Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-7092 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:14.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to inject arbitrary web script or HTML via a Javascript event in the (1) url, (2) PageName, and (3) title parameters in a CustomBookMarkLink action to Campaign/Campaign; (4) a Javascript event in the displayIcon parameter to Campaign/updateOfferTemplateSubmit.do (aka the templates web page); (5) crafted input to Campaign/CampaignListener (aka the listener server), which is not properly handled when displaying the st
afted input to Campaign/CampaignListener (aka the listener server), which is not properly handled when displaying the status log; and (6) id parameter to Campaign/campaignDetails.do, (7) id parameter to Campaign/offerDetails.do, (8) function parameter to Campaign/Campaign, (9) sessionID parameter to Campaign/runAllFlowchart.do, (10) id parameter in an edit action to Campaign/updateOfferTemplatePage.do, (11) Frame parameter in a LoadFrame action to Campaign/Campaign, (12) affiniumUserName parameter to manager/jsp/test.jsp, (13) affiniumUserName parameter to Campaign/main.do, and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ib
and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44073 - http://www.osvdb.org/47528 - http://secunia.com/advisories/31280 - http://www.osvdb.org/47524 - http://www.securityfocus.com/bid/30433 - http://www.osvdb.org/47520 - http://www.osvdb.org/47523 - http://www.osvdb.org/47526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44074 - http://www.osvdb.org/47530 - http://www.portcullis.co.uk/289.php - http://www.osvdb.org/47522 - http://www.portcullis.co.uk/290.php - http://www.osvdb.org/47525 - http://www.portcullis.co.uk/286.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/44072
/www.osvdb.org/47525 - http://www.portcullis.co.uk/286.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/44072 - http://www.osvdb.org/47521 - http://www.portcullis.co.uk/288.php
CVE ID: CVE-2008-7093 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:14.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to (1) create arbitrary directories or files via a .. (dot dot) in the folder name in the new folder functionality or (2) list arbitrary files via a crafted request to Campaign/CampaignListener. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44075 - http://www.portcullis.co.uk/287.php - http://secunia.com/advisories/31280 - http://www.securityfocus.com/
lities/44075 - http://www.portcullis.co.uk/287.php - http://secunia.com/advisories/31280 - http://www.securityfocus.com/bid/30433 - http://www.osvdb.org/47529 - http://www.osvdb.org/47519 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44071 - http://www.portcullis.co.uk/291.php
CVE ID: CVE-2008-7094 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:13.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Campaign/CampaignListener in the listener server in Unica Affinium Campaign 7.2.1.0.55 allows remote attackers to cause a denial of service (server crash) via a crafted length field that triggers (1) connection exhaustion or (2) memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31280 - http://www.securityfocus.com/bid/30433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44076 - http://www.osvdb.org/47518 - http://www.portcullis.co.uk/292.php
CVE ID: CVE-2008-7095 State: PUBLISHED Published: 2009-08-27T18:00:00 Last Updated: 2024-08-07T11:56:14.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to (1) read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName (1.3.6.1.6.3.18.1.1.1.2) or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName (1.3.6.1.6.3.16.1.2.1.3) with knowledge of one community string, and (2) read SNMPv3 user names via SNMP-USER-BASED-SM-MIB or SNMP-VIEW-BASED-ACM-MIB. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/4980
ED-ACM-MIB. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498033/100/0/threaded - http://osvdb.org/51916 - http://www.securityfocus.com/bid/32102
CVE ID: CVE-2008-7096 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory memory as demonstrated at Black Hat 2008 by accessing certain remapping registers in Xen 3.3. Additional Analyst Notes: - CVE Program Container: References: - http://theinvisiblethings.blogspot.com/2008/08/intel-patches-q35-bug.html -
otes: - CVE Program Container: References: - http://theinvisiblethings.blogspot.com/2008/08/intel-patches-q35-bug.html - http://theinvisiblethings.blogspot.com/2008/08/attacking-xen-domu-vs-dom0.html - http://www.securityfocus.com/bid/30823 - http://invisiblethingslab.com/bh08/part2-full.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/44676 - http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00017&languageid=en-fr - http://osvdb.org/49901
