Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1640 State: PUBLISHED Published: 2010-05-26T18:00:00 Last Updated: 2024-08-07T01:28:41.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote attackers to cause a denial of service (crash) via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling. Additional Analyst Notes: - CVE Program Container: References: - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blobdiff%3Bf=libclamav/pe_icons.c%3Bh=3f1bc5be69d0f9d84e576814d1a3cc6f40c4ff2c%3Bhp=39a714f05968f9e929576bf171dd0eb58bf06bef%3Bhb=7f0e3bbf77382d9782e0189bf80f5f59a95779
d0f9d84e576814d1a3cc6f40c4ff2c%3Bhp=39a714f05968f9e929576bf171dd0eb58bf06bef%3Bhb=7f0e3bbf77382d9782e0189bf80f5f59a95779b3%3Bhpb=f0eb394501ec21b9fe67f36cbf5db788711d4236 - http://www.openwall.com/lists/oss-security/2010/05/21/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58825 - http://www.securityfocus.com/bid/40318 - http://www.vupen.com/english/advisories/2010/1214 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:110 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2031 - http://secunia.com/advisories/39895 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3B
- http://secunia.com/advisories/39895 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.1
CVE ID: CVE-2010-1641 State: PUBLISHED Published: 2010-06-01T20:00:00 Last Updated: 2024-08-07T01:28:42.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html - http://www.openwall.com/lists/oss-security/2010/05/25/1 - https://exchange.xforce.ibmclou
nounce/2010-08/msg00000.html - http://www.openwall.com/lists/oss-security/2010/05/25/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58926 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7df0e0397b9a18358573274db9fdab991941062f - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/incr/patch-2.6.34-git9-git10.bz2 - http://secunia.com/advisories/40645 - http://secunia.com/advisories/43315 - https://www.redhat.com/archives/cluster-devel/2010-May/msg00049.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9916 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.openwall.com/lists/oss
re.oval%3Adef%3A9916 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.openwall.com/lists/oss-security/2010/05/25/12 - http://www.openwall.com/lists/oss-security/2010/05/26/1 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://www.securityfocus.com/bid/40356 - https://bugzilla.redhat.com/show_bug.cgi?id=595579 - http://www.vupen.com/english/advisories/2010/1857
CVE ID: CVE-2010-1642 State: PUBLISHED Published: 2010-06-17T16:00:00 Last Updated: 2024-08-07T01:28:42.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request. Additional Analyst Notes: - CVE Program Container: References: - http://www.stratsec.net/Research/Advisories/Samba-Multiple-DoS-Vulnerabilities-%28SS-2010-005%29 - http://samba.org/samba/history/samba-3.4.8.html - http://www.mandriva.com/security/a
Vulnerabilities-%28SS-2010-005%29 - http://samba.org/samba/history/samba-3.4.8.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:141 - http://samba.org/samba/history/samba-3.5.2.html - https://bugzilla.redhat.com/show_bug.cgi?id=594921 - http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9280051bfba337458722fb157f3082f93cbd9f2b - http://security-tracker.debian.org/tracker/CVE-2010-1642 - https://bugzilla.samba.org/show_bug.cgi?id=7254 - http://www.securityfocus.com/bid/40097 - http://www.vupen.com/english/advisories/2010/1933
CVE ID: CVE-2010-1643 State: PUBLISHED Published: 2010-06-03T14:00:00 Last Updated: 2024-08-07T01:28:41.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/05/26/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=731572d39fcd3498702ed
ity/2010/05/26/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=731572d39fcd3498702eda4600db4c43d51e0b26 - http://www.openwall.com/lists/oss-security/2010/05/26/2 - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - https://bugzilla.redhat.com/show_bug.cgi?id=595970 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.28/ChangeLog-2.6.28-rc3 - http://secunia.com/advisories/40645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58957 - http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-knfsd-9666 - http://www.securityfocus.com/bid/40377 -
tp://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-knfsd-9666 - http://www.securityfocus.com/bid/40377 - http://www.vupen.com/english/advisories/2010/1857
CVE ID: CVE-2010-1644 State: PUBLISHED Published: 2010-08-23T20:00:00 Last Updated: 2024-08-07T01:28:41.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) hostname or (2) description parameter to host.php, or (3) the host_id parameter to data_sources.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1203 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 - https://bugzilla.
