Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
es: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0498 - http://www.securityfocus.com/archive/1/487955/100/0/threaded - http://secunia.com/advisories/28870 - http://www.securityfocus.com/bid/27728 - http://www.securityfocus.com/bid/27734 - http://aluigi.altervista.org/adv/cyanuro-adv.txt
CVE ID: CVE-2008-0757 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter (aka the message text area), which leads to an injection in the messenger during private message (PM) preview. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019371 - http://www.securityfocus.com/bid/27730 - http://www.securityfocus.com/archiv
http://www.securitytracker.com/id?1019371 - http://www.securityfocus.com/bid/27730 - http://www.securityfocus.com/archive/1/487913/100/0/threaded - http://secunia.com/advisories/28899 - http://forum.aria-security.net/showthread.php?t=522
CVE ID: CVE-2008-0758 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip, and (7) html files via a "..\" (dot dot backslash) sequence in the filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.grouplogic.com/files/ez/hot/hotFix51.cfm - http://www.securityfocus.com/archive/1/487952/100/0/threaded - http://aluigi.altervista.org/adv/ez
ez/hot/hotFix51.cfm - http://www.securityfocus.com/archive/1/487952/100/0/threaded - http://aluigi.altervista.org/adv/ezipirla-adv.txt - http://secunia.com/advisories/28862 - http://aluigi.org/poc/ezipirla.zip - http://www.vupen.com/english/advisories/2008/0485 - http://www.securityfocus.com/bid/27718
CVE ID: CVE-2008-0759 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service (daemon crash) via an invalid UAM field in a request to the Apple Filing Protocol (AFP) service on TCP port 548. Additional Analyst Notes: - CVE Program Container: References: - http://www.grouplogic.com/files/ez/hot/hotFix51.cfm - http://www.securityfocus.com/archive/1/487952/100/0/threaded - http://aluigi.altervista.org/adv/ezipirla-adv.txt - http://secunia.com/advisories/28862 - http://aluigi.org/po
hreaded - http://aluigi.altervista.org/adv/ezipirla-adv.txt - http://secunia.com/advisories/28862 - http://aluigi.org/poc/ezipirla.zip - http://www.vupen.com/english/advisories/2008/0485 - http://www.securityfocus.com/bid/27718
CVE ID: CVE-2008-0760 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-6483. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27735 - http://www.securityfocus.com/archive/1/487954/100/0/threaded - http://securityreason.com/securityalert/3646 - http
735 - http://www.securityfocus.com/archive/1/487954/100/0/threaded - http://securityreason.com/securityalert/3646 - http://aluigi.altervista.org/adv/sentinella-adv.txt - http://secunia.com/advisories/28863 - http://www.vupen.com/english/advisories/2008/0499
CVE ID: CVE-2008-0761 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Prince Clan Chess Club (com_pcchess) 0.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a players action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5104 - http://www.securityfocus.com/bid/27761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40436
CVE ID: CVE-2008-0762 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the com_iomezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487989/100/0/threaded - http://www.securityfocus.com/bid/27748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40447
CVE ID: CVE-2008-0763 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows remote attackers to execute arbitrary code via a long argument in a LICENSE command on TCP port 3114. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487956/100/0/threaded - http://secunia.com/advisories/28890 - http://www.securityfocus.com/bid/27732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40421 - http://aluigi.altervista.org/adv/lstnpsx-ad
com/bid/27732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40421 - http://aluigi.altervista.org/adv/lstnpsx-adv.txt - http://www.vupen.com/english/advisories/2008/0500
CVE ID: CVE-2008-0764 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487956/100/0/threaded - http://secunia.com/advisories/28890 - http://www.securityfocus.com/bid/27732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40420 - http://aluig
890 - http://www.securityfocus.com/bid/27732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40420 - http://aluigi.altervista.org/adv/lstnpsx-adv.txt - http://www.vupen.com/english/advisories/2008/0500
CVE ID: CVE-2008-0765 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in artmedic webdesign weblog allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to artmedic_print.php and the (2) jahrneu parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27745 - http://secunia.com/advisories/28927 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0152.html - http://www.securityfocus.com/archive/1/488262/100/0/threaded - http://www.securityfoc
