Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1701 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1027 - http://www.exploit-db.com/exploits/12444 - http://secunia.com/advisories/39647
CVE ID: CVE-2010-1702 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote attackers to execute arbitrary SQL commands via the deptid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12371 - http://packetstormsecurity.org/1004-exploits/whmcs-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58108 - http://www.securityfocus.com/bid/39681
CVE ID: CVE-2010-1703 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to inject arbitrary web script or HTML via the (1) category parameter or (2) search field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39745 - http://secunia.com/advisories/39622 - http://www.exploit-db.com/exploits/12395 - http://packetstormsecurity.org/1004-exploits/aps-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/
95 - http://packetstormsecurity.org/1004-exploits/aps-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58190
CVE ID: CVE-2010-1704 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:52.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arbitrary SQL commands via (1) the password field to login.php, (2) the login field (aka email parameter) to login.php, (3) the password field (aka pass parameter) to the default URI under admin/, and possibly (4) the login field to the default URI under admin/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange
obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58127 - http://www.securityfocus.com/bid/39745 - http://secunia.com/advisories/39622 - http://www.exploit-db.com/exploits/12395 - http://packetstormsecurity.org/1004-exploits/aps-sqlxss.txt
CVE ID: CVE-2010-1705 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands via the adnum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12443 - http://secunia.com/advisories/39646 - http://www.vupen.com/english/advisories/2010/1028
CVE ID: CVE-2010-1706 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via (1) the login field (aka the username parameter), and possibly (2) the password field, to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58188 - http://osvdb.org/64097 - http://www.securityfocus.com/bid/39728 - http://www.vupen.com/english/
/vulnerabilities/58188 - http://osvdb.org/64097 - http://www.securityfocus.com/bid/39728 - http://www.vupen.com/english/advisories/2010/1015 - http://packetstormsecurity.org/1004-exploits/2daybizauctionscript-sql.txt - http://www.exploit-db.com/exploits/12414 - http://secunia.com/advisories/39621
CVE ID: CVE-2010-1707 State: PUBLISHED Published: 2010-05-04T15:00:00Z Last Updated: 2024-09-16T23:30:59.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) login and (2) mail_address parameters. Additional Analyst Notes: - CVE Program Container: References: - http://piwigo.org/code/wsvn/Piwigo?op=revision&rev=5936 - http://www.vupen.com/english/advisories/2010/1034
CVE ID: CVE-2010-1708 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12411 - http://www.securityfocus.com/bid/39712 - http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58193
CVE ID: CVE-2010-1709 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in upload.cgi in G5-Scripts Auto-Img-Gallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pass parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58139 - http://www.xenuser.org/documents/security/auto-img-gallery_xss.txt - http://www.securityfocus.com/bid/39714 - http://secunia.com/advisories/39599
CVE ID: CVE-2010-1710 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the idioma parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57900 - http://secunia.com/advisories/39453 - http://www.exploit-db.com/exploits/12260 - http://www.osvdb.org/63837 - http://www.securityfocus.com/bid/39526 - http://packetstormsecurity.org/1004-exploits/
60 - http://www.osvdb.org/63837 - http://www.securityfocus.com/bid/39526 - http://packetstormsecurity.org/1004-exploits/siestta-lfixss.txt
CVE ID: CVE-2010-1711 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the usuario parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/63836 - http://secunia.com/advisories/39453 - http://www.exploit-db.com/exploits/12260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57899 - http://www.securityfocus.com/bid/39526 - http://packetstormsecurity.org/1004-exploits/siestta-
