Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4184 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitrary web script or HTML via the patron parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31775 - http://www.securityfocus.com/bid/31153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45447
CVE ID: CVE-2008-4185 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213. Additional Analyst Notes: - CVE Program Container: References: - http://spanish-hackers.com/exploits/24.txt - http://secunia.com/advisories/31775 - http://securityreason.com/securityalert/4314 - http://www.securityfocus.com/bid/31153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45448 - https://www.exploit-db.com/
w.securityfocus.com/bid/31153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45448 - https://www.exploit-db.com/exploits/6370
CVE ID: CVE-2008-4186 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id_doc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45449
CVE ID: CVE-2008-4187 State: PUBLISHED Published: 2008-09-23T16:00:00 Last Updated: 2024-08-07T10:08:34.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45235 - https://www.exploit-db.com/exploits/6489 - http://securityreason.com/securityalert/4315
CVE ID: CVE-2008-4188 State: PUBLISHED Published: 2008-09-23T16:00:00 Last Updated: 2024-08-07T10:08:34.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to execute arbitrary code via unknown vectors related to "injection of control characters." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31253 - http://secunia.com/advisories/31897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45260 - http://typo3.org/extensions/repository/view/kw_secdir/1.0.2/
CVE ID: CVE-2008-4189 State: REJECTED Published: 2008-09-23T16:00:00 Last Updated: 2008-10-07T09:00:00 Description: No description available.
CVE ID: CVE-2008-4190 State: PUBLISHED Published: 2008-09-24T10:00:00 Last Updated: 2024-08-07T10:08:34.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream version, this tool has been disabled. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34472 - https://bugzilla.redhat.com/show_bug.cgi?id=460425 - http://www.openwall.com/lists/oss-security
a.com/advisories/34472 - https://bugzilla.redhat.com/show_bug.cgi?id=460425 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://www.securityfocus.com/archive/1/501624/100/0/threaded - http://secunia.com/advisories/34182 - http://www.securityfocus.com/archive/1/501640/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10078 - http://dev.gentoo.org/~rbu/security/debiantemp/openswan - http://www.securityfocus.com/bid/31243 - https://www.exploit-db.com/exploits/9135 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374 - http://www.redhat.com/support/errata/RHSA-2009-0402.html
135 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496374 - http://www.redhat.com/support/errata/RHSA-2009-0402.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45250 - http://www.debian.org/security/2009/dsa-1760
CVE ID: CVE-2008-4191 State: PUBLISHED Published: 2008-09-24T10:00:00 Last Updated: 2024-08-07T10:08:34.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00010.html - https://bugzilla.redhat.com/show_bug.cgi?id=460435 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496431 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://secunia.com/advisories/32071 - https://bugs.gentoo.org/s
ttp://www.openwall.com/lists/oss-security/2008/10/30/2 - http://secunia.com/advisories/32071 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://secunia.com/advisories/31880 - http://www.securityfocus.com/bid/31241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45237 - http://dev.gentoo.org/~rbu/security/debiantemp/emacspeak - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00012.html
CVE ID: CVE-2008-4192 State: PUBLISHED Published: 2008-09-29T17:00:00 Last Updated: 2024-08-07T10:08:34.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30898 - http://secunia.com/advisories/32390 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://dev.gentoo.org/~rbu/security/debiantemp/cman - http://secunia.com/advisories/32387 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http:
