Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4684 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script or HTML via the sign parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/ezodiak-xss.txt - http://secunia.com/advisories/35923 - http://osvdb.org/56073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51859
CVE ID: CVE-2009-4685 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inject arbitrary web script or HTML via the day parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/astrology-xss.txt - http://secunia.com/advisories/35933 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51856 - http://osvdb.org/56083
CVE ID: CVE-2009-4686 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in account.php in phplemon AdQuick 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the red_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51857 - http://osvdb.org/56056 - http://secunia.com/advisories/35926 - http://packetstormsecurity.org/0907-exploits/adquick-xss.txt
CVE ID: CVE-2009-4687 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in silentum_guestbook.php in Silentum Guestbook 2.0.2 allows remote attackers to execute arbitrary SQL commands via the messageid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51845
CVE ID: CVE-2009-4688 State: PUBLISHED Published: 2010-03-10T22:00:00Z Last Updated: 2024-09-16T23:11:14.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/scsc-sqlxss.txt - http://secunia.com/advisories/35894 - http://www.vupen.com/english/advisories/2009/1977
CVE ID: CVE-2009-4689 State: PUBLISHED Published: 2010-03-10T22:00:00Z Last Updated: 2024-09-16T22:41:23.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/scsc-sqlxss.txt - http://secunia.com/advisories/35894 - http://www.vupen.com/english/advisories/2009/1977
CVE ID: CVE-2009-4690 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) postcomments.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51880 - http://secunia.com/advisories/35918 - http://www.vupen.com/english/advisories/2009/1967 - http://osvdb.org/56076 - http://packetstormsecurity.org/0907-exploits/prog
/www.vupen.com/english/advisories/2009/1967 - http://osvdb.org/56076 - http://packetstormsecurity.org/0907-exploits/programsrating-xss.txt - http://www.securityfocus.com/bid/35746
CVE ID: CVE-2009-4691 State: PUBLISHED Published: 2010-03-10T22:00:00Z Last Updated: 2024-09-16T20:32:46.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in addlink.php in Classified Linktrader Script allows remote attackers to execute arbitrary SQL commands via the slctCategories parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35904 - http://www.vupen.com/english/advisories/2009/1980 - http://packetstormsecurity.org/0907-exploits/linktrader-sqlxss.txt
CVE ID: CVE-2009-4692 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the pr parameter in a ulist action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35826 - http://www.osvdb.org/55949 - http://www.exploit-db.com/exploits/9195 - http://www.securityfocus.com/bid/35730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51835
CVE ID: CVE-2009-4693 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to (1) en.inc.php, (2) hu.inc.php, (3) no.inc.php, (4) ro.inc.php, and (5) ru.inc.php in language/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35738 - http://www.exploit-db.com/exploits/9204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51847 - http://www.vupen.com/english/advisories/2009/1960
CVE ID: CVE-2009-4694 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the fid parameter in a view_forum action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35826 - http://osvdb.org/show/osvdb/55949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51835
CVE ID: CVE-2009-4695 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35826 - http://www.osvdb.org/55948 - http://www.exploit-db.com/exploits/9195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51834 - http://www.securityfocus.com/bid/35730
CVE ID: CVE-2009-4696 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35846 - http://www.osvdb.org/55950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51838 - http://www.securityfocus.com/bid/35730 - http://www.exploit-db.com/exploits/9196
CVE ID: CVE-2009-4697 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter in a ulist action and the (2) fid parameter in a view_forum action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35846 - http://www.osvdb.org/55951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51841 - http://www.securityfocus.com/bid/35730 - http://www.exploit-db.com/exploits/9196
CVE ID: CVE-2009-4698 State: PUBLISHED Published: 2010-03-15T21:00:00 Last Updated: 2024-08-07T07:08:38.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to (1) aviso.php and (2) imprimir.php, and the (3) cod_categoria parameter to categoria.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56593 - http://www.securityfocus.com/bid/35820 - http://www.osvdb.org/56594 - http://www.exploit-db.com/exploits/9261 - http://www.exploit-db.com/exploits/9249 - http://osvdb.org/56595 - ht
/56594 - http://www.exploit-db.com/exploits/9261 - http://www.exploit-db.com/exploits/9249 - http://osvdb.org/56595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51985 - http://secunia.com/advisories/35966
CVE ID: CVE-2009-4699 State: PUBLISHED Published: 2010-03-15T21:00:00 Last Updated: 2024-08-07T07:08:38.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/auth.php and (2) file_uploader.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56545 - http://osvdb.org/56544 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52004 - http://www.securityfocus.com/bid/35813 - http://secunia.com/advisories/35997 - http://www.exploit-db.com/exploits/9260
CVE ID: CVE-2009-4700 State: PUBLISHED Published: 2010-03-15T21:00:00 Last Updated: 2024-08-07T07:08:38.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .. (dot dot) in the layout parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56543 - http://www.securityfocus.com/bid/35813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52003 - http://secunia.com/advisories/35997 - http://www.exploit-db.com/exploits/9260
