Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5940 State: PUBLISHED Published: 2009-01-22T11:00:00 Last Updated: 2024-08-07T11:13:13.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the searchid parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000005.html - http://jvn.jp/en/jp/JVN72630020/index.html - http://www.securityfocus.com/bid/33182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4784
72630020/index.html - http://www.securityfocus.com/bid/33182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47840 - http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt - http://secunia.com/advisories/33405
CVE ID: CVE-2008-5941 State: PUBLISHED Published: 2009-01-22T11:00:00Z Last Updated: 2024-09-16T19:09:11.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN66828183/index.html - http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000004.html
CVE ID: CVE-2008-5942 State: PUBLISHED Published: 2009-01-22T11:00:00 Last Updated: 2024-08-07T11:13:13.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the preserveUrls function and (2) "username input." NOTE: vector 2 may be related to CVE-2008-5939. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48184 - http://jvn.jp/en/jp/JVN10170564/index.html - http://svn.modxcms.com/svn/tattoo/t
ce.ibmcloud.com/vulnerabilities/48184 - http://jvn.jp/en/jp/JVN10170564/index.html - http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt - http://www.securityfocus.com/bid/33184
CVE ID: CVE-2008-5943 State: PUBLISHED Published: 2009-01-22T11:00:00 Last Updated: 2024-08-07T11:13:13.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to (1) admin_modules.php and (2) modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt - http://www.securityfocus.com/bid/30687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44450 - http://secunia.com/advisories/31463
CVE ID: CVE-2008-5944 State: PUBLISHED Published: 2009-01-22T11:00:00 Last Updated: 2024-08-07T11:13:13.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote attackers to inject arbitrary web script or HTML via the module parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44451 - http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt - http://www.securityfocus.com/bid/30687 - http://secunia.com/advisories/31463
CVE ID: CVE-2008-5945 State: PUBLISHED Published: 2009-01-22T11:00:00 Last Updated: 2024-08-07T11:13:13.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nukeviet 2.0 Beta allows remote attackers to bypass authentication and gain administrative access by setting the admf cookie to 1. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44457 - http://www.securityfocus.com/bid/30681
CVE ID: CVE-2008-5946 State: PUBLISHED Published: 2009-01-22T11:00:00 Last Updated: 2024-08-07T11:13:13.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the news_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30680/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/44456 - http://www.securityfocus.com/bid/30680
CVE ID: CVE-2008-5947 State: PUBLISHED Published: 2009-01-22T11:00:00 Last Updated: 2024-08-07T11:13:13.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/class_yapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30686 - http://packetstormsecurity.org/0808-exploits/yapbb-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44473
CVE ID: CVE-2008-5948 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newlanguage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32981 - http://www.securityfocus.com/bid/32644 - https://www.exploit-db.com/exploits/7345
CVE ID: CVE-2008-5949 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cct_base parameter to (1) index.php; (2) handle/proxy.php; (3) header.php, (4) include.php, and (5) workspace.php in includes/; and (6) plugins/RSS/files/rss.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47072 - http://www.securityfocus.com/bid/32631 - https://www.exp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47072 - http://www.securityfocus.com/bid/32631 - https://www.exploit-db.com/exploits/7336
CVE ID: CVE-2008-5950 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7339 - http://www.securityfocus.com/bid/32641 - http://secunia.com/advisories/32992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47084
CVE ID: CVE-2008-5951 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47085
CVE ID: CVE-2008-5952 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32539 - http://secunia.com/advisories/32888 - https://www.exploit-db.com/exploits/7305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46897 - http://www.vupen.com/english/advisories/2008/
ploits/7305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46897 - http://www.vupen.com/english/advisories/2008/3292
CVE ID: CVE-2008-5953 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32888 - https://www.exploit-db.com/exploits/7304 - http://www.securityfocus.com/bid/33518 - http://www.vupen.com/english/advisories/2008/3292
CVE ID: CVE-2008-5954 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lname parameter in a login action to an unspecified component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46898 - http://sec
nces: - http://www.securityfocus.com/bid/33520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46898 - http://secunia.com/advisories/32888
CVE ID: CVE-2008-5955 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in Wbstreet (aka PHPSTREET Webboard) 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47073 - https://www.exploit-db.com/exploits/7337 - http://secunia.com/advisories/32994
CVE ID: CVE-2008-5956 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request to connect.inc. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7337 - http://secunia.com/advisories/32994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47074
CVE ID: CVE-2008-5957 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Mydyngallery (com_mydyngallery) component 1.4.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the directory parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47087 - http://www.securityfocus.com/archive/1/498916/100/0/threaded - http://www.securityfocus.com/bid/32639 - https://www.exploit-db.com/exploits/7343
