Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
curityfocus.com/bid/32570 - http://www.packetstormsecurity.org/0812-exploits/phpjobwebsite-cmsqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/46997
CVE ID: CVE-2008-5977 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:14.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter in a Submit action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46998 - http://www.securityfocus.com/bid/32570 - http://www.packetstormsecurity.org/0812-exploits/phpjobwebsite-cmsqlxss.txt
CVE ID: CVE-2008-5978 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) default.asp and (2) s_edit.asp. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7319 - http://secunia.com/advisories/32929 - http://www.securityfocus.com/bid/32587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47021
CVE ID: CVE-2008-5979 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary web script or HTML via the Email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7319 - http://secunia.com/advisories/32929 - http://www.securityfocus.com/bid/32587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47022
CVE ID: CVE-2008-5980 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7319 - http://secunia.com/advisories/32929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47023
CVE ID: CVE-2008-5981 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) poll.mdb or (2) poll97.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46976
CVE ID: CVE-2008-5982 State: PUBLISHED Published: 2009-01-27T22:00:00 Last Updated: 2024-08-07T11:13:13.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021361 - http://www.securityfocus.com/bid/32692 - http://www.vupen.com/english/advisories/2008/3379 - http://www.securityfocus.com/archive/1/499013/100/0/threaded - https://exchange.xfo
n.com/english/advisories/2008/3379 - http://www.securityfocus.com/archive/1/499013/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47175 - http://www.zerodayinitiative.com/advisories/ZDI-08-082/ - http://secunia.com/advisories/33049
CVE ID: CVE-2008-5983 State: PUBLISHED Published: 2009-01-28T02:00:00 Last Updated: 2024-08-07T11:13:14.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg586010.html - https://bugzilla.redhat.com/show_bug.cgi?
tp://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg586010.html - https://bugzilla.redhat.com/show_bug.cgi?id=482814 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html - http://secunia.com/advisories/51087 - http://www.openwall.com/lists/oss-security/2009/01/30/2 - http://www.ubuntu.com/usn/USN-1616-1 - http://secunia.com/advisories/51040 - http://security.gentoo.org/glsa/glsa-200903-41.xml - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://www.vupen.com/english/advisories/2010/1448 - http://secunia.com/advisories/50858 - http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099
50858 - http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html - http://security.gentoo.org/glsa/glsa-200904-06.xml - http://www.vupen.com/english/advisories/2011/0122 - http://www.openwall.com/lists/oss-security/2009/01/28/5 - http://secunia.com/advisories/34522 - http://secunia.com/advisories/42888 - http://www.ubuntu.com/usn/USN-1596-1 - http://secunia.com/advisories/40194 - http://www.redhat.com/support/errata/RHSA-2011-0027.html - http://www.ubuntu.com/usn/USN-1613-2 - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1
CVE ID: CVE-2008-5984 State: PUBLISHED Published: 2009-01-28T11:00:00 Last Updated: 2024-08-07T11:13:13.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983). Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01065.html - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://www.mandriva.com/security/adviso
anuary/msg01065.html - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:046 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504251 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:040 - http://www.securityfocus.com/bid/33448 - http://secunia.com/advisories/33672 - https://bugzilla.redhat.com/show_bug.cgi?id=481551 - http://secunia.com/advisories/33703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48262
CVE ID: CVE-2008-5985 State: PUBLISHED Published: 2009-01-28T11:00:00 Last Updated: 2024-08-07T11:13:13.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33441 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:048 - http://secunia.com/advisories/34187 - http://www.openwall.com/lists
ndriva.com/security/advisories?name=MDVSA-2009:048 - http://secunia.com/advisories/34187 - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504363 - https://bugzilla.redhat.com/show_bug.cgi?id=481548 - http://www.gentoo.org/security/en/glsa/glsa-200903-16.xml
CVE ID: CVE-2008-5986 State: PUBLISHED Published: 2009-01-28T11:00:00 Last Updated: 2024-08-07T11:13:13.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33446 - https://bugzilla.redhat.com/show_bug.cgi?id=481550 -
Container: References: - http://www.securityfocus.com/bid/33446 - https://bugzilla.redhat.com/show_bug.cgi?id=481550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48276 - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504359
CVE ID: CVE-2008-5987 State: PUBLISHED Published: 2009-01-28T11:00:00 Last Updated: 2024-08-07T11:13:13.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983). Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504352 - http://www.securityfocus.com/bid/33443 - http://
009/01/26/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504352 - http://www.securityfocus.com/bid/33443 - http://security.gentoo.org/glsa/glsa-200904-06.xml - https://bugzilla.redhat.com/show_bug.cgi?id=481553
CVE ID: CVE-2008-5988 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45404 - http://www.securityfocus.com/bid/31376
CVE ID: CVE-2008-5989 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31373 - https://www.exploit-db.com/exploits/6553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45378 - http://secunia.com/advisories/31993
CVE ID: CVE-2008-5990 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sitecode parameter to connect/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45369 - https://www.exploit-db.com/exploits/6551 - http://www.securityfocus.com/bid/31372
