Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1466 State: PUBLISHED Published: 2008-03-24T21:00:00 Last Updated: 2024-08-07T08:24:42.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bn_dir_default parameter to (1) add_user.php, (2) create_forum.php, (3) create_user.php, (4) delete_notes.php, (5) delete_user.php, (6) edit_forum.php, (7) mail_users.php, (8) moderate_notes.php, and (9) reorder_forums.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: Refere
the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41352 - http://www.securityfocus.com/bid/28366
CVE ID: CVE-2008-1467 State: PUBLISHED Published: 2008-03-24T21:00:00 Last Updated: 2024-08-07T08:24:41.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URI, related to "received URLs in the message window." NOTE: this issue has been disputed due to the user-assisted nature, since the URL must be selected and launched by the victim Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0956/references - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00076.html - https://www.ex
2008/0956/references - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00076.html - https://www.exploit-db.com/exploits/5283 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00073.html - http://secunia.com/advisories/29597 - http://secunia.com/advisories/29489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41362 - http://www.securityfocus.com/bid/28362
CVE ID: CVE-2008-1468 State: PUBLISHED Published: 2008-03-24T21:00:00 Last Updated: 2024-08-07T08:24:42.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=127239985506823&w=2 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http
nfo/?l=bugtraq&m=127239985506823&w=2 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://secunia.com/advisories/29561 - http://secunia.com/advisories/31687 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00575.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://www.securityfocus.com/bid/28380 - http://jvn.jp/jp/JVN%2300892830/index.html - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00654.html - http://secunia.com/advisories/39645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41360 - http://www.namazu.org/security.html.en - http://secunia.com/advisories/293
e.xforce.ibmcloud.com/vulnerabilities/41360 - http://www.namazu.org/security.html.en - http://secunia.com/advisories/29386 - http://marc.info/?l=bugtraq&m=127239985506823&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
CVE ID: CVE-2008-1469 State: PUBLISHED Published: 2008-03-24T21:00:00Z Last Updated: 2024-09-17T03:19:04.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php, and (3) gallery.php in gadmin/, which allows remote attackers to edit objects via a direct request, different vectors than CVE-2008-1327. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29399
CVE ID: CVE-2008-1470 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:41.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and possibly earlier, allows remote attackers to conduct cross-site scripting (XSS) attacks via the postdata parameter, due to an incomplete fix for CVE-2005-1118. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489691/100/0/threaded - http://www.securityfocus.com/bid/28277 - http://securityreason.com/securityalert/3768
CVE ID: CVE-2008-1471 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:42.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29311 - http://www.pandasecurity.com/homeusers/support/card?id=41337&idIdioma=2&ref=ProdExp - http://www.vupen.com/english/advisories/2008/0801/ref
urity.com/homeusers/support/card?id=41337&idIdioma=2&ref=ProdExp - http://www.vupen.com/english/advisories/2008/0801/references - http://www.securityfocus.com/bid/28150 - http://www.trapkit.de/advisories/TKADV2008-001.txt - http://www.securitytracker.com/id?1019568 - http://www.securityfocus.com/archive/1/489292/100/0/threaded - http://www.pandasecurity.com/homeusers/support/card?id=41231&idIdioma=2&ref=ProdExp - https://exchange.xforce.ibmcloud.com/vulnerabilities/41079
CVE ID: CVE-2008-1472 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:42.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28268 - http://www.vupen.com/english/advisories/2008/0902/re
m Container: References: - http://www.securityfocus.com/bid/28268 - http://www.vupen.com/english/advisories/2008/0902/references - http://secunia.com/advisories/29408 - https://www.exploit-db.com/exploits/5264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41225 - http://www.securityfocus.com/archive/1/489893/100/0/threaded - http://www.securitytracker.com/id?1019617 - http://www.securityfocus.com/archive/1/490263/100/0/threaded - http://community.ca.com/blogs/casecurityresponseblog/archive/2008/3/28.aspx
CVE ID: CVE-2008-1473 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:41.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a "Shatter" style attack. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2008.03.10.html - http://www.vupen.com/english/advisories/2008/0843/references - http://www.securitytracker.com/id?1019569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41100 - http://www.securityfocus.com/bid/28110 - http://
?1019569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41100 - http://www.securityfocus.com/bid/28110 - http://secunia.com/advisories/29319
CVE ID: CVE-2008-1474 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:42.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29848 - http://secunia.com/advisories/30274 - http://security.gentoo.org/glsa/glsa-200805-21.xml - http://www.securityfocus.com/bid/28239 - http://secunia.com/advisories/29336 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html - http://www.debi