CVE ID: CVE-2008-7097 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Qsoft K-Rate Premium allow remote attackers to execute arbitrary SQL commands via (1) the $id variable in admin/includes/dele_cpac.php, (2) $ord[order_id] variable in payments/payment_received.php, (3) $id variable in includes/functions.php, and (4) unspecified variables in modules/chat.php, as demonstrated via the (a) show parameter in an online action to index.php; (b) PATH_INTO to the room/ handler; (c) image and (d) id parameters in a vote action to index.php; (e) PATH_INFO to the
(b) PATH_INTO to the room/ handler; (c) image and (d) id parameters in a vote action to index.php; (e) PATH_INFO to the blog/ handler; and (f) id parameter in a blog_edit action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44670 - https://www.exploit-db.com/exploits/6312 - http://www.securityfocus.com/bid/30842 - http://secunia.com/advisories/31548 - http://osvdb.org/48338
CVE ID: CVE-2008-7098 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the (1) Title and (2) Text fields; (3) the gallery, possibly the Description field in Your Pictures; (4) the forum, possibly the Your Message field when posting a new thread; or (5) the vote parameter in a view action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - htt
details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48339 - http://osvdb.org/48340 - http://osvdb.org/48341 - https://www.exploit-db.com/exploits/6312 - http://www.securityfocus.com/bid/30842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44672 - http://secunia.com/advisories/31548
CVE ID: CVE-2008-7099 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Manage Templates feature in Qsoft K-Rate Premium allows remote attackers to execute arbitrary PHP code via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52924 - https://www.exploit-db.com/exploits/6312 - http://secunia.com/advisories/31548
CVE ID: CVE-2008-7100 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48343 - http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno21/tabid/1174/Default.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/45081 - http://secunia.com/advisories/31893 - htt
74/Default.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/45081 - http://secunia.com/advisories/31893 - http://www.securityfocus.com/bid/31145
CVE ID: CVE-2008-7101 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information (portal number) by accessing the install wizard page via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45080 - http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno22/tabid/1175/Default.aspx - http://osvdb.org/48344 - http://secunia.com/advisories/31893 - http://www.securityfocus.com/bid/31145
CVE ID: CVE-2008-7102 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45077 - http://osvdb.org/48345 - http://secunia.com/advisories/31893 - http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno23/tabid/1176/Default.aspx - http://www.securityfocus.com/bid/31145
CVE ID: CVE-2008-7103 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attackers to cause a denial of service (browser crash) or execute arbitrary code via a long Document.Location property value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44840 - http://www.securityfocus.com/bid/30922 - https://www.exploit-db.com/exploits/6327 - http://osvdb.org/47909 - http://secunia.com/advisories/31671
CVE ID: CVE-2008-7104 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (message queue delay and incomplete spam rule update) via a crafted (1) RTF or (2) PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30881 - http://www.sophos.com/support/knowledgebase/article/44385.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44775
CVE ID: CVE-2008-7105 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text. NOTE: this might be related to CVE-2008-7104. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30881 - http://www.sophos.com/support/knowledgebase/article/44385.html - https://exchange.xforce.ibmcloud.com/vulnerabilities
- http://www.sophos.com/support/knowledgebase/article/44385.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52925
CVE ID: CVE-2008-7106 State: PUBLISHED Published: 2009-08-27T20:00:00 Last Updated: 2024-08-07T11:56:14.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection or a denial of service (message loss or delay). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52926 - http://www.sophos.com/support/knowledgebase/article/44385.html
CVE ID: CVE-2008-7107 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL 0x222003 request to the \\.\easdrv device interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6251 - http://www.securityfocus.com/bid/30719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44520
