Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1842 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:59.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/closedview-adv.txt - http://marc.info/?l=bugtraq&m=121321155405849&w=2
: References: - http://aluigi.altervista.org/adv/closedview-adv.txt - http://marc.info/?l=bugtraq&m=121321155405849&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41737 - http://marc.info/?l=bugtraq&m=121321155405849&w=2 - http://marc.info/?l=bugtraq&m=121321155405849&w=2 - http://aluigi.org/poc/closedview.zip - http://www.vupen.com/english/advisories/2008/1159 - http://www.securityfocus.com/bid/28689 - http://secunia.com/advisories/29713 - http://www.securityfocus.com/archive/1/493781/100/0/threaded - http://securitytracker.com/id?1019821
CVE ID: CVE-2008-1843 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:59.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitrary SQL commands via the age_to parameter in a browsebyCat action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/44371 - http://secunia.com/advisories/29815 - http://www.securityfocus.com/bid/28737 - http://forum.aria-security.com/showthread.php?p=70 - http://marc.info/?l=bugtraq&m=120792465631586&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41792
CVE ID: CVE-2008-1844 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:58.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/44378 - http://forum.aria-security.com/showthread.php?p=70 - http://secunia.com/advisories/29825 - http://marc.info/?l=bugtraq&m=120792465631586&w=2 - http://www.securityfocus.com/bid/28736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41793
CVE ID: CVE-2008-1845 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:59.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a different user who launches mksh and specifies that terminal with the -T option. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/44365 - http://www.securityfocus.com/bid/28768 - http://secunia.co
Program Container: References: - http://www.osvdb.org/44365 - http://www.securityfocus.com/bid/28768 - http://secunia.com/advisories/29803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41794 - http://www.mirbsd.org/mksh.htm#clog
CVE ID: CVE-2008-1846 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:58.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of SAP NetWeaver before 7.0 SP15 does not enable the "Always Use Secure HTML Editor" (aka Editor Security or Secure Editing) parameter, which allows remote attackers to conduct cross-site scripting (XSS) attacks by entering feedback for a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.aitsec.com/vulnerability-SAP-Netweaver-6.40-7.0-Cross-Site-Scripting.php - http://www.securitytracker.com/id?1019822 - http://www.securityfocus.com/bid/28699 - http://www.securityfocus.
ing.php - http://www.securitytracker.com/id?1019822 - http://www.securityfocus.com/bid/28699 - http://www.securityfocus.com/archive/1/490625/100/0/threaded - http://securityreason.com/securityalert/3812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41735
CVE ID: CVE-2008-1847 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:59.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5432 - http://www.securityfocus.com/bid/28750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41498
CVE ID: CVE-2008-1848 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:59.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a show_error action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41779 - http://www.securityfocus.com/bid/28746
CVE ID: CVE-2008-1849 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:41:00.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter in a show_error action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5431 - http://www.securityfocus.com/bid/28746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41778
CVE ID: CVE-2008-1850 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:58.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI Affiliate allow remote attackers to inject arbitrary web script or HTML via the (1) login, (2) profile, (3) profile2, and (4) ref parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41825 - http://secunia.com/advisories/29779 - http://www.osvdb.org/44376 - http://www.securityfocus.com/bid/28785 - http://www.mrzayas.es/
unia.com/advisories/29779 - http://www.osvdb.org/44376 - http://www.securityfocus.com/bid/28785 - http://www.mrzayas.es/2008/04/11/xss-en-osiaffiliate/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41811
CVE ID: CVE-2008-1851 State: PUBLISHED Published: 2008-04-16T18:00:00 Last Updated: 2024-08-07T08:40:59.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (hang) via certain requests that do not provide all required arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41694 - http://secunia.com/advisories/29796 - http://www.securityfocus.com/bid/28745 - http://www.securityfocus.com/archive/1/490771 - http://www.vup
