Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6643 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative functions, which allows remote attackers to bypass intended restrictions and modify configuration settings via the LokiACTION parameter in a direct request to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45866 - http://www.securityfocus.com/bid/29448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42766 - http://www.securityfocus.com/archive/1/492877/100/0/threaded
CVE ID: CVE-2008-6644 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42752 - http://www.securityfocus.com/archive/1/492793/100/0/threaded - http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno19/tabid/1166/Default.aspx - http://www.securityfocus.com/bid/29437
CVE ID: CVE-2008-6645 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header ($_SERVER ['HTTP_USER_AGENT']), which is not properly handled when displaying log files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492879/100/0/threaded - http://www.securityfocus.com/archive/1/492876/100/0/threaded - http://osvdb.org/51439
CVE ID: CVE-2008-6646 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in CoronaMatrix phpAddressBook 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42140 - http://www.securityfocus.com/archive/1/491525/100/0/threaded - http://www.securityfocus.com/bid/29005
CVE ID: CVE-2008-6647 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30194 - https://www.exploit-db.com/exploits/5580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42318 - http://osvdb.org/45140 - http://www.securityfocus.com/bid/29132
CVE ID: CVE-2008-6648 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to about_us.php. NOTE: this might be the same issue as CVE-2008-6647. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5582 - http://secunia.com/advisories/30194 - http://www.securityfocus.com/bid/29136 - http://osvdb.org/45141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42317
CVE ID: CVE-2008-6649 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45142 - https://www.exploit-db.com/exploits/5582 - http://secunia.com/advisories/30194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42408 - http://www.securityfocus.com/bid/29136
CVE ID: CVE-2008-6650 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_id parameter, a different vulnerability than CVE-2008-4628. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29115 - https://www.exploit-db.com/exploits/5568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42300
CVE ID: CVE-2008-6651 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5524 - http://www.securityfocus.com/bid/28992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42110
CVE ID: CVE-2008-6652 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the sitename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5557 - http://www.securityfocus.com/bid/29102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42255
CVE ID: CVE-2008-6653 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50423 - https://www.exploit-db.com/exploits/5527 - http://www.securityfocus.com/bid/29000 - http://forum.wh-com.de/index.php?topic=497.0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42124
CVE ID: CVE-2008-6654 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search_results.php in InfoBiz Server allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29116 - http://holisticinfosec.org/content/view/63/45/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/42290 - http://secunia.com/advisories/30120 - http://www.osvdb.org/44876
CVE ID: CVE-2008-6655 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbitrary web script or HTML via the (1) nom_branche and (2) nom parameters to php/prenom.php; the (3) nom_branche parameter to php/index.php; and the (4) nom_branche, (5) nom, and (6) prenom parameters to php/info.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42211 - http://www.securityfocus.com/bid/29048/
cus.com/bid/29048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42211 - http://www.securityfocus.com/bid/29048/exploit - http://www.z0rlu.ownspace.org/index.php?/archives/75-GEDCOM_to_MySQL2-XSS.html
CVE ID: CVE-2008-6656 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to listings.php and (2) the username field to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42158 - http://www.securityfocus.com/bid/29027 - http://osvdb.org/50256 - https://www.exploit-db.com/exploits/5531 - http://freshmeat.net/projects/openauto/releases/277061
CVE ID: CVE-2008-6657 State: PUBLISHED Published: 2009-04-07T19:00:00 Last Updated: 2024-08-07T11:34:47.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32119 - http://secunia.com/advisories/32516 - http://www.simplemachines.org/community/index.php?topic=272861.0 - https://www.exploit-db.com/exploits/6993 -
s/32516 - http://www.simplemachines.org/community/index.php?topic=272861.0 - https://www.exploit-db.com/exploits/6993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46343 - http://osvdb.org/50071
CVE ID: CVE-2008-6658 State: PUBLISHED Published: 2009-04-07T19:00:00 Last Updated: 2024-08-07T11:34:47.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. (dot dot) in the package parameter during an install2 action, as demonstrated by a predictable package filename in attachments/ that was uploaded through a post2 action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50070 - http://www.simplemachines.org/community/ind
alyst Notes: - CVE Program Container: References: - http://osvdb.org/50070 - http://www.simplemachines.org/community/index.php?topic=272861.0 - https://www.exploit-db.com/exploits/6993
CVE ID: CVE-2008-6659 State: PUBLISHED Published: 2009-04-07T19:00:00 Last Updated: 2024-08-07T11:34:47.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme_dir field during a jsoption action, related to Sources/QueryString.php and Sources/Themes.php, as demonstrated by a local .gif file in attachments/ with PHP code that was uploaded through a profile2 action to index.php. Additional Analyst Notes: - CVE Program Container: R
PHP code that was uploaded through a profile2 action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32139 - http://secunia.com/advisories/32516 - http://www.simplemachines.org/community/index.php?topic=272861.0 - http://osvdb.org/50072 - https://www.exploit-db.com/exploits/7011
CVE ID: CVE-2008-6660 State: PUBLISHED Published: 2009-04-07T19:00:00 Last Updated: 2024-08-07T11:34:47.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in bigdump.php in Alexey Ozerov BigDump 0.29b allows remote attackers to execute arbitrary code by uploading a file with an executable extension followed by a .sql extension, then accessing this file via a direct request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46539 - http://www.securityfocus.com/arch
rityfocus.com/bid/32152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46539 - http://www.securityfocus.com/archive/1/498093/100/0/threaded