CVE ID: CVE-2008-7108 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) quantity or (2) Add Engraving fields to the default URI; (3) Quantity field to phpcart.php; (4) Name, (5) Company, (6) Address, (7) City, and (8) Province/State fields in a checkout action to phpcart.php; and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495806/100/0/threaded - https
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495806/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44760 - http://www.securityfocus.com/bid/30884
CVE ID: CVE-2008-7109 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2025-01-21T16:07:22.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53004 - http://www.securityfocus.com/archive/1/495772/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44717 - http://www.informit.com
m/archive/1/495772/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44717 - http://www.informit.com/guides/content.aspx?g=security&seqNum=320 - http://www.securityfocus.com/bid/30855 - http://secunia.com/advisories/31631
CVE ID: CVE-2008-7110 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to upload files to arbitrary locations via a .. (dot dot) in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495772/100/0/threaded - http://www.informit.com/guides/content.aspx?g=security&seqNum=320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44718 - http://www.securityfocus.com/bid/30855 - http://secunia.com/advisories/31
ge.xforce.ibmcloud.com/vulnerabilities/44718 - http://www.securityfocus.com/bid/30855 - http://secunia.com/advisories/31631
CVE ID: CVE-2008-7111 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53003 - http://www.securityfocus.com/archive/1/495772/100/0/threaded - http://www.informit.com/guides/content.aspx?g=security&seqNum=320 - http:/
tyfocus.com/archive/1/495772/100/0/threaded - http://www.informit.com/guides/content.aspx?g=security&seqNum=320 - http://secunia.com/advisories/31631
CVE ID: CVE-2008-7112 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to cause a denial of service (hang or crash) via invalid field length values in a malformed (1) document or (2) request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44719 - http://www.informit.com/guides/content.aspx?g=security&seqNum=321 - http://secunia.com/advisories/31631
CVE ID: CVE-2008-7113 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44719 - http://www.informit.com/guides/content.aspx?g=security&seqNum=321 - http://secunia.com/advisories/31631
CVE ID: CVE-2008-7114 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44668 - http://www.securityfocus.com/bid/30850 - https://www.exploit-db.com/exploits/6315
CVE ID: CVE-2008-7115 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to (1) statusprocess.exe, (2) system_all.exe, or (3) restore.exe in cgi-bin/. NOTE: the setup_dns.exe vector is already covered by CVE-2008-1244. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6305 - http://secunia.com/advisories/31665 - https://exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6305 - http://secunia.com/advisories/31665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44874 - http://www.securitytracker.com/id?1020747
CVE ID: CVE-2008-7116 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the admin panel (admin/) in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL commands via the username. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44817 - https://www.exploit-db.com/exploits/6339 - http://www.securityfocus.com/bid/30945
CVE ID: CVE-2008-7117 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading style sheets (CSS) files via a certain request with the file parameter set to style.css. NOTE: this can probably be leveraged for cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6339 - http://www.securityfocus.com/bid/30945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44822
CVE ID: CVE-2008-7118 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain SQL query logs via a direct request for logs/cron.log. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44820 - https://www.exploit-db.com/exploits/6339 - http://www.securityfocus.com/bid/30945
CVE ID: CVE-2008-7119 State: PUBLISHED Published: 2009-08-28T15:00:00 Last Updated: 2024-08-07T11:56:14.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in item.php in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44817 - http://www.securityfocus.com/bid/30945 - https://www.exploit-db.com/exploits/6341
CVE ID: CVE-2008-7120 State: PUBLISHED Published: 2009-08-28T15:00:00Z Last Updated: 2024-09-17T04:14:15.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31118 - http://www.packetstormsecurity.org/0809-exploits/hotlinks-sql.txt
CVE ID: CVE-2008-7121 State: PUBLISHED Published: 2009-08-28T15:00:00Z Last Updated: 2024-09-16T22:40:10.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search bar. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.org/0809-exploits/hotlinks-sql.txt