visories/29796 - http://www.securityfocus.com/bid/28745 - http://www.securityfocus.com/archive/1/490771 - http://www.vupen.com/english/advisories/2008/1214/references - http://aluigi.altervista.org/adv/closedviewx-adv.txt
CVE ID: CVE-2008-1852 State: PUBLISHED Published: 2008-04-16T18:00:00 Last Updated: 2024-08-07T08:40:58.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019839 - http://secunia.com/advisories/29796 - http://www.securityfocus.com/bid/28745 - https://exchange.xforce.ibmcloud.com/vulnera
p://secunia.com/advisories/29796 - http://www.securityfocus.com/bid/28745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41695 - http://www.securityfocus.com/archive/1/490771 - http://www.vupen.com/english/advisories/2008/1214/references - http://aluigi.altervista.org/adv/closedviewx-adv.txt
CVE ID: CVE-2008-1853 State: PUBLISHED Published: 2008-04-16T18:00:00 Last Updated: 2024-08-07T08:40:59.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (exit) by sending a 0x36 packet (exit request). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019839 - http://secunia.com/advisories/29796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41693 - http://www.securityfocus.com/bid/28745 - http://www.securityfocus.com/archive/1/490771 - http://www.vupen.com/english/
- http://www.securityfocus.com/bid/28745 - http://www.securityfocus.com/archive/1/490771 - http://www.vupen.com/english/advisories/2008/1214/references - http://aluigi.altervista.org/adv/closedviewx-adv.txt
CVE ID: CVE-2008-1854 State: PUBLISHED Published: 2008-04-16T19:00:00 Last Updated: 2024-08-07T08:41:00.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (service termination) via a long HTTP (1) GET, (2) HEAD, (3) PUT, (4) POST, or (5) TRACE request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41710 - http://www.
rences: - http://secunia.com/advisories/29732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41710 - http://www.securityfocus.com/bid/28610
CVE ID: CVE-2008-1855 State: PUBLISHED Published: 2008-04-16T19:00:00 Last Updated: 2024-08-07T08:40:58.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot (PrP), allows remote attackers to corrupt memory and cause a denial of service (CMA Framework service crash) via a long invalid method in requests for the /spin//AVClient//AVClient.csp URI, a different vulnerability than CVE-2006-5274. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28573 - http://www.vupen.com/english/advisories/
- CVE Program Container: References: - http://www.securityfocus.com/bid/28573 - http://www.vupen.com/english/advisories/2008/1122/references - http://www.securitytracker.com/id?1019794 - http://secunia.com/advisories/29637 - https://knowledge.mcafee.com/article/219/615324_f.SAL_Public.html - http://www.offensive-security.com/0day/mcafee_again.py.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41597 - https://www.exploit-db.com/exploits/5343
CVE ID: CVE-2008-1856 State: PUBLISHED Published: 2008-04-16T19:00:00 Last Updated: 2024-08-07T08:40:59.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into the maps_type configuration setting, and then sending a request to maps_view.php, which causes plugins/maps/map.main.class.php to use the modified configuration. Additional Analyst Notes: - CVE Program Container: References: - https://
n.class.php to use the modified configuration. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41676 - https://www.exploit-db.com/exploits/5392 - http://sourceforge.net/project/shownotes.php?release_id=595725 - http://www.osvdb.org/50229 - http://secunia.com/advisories/29724 - http://www.securityfocus.com/bid/28654 - http://www.vupen.com/english/advisories/2008/1136
CVE ID: CVE-2008-1857 State: PUBLISHED Published: 2008-04-16T19:00:00 Last Updated: 2024-08-07T08:41:00.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) dirn and (2) fname parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41681 - http://www.vupen.com/english/advisories/2008/1141/references - http://www.securityfocus.com/bid/28659 - https://www.exploit-db.com/exploits/5394 - http://secunia.com/advisories/29685
CVE ID: CVE-2008-1858 State: PUBLISHED Published: 2008-04-16T19:00:00 Last Updated: 2024-08-07T08:40:59.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41700 - http://www.vupen.com/english/advisories/2008/1139/references - http://www.securityfocus.com/bid/28672
CVE ID: CVE-2008-1859 State: PUBLISHED Published: 2008-04-16T19:00:00 Last Updated: 2024-08-07T08:40:58.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29725 - https://www.exploit-db.com/exploits/5402 - http://www.vupen.com/english/advisories/2008/1137/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41697 - http://www.securityfocus.com/bid/28669
CVE ID: CVE-2008-1860 State: PUBLISHED Published: 2008-04-17T16:00:00 Last Updated: 2024-08-07T08:40:59.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into includes/Config.php via the default parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41736 - http://www.vupen.com/english/advisories/2008/1162/references - https://www.exploit-db.com/exploits/5408 - http://www.securityfocus.com/archive/1/492877/100/0/threaded - http://secunia.com/advisories/29749
