 - http://www.vupen.com/english/advisories/2008/2964 - http://secunia.com/advisories/32467 - https://www.exploit-db.com/exploits/6874 - http://www.securityfocus.com/archive/1/497946
CVE ID: CVE-2008-6214 State: PUBLISHED Published: 2009-02-20T17:00:00 Last Updated: 2024-08-07T11:20:25.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46209 - http://www.securityfocus.com/bid/31994 - http://www.vupen.com/english/advisories/2008/2962 - https://www.exploit-db.com/exploits/6877 - http://secunia.com/advisories/32467
CVE ID: CVE-2008-6215 State: PUBLISHED Published: 2009-02-20T17:00:00 Last Updated: 2024-08-07T11:20:25.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46225 - http://www.securityfocus.com/bid/31990 - http://osvdb.org/49447 - https://www.exploit-db.com/exploits/6876
CVE ID: CVE-2008-6216 State: PUBLISHED Published: 2009-02-20T17:00:00 Last Updated: 2024-08-07T11:20:25.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46226 - http://secunia.com/advisories/32430 - http://osvdb.org/49446 - http://www.securityfocus.com/bid/31990 - http://www.vupen.com/english/advisories/2008/2963 - https://www.exploit-db.com/exploits/6876
CVE ID: CVE-2008-6217 State: PUBLISHED Published: 2009-02-20T17:00:00 Last Updated: 2024-08-07T11:20:25.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Extrakt Framework 0.7 allows remote attackers to inject arbitrary web script or HTML via the plugins[file][id] parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46186 - http://www.securityfocus.com/bid/31971/exploit - http://www.securityfocus.com/bid/31971
CVE ID: CVE-2008-6218 State: PUBLISHED Published: 2009-02-20T17:00:00 Last Updated: 2024-08-07T11:20:25.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46115 - http://security.gentoo.org/glsa/glsa-200903-28.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2010:133 - http://www.vupen.com/english/advisories/2008/2917 - http://www.securityfocu
om/security/advisories?name=MDVSA-2010:133 - http://www.vupen.com/english/advisories/2008/2917 - http://www.securityfocus.com/bid/31920 - http://www.vupen.com/english/advisories/2010/1837 - http://secunia.com/advisories/34388 - http://secunia.com/advisories/32418 - http://sourceforge.net/project/shownotes.php?release_id=635463&group_id=5624 - http://secunia.com/advisories/34265 - http://sourceforge.net/project/shownotes.php?release_id=635837 - http://wiki.rpath.com/Advisories:rPSA-2009-0046 - http://www.securitytracker.com/id?1021104 - http://www.debian.org/security/2009/dsa-1750 - http://www.securityfocus.com/archive/1/501767/100/0/threaded - http://secunia.com/advisories/34320
CVE ID: CVE-2008-6219 State: PUBLISHED Published: 2009-02-20T17:00:00 Last Updated: 2024-08-07T11:20:25.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Module for Meditech 2.0 and earlier, and PowerSnap 2.4 SP1 and earlier does not properly control the allocation of memory, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests. Ad
ry, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497645/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46035 - http://www.securityfocus.com/archive/1/497666/100/0/threaded - http://www.securityfocus.com/bid/31866 - http://www.securitytracker.com/id?1021095 - http://secunia.com/advisories/32383 - http://www.fortiguardcenter.com/advisory/FGA-2008-23.html - http://www.vupen.com/english/advisories/2008/2894
CVE ID: CVE-2008-6220 State: PUBLISHED Published: 2009-02-20T21:25:00 Last Updated: 2024-08-07T11:20:25.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46342 - http://secunia.com/advisories/32502 - https://www.exploit-db.com/exploits/6987
CVE ID: CVE-2008-6221 State: PUBLISHED Published: 2009-02-20T21:25:00 Last Updated: 2024-08-07T11:20:25.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46378 - https://www.exploit-db.com/exploits/7002 - http://www.vupen.com/english/advisories/2008/3021 - http://www.securityfocus.com/
s://www.exploit-db.com/exploits/7002 - http://www.vupen.com/english/advisories/2008/3021 - http://www.securityfocus.com/bid/32135