Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0277 State: PUBLISHED Published: 2009-01-27T02:00:00 Last Updated: 2024-08-07T04:31:25.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in OpenSolaris snv_100 through snv_102 on the Sun UltraSPARC T2 and T2+ sun4v platforms allows local users to cause a denial of service (panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0209 - http://www.securityfocus.com/bid/33398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48164 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-250066-1
CVE ID: CVE-2009-0278 State: PUBLISHED Published: 2009-01-27T02:00:00 Last Updated: 2024-08-07T04:31:25.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51604 - http://www.vupen.com/english/advisories/2009/0208 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48161 - http://www.securityfocus.com/bid/33397 - http://secunia.com/advisories/33725 - http://sunsolve.sun.com/search/document.do?assetkey=1-21
rityfocus.com/bid/33397 - http://secunia.com/advisories/33725 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-119166-35-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-245446-1
CVE ID: CVE-2009-0279 State: PUBLISHED Published: 2009-01-27T18:00:00 Last Updated: 2024-08-07T04:31:25.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7851 - http://www.securityfocus.com/bid/33404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48175
CVE ID: CVE-2009-0280 State: PUBLISHED Published: 2009-01-27T18:00:00 Last Updated: 2024-08-07T04:31:25.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the crypt cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48172 - http://www.securityfocus.com/archive/1/500292/100/0/threaded - https://www.exploit-db.com/exploits/7850 - http://www.securityfocus.com/bid/33401
CVE ID: CVE-2009-0281 State: PUBLISHED Published: 2009-01-27T18:00:00 Last Updated: 2024-08-07T04:31:25.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48061 - http://www.securityfocus.com/bid/33317
CVE ID: CVE-2009-0282 State: PUBLISHED Published: 2009-01-27T18:00:00 Last Updated: 2024-08-07T04:31:25.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Probe Request packet with a long SSID, possibly related to an integer signedness error. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33592 - http://www.securityfocus.com/archive/1/500168/100/0/threaded - http://www.debi
: - http://secunia.com/advisories/33592 - http://www.securityfocus.com/archive/1/500168/100/0/threaded - http://www.debian.org/security/2009/dsa-1714 - http://www.securityfocus.com/bid/33340 - http://www.debian.org/security/2009/dsa-1712 - http://www.debian.org/security/2009/dsa-1713 - http://secunia.com/advisories/33699 - http://secunia.com/advisories/35743 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512995 - http://security.gentoo.org/glsa/glsa-200907-08.xml
CVE ID: CVE-2009-0283 State: PUBLISHED Published: 2009-01-27T18:00:00 Last Updated: 2024-08-07T04:31:25.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in err.asp in Oblog allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500349/100/0/threaded - http://www.securityfocus.com/archive/1/500397/100/0/threaded - http://www.securityfocus.com/bid/33416
CVE ID: CVE-2009-0284 State: PUBLISHED Published: 2009-01-27T18:00:00 Last Updated: 2024-08-07T04:31:25.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33625 - http://www.securityfocus.com/bid/33422 - http://www.flaxweb.com/products/articles - https://www.exploit-db.com/exploits/7862
CVE ID: CVE-2009-0285 State: PUBLISHED Published: 2009-01-27T18:00:00 Last Updated: 2024-08-07T04:31:25.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500336/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/48187 - http://www.securityfocus.com/bid/33411
CVE ID: CVE-2009-0286 State: PUBLISHED Published: 2009-01-27T18:00:00 Last Updated: 2024-08-07T04:31:25.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the form_data[script_class] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33421 - https://www.exploit-db.com/exploits/7863 - http://osvdb.org/51635
CVE ID: CVE-2009-0287 State: PUBLISHED Published: 2009-01-27T18:00:00 Last Updated: 2024-08-07T04:31:25.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33425 - http://secunia.com/advisories/33652 - http://osvdb.org/51623 - http://sourceforge.net/project/shownotes.php?release_id=655845&group_id=227492 - http://keeptoolkit.svn.sourceforge.net/viewvc/keeptoolkit?view=rev&revision=56
