Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4029 State: PUBLISHED Published: 2008-11-12T23:00:00 Last Updated: 2024-08-07T10:00:42.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensitive information from another domain via a crafted XML document, related to improper error checks for external DTDs, aka "MSXML DTD Cross-Domain Scripting Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - http://www.us-cert.gov/cas/techalerts/TA08-316A.html - https://oval.cisecurity.org/repository/search/def
006921213&w=2 - http://www.us-cert.gov/cas/techalerts/TA08-316A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5999 - http://www.securityfocus.com/bid/32155 - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - http://www.vupen.com/english/advisories/2008/3111 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069 - http://securitytracker.com/id?1021164
CVE ID: CVE-2008-4030 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:00:42.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1 allow remote attackers to execute arbitrary code via crafted control words in (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and memory corruption, aka "Word RTF Object Parsing Vulnerability," a different vulnerability than CVE-2008-4028. Additional Analyst N
ruption, aka "Word RTF Object Parsing Vulnerability," a different vulnerability than CVE-2008-4028. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5737 - http://www.securitytracker.com/id?1021370 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.vupen.com/english/advisories/2008/3384
CVE ID: CVE-2008-4031 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:00:42.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a malformed string in (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and memory corruption, aka "Word RTF Object Parsing Vulnerability."
message, which triggers incorrect memory allocation and memory corruption, aka "Word RTF Object Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5952 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-072 - http://www.securitytracker.com/id?1021370 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.vupen.com/english/advisories/2008/3384
CVE ID: CVE-2008-4032 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T10:00:42.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021367 - http://www
Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021367 - http://www.vupen.com/english/advisories/2008/3389 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5774 - http://secunia.com/advisories/33063 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-077
CVE ID: CVE-2008-4033 State: PUBLISHED Published: 2008-11-12T23:00:00 Last Updated: 2024-08-07T10:00:42.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, as demonstrated by the Transfer-Encoding field, aka "MSXML Header Request Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - https://oval.cisecurity.org/
- CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5847 - http://www.us-cert.gov/cas/techalerts/TA08-316A.html - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - http://www.vupen.com/english/advisories/2008/3111 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069 - http://securitytracker.com/id?1021164 - http://www.securityfocus.com/bid/32204
CVE ID: CVE-2008-4034 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4035 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4036 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-10-15T14:24:23.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual Address Descriptors (VADs) and a "memory allocation mapping error," aka "Virtual Address Descriptor Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http:/
ivilege Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/32251 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.vupen.com/english/advisories/2008/2815 - http://www.securitytracker.com/id?1021051 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45571 - http://www.securityfocus.com/bid/31675 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5343 - https://excha
-288A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45572
CVE ID: CVE-2008-4037 State: PUBLISHED Published: 2008-11-12T23:00:00 Last Updated: 2024-08-07T10:00:42.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential Reflection Vulnerability." NOTE: some reliable sources report that this vulnerability exists because of an insufficient fix for CVE-2000-0834. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&
ent fix for CVE-2000-0834. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - http://www.networkworld.com/news/2008/111208-microsoft-seven-year-security-patch.html - http://www.us-cert.gov/cas/techalerts/TA08-316A.html - http://www.veracode.com/blog/2008/11/microsoft-fixes-8-year-old-design-flaw-in-smb/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6012 - http://osvdb.org/49736 - http://securitytracker.com/id?1021163 - http://marc.info/?l=bugtraq&m=122703006921213&w=2 - http://www.vupen.com/english/advisories/2008/3110 - http://www.xfocus.net/articles/200305/smbrelay.html - https://do
2 - http://www.vupen.com/english/advisories/2008/3110 - http://www.xfocus.net/articles/200305/smbrelay.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-068 - http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch - http://www.securityfocus.com/data/vulnerabilities/exploits/backrush.patch.README - http://secunia.com/advisories/32633 - http://www.securityfocus.com/bid/7385 - https://www.exploit-db.com/exploits/7125
CVE ID: CVE-2008-4038 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T10:00:42.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka "SMB Buffer Underflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021049 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://secunia.com/advisories/32249 - http://www.securityfocus.co
- http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://secunia.com/advisories/32249 - http://www.securityfocus.com/bid/31647 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45560 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - http://www.vupen.com/english/advisories/2008/2814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5787 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-063
CVE ID: CVE-2008-4039 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands via the cat_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44859 - http://securityreason.com/securityalert/4237 - http://www.securityfocus.com/bid/30985 - http://secunia.com/advisories/31664 - https://www.exploit-db.com/exploits/6354
CVE ID: CVE-2008-4040 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Kyocera Command Center in Kyocera FS-118MFP allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0808-exploits/kyocera-traversal.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44793 - http://secunia.com/advisories/31680 - http://www.securityfocus.com/bid/30971
CVE ID: CVE-2008-4041 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP server in Softalk Mail Server (formerly WorkgroupMail) 8.5.1.431 allows remote authenticated users to cause a denial of service (resource consumption and daemon crash) via a long IMAP APPEND command with certain repeated parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30970 - http://securityreason.com/securityalert/4238 - http://www.securityfocus.com/archive/1/495896/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44862 - http://secuni
tyfocus.com/archive/1/495896/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44862 - http://secunia.com/advisories/31715
CVE ID: CVE-2008-4042 State: REJECTED Published: 2008-09-11T14:00:00 Last Updated: 2009-01-29T10:00:00 Description: No description available.