m/vulnerabilities/57899 - http://www.securityfocus.com/bid/39526 - http://packetstormsecurity.org/1004-exploits/siestta-lfixss.txt
CVE ID: CVE-2010-1712 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and possibly (2) message parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58025 - http://inj3ct0r.com/exploits/11914 - http://www.itsecteam.com/en/vulnerabilities/vulnerability44.htm - http://www.exploit
ttp://inj3ct0r.com/exploits/11914 - http://www.itsecteam.com/en/vulnerabilities/vulnerability44.htm - http://www.exploit-db.com/exploits/12323 - http://www.hack0wn.com/view.php?xroot=1310.0&cat=exploits - http://secunia.com/advisories/39516 - http://www.osvdb.org/63973 - http://www.securityfocus.com/bid/39626
CVE ID: CVE-2010-1713 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News article modload action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58204 - http://packetstormsecurity.org/1004-exploits/postnukemodload-sql.txt - http://www.exploit-db.com/exploits/12410
CVE ID: CVE-2010-1714 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlaarcadegames-lfi.txt - http://www.osvdb.org/63660 - http://www.exploit-db.com/exploits/12168 - http://www.vupen.com/english/advisories/2010/0860 - http://secunia.com/advisories/39413 - https://exchange.xforce.i
68 - http://www.vupen.com/english/advisories/2010/0860 - http://secunia.com/advisories/39413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57683
CVE ID: CVE-2010-1715 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39414 - http://packetstormsecurity.org/1004-exploits/joomlaonlineexam-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/
//packetstormsecurity.org/1004-exploits/joomlaonlineexam-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/57677 - http://www.osvdb.org/63659 - http://www.exploit-db.com/exploits/12174
CVE ID: CVE-2010-1716 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.joomlanetprojects.com/index.php/en/joomla-projects-downloads/joomla-1/joomla-1/42-comagenda.html - http://secunia.com/advisories/39238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57770 - http://www.securityfocus.com/bid/39380 - http://ww
/39238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57770 - http://www.securityfocus.com/bid/39380 - http://www.exploit-db.com/exploits/12132 - http://www.osvdb.org/63723
CVE ID: CVE-2010-1717 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0924 - http://secunia.com/advisories/39526 - http://www.exploit-db.com/exploits/12291
CVE ID: CVE-2010-1718 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39521 - http://www.exploit-db.com/exploits/12282 - http://www.securityfocus.com/bid/39545
CVE ID: CVE-2010-1719 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12233 - http://www.securityfocus.com/bid/39509 - http://secunia.com/advisories/39470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57850 - http://osvdb.org/63806 - http://p
ia.com/advisories/39470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57850 - http://osvdb.org/63806 - http://packetstormsecurity.org/1004-exploits/joomlamtfireeagle-lfi.txt
CVE ID: CVE-2010-1720 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39466 - http://www.exploit-db.com/exploits/12200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57775 - http://osvdb.org/63894 - http://www.xenuser.org/documents/security/qpersonel_sql.txt - http://secunia.
abilities/57775 - http://osvdb.org/63894 - http://www.xenuser.org/documents/security/qpersonel_sql.txt - http://secunia.com/advisories/39445
CVE ID: CVE-2010-1721 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12246 - http://www.securityfocus.com/bid/39495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57875 - http://osvdb.org/63750 - http://extensions.thethinkery.net/ - http://secunia.com/a
.ibmcloud.com/vulnerabilities/57875 - http://osvdb.org/63750 - http://extensions.thethinkery.net/ - http://secunia.com/advisories/39427
CVE ID: CVE-2010-1722 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57674 - http://packetstormsecurity.org/1004-exploits/joomlaonlinemarket-lfi.txt - http://www.exploit-db.com/exploits/12177 - http://www.osvdb.org/63671 - http://secunia
oits/joomlaonlinemarket-lfi.txt - http://www.exploit-db.com/exploits/12177 - http://www.osvdb.org/63671 - http://secunia.com/advisories/39409
CVE ID: CVE-2010-1723 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T01:35:53.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0926 - http://secunia.com/advisories/39524 - http://www.exploit-db.com/exploits/12289
