Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6084 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:25.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31873 - https://www.exploit-db.com/exploits/6803 - http://secunia.com/advisories/32380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46041
CVE ID: CVE-2008-6085 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:25.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31846 - http://www.securitytracker.com/id?1021073 - http://www.f-secure.com/security/fsc-2008-3.shtml - htt
ocus.com/bid/31846 - http://www.securitytracker.com/id?1021073 - http://www.f-secure.com/security/fsc-2008-3.shtml - http://secunia.com/advisories/32352 - http://www.vupen.com/english/advisories/2008/2874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46016
CVE ID: CVE-2008-6086 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T11:20:25.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3355. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45803 - http://www.securityfocus.com/bid/31689 - http://sourceforge.net/project/shownotes.php?group_id=70910&release_id=643552 - https://www.exploit-db.com/exploits/6710
CVE ID: CVE-2008-6087 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T11:20:24.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45805 - http://sourceforge.net/project/shownotes.php?group_id=70910&release_id=643552 - https://www.exploit-db.com/exploits/6710
CVE ID: CVE-2008-6088 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T11:20:24.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Joomtracker (com_joomtracker) 1.01 module for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a tordetails action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45798 - https://www.exploit-db.com/exploits/6709 - http://www.securityfocus.com/bid/31676
CVE ID: CVE-2008-6089 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T11:20:25.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a download action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6715 - http://secunia.com/advisories/32210 - http://www.securityfocus.com/bid/31695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45795
CVE ID: CVE-2008-6090 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T11:20:25.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a .. (dot dot) in the dir parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32212 - https://www.exploit-db.com/exploits/6713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45800 - http://www.securityfocus.com/bid/31701
CVE ID: CVE-2008-6091 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T11:20:25.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tagname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45611 - http://www.securityfocus.com/bid/31522 - https://www.exploit-db.com/exploits/6642
CVE ID: CVE-2008-6092 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T11:20:24.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an admin=ja cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31527 - http://secunia.com/advisories/32076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45604 - https://www.exploit-db.com/exploits/6649
CVE ID: CVE-2008-6093 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T11:20:24.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) file_id parameter in a detailansicht action and the (2) kategorie parameter in a kategorien action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6644 - http://www.securityfocus.com/bid/31519 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45612
CVE ID: CVE-2008-6094 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T11:20:25.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via the ni.smessage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/064814.html - http://secunia.com/advisories/32081 - http://www.securityfocus.com/bid/31514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45595
CVE ID: CVE-2008-6095 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T11:20:25.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.opennms.org/show_bug.cgi?id=2760 - http://www.opennms.org/documentation/ReleaseNotesUnStable.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45616 - http://www.securityfocus.com/bid/31539 - http://secunia.com/advisories/32101
CVE ID: CVE-2008-6096 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T11:20:25.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the (1) web interface login page or the (2) telnet login page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31528 - http://www.vupen.com/english/advisories/2008/2713 - http://secunia.com/advisories/32078 - http://www.layereddefense.com/netscreen01oct.html
CVE ID: CVE-2008-6097 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T11:20:25.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to index.php/Special/Main/keywordSearch, (2) revNum parameter to index.php/Edit/Main/Home, (3) to parameter to index.php/Special/Main/WhatLinksHere, (4) user parameter to index.php/Special/Main/UserEdits, and (5) the PATH_INFO to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32087 - https://exchange.xforce
onal Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45603 - http://sourceforge.net/project/shownotes.php?group_id=148518&release_id=647444 - http://osvdb.org/48790 - http://www.digitrustgroup.com/advisories/web-application-security-wikyblog.html - http://www.securityfocus.com/bid/31525
CVE ID: CVE-2008-6098 State: PUBLISHED Published: 2009-02-09T18:00:00 Last Updated: 2024-08-07T11:20:25.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other versions after 2.17.4 allows remote authenticated users to bypass moderation to approve and disapprove quips via a direct request to quips.cgi with the action parameter set to "approve." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=449931 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.com/archives/fedora-package
ww.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46424 - http://www.securityfocus.com/bid/32178 - http://secunia.com/advisories/32501 - http://www.bugzilla.org/security/2.20.6/ - http://secunia.com/advisories/34361
CVE ID: CVE-2008-6099 State: PUBLISHED Published: 2009-02-10T18:00:00 Last Updated: 2024-08-07T11:20:25.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_op parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45618 - https://www.exploit-db.com/exploits/6648 - http://secunia.com/advisories/32075 - http://www.securityfocus.com/archive/1/496891/100/0/threaded
CVE ID: CVE-2008-6100 State: PUBLISHED Published: 2009-02-10T18:00:00 Last Updated: 2024-08-07T11:20:25.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to (a) RSS1.php and (b) RSS2.php in misc/; and the (2) SubID parameter to (c) misc/RSS5.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45610 - http://www.securityfocus.com/bid/31518
