Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4559 State: PUBLISHED Published: 2010-01-04T21:00:00 Last Updated: 2024-08-07T07:08:38.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via an input string for "submitted by" text. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51788 - http://www.securityfocus.com/bid/35708 - http://drupal.org/node/520372
CVE ID: CVE-2009-4560 State: PUBLISHED Published: 2010-01-04T21:00:00 Last Updated: 2024-08-07T07:08:38.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51777
CVE ID: CVE-2009-4561 State: PUBLISHED Published: 2010-01-04T21:00:00 Last Updated: 2024-08-07T07:08:37.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51777 - http://www.exploit-db.com/exploits/9165
CVE ID: CVE-2009-4562 State: PUBLISHED Published: 2010-01-04T21:00:00 Last Updated: 2024-08-07T07:08:38.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the from parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51781 - http://osvdb.org/55922 - http://secunia.com/advisories/35863 - http://www.exploit-db.com/exploits/9166
CVE ID: CVE-2009-4563 State: PUBLISHED Published: 2010-01-04T21:00:00 Last Updated: 2024-08-07T07:08:37.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-adminpass_2 parameters in a saveoptions action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51782 - http://osvdb.org/55921 - http://secunia.com/advisories/35863 - http://www.exploit-db.com/exploits/9166
CVE ID: CVE-2009-4564 State: PUBLISHED Published: 2010-01-04T21:00:00 Last Updated: 2024-08-07T07:08:38.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers to execute arbitrary SQL commands via the category parameter, related to a URI under news/category/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9154
CVE ID: CVE-2009-4565 State: PUBLISHED Published: 2010-01-04T21:00:00 Last Updated: 2024-08-07T07:08:38.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: Reference
Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38314 - http://security.gentoo.org/glsa/glsa-201206-30.xml - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021797.1-1 - http://secunia.com/advisories/39088 - http://www.vupen.com/english/advisories/2009/3661 - http://secunia.com/advisories/37998 - http://www.securityfocus.com/bid/37543 - http://www.vupen.com/english/advisories/2011/0415 - http://secunia.com/advisories/43366 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
-security-announce/2010-03/msg00004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10255 - http://www.sendmail.org/releases/8.14.4 - http://marc.info/?l=bugtraq&m=126953289726317&w=2 - http://www.vupen.com/english/advisories/2010/0719 - http://www.redhat.com/support/errata/RHSA-2011-0262.html - http://www.debian.org/security/2010/dsa-1985 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11822 - http://marc.info/?l=bugtraq&m=126953289726317&w=2 - http://secunia.com/advisories/40109 - http://secunia.com/advisories/38915 - http://www.vupen.com/english/advisories/2010/1386
CVE ID: CVE-2009-4566 State: PUBLISHED Published: 2010-01-04T21:00:00 Last Updated: 2024-08-07T07:08:37.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands via the title parameter in a news action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51799 - http://secunia.com/advisories/35863
CVE ID: CVE-2009-4567 State: PUBLISHED Published: 2010-01-05T18:31:00 Last Updated: 2024-08-07T07:08:37.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated users to inject arbitrary web script or HTML via the (1) skype, (2) yahoo, (3) aol, (4) msn, or (5) jabber parameter in a profile2 action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10354 - http://packetstormsecurity.org/0912-exploits/viscacha-xss.txt - https://exchange.xforce.ibmclou
-db.com/exploits/10354 - http://packetstormsecurity.org/0912-exploits/viscacha-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54614 - http://secunia.com/advisories/37608
CVE ID: CVE-2009-4568 State: PUBLISHED Published: 2010-01-05T18:31:00 Last Updated: 2024-08-07T07:08:38.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.webmin.com/security.html - http://www.securityfocus.com/bid/37259 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:036 - http://secunia.com/advisories/37648 - http://www.vupen.com/english/advisories/2009/3457
CVE ID: CVE-2009-4569 State: PUBLISHED Published: 2010-01-05T18:31:00 Last Updated: 2024-08-07T07:08:38.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI under news/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0912-exploits/elkagroupv-sql.txt - http://www.exploit-db.com/exploits/10330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54585 - http://www.securityfocus.com/bid/37229
CVE ID: CVE-2009-4570 State: PUBLISHED Published: 2010-01-05T18:31:00 Last Updated: 2024-08-07T07:08:38.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PhpShop 0.8.1 allows remote attackers to inject arbitrary web script or HTML via the order_id parameter in an order/order_print action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.andreafabrizi.it/?exploits:phpshop - http://secunia.com/advisories/31948 - http://www.securityfocus.com/bid/37227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54589 - http://www.securityfocus.com/archive/1/508270/100/0/threaded