om/advisories/29336 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html - http://www.debian.org/security/2008/dsa-1554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41241 - http://roundup.cvs.sourceforge.net/roundup/roundup/CHANGES.txt?revision=1.939&view=markup - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html - http://secunia.com/advisories/29375 - https://bugzilla.redhat.com/show_bug.cgi?id=436546 - http://www.vupen.com/english/advisories/2008/0891
CVE ID: CVE-2008-1475 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:42.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set methods. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30274 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00478.html - http://www.securityfocus.com/bid/28238 - http://security.gentoo.org/glsa/glsa-200805-21.xml - http://secunia.com/advisories/29336 - h
curityfocus.com/bid/28238 - http://security.gentoo.org/glsa/glsa-200805-21.xml - http://secunia.com/advisories/29336 - http://sourceforge.net/tracker/index.php?func=detail&aid=1907211&group_id=31577&atid=402788 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00452.html - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html - http://secunia.com/advisories/32805 - http://secunia.com/advisories/29375 - https://bugzilla.redhat.com/show_bug.cgi?id=436546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41240 - http://www.vupen.com/english/advisories/2008/
i?id=436546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41240 - http://www.vupen.com/english/advisories/2008/0891
CVE ID: CVE-2008-1476 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:41.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41343 - http://secunia.com/advisories/29398 - http://www.debian.org/security/2008/dsa-1528 - http://blog.s9y.org/archives/192-Serendipity-1.3-released-addresses-security.html - http://www.securityfocus.com/bid/28298 - http
og.s9y.org/archives/192-Serendipity-1.3-released-addresses-security.html - http://www.securityfocus.com/bid/28298 - http://www.vupen.com/english/advisories/2008/0925/references - http://secunia.com/advisories/29502
CVE ID: CVE-2008-1477 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:41.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in busca.php in eForum 0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) busca and (2) link parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28293 - http://omni.playhack.net/blog/?p=10 - http://www.securityfocus.com/archive/1/489738/100/0/threaded - http://secunia.com/advisories/29380 - http://securityreason.com/securityalert/3767
CVE ID: CVE-2008-1478 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:42.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode connection, then closing the original FTP connection. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5270 - http://secunia.com/advisories/29419 - http://securityreason.com/securityalert/3766 - http://www.securityfocus.com/bid/28283 - http://www.securityfocus.com/archive/1/489706/100/0/threa
/securityalert/3766 - http://www.securityfocus.com/bid/28283 - http://www.securityfocus.com/archive/1/489706/100/0/threaded
CVE ID: CVE-2008-1479 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:42.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in cyberfrogs.net cfnetgs 0.24 allows remote attackers to inject arbitrary web script or HTML via the directory parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41391
CVE ID: CVE-2008-1480 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:41.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-249146-1 - http://secunia.com/advisories/29418 - https://www.exploit-db.com/exploits/5258 - http://www.vupen.com/english/advisories/2009/0206 - http://support.avaya.com/elmodocs2/security/ASA-2009-015.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/41224 - http://www.securi
com/elmodocs2/security/ASA-2009-015.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/41224 - http://www.securityfocus.com/bid/28261 - http://www.securitytracker.com/id?1019652 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5698 - http://www.vupen.com/english/advisories/2008/0918/references
CVE ID: CVE-2008-1481 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:42.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the board parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41417 - http://www.securityfocus.com/bid/28294 - http://www.securityfocus.com/bid/28294/exploit
CVE ID: CVE-2008-1482 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T08:24:42.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV file, which triggers an overflow in demuxers/demux_flv.c; (2) a crafted .MOV file, which triggers an overflow in demuxers/demux_qt.c; (3) a crafted .RM file, which triggers an overflow in demuxers/demux_real.c; (4) a crafted .MVE file, which triggers an overflow in demuxers/demux_wc3movie.c; (5) a crafted .MKV file, which triggers an overflow in demux
e, which triggers an overflow in demuxers/demux_wc3movie.c; (5) a crafted .MKV file, which triggers an overflow in demuxers/ebml.c; or (6) a crafted .CAK file, which triggers an overflow in demuxers/demux_film.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0981/references - https://bugzilla.redhat.com/show_bug.cgi?id=438663 - http://secunia.com/advisories/29622 - http://security.gentoo.org/glsa/glsa-200808-01.xml - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html - http://securityreason.com/securityalert/3769 - http://www.debian.org/security/2008/dsa-1586 - https://www.redhat.com/archives/fedora-packa