chives/bugtraq/2008-02/0152.html - http://www.securityfocus.com/archive/1/488262/100/0/threaded - http://www.securityfocus.com/archive/1/488223/100/0/threaded
CVE ID: CVE-2008-0766 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager (RPM) 4.5.1.11 and earlier (Elite and Select) for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28905 - http://aluigi.altervista.org/adv/rpmlpdbof-adv.txt - http://www.securityfocus.com/bid/27742 - http://www.securityfocus
- http://aluigi.altervista.org/adv/rpmlpdbof-adv.txt - http://www.securityfocus.com/bid/27742 - http://www.securityfocus.com/archive/1/488010/100/0/threaded - http://www.vupen.com/english/advisories/2008/0501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40432
CVE ID: CVE-2008-0767 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:23.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service (daemon crash) via a large integer in this field in a packet to the Service Location Protocol (SLP) service on UDP port 427, triggering an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.grouplogic.com/files/ez/hot/hotFix51.cfm - http://www.securityfocus.com/
CVE Program Container: References: - http://www.grouplogic.com/files/ez/hot/hotFix51.cfm - http://www.securityfocus.com/archive/1/487952/100/0/threaded - http://aluigi.altervista.org/adv/ezipirla-adv.txt - http://secunia.com/advisories/28862 - http://aluigi.org/poc/ezipirla.zip - http://www.vupen.com/english/advisories/2008/0485 - http://www.securityfocus.com/bid/27718
CVE ID: CVE-2008-0768 State: PUBLISHED Published: 2008-02-13T21:00:00 Last Updated: 2024-08-07T07:54:23.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0317 - http://www-1.ibm.com/support/search.wss?rs=0&q=IC55041&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IC55040&apar=only -
bm.com/support/search.wss?rs=0&q=IC55041&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IC55040&apar=only - http://www.securityfocus.com/bid/27485 - http://www.securitytracker.com/id?1019281 - http://secunia.com/advisories/28689 - http://www-01.ibm.com/support/docview.wss?uid=swg21294211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40018
CVE ID: CVE-2008-0769 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-07T07:54:23.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input. Additional Analyst Notes: - CVE Program Container: References: - http://withdk.com/archives/livelink-utf7-xss-advisory.pdf - http://www.securityfocus.com/bid/27537 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059985.html - http://secunia.com/advisories/28723 - https://exchange.xforce.ibmcloud
ermail/full-disclosure/2008-January/059985.html - http://secunia.com/advisories/28723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40123
CVE ID: CVE-2008-0770 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-07T07:54:23.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the g_display_order cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5018 - http://www.vupen.com/english/advisories/2008/0366
CVE ID: CVE-2008-0771 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-07T07:54:23.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the (1) txtUserName and (2) txtPassword parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28531 - http://www.securityfocus.com/archive/1/486414/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39734 - http://securityreason.com/securityalert/3650 - http:
aded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39734 - http://securityreason.com/securityalert/3650 - http://www.securityfocus.com/bid/27330
CVE ID: CVE-2008-0772 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-07T07:54:23.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the com_doc component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the sid parameter in a view task. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27679 - https://www.exploit-db.com/exploits/5080
CVE ID: CVE-2008-0773 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-07T07:54:23.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27731 - https://www.exploit-db.com/exploits/5094
CVE ID: CVE-2008-0774 State: PUBLISHED Published: 2008-02-13T23:00:00Z Last Updated: 2024-09-16T22:40:21.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotel_name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28881 - http://www.securityfocus.com/bid/27729
CVE ID: CVE-2008-0775 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-07T07:54:23.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&#", contain the desired script, and end with ";". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28900 - http://www.securityfocus.com/archive/1/491357/100/0/threaded - http://www.securityfocus.com/archive/1/489964/100/0/threaded - http://www.securityfocus.