/security/debiantemp/cman - http://secunia.com/advisories/32387 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://secunia.com/advisories/31887 - http://uvw.ru/report.lenny.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44845 - http://www.vupen.com/english/advisories/2011/0419 - http://www.ubuntu.com/usn/USN-875-1 - https://bugzilla.redhat.com/show_bug.cgi?id=460476 - http://www.openwall.com/lists/oss-security/2008/09/18/3 - http://www.openwall.com/lists/oss-security/2008/09/24/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html - http://secunia.com/advisories/43362 - http://www.re
at.com/archives/fedora-package-announce/2008-October/msg00666.html - http://secunia.com/advisories/43362 - http://www.redhat.com/support/errata/RHSA-2011-0266.html
CVE ID: CVE-2008-4193 State: PUBLISHED Published: 2008-09-24T10:00:00 Last Updated: 2024-08-07T10:08:34.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers to execute arbitrary code via a long username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5827 - https://www.exploit-db.com/exploits/5718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42769 - http://files.altn.com/securitygateway/release/relnotes_en.htm - http://www.vupen.com/english/advisories/2008/1717/references - http://secunia.co
curitygateway/release/relnotes_en.htm - http://www.vupen.com/english/advisories/2008/1717/references - http://secunia.com/advisories/30497 - http://www.securityfocus.com/bid/29457 - http://www.securitytracker.com/id?1020156 - http://securityreason.com/securityalert/4302
CVE ID: CVE-2008-4194 State: PUBLISHED Published: 2008-09-24T10:00:00 Last Updated: 2024-08-07T10:08:34.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug." Additional Analyst Notes: - CVE Program Container: References: - http://www.phys.uu.nl/~rombouts/pdnsd.html - http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/45594 - http://www.vupen.com/english/advisories/2008/2582
CVE ID: CVE-2008-4195 State: PUBLISHED Published: 2008-09-27T00:00:00 Last Updated: 2024-08-07T10:08:34.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which allows remote attackers to trigger the display of an arbitrary address in a frame via unspecified use of web script. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44549 - http://secunia.com/advisories/32538 - http://www.opera.com/docs/changelogs/mac/952/ - http://www
vulnerabilities/44549 - http://secunia.com/advisories/32538 - http://www.opera.com/docs/changelogs/mac/952/ - http://www.opera.com/docs/changelogs/solaris/952/ - http://www.opera.com/support/search/view/893/ - https://bugs.gentoo.org/show_bug.cgi?id=235298 - http://www.securitytracker.com/id?1020718 - http://www.securityfocus.com/bid/30768 - http://www.opera.com/docs/changelogs/windows/952/ - http://www.opera.com/docs/changelogs/linux/952/ - http://www.openwall.com/lists/oss-security/2008/09/24/4 - http://www.openwall.com/lists/oss-security/2008/09/19/2 - http://secunia.com/advisories/31549 - http://www.opera.com/docs/changelogs/freebsd/952/ - http://security.gentoo.org/glsa/glsa-200811-01.x
/advisories/31549 - http://www.opera.com/docs/changelogs/freebsd/952/ - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4196 State: PUBLISHED Published: 2008-09-27T00:00:00 Last Updated: 2024-08-07T10:08:34.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2416 - http://secunia.com/advisories/32538 - http://www.securitytracker.com/id?1020719 - http://www.opera.com/docs/changelogs/mac/952/ - http://www.opera.com/docs/changelogs/solaris/952/ - http://www.opera.com/docs/changelogs/windows/952/ - http://www.opera.com/docs/chang
a.com/docs/changelogs/solaris/952/ - http://www.opera.com/docs/changelogs/windows/952/ - http://www.opera.com/docs/changelogs/linux/952/ - http://www.openwall.com/lists/oss-security/2008/09/24/4 - http://www.openwall.com/lists/oss-security/2008/09/19/2 - http://secunia.com/advisories/31549 - http://bugs.gentoo.org/show_bug.cgi?id=235298 - http://www.opera.com/docs/changelogs/freebsd/952/ - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4197 State: PUBLISHED Published: 2008-09-27T00:00:00 Last Updated: 2024-08-07T10:08:34.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2416 - http://secunia.com/advisories/32538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