n.com/english/advisories/2010/1203 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 - https://bugzilla.redhat.com/show_bug.cgi?id=609093 - http://secunia.com/advisories/41041 - http://www.cacti.net/release_notes_0_8_7f.php - https://rhn.redhat.com/errata/RHSA-2010-0635.html - http://www.securityfocus.com/archive/1/511393 - http://www.vupen.com/english/advisories/2010/2132 - http://www.securityfocus.com/bid/40332 - http://svn.cacti.net/viewvc?view=rev&revision=5901
CVE ID: CVE-2010-1645 State: PUBLISHED Published: 2010-08-23T20:00:00 Last Updated: 2024-08-07T01:28:42.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in (1) the FQDN field of a Device or (2) the Vertical Label field of a Graph Template. Additional Analyst Notes: - CVE Program Container: References: - http://svn.cacti.net/viewvc?view=rev&revision=5778 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 - http://secunia.com/advisories/41041 - http://www.cacti.net/re
www.mandriva.com/security/advisories?name=MDVSA-2010:160 - http://secunia.com/advisories/41041 - http://www.cacti.net/release_notes_0_8_7f.php - https://rhn.redhat.com/errata/RHSA-2010-0635.html - http://www.bonsai-sec.com/en/research/vulnerabilities/cacti-os-command-injection-0105.php - http://www.vupen.com/english/advisories/2010/2132 - http://svn.cacti.net/viewvc?view=rev&revision=5782 - https://bugzilla.redhat.com/show_bug.cgi?id=609115 - http://svn.cacti.net/viewvc?view=rev&revision=5784
CVE ID: CVE-2010-1646 State: PUBLISHED Published: 2010-06-07T14:00:00 Last Updated: 2024-08-07T01:28:41.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/65083 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043012.html - http://secunia.com/advisories/43068 - http://www.sudo.ws/sudo/alerts/secure_path.html - htt
unce/2010-June/043012.html - http://secunia.com/advisories/43068 - http://www.sudo.ws/sudo/alerts/secure_path.html - http://www.sudo.ws/repos/sudo/rev/3057fde43cf0 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10580 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:118 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/40188 - http://secunia.com/advisories/40002 - http://secunia.com/advisories/40215 - http://www.securityfocus.com/archive/1/514489/100/0/threaded - http://www.securitytracker.com/id?1024101 - http://www.securityfocus.com/bid/40538 - http://lists.fedoraproject.org/pipermail/package-announce/2
er.com/id?1024101 - http://www.securityfocus.com/bid/40538 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043026.html - http://www.sudo.ws/repos/sudo/rev/a09c6812eaec - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.debian.org/security/2010/dsa-2062 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042838.html - http://wiki.rpath.com/Advisories:rPSA-2010-0075 - http://security.gentoo.org/glsa/glsa-201009-03.xml - http://www.vupen.com/english/advisories/2010/1478 - http://www.redhat.com/support/errata/RHSA-2010-0475.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7
rt/errata/RHSA-2010-0475.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7338 - http://secunia.com/advisories/40508 - http://www.vupen.com/english/advisories/2010/1518 - http://www.vupen.com/english/advisories/2010/1519 - http://www.vupen.com/english/advisories/2010/1452 - https://bugzilla.redhat.com/show_bug.cgi?id=598154
CVE ID: CVE-2010-1647 State: PUBLISHED Published: 2010-06-07T20:00:00 Last Updated: 2024-08-07T01:28:41.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets (CSS) strings that are processed as script by Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043856.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=23687 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/0
ttps://bugzilla.wikimedia.org/show_bug.cgi?id=23687 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043803.html
CVE ID: CVE-2010-1648 State: PUBLISHED Published: 2010-06-07T20:00:00 Last Updated: 2024-08-07T01:28:41.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that (1) create accounts or (2) reset passwords, related to the Special:Userlogin form. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043856.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=23371 - http://lists.wikimedia.org/pipermail
unce/2010-July/043856.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=23371 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043803.html
CVE ID: CVE-2010-1649 State: PUBLISHED Published: 2010-06-07T20:00:00 Last Updated: 2024-08-07T01:28:41.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/65011 - http://www.securityfocus.com/bid/40444 - http://secunia.com/advisories/39964 - http://developer.joomla.org/security/news/314-20100501-core-xss-vulnerabiliti
44 - http://secunia.com/advisories/39964 - http://developer.joomla.org/security/news/314-20100501-core-xss-vulnerabilities-in-back-end.html?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+JoomlaSecurityNews+%28Joomla%21+Security+News%29
CVE ID: CVE-2010-1650 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:42.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka debugging mode) is enabled, executes debugging statements that print string representations of unspecified objects, which allows attackers to obtain sensitive information by reading the trace output. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39628 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 - https://exchange.xforce.ibmcl
secunia.com/advisories/39628 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58323 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM06839 - http://www.vupen.com/english/advisories/2010/0994