CVE ID: CVE-2008-1861 State: PUBLISHED Published: 2008-04-17T16:00:00 Last Updated: 2024-08-07T08:40:59.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the exbb[default_lang] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5405 - http://www.securityfocus.com/bid/28686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41707 - http://secunia.com/advisor
ww.securityfocus.com/bid/28686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41707 - http://secunia.com/advisories/29739
CVE ID: CVE-2008-1862 State: PUBLISHED Published: 2008-04-17T16:00:00 Last Updated: 2024-08-07T08:40:59.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which allows remote attackers to bypass this check via (1) POST or (2) COOKIE variables, a different vector than CVE-2006-4488. NOTE: this can be leveraged to conduct PHP remote file inclusion attacks via a URL in the (a) new_exbb[home_path] or (b) exbb[home_path] parameter to modules/threadstop/threadstop.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5405 -
eadstop.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5405 - http://secunia.com/advisories/29739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41708
CVE ID: CVE-2008-1863 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:41:00.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1116/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41673 - http://secunia.com/advisories/29701 - http://www.securityfocus.com/bid/28640 - https://www.exploit-db.com/exploits/5389
CVE ID: CVE-2008-1864 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:40:58.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL commands via the project parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41705 - http://www.securityfocus.com/bid/28653 - http://secunia.com/advisories/29723 - https://www.exploit-db.com/exploits/5390
CVE ID: CVE-2008-1865 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:40:59.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the msx_readnode function in libmosix.c in openmosix-tools (aka userspace-tools) in openMosix might allow local users to cause a denial of service (application crash) via a third-party program that calls this function with a long item argument. NOTE: the vendor does not provide any program that is capable of causing this overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3813 - http://www.securityfocus.com/bid/28663 - http://www.secu
r: References: - http://securityreason.com/securityalert/3813 - http://www.securityfocus.com/bid/28663 - http://www.securityfocus.com/archive/1/490534/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41691
CVE ID: CVE-2008-1866 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:40:59.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41670 - http://www.securityfocus.com/bid/28646 - http://www.v
381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41670 - http://www.securityfocus.com/bid/28646 - http://www.vupen.com/english/advisories/2008/1121/references
CVE ID: CVE-2008-1867 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:40:59.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQL commands via the categorie parameter to index.php, possibly related to include/requetesIndex.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41668 - http://www.securityfocus.com/bid/28645 - http://www.vupen.com/english/advisories/2008/1121/references - https://www.exploit-db.com/exploits/5382
CVE ID: CVE-2008-1868 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:40:59.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a database backup dump, and obtain the resulting blogPM.sql file that contains sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41671 - http://www.vupen.com/english/advisories/2008/1121/references - https://www.exploit-db.com/exploits/5380
CVE ID: CVE-2008-1869 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:40:59.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: this issue might be site-specific. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29705 - http://www.securityfocus.com/bid/28644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41662 - https://www.exploit-db.com/exploits/5383 - http://www.vupen.com/english/advisories/2008/1120/references
CVE ID: CVE-2008-1870 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:40:59.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5367 - http://www.securityfocus.com/bid/28634 - http://secunia.com/advisories/29703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41657 - http://www.vupen.com/english/advisories/2008/1135/references
CVE ID: CVE-2008-1871 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T08:40:58.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to execute arbitrary SQL commands via the cat_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5377 - http://www.securityfocus.com/bid/28655 - http://www.vupen.com/english/advisories/2008/1126/references - http://secunia.com/advisories/29710 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41661