CVE ID: CVE-2009-0288 State: PUBLISHED Published: 2009-01-27T19:00:00 Last Updated: 2024-08-07T04:31:25.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500106/100/0/threaded - http://secunia.com/advisories/33561 - http://sourceforge.net/forum/forum.php?forum_id=894598 - http://www.securityfocus.com/bid/33287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48
m.php?forum_id=894598 - http://www.securityfocus.com/bid/33287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48019 - http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-directory-traversal
CVE ID: CVE-2009-0289 State: PUBLISHED Published: 2009-01-27T19:00:00 Last Updated: 2024-08-07T04:31:25.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to cause a denial of service (service crash) via a long filename in a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-server-denial-of-servi?blog=1 - http://www.securityfocus.com/bid/33289 - http://www.securityfocus.com/archive/1/500107/100/0/threaded - http://sourceforge.net/forum/forum.php?forum_id=894598
CVE ID: CVE-2009-0290 State: PUBLISHED Published: 2009-01-27T19:00:00 Last Updated: 2024-08-07T04:31:25.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the g4_path parameter. NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathname. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48015 - http://www.securityfocus.com/bid/33304 - http://secunia.com/
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/48015 - http://www.securityfocus.com/bid/33304 - http://secunia.com/advisories/33564
CVE ID: CVE-2009-0291 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the MAX_type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500411/100/0/threaded - https://www.exploit-db.com/exploits/7883 - http://www.securityfocus.com/bid/33458
CVE ID: CVE-2009-0292 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands via the grid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7874 - http://osvdb.org/51615 - http://secunia.com/advisories/33660
CVE ID: CVE-2009-0293 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33654 - http://www.securityfocus.com/bid/33461 - https://www.exploit-db.com/exploits/7877 - http://osvdb.org/51625
CVE ID: CVE-2009-0294 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the config[installdir] parameter to (1) search.php, (2) archive.php, (3) comments.php, and (4) news.php; (5) News.php, (6) SendFriend.php, (7) Archive.php, and (8) Comments.php in base/; and possibly other components, different vectors than CVE-2007-1288. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33691 - http
E-2007-1288. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33691 - http://www.securityfocus.com/bid/33434 - http://www.securityfocus.com/archive/1/500398/100/0/threaded
CVE ID: CVE-2009-0295 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7867 - http://www.securityfocus.com/bid/33452 - http://secunia.com/advisories/33666 - http://osvdb.org/51616
CVE ID: CVE-2009-0296 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7873 - http://secunia.com/advisories/33661 - http://osvdb.org/51630
CVE ID: CVE-2009-0297 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands via the (1) txtEmail and (2) txtPassword parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7880 - http://osvdb.org/51626 - http://secunia.com/advisories/33647
CVE ID: CVE-2009-0298 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33663 - http://www.securityfocus.com/bid/33451 - https://www.exploit-db.com/exploits/7869
CVE ID: CVE-2009-0299 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33460 - https://www.exploit-db.com/exploits/9236 - http://secunia.com/advisories/33649 - https://www.exploit-db.com/exploits/7878 - http://osvdb.org/51628
CVE ID: CVE-2009-0300 State: REJECTED Published: 2009-01-27T20:00:00Z Last Updated: 2024-09-17T03:17:44.843Z Description: No description available.
CVE ID: CVE-2009-0301 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite arbitrary files via the (1) SaveFile and (2) ExportToXML methods. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7868 - http://www.securityfocus.com/bid/33453 - http://secunia.com/advisories/33664
CVE ID: CVE-2009-0302 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71475 - http://www.securityfocus.com/bid/33410 - http://www.securityfocus.com/archive/1/500335/100/0/threaded - http://osvdb.org/77349 - http://osvdb.org/51633 - https://exchange.xforce.ibmcloud.