chive/1/491357/100/0/threaded - http://www.securityfocus.com/archive/1/489964/100/0/threaded - http://www.securityfocus.com/archive/1/487912/100/0/threaded - http://www.securityfocus.com/bid/27727 - http://securityreason.com/securityalert/3651
CVE ID: CVE-2008-0776 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-07T07:54:23.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5096 - http://secunia.com/advisories/28887 - http://www.securityfocus.com/bid/27717
CVE ID: CVE-2008-0777 State: PUBLISHED Published: 2008-02-15T01:00:00Z Last Updated: 2024-09-16T20:21:22.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-08:03.sendfile.asc - http://securitytracker.com/id?1019416 - http://www.securityfocus.com/bid/27789 - http://secunia.com/advisories/28928
CVE ID: CVE-2008-0778 State: PUBLISHED Published: 2008-02-14T11:00:00 Last Updated: 2024-08-07T07:54:23.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, and (5) SetMatrix methods. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40475 - http://securityreason.com/securityalert/3652 - http://www.securityfocus.com/bid/2
e.ibmcloud.com/vulnerabilities/40475 - http://securityreason.com/securityalert/3652 - http://www.securityfocus.com/bid/27769 - https://www.exploit-db.com/exploits/5110 - http://www.securityfocus.com/archive/1/488045/100/0/threaded
CVE ID: CVE-2008-0779 State: PUBLISHED Published: 2008-02-14T11:00:00 Last Updated: 2024-08-07T07:54:23.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExtension, which allows local users to access kernel memory and execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40512 - http://www.vupen.com/english/advisories/2008/0541/references - http://www.securitytracker.com/id?1019415 - http://www.securityfocus.com/bid/27776 - http://www.r
2008/0541/references - http://www.securitytracker.com/id?1019415 - http://www.securityfocus.com/bid/27776 - http://www.reversemode.com/index.php?option=com_mamblog&Itemid=15&task=show&action=view&id=47&Itemid=15 - http://kc.forticare.com/default.asp?id=3618 - http://www.securityfocus.com/archive/1/488071/100/0/threaded - http://securityreason.com/securityalert/3660 - http://secunia.com/advisories/28975
CVE ID: CVE-2008-0780 State: PUBLISHED Published: 2008-02-14T20:00:00 Last Updated: 2024-08-07T07:54:23.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33755 - http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml - http://secunia.com/advisories/29262 - http://secunia.com/advisories/29010 - https://bugzilla.redhat.com/show_bug.cgi?id=432747 - http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7 - https://www
29010 - https://bugzilla.redhat.com/show_bug.cgi?id=432747 - http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html - http://secunia.com/advisories/28987 - http://www.vupen.com/english/advisories/2008/0569/references - http://www.securityfocus.com/bid/27904 - http://secunia.com/advisories/29444 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html - https://usn.ubuntu.com/716-1/ - http://hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d - http://www.debian.org/security/2008/dsa-1514
CVE ID: CVE-2008-0781 State: PUBLISHED Published: 2008-02-14T20:00:00 Last Updated: 2024-08-07T07:54:23.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33755 - http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml - http://secunia.com/advisories/29262 - http://secunia.com/advisories/29010 - https://www.redhat.com/archives/fedora-package-announce/2008-Februar
ories/29262 - http://secunia.com/advisories/29010 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html - http://secunia.com/advisories/28987 - http://www.vupen.com/english/advisories/2008/0569/references - http://www.securityfocus.com/bid/27904 - https://bugzilla.redhat.com/show_bug.cgi?id=432748 - http://secunia.com/advisories/29444 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html - http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef - https://usn.ubuntu.com/716-1/ - http://www.debian.org/security/2008/dsa-1514
CVE ID: CVE-2008-0782 State: PUBLISHED Published: 2008-02-14T20:00:00 Last Updated: 2024-08-07T07:54:23.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33755 - http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml - http://secunia.com/advisories/29262 - http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630 - ht
ty/en/glsa/glsa-200803-27.xml - http://secunia.com/advisories/29262 - http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630 - http://secunia.com/advisories/29010 - http://www.attrition.org/pipermail/vim/2008-January/001890.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39837 - https://www.exploit-db.com/exploits/4957 - http://www.vupen.com/english/advisories/2008/0569/references - http://secunia.com/advisories/29444 - http://www.securityfocus.com/bid/27404 - https://usn.ubuntu.com/716-1/ - http://www.debian.org/security/2008/dsa-1514
CVE ID: CVE-2008-0783 State: PUBLISHED Published: 2008-02-14T22:00:00 Last Updated: 2024-08-07T07:54:23.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via (1) the view_type parameter to graph.php; (2) the filter parameter to graph_view.php; (3) the action parameter to the draw_navigation_text function in lib/functions.php, reachable through index.php (aka the login page) or data_input.php; or (4) the login_username parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://
(4) the login_username parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00593.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50575 - http://bugs.cacti.net/view.php?id=1245 - http://secunia.com/advisories/29242 - https://bugzilla.redhat.com/show_bug.cgi?id=432758 - http://securityreason.com/securityalert/3657 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://security.gentoo.org/glsa/glsa-200803-18.xml - http://secunia.com/advisories/28872 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:052 - http://www.cacti.net/release