Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4828 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in administration/admins.php in Ad Manager Pro (aka AdManagerPro) 3.0 allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an admin_created action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3530 - http://secunia.com/advisories/37713 - http://www.exploit-db.com/exploits/104
ww.vupen.com/english/advisories/2009/3530 - http://secunia.com/advisories/37713 - http://www.exploit-db.com/exploits/10438
CVE ID: CVE-2009-4829 State: PUBLISHED Published: 2010-04-27T15:00:00Z Last Updated: 2024-09-16T23:31:03.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Automated Logout module 6.x-1.x before 6.x-1.7 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users with administer autologout privileges to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37878 - http://osvdb.org/61295 - http://www.vupen.com/english/advisories/2009/3633 - http://www.securityfocus.com/bid/37462 - http://drupal.org/node/667094 - http://dr
en.com/english/advisories/2009/3633 - http://www.securityfocus.com/bid/37462 - http://drupal.org/node/667094 - http://drupal.org/node/667084 - http://drupal.org/node/667086
CVE ID: CVE-2009-4830 State: PUBLISHED Published: 2010-04-27T15:00:00Z Last Updated: 2024-09-16T23:01:07.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via unknown vectors, possibly related to www/admin/install.php, www/admin/install-plugins.php, and other www/admin/ files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61300 - http://secunia.com/advisories/37914 - http://blog.openx.org/12/security-matters-2/ - http://www.securityfocus.com/bid/37457 - http://forum.openx.org/index.php?showtopic=503
enx.org/12/security-matters-2/ - http://www.securityfocus.com/bid/37457 - http://forum.openx.org/index.php?showtopic=503454011
CVE ID: CVE-2009-4831 State: PUBLISHED Published: 2010-04-29T19:00:00 Last Updated: 2024-08-07T07:17:25.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35620 - http://www.securityfocus.com/archive/1/504573/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/51400 - http://www.securityfocus.com/bid/35509
CVE ID: CVE-2009-4832 State: PUBLISHED Published: 2010-04-29T19:00:00 Last Updated: 2024-08-07T07:17:25.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges via a crafted IOCTL 0x80012010 request to the DLPCryptCore device. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8983 - http://secunia.com/advisories/35501 - http://www.securitytracker.com/id?1022427
CVE ID: CVE-2009-4833 State: PUBLISHED Published: 2010-04-29T19:00:00 Last Updated: 2024-08-07T07:17:25.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022482 - http://bugs.mysql.com/bug.php?id=38700 - http://www.securityfocus.com/bid/35514 - http://secunia.com/advisories/35604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51406
CVE ID: CVE-2009-4834 State: PUBLISHED Published: 2010-05-04T15:00:00 Last Updated: 2024-08-07T07:17:25.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to now_connect.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53044 - http://www.exploit-db.com/exploits/9590 - http://www.securityfocus.com/bid/36284
CVE ID: CVE-2009-4835 State: PUBLISHED Published: 2010-05-05T18:00:00Z Last Updated: 2024-09-16T22:20:41.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1446 - http://www.securityfocus.com/bid/35126 - http://secunia.com/advisories/35266 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=530831
CVE ID: CVE-2009-4836 State: PUBLISHED Published: 2010-05-05T18:00:00 Last Updated: 2024-08-07T07:17:25.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arbitrary PHP code via the anticode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54883 - http://www.vupen.com/english/advisories/2009/1495 - http://secunia.com/advisories/35283 - http://www.exploit-db.com/exploits/8871
CVE ID: CVE-2009-4837 State: PUBLISHED Published: 2010-05-05T18:00:00Z Last Updated: 2024-09-16T20:21:47.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sig[1] parameter to base/base_qry_main.php, or the time[0][1] parameter to (2) base/base_stat_alerts.php or (3) base/base_stat_uaddr.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://spl0it.org/files/BASE-XSS/Reflective-notes.txt - http://secureid
st Notes: - CVE Program Container: References: - http://spl0it.org/files/BASE-XSS/Reflective-notes.txt - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/base_ag_common.php?sortby=date&view - http://secunia.com/advisories/35222 - http://base.secureideas.net/news.php
CVE ID: CVE-2009-4838 State: PUBLISHED Published: 2010-05-05T18:00:00Z Last Updated: 2024-09-17T03:59:06.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/base_ag_common.php?sortby=date&view - http://secunia.com/advisories/35222 - http://base.secureideas.net/news.php
CVE ID: CVE-2009-4839 State: PUBLISHED Published: 2010-05-05T18:00:00Z Last Updated: 2024-09-17T03:07:14.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/base_roleadmin.php, (2) admin/base_useradmin.php, (3) base_conf_contents.php, (4) base_qry_sqlcalls.php, and (5) base_ag_main.php. Additional Analyst Notes: - CVE Program Container: References: - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/admin/base_roleadmin.php?view=log - htt