lish/advisories/2008/2416 - http://secunia.com/advisories/32538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44552 - http://www.opera.com/docs/changelogs/solaris/952/ - http://www.securitytracker.com/id?1020720 - http://www.securityfocus.com/bid/30768 - http://www.opera.com/docs/changelogs/windows/952/ - http://www.opera.com/docs/changelogs/linux/952/ - http://www.openwall.com/lists/oss-security/2008/09/24/4 - http://www.openwall.com/lists/oss-security/2008/09/19/2 - http://secunia.com/advisories/31549 - http://bugs.gentoo.org/show_bug.cgi?id=235298 - http://www.opera.com/docs/changelogs/freebsd/952/ - http://www.opera.com/support/search/view/894/ - http://security.gentoo.org/glsa/
pera.com/docs/changelogs/freebsd/952/ - http://www.opera.com/support/search/view/894/ - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4198 State: PUBLISHED Published: 2008-09-27T00:00:00 Last Updated: 2024-08-07T10:08:34.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2416 - http://www.securitytracker.com/id?1020721 - http://secunia.com/advisories/32538 - http://www.opera.com/support/search/view/895/
ww.securitytracker.com/id?1020721 - http://secunia.com/advisories/32538 - http://www.opera.com/support/search/view/895/ - http://www.opera.com/docs/changelogs/mac/952/ - http://www.opera.com/docs/changelogs/solaris/952/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/44555 - http://www.securityfocus.com/bid/30768 - http://www.opera.com/docs/changelogs/windows/952/ - http://www.opera.com/docs/changelogs/linux/952/ - http://www.openwall.com/lists/oss-security/2008/09/24/4 - http://www.openwall.com/lists/oss-security/2008/09/19/2 - http://secunia.com/advisories/31549 - http://bugs.gentoo.org/show_bug.cgi?id=235298 - http://www.opera.com/docs/changelogs/freebsd/952/ - http://security.gent
http://bugs.gentoo.org/show_bug.cgi?id=235298 - http://www.opera.com/docs/changelogs/freebsd/952/ - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4199 State: PUBLISHED Published: 2008-09-27T00:00:00 Last Updated: 2024-08-07T10:08:34.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2416 - http://www.opera.com/support/search/view/896/ - http://secunia.com/advisories/32538 - http://www.opera.com/docs/changelogs/mac/952/ - http://www.op
t/search/view/896/ - http://secunia.com/advisories/32538 - http://www.opera.com/docs/changelogs/mac/952/ - http://www.opera.com/docs/changelogs/solaris/952/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/44557 - http://securitytracker.com/id?1020722 - http://www.securityfocus.com/bid/30768 - http://www.opera.com/docs/changelogs/windows/952/ - http://www.opera.com/docs/changelogs/linux/952/ - http://www.openwall.com/lists/oss-security/2008/09/24/4 - http://www.openwall.com/lists/oss-security/2008/09/19/2 - http://secunia.com/advisories/31549 - http://bugs.gentoo.org/show_bug.cgi?id=235298 - http://www.opera.com/docs/changelogs/freebsd/952/ - http://security.gentoo.org/glsa/glsa-200811
show_bug.cgi?id=235298 - http://www.opera.com/docs/changelogs/freebsd/952/ - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4200 State: PUBLISHED Published: 2008-09-27T00:00:00 Last Updated: 2024-08-07T10:08:34.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to change this field to display the URL of a page containing web script controlled by the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2416 - http://secunia.com/advisories/32538 - http://www.opera.com/docs/changelogs/mac/952/ - http://www.opera.com/docs/changelogs/solaris/952/ - http://www.securitytracker.com/id?1020723
docs/changelogs/mac/952/ - http://www.opera.com/docs/changelogs/solaris/952/ - http://www.securitytracker.com/id?1020723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44559 - http://www.securityfocus.com/bid/30768 - http://www.opera.com/docs/changelogs/windows/952/ - http://www.opera.com/docs/changelogs/linux/952/ - http://www.openwall.com/lists/oss-security/2008/09/24/4 - http://www.openwall.com/lists/oss-security/2008/09/19/2 - http://secunia.com/advisories/31549 - http://bugs.gentoo.org/show_bug.cgi?id=235298 - http://www.opera.com/docs/changelogs/freebsd/952/ - http://www.opera.com/support/search/view/897/ - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4201 State: PUBLISHED Published: 2008-09-24T10:00:00 Last Updated: 2024-08-07T10:08:34.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MPEG-4 (MP4) file. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200811-03.xml - http://www.openwall.com/lists/oss-security/2008/09/24/6 - http://www.vupen.com/english/advisories/2008/2601 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499899 - http://secunia
