Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rogram Container: References: - http://www.websense.com/support/article/kbarticle/v7-1-About-Hotfix-109-for-Websense-Web-Security-Web-Filter-and-Web-Security-Gateway - http://www.websense.com/support/article/kbarticle/v7-1-1-About-Hotfix-06-for-Web-Security-Web-Filter-and-Web-Security-Gateway - http://www.websense.com/support/article/kbarticle/v7-5-1-About-Hotfix-12-for-Websense-Web-Security-Web-Filter-Web-Security-Gateway-and-Web-Security-Gateway-Anywhere - http://www.websense.com/support/article/kbarticle/v7-6-2-About-Hotfix-12-for-Websense-Web-Security-Websense-Web-Filter-and-Web-Security-Gateway - http://www.websense.com/support/article/kbarticle/v7-6-2-About-Hotfix-12-for-Websense-Web-S
r-and-Web-Security-Gateway - http://www.websense.com/support/article/kbarticle/v7-6-2-About-Hotfix-12-for-Websense-Web-Security-Web-Filter-Web-Security-Gateway-and-Web-Security-Gateway-Anywhere - http://www.websense.com/support/article/kbarticle/v7-6-About-Hotfix-24-for-Websense-Web-Security-Web-Filter-Web-Security-Gateway-and-Web-Security-Gateway-Anywhere - http://www.websense.com/support/article/kbarticle/v7-5-About-Hotfix-78-for-Websense-Web-Security-Web-Filter-Web-Security-Gateway-and-Web-Security-Gateway-Anywhere - http://www.websense.com/support/article/kbarticle/v7-6-About-Hotfix-24-for-Websense-Web-Security-Websense-Web-Filter-and-Web-Security-Gateway
CVE ID: CVE-2011-5103 State: PUBLISHED Published: 2012-08-23T20:00:00 Last Updated: 2024-08-07T00:23:40.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18156 - http://www.securityfocus.com/bid/50815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71481
CVE ID: CVE-2011-5104 State: PUBLISHED Published: 2012-08-23T20:00:00 Last Updated: 2024-08-07T00:23:40.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46957 - http://plugins.trac.wordpress.org/changeset?reponame=&new=463447%40wp-e-commerce&old=463446%40wp-e-commerce - https://e
http://plugins.trac.wordpress.org/changeset?reponame=&new=463447%40wp-e-commerce&old=463446%40wp-e-commerce - https://exchange.xforce.ibmcloud.com/vulnerabilities/71443 - http://osvdb.org/77249 - http://www.securityfocus.com/bid/50757 - http://wordpress.org/extend/plugins/wp-e-commerce/changelog/
CVE ID: CVE-2011-5105 State: PUBLISHED Published: 2012-08-23T20:00:00 Last Updated: 2024-08-07T00:23:40.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274. Additional Analyst Notes: - CVE Program Container: References: - http://jameswebb.me/vulns/vrpth-2011-001.txt - http://www.securityfocus.com/archive/1/520562/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/71395 - http
ww.securityfocus.com/archive/1/520562/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/71395 - http://www.securityfocus.com/bid/50717
CVE ID: CVE-2011-5106 State: PUBLISHED Published: 2012-08-23T20:00:00 Last Updated: 2024-08-07T00:23:40.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71415 - http://www.securityfocus.com/bid/50719 - http://www.securityfocus.com/archive/1/520542/100/0/threaded - http://wordpress.org/extend/plugins/flexible-custom-post-type/changelog/ - http://plugins.tr
e/1/520542/100/0/threaded - http://wordpress.org/extend/plugins/flexible-custom-post-type/changelog/ - http://plugins.trac.wordpress.org/changeset?reponame=&new=466252%40flexible-custom-post-type&old=465583%40flexible-custom-post-type
CVE ID: CVE-2011-5107 State: PUBLISHED Published: 2012-08-23T20:00:00 Last Updated: 2024-08-07T00:23:40.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in post_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520590/100/0/threaded - http://www.securityfocus.com/bid/50743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71413
CVE ID: CVE-2011-5108 State: PUBLISHED Published: 2012-08-23T20:00:00 Last Updated: 2024-08-07T00:23:40.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71483 - http://packetstormsecurity.org/files/view/107253/adaptcms-sql.txt - http://www.securityfocus.com/bid/50795
CVE ID: CVE-2011-5109 State: PUBLISHED Published: 2012-08-23T20:00:00 Last Updated: 2024-08-07T00:23:40.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to (1) category_list.php, (2) Copy_of_calendar_list.php, (3) customer_statistics_list.php, (4) customer_list.php, and (5) task_statistics_list.php in the worldcalendar directory. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77248 - http://osvdb.org/77244 - http://osvdb.org/77246 - http://secunia.com/advi
tainer: References: - http://osvdb.org/77248 - http://osvdb.org/77244 - http://osvdb.org/77246 - http://secunia.com/advisories/46970 - http://www.securityfocus.com/archive/1/520573/100/0/threaded - http://www.exploit-db.com/exploits/18127 - http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0305.html - http://www.securityfocus.com/bid/50733 - http://osvdb.org/77247 - http://osvdb.org/77245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71403