son.com/securityalert/3769 - http://www.debian.org/security/2008/dsa-1586 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html - http://secunia.com/advisories/29484 - http://secunia.com/advisories/29756 - http://secunia.com/advisories/29600 - http://secunia.com/advisories/29740 - http://secunia.com/advisories/31393 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:178 - http://aluigi.org/poc/xinehof.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/41350 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00157.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.441137 - http:/
sg00157.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.441137 - http://www.securityfocus.com/bid/28370 - http://www.securityfocus.com/archive/1/489894/100/0/threaded - http://aluigi.altervista.org/adv/xinehof-adv.txt - http://secunia.com/advisories/31372 - http://www.ubuntu.com/usn/usn-635-1 - http://secunia.com/advisories/30337
CVE ID: CVE-2008-1483 State: PUBLISHED Published: 2008-03-24T23:00:00 Last Updated: 2024-08-07T08:24:42.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1123/references - http://support.attachmate.com/techdocs/2374.html - http://www.debian.org/security/2008/dsa-1576 - http://secunia.com/advi
ttp://support.attachmate.com/techdocs/2374.html - http://www.debian.org/security/2008/dsa-1576 - http://secunia.com/advisories/29554 - http://www.vupen.com/english/advisories/2008/1526/references - http://support.avaya.com/elmodocs2/security/ASA-2008-205.htm - http://www.vupen.com/english/advisories/2008/1630/references - http://www.globus.org/mail_archive/security-announce/2008/04/msg00000.html - http://secunia.com/advisories/29686 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://secunia.com/advisories/31531 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188 - http://aix.software.ibm.com/aix/efixes/secur
curity/viewer.php?l=slackware-security&y=2008&m=slackware-security.540188 - http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41438 - https://usn.ubuntu.com/597-1/ - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019235.1-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - https://issues.rpath.com/browse/RPL-2397 - http://www.vupen.com/english/advisories/2008/1624/references - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/30249 - h
ories/2008/1624/references - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/30249 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2008-1483 - http://secunia.com/advisories/29735 - http://secunia.com/advisories/29683 - http://secunia.com/advisories/30361 - http://secunia.com/advisories/31882 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01462841 - http://secunia.com/advisories/29721 - http://www.vupen.com/english/advisories/2008/2396 - http://secunia.com/advisories/29522 - http://secunia.com/advisories/30086 - http://secunia.com/a
/advisories/2008/2396 - http://secunia.com/advisories/29522 - http://secunia.com/advisories/30086 - http://secunia.com/advisories/29939 - http://secunia.com/advisories/30347 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6085 - http://www.vupen.com/english/advisories/2008/0994/references - http://www.securitytracker.com/id?1019707 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237444-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:078 - http://sourceforge.net/project/shownotes.php?release_id=590180&group_id=69227 - http://secunia.com/advisories/29676 - http://secunia.com/advisories/29873 - http://secunia.com/advisories/295
id=69227 - http://secunia.com/advisories/29676 - http://secunia.com/advisories/29873 - http://secunia.com/advisories/29537 - http://secunia.com/advisories/29626 - http://www.securityfocus.com/archive/1/490054/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0120 - http://www.vupen.com/english/advisories/2008/1448/references - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc - http://secunia.com/advisories/30230 - http://www.securityfocus.com/bid/28444 - http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml - http://security.FreeBSD.org/advisories/FreeBSD-SA-08:05.openssh.asc - http://www.vupen.com/english/advisories/2008/1124/references
CVE ID: CVE-2008-1484 State: PUBLISHED Published: 2008-03-24T23:00:00 Last Updated: 2024-08-07T08:24:42.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which allows remote authenticated users to determine the new password via a brute force attack on a seed that is based on the approximate creation time of the targeted account. NOTE: this issue might be related to CVE-2006-5737. Additional Analyst Notes: - CVE Program Container: References: - http://punbb.org/forums/viewtopic.php?id=18460 - http://secunia.com/advisories/29043 - http://sektioneins.de/advisories/SE-20
//punbb.org/forums/viewtopic.php?id=18460 - http://secunia.com/advisories/29043 - http://sektioneins.de/advisories/SE-2008-01.txt - http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt - http://osvdb.org/45561 - http://www.securityfocus.com/archive/1/488408/100/200/threaded - https://www.exploit-db.com/exploits/5165 - http://www.securityfocus.com/bid/27908
CVE ID: CVE-2008-1485 State: PUBLISHED Published: 2008-03-24T23:00:00 Last Updated: 2024-08-07T08:24:42.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the get_host parameter to moderate.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29043 - http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt - http://osvdb.org/45561