Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6575 State: PUBLISHED Published: 2009-04-01T22:00:00 Last Updated: 2024-08-07T11:34:47.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SIP server in SIP Enablement Services (SES) in Avaya Communication Manager 3.1.x and 4.x allows remote authenticated users to cause a denial of service (resource consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41734 - http://osvdb.org/44287 - http://www.voipshield.com/research-details.php?id=23 - http://secunia.com/advisories/29744
CVE ID: CVE-2008-6576 State: PUBLISHED Published: 2009-04-01T22:00:00 Last Updated: 2024-08-07T11:34:47.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 (CS1K) 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service (resource exhaustion and failed updates) via unknown vectors that causes consumption of all available sessions. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41804
/support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41804 - http://secunia.com/advisories/29747 - http://securitytracker.com/id?1019845 - http://osvdb.org/44380 - http://www.securityfocus.com/bid/28691 - http://www.voipshield.com/research-details.php?id=11
CVE ID: CVE-2008-6577 State: PUBLISHED Published: 2009-04-01T22:00:00 Last Updated: 2024-08-07T11:34:47.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 (CS1K) 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41802 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 - http://osvdb.org/44374 - http://www.voipshield.com/research-details.php?id=14 - http://securitytracker.com/id?1019848 - http://
osvdb.org/44374 - http://www.voipshield.com/research-details.php?id=14 - http://securitytracker.com/id?1019848 - http://secunia.com/advisories/29747 - http://www.securityfocus.com/bid/28691
CVE ID: CVE-2008-6578 State: PUBLISHED Published: 2009-04-01T22:00:00 Last Updated: 2024-08-07T11:34:47.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow remote attackers to execute arbitrary commands to gain privileges, obtain sensitive information, or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41803 - http://securitytracker.com/id?1019849 - http://osvdb.org/44375 - http://secunia.com/advisories/29747 - htt
ities/41803 - http://securitytracker.com/id?1019849 - http://osvdb.org/44375 - http://secunia.com/advisories/29747 - http://www.securityfocus.com/bid/28691 - http://www.voipshield.com/research-details.php?id=29
CVE ID: CVE-2008-6579 State: PUBLISHED Published: 2009-04-01T22:00:00 Last Updated: 2024-08-07T11:34:47.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel Communication Server 1000 4.50.x allows remote attackers to obtain Web application structure via unknown vectors related to "web resources to phones and administrators." Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=713455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41805 - http://osvdb.org/44377 - http://secunia.com/advisories/29747 - http://securitytracker.com/id?1019846 - http://www.securityfocus.com/bid/28691 - http://www.voipshi
m/advisories/29747 - http://securitytracker.com/id?1019846 - http://www.securityfocus.com/bid/28691 - http://www.voipshield.com/research-details.php?id=28
CVE ID: CVE-2008-6580 State: PUBLISHED Published: 2009-04-02T15:00:00 Last Updated: 2024-08-07T11:34:47.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Red_Reservations script for ColdFusion stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request to (1) makered.mdb and (2) makered97.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49817 - https://www.exploit-db.com/exploits/7440
CVE ID: CVE-2008-6581 State: PUBLISHED Published: 2009-04-02T15:00:00 Last Updated: 2024-08-07T11:34:47.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32779 - http://www.phpaddedit.com/page/new/ - https://www.exploit-db.com/exploits/7418 - http://osvdb.org/50674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47264 - http://secunia.com/advisories/33124
CVE ID: CVE-2008-6582 State: PUBLISHED Published: 2009-04-02T15:00:00 Last Updated: 2024-08-07T11:34:47.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47364 - http://secunia.com/advisories/30085 - http://www.securityfocus.com/bid/32819 - https://www.exploit-db.com/exploits/7586
CVE ID: CVE-2008-6583 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BS.player 2.27 build 959 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .SRT file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28811 - https://www.exploit-db.com/exploits/5455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41841 - http://www.vupen.com/english/advisories/2008/1243/references