CVE ID: CVE-2010-1724 State: PUBLISHED Published: 2010-05-05T14:00:00 Last Updated: 2024-08-07T01:35:53.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) func parameter to index.php, or the (2) lang parameter to index.php, which is not properly handled by ZLanguage.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64095 - http://www.htbridge.ch/advisory/xss_vulnerability_in_zikula_application_framework.html - http://www.htbridge.ch/advisory/xss_vulnerabi
ridge.ch/advisory/xss_vulnerability_in_zikula_application_framework.html - http://www.htbridge.ch/advisory/xss_vulnerability_in_zikula_application_framework_1.html - http://www.securityfocus.com/bid/39717 - http://secunia.com/advisories/39614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58224 - http://community.zikula.org/index.php?module=News&func=display&sid=3012&title=zikula-1.2.3-release-announcement - http://www.securityfocus.com/archive/1/510988/100/0/threaded - http://osvdb.org/64096
CVE ID: CVE-2010-1725 State: PUBLISHED Published: 2010-05-05T14:00:00 Last Updated: 2024-08-07T01:35:53.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/alibabacloneplatinum-sql.txt - http://www.exploit-db.com/exploits/12468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58262 - http://www.securityfocus.com/bid/39846
CVE ID: CVE-2010-1726 State: PUBLISHED Published: 2010-05-05T14:00:00 Last Updated: 2024-08-07T01:35:53.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39832 - http://www.exploit-db.com/exploits/12459 - http://packetstormsecurity.org/1004-exploits/ec21clone-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58266
CVE ID: CVE-2010-1727 State: PUBLISHED Published: 2010-05-05T14:00:00 Last Updated: 2024-08-07T01:35:53.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in type.asp in JobPost 1.0 allows remote attackers to execute arbitrary SQL commands via the iType parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39708 - http://packetstormsecurity.org/1004-exploits/jobpost-sql.txt - http://www.securityfocus.com/bid/39831 - http://www.exploit-db.com/exploits/12461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58264
CVE ID: CVE-2010-1728 State: PUBLISHED Published: 2010-05-05T14:00:00 Last Updated: 2024-08-07T01:35:53.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.53 on Windows and Mac OS X does not properly handle a series of document modifications that occur asynchronously, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop, leading to attempted use of uninitialized memory. NOTE: this might overlap CVE-2006-6955. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1053/ - http://www.opera.com/docs
Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1053/ - http://www.opera.com/docs/changelogs/windows/1053/ - http://www.opera.com/support/kb/view/953/ - http://h.ackack.net/?p=258 - http://www.vupen.com/english/advisories/2010/0999 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11927 - http://secunia.com/advisories/39590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58231 - http://my.opera.com/desktopteam/blog/2010/04/28/opera-10-53-rc1-for-windows-and-mac
CVE ID: CVE-2010-1729 State: PUBLISHED Published: 2010-05-05T14:00:00 Last Updated: 2024-08-07T01:35:53.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://h.ackack.net/?p=258
CVE ID: CVE-2010-1730 State: PUBLISHED Published: 2010-05-05T14:00:00Z Last Updated: 2024-09-16T19:40:11.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolphin Browser 2.5.0 on the HTC Hero allows remote attackers to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://h.ackack.net/?p=258
CVE ID: CVE-2010-1731 State: PUBLISHED Published: 2010-05-05T14:00:00Z Last Updated: 2024-09-16T22:30:43.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome on the HTC Hero allows remote attackers to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://h.ackack.net/?p=258
CVE ID: CVE-2010-1732 State: PUBLISHED Published: 2010-05-05T18:00:00Z Last Updated: 2024-09-16T17:37:49.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the users module in Zikula Application Framework before 1.2.3 allows remote attackers to hijack the authentication of administrators for requests that change the administrator email address (updateemail action). Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/xsrf_csrf_in_zikula_application_framework.html - http://community.zikula.org/index.php?module=News&func=display&sid=3012&title=zikula-1.2.3-release-announcement