CVE ID: CVE-2008-4043 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to (1) acme/article/comment.php and (2) prime/article/comment.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4240 - http://www.securityfocus.com/bid/30974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44803 - https://www.exploit-db.com/exploits/6350
CVE ID: CVE-2008-4044 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the artid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44803 - http://www.securityfocus.com/bid/30978 - https://www.exploit-db.com/exploits/6351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45201 - http://securityreason.com/securityalert/4241
CVE ID: CVE-2008-4045 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the (1) file and (2) HelpFile parameters to parse.php, the (3) Folder and (4) start parameters to showmail.php, and the (5) abookview parameter to abook.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44860 - http://secunia.com/advisories/31720 - http://secunia.com/advisories/31727 - http://packetstorm.linuxsecurity.com/080
0 - http://secunia.com/advisories/31720 - http://secunia.com/advisories/31727 - http://packetstorm.linuxsecurity.com/0808-exploits/atmail542-xss.txt
CVE ID: CVE-2008-4046 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44857 - http://packetstorm.linuxsecurity.com/0809-exploits/elitecms-sql.txt - http://secunia.com/advisories/31722 - http://www.securityfocus.com/bid/30990
CVE ID: CVE-2008-4047 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Novell Forum (formerly SiteScape Forum) 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrary TCL code via a modified URL. NOTE: this might overlap CVE-2007-6515. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45199 - http://www.vupen.com/english/advisories/2008/2465 - http://secunia.com/advisories/31578 - http://www.securityfocus.com/bid/30909 - http://download.novell.com/Download?buildid=6k-5X-UPnrM~ - http:
sories/31578 - http://www.securityfocus.com/bid/30909 - http://download.novell.com/Download?buildid=6k-5X-UPnrM~ - http://www.securitytracker.com/id?1020803
CVE ID: CVE-2008-4048 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30891 - http://securityreason.com/securityalert/4242 - https://www.exploit-db.com/exploits/6323 - http://secunia.com/advisories/31644 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
exploit-db.com/exploits/6323 - http://secunia.com/advisories/31644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44755
CVE ID: CVE-2008-4049 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44754 - http://www.securityfocus.com/bid/30889 - https://www.exploit-db.com/exploits/6324 - http://secunia.com/advisories/31644 - http://securityreason.com/securityalert/4243
CVE ID: CVE-2008-4050 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6334 - http://www.securityfocus.com/bid/30939 - http://secunia.com/advisories/31644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44787 - http://securityr
39 - http://secunia.com/advisories/31644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44787 - http://securityreason.com/securityalert/4244 - http://www.securityfocus.com/bid/30940
CVE ID: CVE-2008-4051 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44702 - http://www.securityfocus.com/bid/30841 - http://secunia.com/advisories/31637 - http://www.securityfocus.com/bid/30841/explo
p://www.securityfocus.com/bid/30841 - http://secunia.com/advisories/31637 - http://www.securityfocus.com/bid/30841/exploit
CVE ID: CVE-2008-4052 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service (crash) or gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://mail.openvms.org:8100/Lists/alerts/Message/837.html - http://mail.openvms.org:8100/Lists/alerts/Message/834.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44664 - http://mail.openvms.org:8100/Lists/alerts/Messa
/834.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44664 - http://mail.openvms.org:8100/Lists/alerts/Message/835.html - http://www.vupen.com/english/advisories/2008/2439 - http://mail.openvms.org:8100/Lists/alerts/Message/833.html - http://mail.openvms.org:8100/Lists/alerts/Message/836.html - http://secunia.com/advisories/31581 - http://mail.openvms.org:8100/Lists/alerts/Message/832.html
CVE ID: CVE-2008-4053 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the (1) param, (2) cat_id, and (3) view parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44680 - http://secunia.com/advisories/31625 - http://lostmon.blogspot.com/2008/08/popnupblog-indexphp-multiple-variables.html - http://www.securityfocus.com/bid/30827
CVE ID: CVE-2008-4054 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4235 - http://www.securityfocus.com/bid/30839 - http://secunia.com/advisories/31621 - https://www.exploit-db.com/exploits/6310 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44698
CVE ID: CVE-2008-4055 State: PUBLISHED Published: 2008-09-11T14:00:00Z Last Updated: 2024-09-16T19:09:19.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tops_top.php in Million Pixel Ad Script (Million Pixel Script) allows remote attackers to execute arbitrary SQL commands via the id_cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0808-exploits/millionpixel-sql.txt - http://secunia.com/advisories/31626
CVE ID: CVE-2008-4056 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/login.php in Matterdaddy Market 1.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44721 - http://secunia.com/advisories/31943 - http://www.securityfocus.com/bid/30848/exploit - http://www.securityfocus.com/bid
http://secunia.com/advisories/31943 - http://www.securityfocus.com/bid/30848/exploit - http://www.securityfocus.com/bid/30848
CVE ID: CVE-2008-4057 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T10:00:42.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Objective Development Sharity 3 before 3.5 has unknown impact and attack vectors, related to a "serious security problem." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44695 - http://www.obdev.at/products/sharity/releasenotes.html - http://secunia.com/advisories/31638 - http://www.securityfocus.com/bid/30860