eferences: - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/admin/base_roleadmin.php?view=log - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/admin/base_useradmin.php?view=log - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/base_conf_contents.php?view=log - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/base_qry_sqlcalls.php?view=log - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/base_ag_main.php?view=log
CVE ID: CVE-2009-4840 State: PUBLISHED Published: 2010-05-05T18:00:00 Last Updated: 2024-08-07T07:17:25.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer 3.2 allows remote attackers to execute arbitrary code via a long argument to the SetIAPlayerName method. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50868
CVE ID: CVE-2009-4841 State: PUBLISHED Published: 2010-05-05T18:00:00 Last Updated: 2024-08-07T07:17:25.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in Roxio CinePlayer 3.2 allows remote attackers to execute arbitrary code via a long argument to the DiskType method. NOTE: this might overlap CVE-2007-1559. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8824
CVE ID: CVE-2009-4842 State: PUBLISHED Published: 2010-05-07T17:43:00Z Last Updated: 2024-09-16T22:55:36.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the (1) addNewDept, (2) deptId, or (3) deptDesc parameter to tvserver/server/user/addDepartment.jsp; or the (4) firstName, (5) lastName, or (6) email parameter in a save action to tvserver/user/user.do. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container:
known; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37359
CVE ID: CVE-2009-4843 State: PUBLISHED Published: 2010-05-07T17:43:00 Last Updated: 2024-08-07T07:17:25.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37297 - http://www.securityfocus.com/archive/1/507729/100/0/threaded - http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt
CVE ID: CVE-2009-4844 State: PUBLISHED Published: 2010-05-07T17:43:00 Last Updated: 2024-08-07T07:17:25.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain sensitive Tomcat information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58576 - http://www.securityfocus.com/archive/1/507729/100/0/threaded - http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt
CVE ID: CVE-2009-4845 State: PUBLISHED Published: 2010-05-07T17:43:00 Last Updated: 2024-08-07T07:17:25.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows remote attackers to obtain sensitive information by reading the username and password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507729/100/0/threaded - http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58575
CVE ID: CVE-2009-4846 State: PUBLISHED Published: 2010-05-07T18:23:00 Last Updated: 2024-08-07T07:17:25.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Deliantra Server before 2.82 allow remote attackers to execute arbitrary code via vectors related to (1) the command_gsay function in server/c_party.C and (2) the book implementation. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.schmorp.de/deliantra/server/server/c_party.C?r1=1.29&r2=1.30 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54205 - http://www.osvdb.org/59879 - http://cvs.schmorp.de/deliantra/server/Changes?pathrev=rel-2_82 - https://exchange.xforce.
http://www.osvdb.org/59879 - http://cvs.schmorp.de/deliantra/server/Changes?pathrev=rel-2_82 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54206 - http://www.vupen.com/english/advisories/2009/3176 - http://www.osvdb.org/59878 - http://secunia.com/advisories/37317
CVE ID: CVE-2009-4847 State: PUBLISHED Published: 2010-05-07T18:23:00 Last Updated: 2024-08-07T07:17:25.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deliantra Server before 2.82 allows remote authenticated users to cause a denial of service (daemon crash) via vectors involving an empty treasure list. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.schmorp.de/deliantra/server/Changes?pathrev=rel-2_82 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54207 - http://www.vupen.com/english/advisories/2009/3176
CVE ID: CVE-2009-4848 State: PUBLISHED Published: 2010-05-07T18:23:00 Last Updated: 2024-08-07T07:17:25.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the (1) userId parameter to tvserver/server/user/setPermissions.jsp, (2) deptName parameter to tvserver/server/user/addDepartment.jsp, (3) ID parameter to tvserver/server/inventory/inventoryTabs.jsp, (4) reportName parameter to tvserver/reports/virtualIQAdminReports.do, or (5) middleName parameter in a save action to tvserver/user/user.do. Additiona
erver/reports/virtualIQAdminReports.do, or (5) middleName parameter in a save action to tvserver/user/user.do. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37359 - http://www.securityfocus.com/archive/1/507729/100/0/threaded - http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt
CVE ID: CVE-2009-4849 State: PUBLISHED Published: 2010-05-07T18:23:00 Last Updated: 2024-08-07T07:17:25.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to hijack the authentication of administrators for requests that (1) create a new user account via a save action to tvserver/user/user.do, (2) shutdown a virtual machine, (3) start a virtual machine, (4) restart a virtual machine, or (5) schedule an activity. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37359 - http://www.securityfocus
nal Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37359 - http://www.securityfocus.com/archive/1/507729/100/0/threaded - http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt
CVE ID: CVE-2009-4850 State: PUBLISHED Published: 2010-05-07T18:23:00 Last Updated: 2024-08-07T07:17:25.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/60049 - http://secunia.com/advisories/35764 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58573 - http://www.metasploit.com/redmine/projects/framework/repository/revisions/7518/entry/modules/exploits/windows/browser/awingsoft_winds3d_sceneurl.rb - http://www.metasploit.com/m
sitory/revisions/7518/entry/modules/exploits/windows/browser/awingsoft_winds3d_sceneurl.rb - http://www.metasploit.com/modules/exploit/windows/browser/awingsoft_winds3d_sceneurl
CVE ID: CVE-2009-4851 State: PUBLISHED Published: 2010-05-07T18:23:00Z Last Updated: 2024-09-16T17:23:15.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37274 - http://www.xoops.org/modules/news/article.php?storyid=5096 - http://www.xoops.org/modules/newbb/viewtopic.php?post_id=319132 - http://www.vupen.com/english/advisories/2009/3256
CVE ID: CVE-2009-4852 State: PUBLISHED Published: 2010-05-07T18:23:00Z Last Updated: 2024-09-17T03:08:17.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle before 0.94.1 allow remote attackers to inject arbitrary web script or HTML via the sort parameter to index.php, and other unspecified vectors, a different issue than CVE-2008-6113. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://semanticscuttle.svn.sourceforge.net/viewvc/semanticscuttle/branches/0.94.1/ChangeLog?view=markup&pathrev=471 - http://secunia.com/advis
.svn.sourceforge.net/viewvc/semanticscuttle/branches/0.94.1/ChangeLog?view=markup&pathrev=471 - http://secunia.com/advisories/37387
CVE ID: CVE-2009-4853 State: PUBLISHED Published: 2010-05-07T18:23:00 Last Updated: 2024-08-07T07:17:25.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://static.jumpbox.com/README/README-foswiki.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58588 - http://www.vupen.com/english/advisories/2009/3258
CVE ID: CVE-2009-4854 State: PUBLISHED Published: 2010-05-07T22:00:00 Last Updated: 2024-08-07T07:17:25.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.juniper.net/security/auto/vulnerabilities/vuln35619.html - http://www.securityfocus.com/bid/35619 - http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt - http://www.exploit-db.com/exploits/9095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58705
CVE ID: CVE-2009-4855 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:25.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in third-party TYPO3 extensions - not in TYPO3 Core. Additional Analyst Notes: - CVE Program Container: References: - http://secure.t3sec.info/blog/post/2009/08/06/typo3-cms-40-showuid-exploit-not-a-vulnerability/ - http://www.exploit-db.com/exploits/93
3sec.info/blog/post/2009/08/06/typo3-cms-40-showuid-exploit-not-a-vulnerability/ - http://www.exploit-db.com/exploits/9380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52308 - http://www.securityfocus.com/bid/35975
CVE ID: CVE-2009-4856 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:25.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52324 - http://packetstormsecurity.org/0908-exploits/pesc-xss.txt - http://secunia.com/advisories/36168
CVE ID: CVE-2009-4857 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:26.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in PHP Photo Vote 1.3F allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36171 - http://osvdb.org/56828 - http://packetstormsecurity.org/0908-exploits/ppv-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/52323
CVE ID: CVE-2009-4858 State: PUBLISHED Published: 2010-05-10T20:00:00Z Last Updated: 2024-09-16T16:18:05.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject arbitrary web script or HTML via the questionid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36239 - http://packetstormsecurity.org/0908-exploits/yac-xss.txt
CVE ID: CVE-2009-4859 State: PUBLISHED Published: 2010-05-10T20:00:00Z Last Updated: 2024-09-16T20:32:55.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Online Work Order Suite (OWOS) Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) default.asp and (2) report.asp, and the (3) go parameter to login.asp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0908-exploits/owosasp-xss.txt - http://secunia.com/advisories/36244
CVE ID: CVE-2009-4860 State: PUBLISHED Published: 2010-05-10T20:00:00 Last Updated: 2024-08-07T07:17:26.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idTableProduit parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9390
CVE ID: CVE-2009-4861 State: PUBLISHED Published: 2010-05-10T20:00:00Z Last Updated: 2024-09-16T21:07:43.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0908-exploits/supportpro-xss.txt - http://secunia.com/advisories/36242