CVE ID: CVE-2008-6661 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T11:34:47.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33240 - http://marc.info/?l=bugtraq&m=122893066212987&w=2 - http://www.osvdb.org/50826 - http://www.vupen.com/english/advisories/2008/3459 - https://exchange.xforce.ibmcloud.com/vulnera
//www.osvdb.org/50826 - http://www.vupen.com/english/advisories/2008/3459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47219 - http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html - http://www.securityfocus.com/bid/32751
CVE ID: CVE-2008-6662 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T11:41:58.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122893196715523&w=2 - http://www.vupen.com/english/advisories/2008/3461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47254 - http://www.securityfocus.com/bid/32749 - http://www.osvdb.org/51962
exchange.xforce.ibmcloud.com/vulnerabilities/47254 - http://www.securityfocus.com/bid/32749 - http://www.osvdb.org/51962 - http://www.ivizsecurity.com/security-advisory-iviz-sr-08014.html
CVE ID: CVE-2008-6663 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:58.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the auction_id parameter, a different vector than CVE-2009-0106. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50472 - https://www.exploit-db.com/exploits/5879 - http://www.securityfocus.com/bid/29856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43264
CVE ID: CVE-2008-6664 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:58.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the shuser and shpass cookies to non-zero values. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43123 - http://www.securityfocus.com/bid/29725 - https://www.exploit-db.com/exploits/5829 - http://www.shnews.de/change-log
CVE ID: CVE-2008-6665 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:58.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5824 - http://www.securityfocus.com/bid/29752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43119
CVE ID: CVE-2008-6666 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:59.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to (1) servlet/com.threeis.webta.H710selProject and (2) servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial report was incorrect, but the reason for this conclusion is unknown. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30588 - http://osvdb.org/46207 - http://www.securityfocus.com/bid/296
ainer: References: - http://secunia.com/advisories/30588 - http://osvdb.org/46207 - http://www.securityfocus.com/bid/29610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43056 - http://osvdb.org/46208 - http://www.securityfocus.com/archive/1/493193/100/0/threaded
CVE ID: CVE-2008-6667 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:42:00.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43431 - http://www.securityfocus.com/bid/29977
CVE ID: CVE-2008-6668 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:58.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) id parameter to comm.php and (2) var_filename parameter to viewrq.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43173 - http://www.securityfocus.com/bid/29804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43172
CVE ID: CVE-2008-6669 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:58.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5856 - http://www.securityfocus.com/bid/29804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43174
CVE ID: CVE-2008-6670 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:58.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet to UDP port 27960. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1903/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43249 - http://secunia.com/advisories/30823 - http://osvdb.org/46561 - http://www.securityfocus.com/bid/29889 - http://aluigi.org/poc/sunagex.zip - http://aluigi.altervista.org/adv/sunagex-adv.txt
CVE ID: CVE-2008-6671 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:58.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted join packet to UDP port 27960. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1903/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43249 - http://secunia.com/advisories/30823 - http://www.securityfocus.com/bid/29889 - http://aluigi.org/poc/sunagex.zip - http://osvdb.org/46562 - http://aluigi.altervista.org/adv/sunagex-adv.t
/bid/29889 - http://aluigi.org/poc/sunagex.zip - http://osvdb.org/46562 - http://aluigi.altervista.org/adv/sunagex-adv.txt
CVE ID: CVE-2008-6672 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:59.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service ("runtime error") via a crafted join packet to UDP port 27960, probably related to an invalid nickname command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1903/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43249 - http://secunia.com/advisories/30823 - http://www.securityfocus.com/bid/29889 - http://aluigi.org/poc/sunagex.zip - http://aluigi.altervista.org/
ories/30823 - http://www.securityfocus.com/bid/29889 - http://aluigi.org/poc/sunagex.zip - http://aluigi.altervista.org/adv/sunagex-adv.txt
CVE ID: CVE-2008-6673 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:59.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to (1) change the admin password via the cSaveAdminPW action; (2) modify site information, such as the contact address, via the saveAdmin; and (3) modify the site design via the saveDesign action. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/39/exploit.htm - http://www.bugreport.ir/index_39.htm - http://secunia.com/advisories/30501 - http://www.securi
eport.ir/39/exploit.htm - http://www.bugreport.ir/index_39.htm - http://secunia.com/advisories/30501 - http://www.securityfocus.com/bid/29524
CVE ID: CVE-2008-6674 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:59.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modified sEmail parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/39/exploit.htm - http://www.bugreport.ir/index_39.htm - http://secunia.com/advisories/30501 - http://www.securityfocus.com/bid/29524
CVE ID: CVE-2008-6675 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:59.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the close parameter to showThumb.aspx; (2) SB_redirect and (3) SB_feedback parameters in process_send.asp, as reachable through default.asp; (4) paramCode and (5) cColor parameters to picker.asp; and the (6) query string, (7) Referer header, and (8) X-FORWARDED-FOR header to rss.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/39/exploit.htm
der to rss.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/39/exploit.htm - http://osvdb.org/46221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42860 - http://www.bugreport.ir/index_39.htm - http://secunia.com/advisories/30501 - http://www.securityfocus.com/bid/29524