CVE ID: CVE-2009-4571 State: PUBLISHED Published: 2010-01-05T18:31:00 Last Updated: 2024-08-07T07:08:38.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the (1) module_id parameter in an admin/function_list action, the (2) vendor_id parameter in a vendor/vendor_form action, the (3) module_id parameter in an admin/module_form action, the (4) user_id parameter in an admin/user_form action, the (5) vendor_category_id parameter in a vendor/vendor_category_form action, the (6) user_id parameter in a store/user_form action, the (7) payment_method_id param
ndor/vendor_category_form action, the (6) user_id parameter in a store/user_form action, the (7) payment_method_id parameter in a store/payment_method_form action, the (8) tax_rate_id parameter in a tax/tax_form action, or the (9) category parameter in a shop/browse action. NOTE: the product_id vector is already covered by CVE-2008-0681. Additional Analyst Notes: - CVE Program Container: References: - http://www.andreafabrizi.it/?exploits:phpshop - http://secunia.com/advisories/31948 - http://www.securityfocus.com/bid/37227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54584 - http://www.securityfocus.com/archive/1/508270/100/0/threaded
CVE ID: CVE-2009-4572 State: PUBLISHED Published: 2010-01-05T18:31:00 Last Updated: 2024-08-07T07:08:37.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to hijack the authentication of arbitrary users for requests that invoke the cartAdd function in a shop/cart action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54587 - http://www.andreafabrizi.it/?exploits:phpshop - http://secunia.com/advisories/31948 - http://www.securityfocus.com/archive/1/508270/100/0/threaded
CVE ID: CVE-2009-4573 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:38.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Joomulus (mod_joomulus) module 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action to (1) tagcloud_ell.swf, (2) tagcloud_eng.swf, (3) tagcloud_por.swf, (4) tagcloud_rus.swf, and possibly (5) tagcloud_jpn.swf. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osv
ned solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55156 - http://www.osvdb.org/61344 - http://secunia.com/advisories/37994 - http://www.osvdb.org/61346 - http://www.osvdb.org/61345
CVE ID: CVE-2009-4574 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:38.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the country_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55208 - http://www.exploit-db.com/exploits/10809 - http://secunia.com/advisories/37957 - http://packetstormsecurity.org/0912-exploits/iescorts-sql.txt
CVE ID: CVE-2009-4575 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:37.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personel_sira parameter in a sirala action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61354 - http://secunia.com/advisories/37897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55128 - http://www.securityfocus.com/bid/37503 - http://www.exploit-db.com/exploits/10738
CVE ID: CVE-2009-4576 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:37.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a suggestions action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10734 - http://www.osvdb.org/61355 - http://secunia.com/advisories/37872 - http://www.securityfocus.com/bid/37495 - http://packetstormsecurity.org/0912-exploits/joomlabeeheard-sql.txt - https://exchange.xforce.ibmcloud.co
om/bid/37495 - http://packetstormsecurity.org/0912-exploits/joomlabeeheard-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55135
CVE ID: CVE-2009-4577 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:37.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the MDForum module 2.x through 2.07 for MAXdev MDPro allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55138 - http://www.osvdb.org/61347 - http://www.securityfocus.com/bid/37488 - http://www.maxdev.com/Article661.phtml
CVE ID: CVE-2009-4578 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:38.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55133 - http://www.securityfocus.com/bid/37477 - http://packetstormsecurity.org/0912-exploits/joomlafacileforms-xss.txt
CVE ID: CVE-2009-4579 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:37.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Artist avenue (com_artistavenue) component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55214 - http://www.exploit-db.com/exploits/10818 - http://packetstormsecurity.org/0912-exploits/joomlaartistavenue-xss.txt
