Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0123 State: PUBLISHED Published: 2008-01-12T01:00:00 Last Updated: 2024-08-07T07:32:23.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486198/100/0/threaded - http://int21.de/cve/CVE-2008-0123-moodle.html - http://www.securityfocus.com/bid/27259 - https://exchange.xforce.ibmcloud.com/vulnerab
e/cve/CVE-2008-0123-moodle.html - http://www.securityfocus.com/bid/27259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39630 - http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0202.html - http://www.vupen.com/english/advisories/2008/0164 - http://secunia.com/advisories/28838 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
CVE ID: CVE-2008-0124 State: PUBLISHED Published: 2008-02-28T20:00:00 Last Updated: 2024-08-07T07:32:23.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via (1) the "Real name" field in Personal Settings, which is presented to readers of articles; or (2) a file upload, as demonstrated by a .htm, .html, or .js file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0700/references - http://www.securityfocus.com/bid/28003 - http://secunia.com/advisories/29128 - http://ww
visories/2008/0700/references - http://www.securityfocus.com/bid/28003 - http://secunia.com/advisories/29128 - http://www.securitytracker.com/id?1019502 - http://www.debian.org/security/2008/dsa-1528 - http://int21.de/cve/CVE-2008-0124-s9y.html - http://secunia.com/advisories/29502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40851 - http://blog.s9y.org/archives/191-Serendipity-1.3-beta1-released.html
CVE ID: CVE-2008-0125 State: PUBLISHED Published: 2008-03-24T22:00:00 Last Updated: 2024-08-07T07:32:24.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers to inject arbitrary web script or HTML via the baseDir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489722/100/0/threaded - http://www.securityfocus.com/bid/28291 - http://securityreason.com/securityalert/3765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41261
CVE ID: CVE-2008-0127 State: PUBLISHED Published: 2008-01-10T00:00:00 Last Updated: 2024-08-07T07:32:23.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long initial authentication packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4878 - http://securityreason.com/securityalert/3530 - http://www.vupen.com/english/advisories/2008/0087 - https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=614472&sliceId=SAL_Public&command=show&forward=nonthrea
https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=614472&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=614472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39561 - http://www.securityfocus.com/archive/1/486035/100/0/threaded - http://secunia.com/advisories/28408 - http://securitytracker.com/id?1019170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39563 - http://www.securityfocus.com/archive/1/485992/100/0/threaded - http://www.securityfocus.com/bid/27197
CVE ID: CVE-2008-0128 State: PUBLISHED Published: 2008-01-23T01:00:00 Last Updated: 2024-08-07T07:32:23.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://www.securityfocus.com/bid/27365 - http://security-tracker.debian.net/tracker/CVE-2008-0128 - http://secunia.
ml - http://www.securityfocus.com/bid/27365 - http://security-tracker.debian.net/tracker/CVE-2008-0128 - http://secunia.com/advisories/31493 - http://secunia.com/advisories/29242 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://issues.apache.org/bugzilla/show_bug.cgi?id=41217 - http://secunia.com/advisories/33668 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://secunia.com/advisories/28549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39804 - http://www.vupen.com/english/advisories/2008/0192 - http://www.vupen.com/english/advisories/2009/0233 - http://www.debian
ttp://www.vupen.com/english/advisories/2008/0192 - http://www.vupen.com/english/advisories/2009/0233 - http://www.debian.org/security/2008/dsa-1468 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://secunia.com/advisories/28552 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f5
2352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2008-0129 State: PUBLISHED Published: 2008-01-08T11:00:00 Last Updated: 2024-08-07T07:32:23.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attackers to execute arbitrary SQL commands via the album_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39417 - http://www.securityfocus.com/bid/27120 - https://www.exploit-db.com/exploits/4832
CVE ID: CVE-2008-0130 State: PUBLISHED Published: 2008-01-08T11:00:00 Last Updated: 2024-08-07T07:32:23.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Username parameter, a different vulnerability than CVE-2007-6671. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39326 - http://secunia.com/advisories/28283
CVE ID: CVE-2008-0131 State: PUBLISHED Published: 2008-01-08T11:00:00 Last Updated: 2024-08-07T07:32:23.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different product than CVE-2006-6022. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27121 - http://secunia.com/advisories/28283
CVE ID: CVE-2008-0132 State: PUBLISHED Published: 2008-01-08T11:00:00 Last Updated: 2024-08-07T07:32:23.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects, as demonstrated by (1) a long list of keys and (2) a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2
(2) a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27141 - http://aluigi.org/poc/pragmassh.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/39354 - http://marc.info/?l=bugtraq&m=119947184730448&w=2 - http://aluigi.altervista.org/adv/pragmassh-adv.txt
CVE ID: CVE-2008-0133 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:23.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to cat_main.php and the (2) cat parameter to forum.php in a liste action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39443 - https://www.exploit-db.com/exploits/4840 - http://www.securityfocus.com/bid/27149
CVE ID: CVE-2008-0134 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:24.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27162 - http://hackerscenter.com/archive/view.asp?id=28145 - http://www.securityfocus.com/archive/1/485836/100/200/threaded - http://secunia.com/advisories/28284 - http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt
CVE ID: CVE-2008-0135 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:23.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://hackerscenter.com/archive/view.asp?id=28145 - http://www.securityfocus.com/archive/1/485836/100/200/threaded - http://www.securityfocus.com/archive/1/485894/100/200/threaded - http://www.packetstormsecurity.org/0801-exploits/snitz-mul
p://www.securityfocus.com/archive/1/485894/100/200/threaded - http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt
CVE ID: CVE-2008-0136 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:23.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path. Additional Analyst Notes: - CVE Program Container: References: - http://hackerscenter.com/archive/view.asp?id=28145 - http://www.securityfocus.com/archive/1/485836/100/200/threaded - http://www.securityfocus.com/archive/1/485894/100/200/threaded - http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt
CVE ID: CVE-2008-0137 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:23.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39468 - https://www.exploit-db.com/exploits/4838
CVE ID: CVE-2008-0138 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:24.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4847 - http://www.securityfocus.com/bid/27155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39461
CVE ID: CVE-2008-0139 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:23.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP code via the template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4849 - http://www.securityfocus.com/bid/27157 - http://secunia.com/advisories/28336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39445
CVE ID: CVE-2008-0140 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:24.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the selected_theme parameter, a different vector than CVE-2007-3172. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27154 - https://www.exploit-db.com/exploits/4846 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39460 - http://www.attrition.org/pipermail/vim/2008-January/001867.html
CVE ID: CVE-2008-0141 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:23.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27145 - https://www.exploit-db.com/exploits/4835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39486
CVE ID: CVE-2008-0142 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:24.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4835
CVE ID: CVE-2008-0143 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:24.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM Broadcaster, allows remote attackers to execute arbitrary PHP code via a URL in the commonpath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4834 - http://www.securityfocus.com/bid/27137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39397 - http://secunia.com/advisories/28355 - http://www.spacialaudio.com/news/index.html
CVE ID: CVE-2008-0144 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:24.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged for local file inclusion using directory traversal sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27136 - http://secunia.com/advisories/28328 - http://marc.info/?l=bugtraq&m=119955114428283&w=2 - https://www.exploit-db.com/exploits/4833 - https://exchange.xforce.ibmcl
://marc.info/?l=bugtraq&m=119955114428283&w=2 - https://www.exploit-db.com/exploits/4833 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39419
CVE ID: CVE-2008-0145 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:24.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0059 - http://www.php.net/releases/4_4_8.php - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136 - http://secunia.com/advisories/28936 - http://bugs.php.net/bug.php?i
ckware-security&y=2008&m=slackware-security.335136 - http://secunia.com/advisories/28936 - http://bugs.php.net/bug.php?id=41655 - http://www.php.net/ChangeLog-4.php - http://secunia.com/advisories/28318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39401
CVE ID: CVE-2008-0146 State: PUBLISHED Published: 2008-01-08T19:00:00 Last Updated: 2024-08-07T07:32:24.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the top-level URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28294 - http://www.securityfocus.com/archive/1/485736/100/0/threaded - http://securityreason.com/securityalert/3521 - http://osvdb.org/51235 - http://www.securityfocus.com/bid/27116
CVE ID: CVE-2008-0147 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:24.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via (1) the user_email parameter and possibly (2) username parameter in a Members action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27180 - https://www.exploit-db.com/exploits/4863 - http://secunia.com/advisories/28301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39525
CVE ID: CVE-2008-0148 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:23.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39531 - https://www.exploit-db.com/exploits/4861
CVE ID: CVE-2008-0149 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:23.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28291 - https://www.exploit-db.com/exploits/4861
CVE ID: CVE-2008-0150 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:23.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27144 - http://secunia.com/advisories/28357 - http://www.securityfocus.com/archive/1/485831/100/0/threaded - http://securityreason.com/securityalert/3529 - http
357 - http://www.securityfocus.com/archive/1/485831/100/0/threaded - http://securityreason.com/securityalert/3529 - http://www.arubanetworks.com/support/alerts/aid-122207.asc
CVE ID: CVE-2008-0151 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:23.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Telnet request with long options. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3525 - http://www.securityfocus.com/bid/27142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39427 - http://aluigi.altervista.org/adv/waccaz-adv.txt - http://www.securityfocus.com/archive/1/488366/100/200/
ilities/39427 - http://aluigi.altervista.org/adv/waccaz-adv.txt - http://www.securityfocus.com/archive/1/488366/100/200/threaded - http://www.securityfocus.com/archive/1/485812/100/0/threaded - http://secunia.com/advisories/28272 - http://aluigi.altervista.org/adv/wachof-adv.txt
CVE ID: CVE-2008-0152 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:23.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a denial of service (crash) via unspecified telnet options, which triggers a NULL pointer dereference. NOTE: the crash is not user-assisted when the server is running in debug mode. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28316 - http://www.securityfocus.com/bid/27134 - http://aluigi.altervista.org/adv/slnetmsg-adv.txt - http://marc.info/?l=bugtraq&m=1199471
.securityfocus.com/bid/27134 - http://aluigi.altervista.org/adv/slnetmsg-adv.txt - http://marc.info/?l=bugtraq&m=119947184730448&w=2
CVE ID: CVE-2008-0153 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:24.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and resource exhaustion) via a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39353 - http://www.securityfocus.com/bid/27143 - http://aluigi.altervista.org/adv/pragmatel-adv.txt - http://marc.info/?l=bugtraq&m=119947184730448&w=2
CVE ID: CVE-2008-0154 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:23.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL commands the c parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39529 - http://www.securityfocus.com/bid/27190