CVE ID: CVE-2008-5991 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the doc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31378 - https://www.exploit-db.com/exploits/6552 - http://secunia.com/advisories/31994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45393
CVE ID: CVE-2008-5992 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQL commands via the KayitNo parameter to (1) diger.php and (2) sayfalar.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32008 - https://www.exploit-db.com/exploits/6549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45391 - http://www.securityfocus.com/bid/31352
CVE ID: CVE-2008-5993 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the code parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45406
CVE ID: CVE-2008-5994 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Check Point Connectra NGX R62 HFA_01 allows remote attackers to inject arbitrary web script or HTML via the dir parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45385 - http://secunia.com/advisories/31553 - http://www.securityfocus.com/bid/31369
CVE ID: CVE-2008-5995 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/sr_freecap/1.0.4/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/45379 - http://typo3.org/teams/security/security-bulletins/typo3-20080924-2/ - http://secunia.com/advisories/31946 - http://www.securityfocus.com/bid/31
ecurity/security-bulletins/typo3-20080924-2/ - http://secunia.com/advisories/31946 - http://www.securityfocus.com/bid/31370
CVE ID: CVE-2008-5996 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4, a module for Drupal, allows remote authenticated users, with "administer taxonomy" permissions, to inject arbitrary web script or HTML via a Newsletter category field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32022 - http://drupal.org/node/312944 - http://www.securityfocus.com/bid/31377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45407
CVE ID: CVE-2008-5997 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform (OCP) 2.0 allows remote attackers to list arbitrary directories via a full pathname in the root parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45394 - http://www.securityfocus.com/bid/31338 - http://packetstormsecurity.org/0809-exploits/omnicom-traverse.txt
CVE ID: CVE-2008-5998 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:14.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with "update ajax checklists" permissions, to execute arbitrary SQL commands via a save operation, related to the (1) nid, (2) qid, and (3) state parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496727/100/0/threaded - http://secunia.com/advisories/32009 - http://drupal.org/node/312968 - http://w
cus.com/archive/1/496727/100/0/threaded - http://secunia.com/advisories/32009 - http://drupal.org/node/312968 - http://www.securityfocus.com/bid/31384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45410
CVE ID: CVE-2008-5999 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authenticated users, with create and edit permissions for posts, to inject arbitrary web script or HTML via unspecified vectors involving the ajax_checklist filter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32009 - http://drupal.org/node/312968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45412
CVE ID: CVE-2008-6000 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted IOCTL request, as demonstrated by execution of the KeSetEvent function with modified register contents. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45249 - http://secunia.com/advisories/31941 - http:/
References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45249 - http://secunia.com/advisories/31941 - http://trapkit.de/advisories/TKADV2008-008.txt - http://www.securityfocus.com/bid/31246 - http://www.vupen.com/english/advisories/2008/2636
CVE ID: CVE-2008-6001 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45400 - https://www.exploit-db.com/exploits/6557 - http://secunia.com/advisories/18300
CVE ID: CVE-2008-6002 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45408 - http://secunia.com/advisories/31979 - http://www.web-cp.net/mantis/changelog_page.php - http://www.securityfocus.com/bid/31371 - https://www.exploit-db.com/exploits/6556
CVE ID: CVE-2008-6003 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the seller_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45430 - https://www.exploit-db.com/exploits/6561
CVE ID: CVE-2008-6004 State: PUBLISHED Published: 2009-01-28T15:00:00 Last Updated: 2024-08-07T11:13:13.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45431 - https://www.exploit-db.com/exploits/6561
CVE ID: CVE-2008-6005 State: PUBLISHED Published: 2009-01-28T20:00:00 Last Updated: 2024-08-07T11:13:13.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute arbitrary code via "duplicated" attribute value inputs. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507587#15 - http://www.securityfocus.com/bid/33736
CVE ID: CVE-2008-6006 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0 allow remote attackers to execute arbitrary PHP code via a URL in the minsoft_path parameter to (1) utdb_access.php and (2) utgn_message.php in utility/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45529 - http://www.securityfocus.com/bid/31492 - https://www.exploit-db.com/exploits/6632
CVE ID: CVE-2008-6007 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_group.php in QuidaScript BookMarks Favourites Script (APB) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31506 - http://secunia.com/advisories/31955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45547 - https://www.exploit-db.com/exploits/6637
CVE ID: CVE-2008-6008 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for hyBook.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45513 - http://www.securityfocus.com/archive/1/496790/100/0/threaded
CVE ID: CVE-2008-6009 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45577 - https://www.exploit-db.com/exploits/6635