CVE ID: CVE-2008-5958 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50407 - http://www.vupen.com/english/advisories/2008/3299 - https://www.exploit-db.com/exploits/7295 - http://www.securityfocus.com/bid/32547 - http://osvdb.org/50405 - http://secunia.com/advisories/32902 - http://osvdb.org/50406 - https:/
ityfocus.com/bid/32547 - http://osvdb.org/50405 - http://secunia.com/advisories/32902 - http://osvdb.org/50406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46919
CVE ID: CVE-2008-5959 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or (2) password parameter (aka password field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46921 - http://osvdb.org/50408 - http://secunia.com/advisories/32902 - https://www.exploit-db.com/exploits/7276
CVE ID: CVE-2008-5960 State: PUBLISHED Published: 2009-01-23T18:38:00Z Last Updated: 2024-09-17T00:05:44.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32649 - http://secunia.com/advisories/33021
CVE ID: CVE-2008-5961 State: PUBLISHED Published: 2009-01-23T18:38:00Z Last Updated: 2024-09-16T22:40:05.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32650 - http://secunia.com/advisories/33021
CVE ID: CVE-2008-5962 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the objectname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32646 - https://www.exploit-db.com/exploits/7344 - http://secunia.com/advisories/32982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47090
CVE ID: CVE-2008-5963 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32646 - https://www.exploit-db.com/exploits/7344 - http://secunia.com/advisories/32982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47091
CVE ID: CVE-2008-5964 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T11:13:13.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32985 - http://sourceforge.net/forum/forum.php?forum_id=893767 - http://osvdb.org/50413 - http://wiki.impresscms.org/index.php?title=Change_Log#2008-12-2_:_1.1.1_RC - https://exchange.xforce.ibmcloud.com/vulnerabilities/46989 - http://www.securityfocus.com/bid/32495 - http://www.secur
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46989 - http://www.securityfocus.com/bid/32495 - http://www.securityfocus.com/archive/1/498885/100/0/threaded - http://www.securityfocus.com/archive/1/498734/100/0/threaded
CVE ID: CVE-2008-5965 State: PUBLISHED Published: 2009-01-26T20:00:00 Last Updated: 2024-08-07T11:13:13.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to check for the existence of arbitrary files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6737 - http://www.vupen.com/english/advisories/2008/2798 - http://www.securityfocus.com/bid/31730 - http://secunia.com/advisories/30472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45822
CVE ID: CVE-2008-5966 State: PUBLISHED Published: 2009-01-26T20:00:00 Last Updated: 2024-08-07T11:13:13.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: globsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename in the file parameter and file contents in the data parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6735 - http://www.securityfocus.com/bid/31727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48324
CVE ID: CVE-2008-5967 State: PUBLISHED Published: 2009-01-26T20:00:00 Last Updated: 2024-08-07T11:13:13.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar (aka .ics) file with arbitrary content to the calendars/ directory outside the web root. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6519 - http://secunia.com/advisories/31944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48323
CVE ID: CVE-2008-5968 State: PUBLISHED Published: 2009-01-26T20:00:00 Last Updated: 2024-08-07T11:13:13.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cookie_language parameter in a phpicalendar_* cookie, a different vector than CVE-2006-1292. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48322 - https://www.exploit-db.com/exploits/6519
CVE ID: CVE-2008-5969 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in popupproduct.php in Sunbyte e-Flower allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32589 - https://www.exploit-db.com/exploits/7323 - http://secunia.com/advisories/32923
CVE ID: CVE-2008-5970 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32937 - http://www.securityfocus.com/bid/32600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47013 - http://packetstorm.linuxsecurity.com/0812-exploits/orkut-sqlxss.txt
CVE ID: CVE-2008-5971 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32937 - http://www.securityfocus.com/bid/32600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47014 - http://packetstorm.linuxsecurity.com/0812-exploits/orkut-sqlxss.txt
CVE ID: CVE-2008-5972 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32894 - http://www.securityfocus.com/bid/32551 - http://www.vupen.com/english/advisories/2008/3294 - https://www.exploit-db.com/exploits/7302
CVE ID: CVE-2008-5973 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46915 - http://secunia.com/advisories/32921
CVE ID: CVE-2008-5974 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) username fields. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7283 - http://secunia.com/advisories/32921 - http://www.vupen.com/english/advisories/2008/3296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46909
CVE ID: CVE-2008-5975 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48318 - http://www.vupen.com/english/advisories/2008/3296
CVE ID: CVE-2008-5976 State: PUBLISHED Published: 2009-01-27T01:00:00 Last Updated: 2024-08-07T11:13:13.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via (1) the adname parameter in a Submit action or (2) the UserName field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46999 - http://www.securityfocus.com/bid/32570 - http://www.packetstormsecurity.org/0812-exploits/phpjobwebsite-cmsqlxss.txt - https://exchan