CVE ID: CVE-2008-6584 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the url_upload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44645 - http://secunia.com/advisories/29935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41925 - http://www.securityfocus.com/archive/1/491066/100/
/29935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41925 - http://www.securityfocus.com/archive/1/491066/100/0/threaded - http://www.securityfocus.com/bid/28846
CVE ID: CVE-2008-6585 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41926 - http://secunia.com/advisories/29935 - http://www.securityfocus.com/archive/1/491066/100/0/threaded - http://osvdb.org/44646 - http://www.securityfocus.com/bid/28846
CVE ID: CVE-2008-6586 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and (2) hijack the authentication of administrators for requests that modify the administrator account via the setsetting action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41926 - http://www.securityfocu
VE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41926 - http://www.securityfocus.com/archive/1/491066/100/0/threaded - http://osvdb.org/44647 - http://www.securityfocus.com/bid/28847
CVE ID: CVE-2008-6587 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41926 - http://www.securityfocus.com/archive/1/491066/100/0/threaded
CVE ID: CVE-2008-6588 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aztech ADSL2/2+ 4-port router has a default "isp" account with a default "isp" password, which allows remote attackers to obtain access if this default is not changed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50068 - http://osvdb.org/51229 - http://archives.neohapsis.com/archives/vuln-dev/2008-q2/0010.html - http://archives.neohapsis.com/archives/vuln-dev/2008-q2/0012.html
CVE ID: CVE-2008-6589 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) index.php and (2) LightNEasy.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491064/100/0/threaded - http://secunia.com/advisories/29833 - http://www.osvdb.org/44676 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41888 - http://ww
m/advisories/29833 - http://www.osvdb.org/44676 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41888 - http://www.osvdb.org/44677 - http://www.securityfocus.com/bid/28839
CVE ID: CVE-2008-6590 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to (1) index.php and (2) LightNEasy.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491064/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41889 - http://secunia.com/advisories/29833 - http://www.osvdb.org/44673 - http://www.os
ce.ibmcloud.com/vulnerabilities/41889 - http://secunia.com/advisories/29833 - http://www.osvdb.org/44673 - http://www.osvdb.org/44672 - http://www.securityfocus.com/bid/28839
CVE ID: CVE-2008-6591 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491064/100/0/threaded - http://osvdb.org/44678 - http://secunia.com/advisories/29833 - http://osvdb.org/44679 - http://www.securityfocus.com/bid/28839
CVE ID: CVE-2008-6592 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28801 - http://www.securityfocus.com/archive/1/491064/100/0/threaded - http://www.osvdb.org/44674 - http://secunia.com/advisorie
http://www.securityfocus.com/archive/1/491064/100/0/threaded - http://www.osvdb.org/44674 - http://secunia.com/advisories/29833 - https://www.exploit-db.com/exploits/5452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49851
CVE ID: CVE-2008-6593 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28801 - http://www.securityfocus.com/archive/1/491064/100/0/threaded - http://www.osvdb.org/44675 - http://secunia.com/advisories/29833 - https://www.exploit-db.com/exploits/5452 - https://exchange.xforce.ibmcloud.com/vulnerabilit
unia.com/advisories/29833 - https://www.exploit-db.com/exploits/5452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42009
CVE ID: CVE-2008-6594 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the cm_rdfexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49829 - http://typo3.org/teams/security/security-bulletins/typo3-20080416-2/ - http://osvdb.org/45094
CVE ID: CVE-2008-6595 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the pmk_rssnewsexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/45093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49830 - http://typo3.org/teams/security/security-bulletins/typo3-20080416-2/
CVE ID: CVE-2008-6596 State: PUBLISHED Published: 2009-04-03T18:00:00Z Last Updated: 2024-09-17T00:16:19.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/28922.html - http://www.securityfocus.com/bid/28922 - http://secunia.com/advisories/28258
CVE ID: CVE-2008-6597 State: PUBLISHED Published: 2009-04-03T18:00:00Z Last Updated: 2024-09-17T04:19:24.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inject arbitrary web script or HTML via the step parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/28922.html - http://www.securityfocus.com/bid/28922