CVE ID: CVE-2009-4580 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:38.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) yorumyaz.php and (2) blog.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10641 - http://www.osvdb.org/61349 - http://secunia.com/advisories/37975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55052 - http://packetstormsecurity.org/0912-exploits/hastablog-xss.txt
CVE ID: CVE-2009-4581 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:37.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the admin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55207 - http://packetstormsecurity.org/0912-exploits/roseonlinecms-lfi.txt - http://www.securityfocus.com/bid/37529
CVE ID: CVE-2009-4582 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:38.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37535 - http://www.exploit-db.com/exploits/10807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55222
CVE ID: CVE-2009-4583 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:37.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the DhForum (com_dhforum) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a grouplist action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55157 - http://www.exploit-db.com/exploits/10742 - http://packetstormsecurity.org/0912-exploits/joomladhforum-sql.txt - http://www.securityfocus.com/bid/37475
CVE ID: CVE-2009-4584 State: PUBLISHED Published: 2010-01-06T21:33:00Z Last Updated: 2024-09-16T18:24:10.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in dB Masters Multimedia Links Directory 3.1.3 allows remote attackers to bypass authentication and gain administrative access via a certain value of the admin_log cookie. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0912-exploits/dbmastersmm-insecure.txt - http://www.securityfocus.com/bid/37517 - http://secunia.com/advisories/37985 - http://www.osvdb.org/61393
CVE ID: CVE-2009-4585 State: PUBLISHED Published: 2010-01-06T21:33:00 Last Updated: 2024-08-07T07:08:37.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10823 - http://www.osvdb.org/61396 - http://secunia.com/advisories/37912 - http://packetstormsecurity.org/0912-exploits/uranyumsoft-disclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55220
CVE ID: CVE-2009-4586 State: PUBLISHED Published: 2010-01-07T18:13:00Z Last Updated: 2024-09-16T18:49:00.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.html in Wowd client before 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sortby, (2) tags, or (3) ctx parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2009/10/wowd-search-client-multiple-variable.html - http://www.vupen.com/english/advisories/2009/3071 - http://packetstormsecurity.org/0910-exploits/wowd-xss.txt
CVE ID: CVE-2009-4587 State: PUBLISHED Published: 2010-01-07T18:13:00 Last Updated: 2024-08-07T07:08:38.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023095 - http://xc0re.wordpress.com/2009/10/25/cherokee-web-server-0-5-4-denial-of-service/ - http://www.securityfocus.com/archive/1/507651/100/0/thread - http://www.securityfocus.com/bid/36814 - http://www.securityfocus.com/archive/1/507456/100/0/threaded -
1/100/0/thread - http://www.securityfocus.com/bid/36814 - http://www.securityfocus.com/archive/1/507456/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/53957
CVE ID: CVE-2009-4588 State: PUBLISHED Published: 2010-01-07T18:13:00 Last Updated: 2024-08-07T07:08:37.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long SceneUrl property value, a different vulnerability than CVE-2009-2386. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35764 -
rty information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35764 - http://www.shinnai.net/exploits/nsGUdeley3EHfKEV690p.txt - http://www.exploit-db.com/exploits/9116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51672
CVE ID: CVE-2009-4589 State: PUBLISHED Published: 2010-01-07T18:13:00 Last Updated: 2024-08-07T07:08:38.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in SpecialBlockip.php in MediaWiki 1.14.0 and 1.15.0 allows remote attackers to inject arbitrary web script or HTML via the ip parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35662 - http://osvdb.org/55824 - http://secunia.com/advisories/35818 - https://bugzilla.wikimedia.org/show_bug.cgi?id=19693 - http://www.vupen.com/english/advisories/2009/1882 - https://e
8 - https://bugzilla.wikimedia.org/show_bug.cgi?id=19693 - http://www.vupen.com/english/advisories/2009/1882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51687 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2009-July/000087.html
CVE ID: CVE-2009-4590 State: PUBLISHED Published: 2010-01-07T18:13:00 Last Updated: 2024-08-07T07:08:38.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53968 - http://secunia.com/advisories/37147 - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/docs/CHANGELOG?revision=1.359&view=markup - http://base.secureideas.net/news.php - http:/
t/viewvc/secureideas/base-php4/docs/CHANGELOG?revision=1.359&view=markup - http://base.secureideas.net/news.php - http://www.vupen.com/english/advisories/2009/3054