://www.vupen.com/english/advisories/2008/2601 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499899 - http://secunia.com/advisories/32006 - http://www.audiocoding.com/patch/main_overflow.diff - http://www.securityfocus.com/bid/31219 - http://bugs.gentoo.org/show_bug.cgi?id=238445 - http://www.audiocoding.com/archive.html - http://bugs.gentoo.org/attachment.cgi?id=166174&action=view - http://secunia.com/advisories/32661 - http://osvdb.org/48349
CVE ID: CVE-2008-4202 State: PUBLISHED Published: 2008-09-24T14:00:00 Last Updated: 2024-08-07T10:08:34.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL commands via the idd parameter in a deadlink action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6469 - http://www.securityfocus.com/bid/31187 - http://secunia.com/advisories/31844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45179 - http://securityreason.com/securityalert/4305
CVE ID: CVE-2008-4203 State: PUBLISHED Published: 2008-09-24T14:00:00 Last Updated: 2024-08-07T10:08:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQL commands via a recook cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6462 - http://securityreason.com/securityalert/4306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45127 - http://www.securityfocus.com/bid/31182
CVE ID: CVE-2008-4204 State: PUBLISHED Published: 2008-09-24T14:00:00 Last Updated: 2024-08-07T10:08:34.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute arbitrary SQL commands via the city parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45190 - http://securityreason.com/securityalert/4308 - https://www.exploit-db.com/exploits/6470
CVE ID: CVE-2008-4205 State: PUBLISHED Published: 2008-09-24T14:00:00 Last Updated: 2024-08-07T10:08:35.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a Search action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://e-rdc.org/v1/news.php?readmore=108 - http://secunia.com/advisories/31794 - https://www.exploit-db.com/exploits/6468 - http://www.securityfocus.com/archive/1/496427/100/0/threaded - http://www.s
- https://www.exploit-db.com/exploits/6468 - http://www.securityfocus.com/archive/1/496427/100/0/threaded - http://www.securityfocus.com/bid/31207 - http://osvdb.org/48270 - http://securityreason.com/securityalert/4307
CVE ID: CVE-2008-4206 State: PUBLISHED Published: 2008-09-24T14:00:00 Last Updated: 2024-08-07T10:08:34.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48269 - http://e-rdc.org/v1/news.php?readmore=108 - http://secunia.com/advisories/31794 - https://www.exploit-db.com/exploits/6468 - http://www.securityfocus.com/archive/1/496427/100/0/threaded - http://www.securityfocus.com/bid/31
b.com/exploits/6468 - http://www.securityfocus.com/archive/1/496427/100/0/threaded - http://www.securityfocus.com/bid/31207 - http://securityreason.com/securityalert/4307
CVE ID: CVE-2008-4207 State: PUBLISHED Published: 2008-09-24T14:00:00 Last Updated: 2024-08-07T10:08:35.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://e-rdc.org/v1/news.php?readmore=108 - http://secunia.com/advisories/31794 - https://www.exploit-db.com/exploits/6468 - http://osvdb.org/48271 - http://www.securityfocus.com/archiv
visories/31794 - https://www.exploit-db.com/exploits/6468 - http://osvdb.org/48271 - http://www.securityfocus.com/archive/1/496427/100/0/threaded - http://www.securityfocus.com/bid/31207 - http://securityreason.com/securityalert/4307
CVE ID: CVE-2008-4208 State: PUBLISHED Published: 2008-09-24T14:00:00 Last Updated: 2024-08-07T10:08:34.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OSADS Alliance Database before 2.1 has unknown impact and attack vectors, possibly related to includes/functions.php, a different issue than CVE-2006-2874. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=163285&release_id=625654 - http://www.securityfocus.com/bid/31198 - http://secunia.com/advisories/31876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45149