CVE ID: CVE-2010-1651 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:42.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by reading the trace log. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1411 - http://secunia.com/advisories/39628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58324
/advisories/2010/1411 - http://secunia.com/advisories/39628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58324 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829 - http://www.osvdb.org/65437 - http://secunia.com/advisories/40096 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM08892
CVE ID: CVE-2010-1652 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:41.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the file parameter to module.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1009 - http://secunia.com/advisories/39615 - http://www.exploit-db.com/exploits/12421 - http://packetst
/advisories/2010/1009 - http://secunia.com/advisories/39615 - http://www.exploit-db.com/exploits/12421 - http://packetstormsecurity.org/1004-exploits/helpcenterlive-lfi.txt - http://www.securityfocus.com/bid/39732
CVE ID: CVE-2010-1653 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:41.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39743 - http://packetstormsecurity.org/1004-exploits/joomlagraphics-lfi.txt - http://www.vupen.com/english/advisor
m/bid/39743 - http://packetstormsecurity.org/1004-exploits/joomlagraphics-lfi.txt - http://www.vupen.com/english/advisories/2010/1004 - http://www.exploit-db.com/exploits/12430 - http://secunia.com/advisories/39585
CVE ID: CVE-2010-1654 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:41.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the (1) username (aka login) and (2) password parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/ireee-sql.txt - http://secunia.com/advisories/39625 - http://www.vupen.com/english/advisories/2010/1014 - http://www.exploit
e-sql.txt - http://secunia.com/advisories/39625 - http://www.vupen.com/english/advisories/2010/1014 - http://www.exploit-db.com/exploits/12415 - http://www.securityfocus.com/bid/39731
CVE ID: CVE-2010-1655 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:41.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in User/User_ChkLogin.asp in PowerEasy 2006 and PowerEasy SiteWeaver 6.8 allows remote attackers to inject arbitrary web script or HTML via the ComeUrl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39696 - http://www.securityfocus.com/archive/1/510927/100/0/threaded - http://secunia.com/advisories/39627 - http://osvdb.org/64094
CVE ID: CVE-2010-1656 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:42.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the sectionid parameter in an abc action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39588 - http://www.exploit-db.com/exploits/12429 - http://www.securityfocus.com/bid/39741 - http://www.vupen.com/english/advisories/2010/1005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58178
CVE ID: CVE-2010-1657 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:42.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58175 - http://www.securityfocus.com/bid/39740 - http://packetstormsecurity.org/1004-exploits/joomlasmartsite-lfi.txt - http://secunia.com/advisories/39592 - http://www.vupen.com/english/advisories/2010/1006 -
its/joomlasmartsite-lfi.txt - http://secunia.com/advisories/39592 - http://www.vupen.com/english/advisories/2010/1006 - http://www.exploit-db.com/exploits/12428
CVE ID: CVE-2010-1658 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:43.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlnoticeboard-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58176 - http://www.exploit-db.com/exploits/12427 - http://secunia.com/advisories/
ge.xforce.ibmcloud.com/vulnerabilities/58176 - http://www.exploit-db.com/exploits/12427 - http://secunia.com/advisories/39600 - http://www.vupen.com/english/advisories/2010/1007 - http://www.securityfocus.com/bid/39742
CVE ID: CVE-2010-1659 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:41.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlaultimateportfolio-lfi.txt - http://www.exploit-db.com/exploits/12426 - http://www.vupen.com/english/advisories/2010/1008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58177 - http://www.se
/www.vupen.com/english/advisories/2010/1008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58177 - http://www.securityfocus.com/bid/39739
CVE ID: CVE-2010-1660 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:43.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12423 - http://www.securityfocus.com/bid/39737 - http://www.vupen.com/english/advisories/2010/1010 - http://packetstormsecurity.org/1004-exploits/clscriptclassfieds-sql.txt - http://secunia.com/advisories/39612 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58181
CVE ID: CVE-2010-1661 State: PUBLISHED Published: 2010-04-30T17:00:00 Last Updated: 2024-08-07T01:28:42.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQL commands via the (1) phpqa_user_c parameter to Arcade.php and the (2) id parameter to acpmoderate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1013 - http://packetstormsecurity.org/1004-exploits/phpquickarcade-sqlxss.txt - http://www.exploit-db.com/exploits/12416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58184 - http://www.se
- http://www.exploit-db.com/exploits/12416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58184 - http://www.securityfocus.com/bid/39733