Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3118 State: PUBLISHED Published: 2009-09-09T22:00:00Z Last Updated: 2024-09-16T21:57:07.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mod/poll/comment.php in the vote module in Danneo CMS 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the comtext parameter, in conjunction with crafted comname and comtitle parameters, in a poll action to index.php, related to incorrect input sanitization in base/danneo.function.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0908-exploits/danneo052-sql.txt - http://secunia.com/advisories/36440 - http://www.vup
- http://packetstormsecurity.org/0908-exploits/danneo052-sql.txt - http://secunia.com/advisories/36440 - http://www.vupen.com/english/advisories/2009/2459
CVE ID: CVE-2009-3119 State: PUBLISHED Published: 2009-09-09T22:00:00Z Last Updated: 2024-09-17T02:02:44.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the view_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2469 - http://www.securityfocus.com/bid/36180 - http://packetstormsecurity.org/0908-exploits/phpfusiondsmsf-sql.txt
CVE ID: CVE-2009-3120 State: PUBLISHED Published: 2009-09-09T22:00:00Z Last Updated: 2024-09-16T22:08:52.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://bigace.cvs.sourceforge.net/viewvc/bigace/BIGACE/CORE/public/index.php?revision=1.22&view=markup - http://secunia.com/advisories/36523
CVE ID: CVE-2009-3121 State: PUBLISHED Published: 2009-09-09T22:00:00 Last Updated: 2024-08-07T06:14:56.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36165 - http://osvdb.org/57436 - http://secunia.com/advisories/36497 - http://drupal.org/node/560298 - http://www.vupen.com/english/advisories/2009/2452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52819
CVE ID: CVE-2009-3122 State: PUBLISHED Published: 2009-09-09T22:00:00 Last Updated: 2024-08-07T06:14:56.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36165 - http://www.osvdb.org/57435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52818 - http://secunia.com/advisories/36497 - http://drupal.org/node/560298 - http://www.vupen.com/english/advisories/2009/2452
CVE ID: CVE-2009-3123 State: PUBLISHED Published: 2009-09-09T22:00:00 Last Updated: 2024-08-07T06:14:56.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the image parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52810 - http://secunia.com/advisories/36416 - http://packetstormsecurity.org/0908-exploits/wapmotor-lfi.txt
CVE ID: CVE-2009-3124 State: PUBLISHED Published: 2009-09-09T22:00:00Z Last Updated: 2024-09-17T02:15:48.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a .. (dot dot) in the tf parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2460 - http://packetstormsecurity.org/0908-exploits/quarkmail-lfi.txt
CVE ID: CVE-2009-3125 State: PUBLISHED Published: 2009-09-15T22:00:00Z Last Updated: 2024-09-16T16:18:41.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugzilla.org/security/3.0.8/ - https://bugzilla.mozilla.org/show_bug.cgi?id=515191 - http://www.securityfocus.com/bid/36371 - http://secunia.com/advisories/36718
CVE ID: CVE-2009-3126 State: PUBLISHED Published: 2009-10-14T10:00:00 Last Updated: 2024-08-07T06:14:56.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Serve
werPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka "GDI+ PNG Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6134 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-062
CVE ID: CVE-2009-3127 State: PUBLISHED Published: 2009-11-11T19:00:00 Last Updated: 2024-08-07T06:14:56.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer 2003 SP3 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Cache Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023157 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://docs.microsoft.com/en-us/securit
tracker.com/id?1023157 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6146
CVE ID: CVE-2009-3128 State: PUBLISHED Published: 2009-11-11T19:00:00 Last Updated: 2024-08-07T06:14:56.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel SxView Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023157 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6474 - http://www.us-cert.gov/cas/techalerts/TA09-3
urity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6474 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE ID: CVE-2009-3129 State: PUBLISHED Published: 2009-11-11T19:00:00.000Z Last Updated: 2025-10-22T00:05:54.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability." Addit
HdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://osvdb.org/59860 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6521 - http://www.securitytracker.com/id?1023157 - http://www.securityfocus.com/bid/36945 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=832 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067 - http://archives.neohapsis.com/archives/bugtraq/2009-11/0080.html - http://www
-updates/securitybulletins/2009/ms09-067 - http://archives.neohapsis.com/archives/bugtraq/2009-11/0080.html - http://www.zerodayinitiative.com/advisories/ZDI-09-083 - http://www.exploit-db.com/exploits/14706
CVE ID: CVE-2009-3130 State: PUBLISHED Published: 2009-11-11T20:00:00 Last Updated: 2024-08-07T06:14:56.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a spreadsheet containing a malformed Binary File Format (aka BIFF) record that triggers memory corruption, aka "Excel Document Parsing Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6137 - http://www.securit
nces: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6137 - http://www.securitytracker.com/id?1023157 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE ID: CVE-2009-3131 State: PUBLISHED Published: 2009-11-11T20:00:00 Last Updated: 2024-08-07T06:14:56.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a spreadsheet with a crafted formula embedded in a cell, aka "Excel Formula Parsing Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https:
