Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5140 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T20:58:02.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15301 - https://code.google.com/p/chromium/issues/detail?id=159429 - http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html - http://lists.opensuse.org/opensus
159429 - http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html
CVE ID: CVE-2012-5141 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T20:58:02.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15428 - http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=160456 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html
CVE ID: CVE-2012-5142 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T20:58:02.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=160803 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html - https://oval.cisecurity.org/repository/search/defini
http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16173
CVE ID: CVE-2012-5143 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T20:58:02.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PPAPI image buffers. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=160926 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16187 - http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html - http://lists.opensuse.org/opensuse-updat
- http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html
CVE ID: CVE-2012-5144 State: PUBLISHED Published: 2012-12-12T11:00:00 Last Updated: 2024-08-06T20:58:02.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN." Additional Analyst Notes: - CVE Program Container: References: - http://libav.org/releases/libav-0.8.5.changelog - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
://libav.org/releases/libav-0.8.5.changelog - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16007 - http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=161639 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html - http://libav.org/releases/libav-0.7.7.changelog - http://www.ubuntu.com/usn/USN-1705-1
CVE ID: CVE-2012-5145 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=162494 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16207 - http://googlechromereleases.blogspot.com/2013/01
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16207 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
CVE ID: CVE-2012-5146 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - https://code.google.com/p/chromium/issues/detail?id=165622 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16372 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
CVE ID: CVE-2012-5147 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - https://code.google.com/p/chromium/issues/detail?id=165864 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16269 - http://googlechromereleases.blogspot.com/2013/
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16269 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
CVE ID: CVE-2012-5148 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - https://code.google.com/p/chromium/issues/detail?id=167122 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15746
CVE ID: CVE-2012-5149 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=166795 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.
ode.google.com/p/chromium/issues/detail?id=166795 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15865
CVE ID: CVE-2012-5150 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving seek operations on video data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=165601 - https://oval.cisecurity.org/repository/search/d
date.html - https://code.google.com/p/chromium/issues/detail?id=165601 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16440
CVE ID: CVE-2012-5151 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:03.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=165538 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16453
CVE ID: CVE-2012-5152 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving seek operations on video data. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16206 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=165430
CVE ID: CVE-2012-5153 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16185 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stabl
ttp://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=164565
CVE ID: CVE-2012-5154 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to allocation of shared memory. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16318 - https://code.google.com/p/chromium/issues/detail?id=164490 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.co
l?id=164490 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
CVE ID: CVE-2012-5155 State: PUBLISHED Published: 2013-01-15T21:00:00Z Last Updated: 2024-09-16T18:49:17.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.52 on Mac OS X does not use an appropriate sandboxing approach for worker processes, which makes it easier for remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=163208
CVE ID: CVE-2012-5156 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:02.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF fields. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=162778 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16330 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html
CVE ID: CVE-2012-5157 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T20:58:03.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.52 does not properly handle image data in PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16424 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=162156 - https://code.google.com/p/chromium/issues
nel-update.html - https://code.google.com/p/chromium/issues/detail?id=162156 - https://code.google.com/p/chromium/issues/detail?id=162776
CVE ID: CVE-2012-5158 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T20:58:02.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2012-5158
CVE ID: CVE-2012-5159 State: PUBLISHED Published: 2012-09-25T22:00:00 Last Updated: 2024-08-06T20:58:03.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allows remote attackers to execute arbitrary PHP code via an eval injection attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55672 - http://seclists.org/oss-sec/2012/q3/562 - http://sourceforge.net/blog/phpmyadmin-back-door/ - http://www.phpmyadmin.net/home_page/security/PMASA-20