CVE ID: CVE-2008-6101 State: PUBLISHED Published: 2009-02-10T18:00:00 Last Updated: 2024-08-07T11:20:25.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary SQL commands via the targetid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45573 - https://www.exploit-db.com/exploits/9387 - http://www.securityfocus.com/bid/31510 - https://www.exploit-db.com/exploits/6909 - http://secunia.com/advisories/32067 - http://packetstorm.linuxsecurity.com/0809-exploits/abe-sql.txt - https://exchange
http://secunia.com/advisories/32067 - http://packetstorm.linuxsecurity.com/0809-exploits/abe-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/52328
CVE ID: CVE-2008-6102 State: PUBLISHED Published: 2009-02-10T18:00:00 Last Updated: 2024-08-07T11:20:25.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL commands via the lnkid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45605 - https://www.exploit-db.com/exploits/6650 - http://www.securityfocus.com/bid/31526
CVE ID: CVE-2008-6103 State: PUBLISHED Published: 2009-02-10T18:00:00 Last Updated: 2024-08-07T11:20:24.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45553 - http://secunia.com/advisories/32083 - http://www.securityfocus.com/bid/31507 - http://packetstormsecurity.org/0809-exploits/a4deskphp-rfi.txt
CVE ID: CVE-2008-6104 State: PUBLISHED Published: 2009-02-10T18:00:00 Last Updated: 2024-08-07T11:20:24.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via the eventid parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33835 - http://secunia.com/advisories/32083 - http://packetstorm.linuxsecurity.com/0810-exploits/a4desk-sqldisclose.txt
CVE ID: CVE-2008-6105 State: PUBLISHED Published: 2009-02-10T21:32:00 Last Updated: 2024-08-07T11:20:24.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29625 - http://www.securitytracker.com/id?1020236 - http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180 - http://secunia.com/ad
://www.securitytracker.com/id?1020236 - http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180 - http://secunia.com/advisories/30433
CVE ID: CVE-2008-6106 State: PUBLISHED Published: 2009-02-10T21:32:00 Last Updated: 2024-08-07T11:20:24.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x has unknown impact and remote attack vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020236 - http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180 - http://secunia.com/advisories/30433
CVE ID: CVE-2008-6107 State: PUBLISHED Published: 2009-02-10T21:32:00 Last Updated: 2024-08-07T11:20:24.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) sys32_mremap function in arch/sparc64/kernel/sys_sparc32.c, the (2) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c, and the (3) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel before 2.6.25.4, omit some virtual-address range (aka span) checks when the mremap MREMAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mremap calls, a related issue to CVE-2008-2137. Additional Analyst Notes: - CVE Program Container: References:
specified mremap calls, a related issue to CVE-2008-2137. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33836 - http://www.vupen.com/english/advisories/2008/1655/references - http://www.ubuntu.com/usn/usn-751-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48710 - http://marc.info/?l=linux-kernel&m=121071103304610&w=2 - http://securitytracker.com/id?1020120 - http://secunia.com/advisories/30258
CVE ID: CVE-2008-6108 State: PUBLISHED Published: 2009-02-10T21:32:00 Last Updated: 2024-08-07T11:20:25.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in result.php in Galatolo WebManager (GWM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5758
CVE ID: CVE-2008-6109 State: PUBLISHED Published: 2009-02-11T00:00:00 Last Updated: 2024-08-07T11:20:25.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by (1) opening unspecified screens, related to the "double click selector bug"; or modifying a (2) animal, (3) owner, (4) lost/found, (5) diary note, (6) owner donation, or (7) waiting list record, related to "change permissions" and the "new UI." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.c
s" and the "new UI." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42139 - http://secunia.com/advisories/30041 - http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220 - http://www.securityfocus.com/bid/29022
CVE ID: CVE-2008-6110 State: PUBLISHED Published: 2009-02-11T01:00:00Z Last Updated: 2024-09-17T03:12:44.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper validation of parameters to profile.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32722 - http://sourceforge.net/project/shownotes.php?release_id=640424
CVE ID: CVE-2008-6111 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQL commands via the note parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32425 - http://www.vupen.com/english/advisories/2008/3247 - https://www.exploit-db.com/exploits/7186 - http://secunia.com/advisories/32784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46783
CVE ID: CVE-2008-6112 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a detail action to (1) main.php and (2) template.php in ringtones/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32431 - http://www.vupen.com/english/advisories/2008/3244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46791 - http://secunia.com/advisories/32767 - https://www.exploit-db.com/exploits/7190
CVE ID: CVE-2008-6113 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the (1) username and (2) profile page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46754 - http://www.securityfocus.com/bid/32409 - http://sourceforge.net/project/shownotes.php?release_id=640424
CVE ID: CVE-2008-6114 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_details.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attackers to execute arbitrary SQL commands via the product parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46784 - http://secunia.com/advisories/32795 - http://www.securityfocus.com/bid/32423
CVE ID: CVE-2008-6115 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action, a different vector than CVE-2008-2083. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46795 - http://secunia.com/advisories/32754 - http://www.securityfocus.com/bid/32427 - http://www.vupen.com/english/advisories/2008/3242
CVE ID: CVE-2008-6116 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46777 - http://www.securityfocus.com/bid/32417 - https://www.exploit-db.com/exploits/7182
CVE ID: CVE-2008-6117 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the poll_view_id parameter in a results action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46789 - https://www.exploit-db.com/exploits/7202 - http://secunia.com/advisories/32837 - http://www.securityfocus.com/bid/32434 - http://www.vupen.com/english/advisories/2008/3237
CVE ID: CVE-2008-6118 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46799 - http://secunia.com/advisories/32819 - http://www.securityfocus.com/bid/32437 - https://www.exploit-db.com/exploits/7205