ormula Parsing Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6518 - http://www.securitytracker.com/id?1023157 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE ID: CVE-2009-3132 State: PUBLISHED Published: 2009-11-11T20:00:00 Last Updated: 2024-08-07T06:14:56.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed formula, related to a "pointer corruption" issue, aka "Excel Index Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References
orruption" issue, aka "Excel Index Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023157 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6526 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE ID: CVE-2009-3133 State: PUBLISHED Published: 2009-11-11T20:00:00 Last Updated: 2024-08-07T06:14:56.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed object that triggers memory corruption, related to "loading Excel records," aka "Excel Document Parsing Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023157 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A62
curitytracker.com/id?1023157 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6265 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067
CVE ID: CVE-2009-3134 State: PUBLISHED Published: 2009-11-11T20:00:00 Last Updated: 2024-08-07T06:14:56.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object, aka "Excel Field Sanitization Vulnerability." Additional Analyst Notes: - CVE Program Conta
h a malformed record object, aka "Excel Field Sanitization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023157 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5878
CVE ID: CVE-2009-3135 State: PUBLISHED Published: 2009-11-11T19:00:00 Last Updated: 2024-08-07T06:14:56.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File Information Block (FIB) structure, aka "Microsoft Office Word File Information Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3194 - http://www.se
Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3194 - http://www.securityfocus.com/bid/36950 - http://osvdb.org/59857 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-068 - http://www.us-cert.gov/cas/techalerts/TA09-314A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6555 - http://www.securitytracker.com/id?1023158 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=831 - http://secunia.com/advisories/37277
CVE ID: CVE-2009-3136 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3137 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3138 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3139 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3140 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3141 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3142 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3143 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3144 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3145 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3146 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search_advance.php in ArticleFriend Script allows remote attackers to inject arbitrary web script or HTML via the SearchWd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52207 - http://secunia.com/advisories/36077 - http://osvdb.org/56732
CVE ID: CVE-2009-3147 State: PUBLISHED Published: 2009-09-10T18:00:00Z Last Updated: 2024-09-17T00:16:11.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or HTML via the date parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36029 - http://www.osvdb.org/56615 - http://packetstormsecurity.org/0907-exploits/reviewpost-xss.txt
CVE ID: CVE-2009-3148 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) calendar.php, (2) news.php, and (3) links.php; and the (4) assignment_id parameter to assignments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9325
CVE ID: CVE-2009-3149 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in _css/js.php in Elgg 1.5, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the js parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9355 - http://secunia.com/advisories/36147
CVE ID: CVE-2009-3150 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9344 - http://www.vupen.com/english/advisories/2009/2132 - http://secunia.com/advisories/36107
CVE ID: CVE-2009-3151 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52166
CVE ID: CVE-2009-3152 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) bt_code, and (3) b_no parameters in a board view action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/ntsoft-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/52157 - http://www.securityfocus.com/bid/35893 - http://secunia.com/advisories/26117
CVE ID: CVE-2009-3153 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, id parameter to (3) templates/header1.php and (4) mp3/lyrics.php, key parameter to (5) video_listing.php and (6) adult/video_listing.php, and name parameter to (7) mp3/embed.php and (8) mp3/info.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.
) mp3/embed.php and (8) mp3/info.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52165 - http://secunia.com/advisories/36059 - http://packetstormsecurity.org/0907-exploits/x10mp3se-xss.txt
CVE ID: CVE-2009-3154 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_form action to index.php, a different vector than CVE-2009-2567. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35998 - http://www.exploit-db.com/exploits/9258
CVE ID: CVE-2009-3155 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the addr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35998 - http://www.osvdb.org/56561 - http://www.exploit-db.com/exploits/9258