/2012/q3/562 - http://sourceforge.net/blog/phpmyadmin-back-door/ - http://www.phpmyadmin.net/home_page/security/PMASA-2012-5.php
CVE ID: CVE-2012-5161 State: PUBLISHED Published: 2012-12-26T22:00:00 Last Updated: 2024-08-06T20:58:02.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX135066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80627 - http://osvdb.org/88368 - http://secunia.com/advisories/51538 - http://www.securityfocus.com/bid/56907 - http://www.securitytracker.com/id?1027868
CVE ID: CVE-2012-5162 State: PUBLISHED Published: 2012-09-26T00:00:00 Last Updated: 2024-08-06T20:58:03.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) edit_category_post or (2) enable_category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78964 - http://osclass.org/2012/01/16/osclass-2-3-5/ - https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-1 - http://secunia.com/advisorie
https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-1 - http://secunia.com/advisories/47697 - http://www.codseq.it/advisories/multiple_vulnerabilities_in_osclass
CVE ID: CVE-2012-5163 State: PUBLISHED Published: 2012-09-26T00:00:00 Last Updated: 2024-08-06T20:58:02.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enable_category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osclass.org/2012/01/16/osclass-2-3-5/ - https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-1 - http://secunia.com/advisories/47697 - http://www.codseq.it/advisories/multiple_vulnerabilities_in_osclass - ht
#diff-1 - http://secunia.com/advisories/47697 - http://www.codseq.it/advisories/multiple_vulnerabilities_in_osclass - https://exchange.xforce.ibmcloud.com/vulnerabilities/78962
CVE ID: CVE-2012-5164 State: PUBLISHED Published: 2012-09-26T00:00:00 Last Updated: 2024-08-06T20:58:03.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forkcms/forkcms/commit/641e27bf1e9a7e320d6856399a7c274934bb351e - https://github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114 - http://
20d6856399a7c274934bb351e - https://github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114 - http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-released - https://github.com/forkcms/forkcms/pull/247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78957
CVE ID: CVE-2012-5166 State: PUBLISHED Published: 2012-10-10T21:00:00 Last Updated: 2024-08-06T20:58:03.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.ibm.com/support/docview.wss?uid=isg1IV30365 - http://www.ibm.com/support/docview.wss?uid=isg1IV30185 - http://rhn.redhat.com/err
support/docview.wss?uid=isg1IV30365 - http://www.ibm.com/support/docview.wss?uid=isg1IV30185 - http://rhn.redhat.com/errata/RHSA-2012-1363.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004 - http://secunia.com/advisories/50909 - http://secunia.com/advisories/50956 - http://osvdb.org/86118 - http://secunia.com/advisories/50903 - http://secunia.com/advisories/51096 - http://secunia.com/advisories/51054 - http://rhn.redhat.com/errata/RHSA-2012-1365.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00013.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090346.html - http://lists.opensuse.o
0013.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090346.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00011.html - http://www.ibm.com/support/docview.wss?uid=isg1IV30366 - http://www.ibm.com/support/docview.wss?uid=isg1IV30367 - http://www.ibm.com/support/docview.wss?uid=isg1IV30368 - http://secunia.com/advisories/51106 - http://secunia.com/advisories/51178 - http://www.ibm.com/support/docview.wss?uid=isg1IV30247 - http://www.isc.org/software/bind/advisories/cve-2012-5166 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:162 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://secunia.com/ad
s?name=MDVSA-2012:162 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://secunia.com/advisories/51078 - http://rhn.redhat.com/errata/RHSA-2012-1364.html - https://kb.isc.org/article/AA-00801 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090586.html - http://aix.software.ibm.com/aix/efixes/security/bind9_advisory5.asc - http://www.debian.org/security/2012/dsa-2560 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19706 - http://www.securityfocus.com/bid/55852 - http://www.ibm.com/support/docview.wss?uid=is
%3Aorg.mitre.oval%3Adef%3A19706 - http://www.securityfocus.com/bid/55852 - http://www.ibm.com/support/docview.wss?uid=isg1IV30364 - https://blogs.oracle.com/sunsecurity/entry/cve_2012_5166_denial_of - http://support.apple.com/kb/HT5880 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090491.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-5167 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:58:03.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) field parameter to course_category/index_inline_editor_submit.php or (2) user/index_inline_editor_submit.php; or (3) id parameter to user/user_password.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86425 - http://secunia.com/advisories/51014 - http://www.securityfocus.com/bid/56100 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0095.html -
ries/51014 - http://www.securityfocus.com/bid/56100 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0095.html - http://update.atutor.ca/acontent/patch/1_2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/79459 - http://secunia.com/advisories/51034 - https://www.htbridge.com/advisory/HTB23117 - http://osvdb.org/86424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79460
CVE ID: CVE-2012-5168 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:58:02.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or category names via a direct request to (1) user/index_inline_editor_submit.php or (2) course_category/index_inline_editor_submit.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51014 - http://osvdb.org/86428 - http://www.securityfocus.com/bid/56100 - http://archives.neohapsis.com/archives/bugtraq/2012-10/0095.html - http://update.atutor.ca/acontent/patch/1_2/ - https://exchange.xforce.i
ohapsis.com/archives/bugtraq/2012-10/0095.html - http://update.atutor.ca/acontent/patch/1_2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/79461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79462 - http://secunia.com/advisories/51034 - https://www.htbridge.com/advisory/HTB23117