CVE ID: CVE-2011-5110 State: PUBLISHED Published: 2012-08-23T20:00:00 Last Updated: 2024-08-07T00:23:40.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to (1) _authors_list.php, (2) _blogs_list.php, (3) _category_list.php, (4) _comments_list.php, (5) _policy_list.php, (6) _rate_list.php, (7) categoriesblogs_list.php, (8) chosen_authors_list.php, (9) chosen_blogs_list.php, (10) chosen_comments_list.php, and (11) help_list.php in blogs/. Additional Analyst Notes: - CVE Program Container: References: -
en_comments_list.php, and (11) help_list.php in blogs/. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0303.html - http://osvdb.org/77255 - http://osvdb.org/77256 - http://osvdb.org/77259 - http://osvdb.org/77251 - http://osvdb.org/77257 - http://osvdb.org/77258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71401 - http://www.exploit-db.com/exploits/18129 - http://sourceforge.net/tracker/?func=detail&aid=3506818&group_id=219284&atid=1045881 - http://osvdb.org/77252 - http://osvdb.org/77260 - http://osvdb.org/77254 - http://www.securityfocus.com/archive/1/520571/100/0/threaded - http://www.securityfocus.c
260 - http://osvdb.org/77254 - http://www.securityfocus.com/archive/1/520571/100/0/threaded - http://www.securityfocus.com/bid/50731 - http://osvdb.org/77250 - http://osvdb.org/77253 - http://secunia.com/advisories/46918
CVE ID: CVE-2011-5111 State: PUBLISHED Published: 2012-08-23T20:00:00 Last Updated: 2024-08-07T00:23:40.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to (1) the data module in alumni.php; or the (2) lih_buku, (3) artikel, (4) album, or (5) berita module in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50797 - http://packetstormsecurity.org/files/view/107254/cmsbalitbang-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/71466
CVE ID: CVE-2011-5112 State: PUBLISHED Published: 2012-08-23T20:00:00Z Last Updated: 2024-09-16T16:43:39.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Alameda (com_alameda) component before 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the storeid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18058 - http://www.blueflyingfish.com/alameda/index.php?option=com_content&view=article&id=7:security-releases&catid=5:security-releases&Itemid=28
CVE ID: CVE-2011-5113 State: PUBLISHED Published: 2012-08-23T20:00:00Z Last Updated: 2024-09-16T20:37:03.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio (com_techfolio) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18042 - http://docs.joomla.org/Vulnerable_Extensions_List#Techfolio_1.0
CVE ID: CVE-2011-5114 State: PUBLISHED Published: 2012-08-23T20:00:00Z Last Updated: 2024-09-17T00:01:53.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) zoneid or (2) scope parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=33 - http://www.securitytracker.com/id?1026283
CVE ID: CVE-2011-5115 State: PUBLISHED Published: 2012-08-23T20:00:00Z Last Updated: 2024-09-17T02:06:48.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the searchCart parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46855 - http://packetstormsecurity.org/files/106859/dlguardshoppingcart-xss.txt
CVE ID: CVE-2011-5116 State: PUBLISHED Published: 2012-08-23T20:00:00Z Last Updated: 2024-09-16T22:08:45.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in setseed-hub in SetSeed CMS 5.8.20, 5.11.2, and earlier allows remote attackers to execute arbitrary SQL commands via the loggedInUser cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18065 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5053.php
CVE ID: CVE-2011-5117 State: PUBLISHED Published: 2012-08-24T10:00:00Z Last Updated: 2024-09-16T23:30:23.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.sophos.com/en-us/support/knowledgebase/112655.aspx
CVE ID: CVE-2011-5118 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-17T01:45:37.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in Comodo Internet Security before 5.8.213334.2131 allow local users to bypass the Defense+ feature via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2011-5119 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-16T22:45:12.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in Comodo Internet Security before 5.8.211697.2124 allow local users to bypass the Defense+ feature via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2011-5120 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-16T23:45:57.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Antivirus component in Comodo Internet Security before 5.4.189822.1355 allows remote attackers to cause a denial of service (application crash) via a crafted .PST file. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2011-5121 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-17T01:36:06.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not properly check whether unspecified X.509 certificates are revoked, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2011-5122 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-17T00:46:17.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Antivirus component in Comodo Internet Security before 5.3.175888.1227 allows remote attackers to cause a denial of service (application crash) via a crafted compressed file. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2011-5123 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-17T02:47:22.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in signed executable files have been revoked, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2011-5124 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-16T16:13:42.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp). Additional Analyst Notes: - CVE Program Container: References: - https://kb.bluecoat.com/index?page=content&id=SA55