om/archive/1/500335/100/0/threaded - http://osvdb.org/77349 - http://osvdb.org/51633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48186 - http://www.exploit-db.com/exploits/18148 - http://www.securityfocus.com/bid/50770 - http://1337day.com/exploits/15481
CVE ID: CVE-2009-0303 State: PUBLISHED Published: 2009-01-27T20:00:00Z Last Updated: 2024-09-16T20:52:07.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33651 - http://updates.webhelpdesk.com/weblog/updates/StableReleases/2009/01/23/911812309.html - http://www.securityfocus.com/bid/33429
CVE ID: CVE-2009-0304 State: PUBLISHED Published: 2009-01-27T20:00:00 Last Updated: 2024-08-07T04:31:25.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial of service (system crash) via a crafted IPv6 packet, related to an "insufficient validation security vulnerability," as demonstrated by SunOSipv6.c. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48208 - http://secunia.com/advisories/33605 - http://www.vupen.com/english/advisories/2009/0232 - http://www.securityfocus.com/bid/33435 - https:
m/advisories/33605 - http://www.vupen.com/english/advisories/2009/0232 - http://www.securityfocus.com/bid/33435 - https://www.exploit-db.com/exploits/7865 - http://securitytracker.com/id?1021635 - http://lists.grok.org.uk/pipermail/full-disclosure/2009-January/067709.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-251006-1
CVE ID: CVE-2009-0305 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:31:25.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33663 - http://secunia.com/advisories/33847 - http://www.microsoft.com/technet/security/advisory/960715.mspx - http://www.kb.cert.org/vuls/id/131100 - http://o
3847 - http://www.microsoft.com/technet/security/advisory/960715.mspx - http://www.kb.cert.org/vuls/id/131100 - http://osvdb.org/51833 - http://blackberry.com/btsc/KB16248
CVE ID: CVE-2009-0306 State: PUBLISHED Published: 2009-11-04T15:00:00Z Last Updated: 2024-09-16T22:20:35.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19701 - http://www.securityfocus.com/bid/36903 - http://w
berry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19701 - http://www.securityfocus.com/bid/36903 - http://www.vupen.com/english/advisories/2009/3133
CVE ID: CVE-2009-0307 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T04:31:25.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in the MDS Connection Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the (1) customDate, (2) interval, (3) lastCustomInterval, (4) lastIntervalLength, (5) nextCustomInterval, (6) nextIntervalLength, (7) action, (8) delIntervalIndex, (9) addStatIndex, (10) delStatIndex, and (11) referenceTime parameters. Addi
alLength, (7) action, (8) delIntervalIndex, (9) addStatIndex, (10) delStatIndex, and (11) referenceTime parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022081 - http://www.securityfocus.com/bid/34573 - http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0170.html - http://secunia.com/advisories/34740 - http://osvdb.org/53772 - http://www.vupen.com/english/advisories/2009/1090 - http://www.blackberry.com/btsc/dynamickc.do?externalId=KB17969&sliceID=1&command=show&forward=nonthreadedKC&kcId=KB17969
CVE ID: CVE-2009-0310 State: PUBLISHED Published: 2009-02-18T16:00:00 Last Updated: 2024-08-07T04:31:25.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors related to "incoming data and authentication-strings." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33794 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48797
CVE ID: CVE-2009-0311 State: PUBLISHED Published: 2009-01-27T22:00:00 Last Updated: 2024-08-07T04:31:25.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51566 - http://secunia.com/advisories/33667 - http://www.securitytracker.com/id?1021636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48197 - http://www.securityfocus.com/archive/1/500350/100/0/threaded - http://zerodayinitiative.com/advisorie
rabilities/48197 - http://www.securityfocus.com/archive/1/500350/100/0/threaded - http://zerodayinitiative.com/advisories/ZDI-09-009/ - http://www.securityfocus.com/bid/33415
CVE ID: CVE-2009-0312 State: PUBLISHED Published: 2009-01-28T01:00:00 Last Updated: 2024-08-07T04:31:25.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content. Additional Analyst Notes: - CVE Program Container: References: - http://hg.moinmo.in/moin/1.8/rev/89b91bf87dad - http://secunia.com/advisories/33755 - http://hg.moinmo.in/moin/1.7/rev/89b91bf87dad - http://secunia.com/advisories/33716 - http://osvdb.org/51632 - http://moinmo.in/SecurityFixes#moin1.8.1 - http://www.openwa
p://secunia.com/advisories/33716 - http://osvdb.org/51632 - http://moinmo.in/SecurityFixes#moin1.8.1 - http://www.openwall.com/lists/oss-security/2009/01/27/4 - https://www.debian.org/security/2009/dsa-1715 - https://usn.ubuntu.com/716-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/48306