CVE ID: CVE-2009-4701 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T19:30:52.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Myth download (myth_download) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4702 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T17:03:04.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4703 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T23:10:42.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Webesse Image Gallery (ws_gallery) extension 1.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4704 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T18:03:17.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4705 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-17T02:32:42.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Twitter Search (twittersearch) extension before 0.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4706 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T16:48:48.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4707 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T22:03:23.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4708 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T23:30:46.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4709 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T22:20:38.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the datamints Newsticker (datamints_newsticker) extension before 0.7.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35879 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4710 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-17T00:02:31.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35876 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/ - http://secunia.com/advisories/36084
CVE ID: CVE-2009-4711 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-17T03:27:43.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CoolURI (cooluri) extension before 1.0.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2008-6686. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35872 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/ - http://secunia.com/advisories/36082
CVE ID: CVE-2009-4712 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-17T03:12:58.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Tukanas Classifieds (aka EasyClassifieds) Script 1.0 allows remote attackers to execute arbitrary SQL commands via the b parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56601 - http://packetstormsecurity.org/0907-exploits/tukanasec-sql.txt - http://secunia.com/advisories/35977
CVE ID: CVE-2009-4713 State: PUBLISHED Published: 2010-03-15T21:00:00 Last Updated: 2024-08-07T07:17:24.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via (1) the cod_categoria parameter to categoria.php, (2) the opcao parameter to index.php, and the PATH_INFO to (3) categoria.php and (4) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56596 - http://www.securityfocus.com/bid/35820 - http://www.exploit-db.com/exploits/9261 - http://secunia.com/advisories/35966 - http://osv
securityfocus.com/bid/35820 - http://www.exploit-db.com/exploits/9261 - http://secunia.com/advisories/35966 - http://osvdb.org/56597
CVE ID: CVE-2009-4714 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T20:52:42.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to cadastro_usuario.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/56598 - http://packetstormsecurity.org/0907-exploits/xoopsceleparquiz-xss.txt - http://secunia.com/advisories/35966
CVE ID: CVE-2009-4715 State: PUBLISHED Published: 2010-03-15T21:00:00 Last Updated: 2024-08-07T07:17:24.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script or HTML via the Amount parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51853 - http://www.osvdb.org/56081 - http://secunia.com/advisories/35936 - http://packetstormsecurity.org/0907-exploits/rtce-xss.txt
CVE ID: CVE-2009-4716 State: PUBLISHED Published: 2010-03-15T21:00:00 Last Updated: 2024-08-07T07:17:24.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in results.php in EDGEPHP EZWebSearch allows remote attackers to inject arbitrary web script or HTML via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/56082 - http://packetstormsecurity.org/0907-exploits/ezwebsearch-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/51854 - http://secunia.com/advisories/35922
CVE ID: CVE-2009-4717 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T16:13:37.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML via the (1) host parameter to stat/host.php, nodayshow parameter to (2) mostvisitpage.php and (3) visitorduration.php in stat/, (4) nopagesmost parameter to stat/mostvisitpagechart.php, and date parameter to (5) pageviewers.php, (6) pageviewerschart.php, and (7) referer.php in stat/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36068 - http
hp in stat/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36068 - http://packetstormsecurity.org/0907-exploits/webstatcaffe-xss.txt
CVE ID: CVE-2009-4718 State: PUBLISHED Published: 2010-03-15T21:00:00Z Last Updated: 2024-09-16T19:05:16.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote attackers to execute arbitrary SQL commands via the nodayshow parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36068
CVE ID: CVE-2009-4719 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:25.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35923 - http://www.exploit-db.com/exploits/9349 - http://www.securityfocus.com/archive/1/505478/100/0/threaded
CVE ID: CVE-2009-4720 State: PUBLISHED Published: 2010-03-18T18:00:00Z Last Updated: 2024-09-16T20:47:25.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cgi-bin/gnudip.cgi in GnuDIP 2.1.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56675 - http://secunia.com/advisories/36115 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539452
CVE ID: CVE-2009-4721 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:25.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web (A-W) BannerAd 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) User and (2) Password parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2122 - http://secunia.com/advisories/36135 - http://www.exploit-db.com/exploits/9328
CVE ID: CVE-2009-4722 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:25.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52009 - http://secunia.com/advisories/35993 - http://www.osvdb.org/56592 - http://www.exploit-db.com/exploits/9281
CVE ID: CVE-2009-4723 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:24.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9333 - http://www.vupen.com/english/advisories/2009/2125