CVE ID: CVE-2011-5125 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-16T16:22:36.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method. Additional Analyst Notes: - CVE Program Container: References: - https://kb.bluecoat.com/index?page=content&id=SA62
CVE ID: CVE-2011-5126 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-17T00:46:29.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allows context-dependent attackers to obtain sensitive authentication information by leveraging read access to a downloaded core file. Additional Analyst Notes: - CVE Program Container: References: - https://kb.bluecoat.com/index?page=content&id=SA56
CVE ID: CVE-2011-5127 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-17T01:20:47.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://kb.bluecoat.com/index?page=content&id=SA60
CVE ID: CVE-2011-5128 State: PUBLISHED Published: 2012-08-29T01:00:00Z Last Updated: 2024-09-16T16:59:06.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) inc-options/deinstall_options.php, (2) inc-options/theme_options.php, or (3) inc-options/im_export_options.php, or the (4) post or (5) post_ID parameters to adminimize.php, different vectors than CVE-2011-4926. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/adminimize/changelog/
itional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/adminimize/changelog/ - http://plugins.trac.wordpress.org/changeset?reponame=&new=467338%40adminimize&old=466900%40adminimize#file5
CVE ID: CVE-2011-5129 State: PUBLISHED Published: 2012-08-30T22:00:00 Last Updated: 2024-08-07T00:23:40.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50820 - http://www.securitytracker.com/id?1027468 - http://www.osvdb.org/77629 - http://www.exploit-db.com/exploits/18159 - http://packetstormsecurity.org/files/107312/xchat-dos.txt
CVE ID: CVE-2011-5130 State: PUBLISHED Published: 2012-08-30T22:00:00 Last Updated: 2024-08-07T00:23:40.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47069 - http://sourceforge.net/apps/trac/fam-connections/ticket/407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71618 - http://www.exploit-db.com/exploits/18198 - http://www.exploit-db.com/exploits/18208 - https://www.familycm
ities/71618 - http://www.exploit-db.com/exploits/18198 - http://www.exploit-db.com/exploits/18208 - https://www.familycms.com/blog/2011/11/security-vulnerability-fcms-2-5-2-7-1/ - http://osvdb.org/77492
CVE ID: CVE-2011-5131 State: PUBLISHED Published: 2012-08-30T22:00:00 Last Updated: 2024-08-07T00:23:40.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://dev.mybb.com/issues/1729 - http://www.osvdb.org/77327 - http://secunia.com/advisories/46951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71462 - http://blog.mybb.com/2011/11/25/mybb-1-6-5-released-feature-update-security-maintenanc
cloud.com/vulnerabilities/71462 - http://blog.mybb.com/2011/11/25/mybb-1-6-5-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/50816
CVE ID: CVE-2011-5132 State: PUBLISHED Published: 2012-08-30T22:00:00 Last Updated: 2024-08-07T00:23:40.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71461 - http://secunia.com/advisories/46951 - http://blog.mybb.com/2011/11/25/mybb-1-6-5-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/50816 - http://www.osvdb.org/77326
CVE ID: CVE-2011-5133 State: PUBLISHED Published: 2012-08-30T22:00:00Z Last Updated: 2024-09-17T00:51:26.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46951 - http://www.osvdb.org/77325 - http://blog.mybb.com/2011/11/25/mybb-1-6-5-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/50816
CVE ID: CVE-2011-5134 State: PUBLISHED Published: 2012-08-30T22:00:00Z Last Updated: 2024-09-16T18:17:48.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.joomlacontenteditor.net/news/item/jce-2018-released?category_id=32 - http://secunia.com/advisor
References: - http://www.joomlacontenteditor.net/news/item/jce-2018-released?category_id=32 - http://secunia.com/advisories/47190 - http://www.osvdb.org/77579
CVE ID: CVE-2011-5135 State: PUBLISHED Published: 2012-08-30T22:00:00 Last Updated: 2024-08-07T00:23:40.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the (1) coursereportuiconfig[name] or (2) coursereportuiconfig[description] parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18224 - https://twitter.com/claudioerba73/status/143383179162685440 - https://exch
- http://www.exploit-db.com/exploits/18224 - https://twitter.com/claudioerba73/status/143383179162685440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71720