CVE ID: CVE-2008-6598 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to "bri restart logic." Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/wanpipe/releases/276026 - http://osvdb.org/48840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49828
CVE ID: CVE-2008-6599 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: cookiecheck.php in CookieCheck 1.0 stores tmp/cc_sessions under the web root with insufficient access control, which allows remote attackers to obtain session data via a direct request related to the "default session save path." Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/cookiecheck/ - http://code.google.com/p/cookiecheck/source/browse/patches/cookiecheck-1.0-security-fix-1.patch?spec=svn11&r=11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49827 - http://osvdb.org/48865
CVE ID: CVE-2008-6600 State: PUBLISHED Published: 2009-04-03T18:00:00Z Last Updated: 2024-09-17T00:31:44.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search feature in XMLPortal 3.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44289 - http://osvdb.org/ref/44/xmlportal-xss.txt
CVE ID: CVE-2008-6601 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Epona 1.5rc3 allows remote attackers to obtain the real IP address of users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48866 - http://www.securityfocus.com/bid/34651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49826 - http://freshmeat.net/projects/epona/releases/276088
CVE ID: CVE-2008-6602 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Download Center Lite before 2.1 has unknown impact and attack vectors related to "A minor security fix." Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/download-center-lite/releases/275651 - http://www.securityfocus.com/bid/34653 - http://osvdb.org/48834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49780
CVE ID: CVE-2008-6603 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T11:34:47.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937. Additional Analyst Notes: - CVE Program Container: References: - http://moinmo.in/SecurityFixes - http://hg.moinmo.in/moin/1.6/rev/543ae9bdbe26 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41911 - http://moinmo.in/MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter - http://www.securityfocus.com/
ies/41911 - http://moinmo.in/MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter - http://www.securityfocus.com/bid/34655 - http://osvdb.org/48875 - http://hg.moinmo.in/moin/1.7/rev/88356b3f849a - http://www.vupen.com/english/advisories/2008/1307
CVE ID: CVE-2008-6604 State: PUBLISHED Published: 2009-04-04T22:00:00 Last Updated: 2024-08-07T11:34:47.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagina parameter, a different vulnerability than CVE-2007-5390. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5690 - http://www.securityfocus.com/bid/29424
CVE ID: CVE-2008-6605 State: PUBLISHED Published: 2009-04-06T14:00:00 Last Updated: 2024-08-07T11:34:47.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that cause a denial of service (network outage) via a page parameter with a % (percent) character followed by a non-alphanumeric character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/
phanumeric character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32211 - http://osvdb.org/49835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46537 - https://www.exploit-db.com/exploits/7060
CVE ID: CVE-2008-6606 State: PUBLISHED Published: 2009-04-06T14:00:00 Last Updated: 2024-08-07T11:34:47.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6971 - https://www.exploit-db.com/exploits/6967 - http://www.securityfocus.com/bid/32076
CVE ID: CVE-2008-6607 State: PUBLISHED Published: 2009-04-06T14:00:00 Last Updated: 2024-08-07T11:34:47.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to inject arbitrary web script or HTML via the thema parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6971 - http://www.securityfocus.com/bid/32082
CVE ID: CVE-2008-6608 State: PUBLISHED Published: 2009-04-06T14:00:00 Last Updated: 2024-08-07T11:34:47.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the user_name parameter (aka user field) to admin/index.php, (2) the user_pass parameter (aka pass field) to admin/index.php, or (3) the id parameter to calendar_details.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49755 - http://secunia.com/advisories/32596 - https://www.explo
- CVE Program Container: References: - http://osvdb.org/49755 - http://secunia.com/advisories/32596 - https://www.exploit-db.com/exploits/7013 - http://osvdb.org/49756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46395 - http://www.securityfocus.com/bid/32148