Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6010 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) mod, (2) page, or (3) lang parameter to index.php; or the (4) action or (5) folder parameter in a security request to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6631 - http://www.securityfocus.com/bid/31489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45569
CVE ID: CVE-2008-6011 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6631 - http://www.securityfocus.com/bid/31489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45568 - https://www.exploit-db.com/exploits/6634
CVE ID: CVE-2008-6012 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a viewEntry action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6639 - http://secunia.com/advisories/31915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45551 - http://www.securityfocus.com/bid/31503
CVE ID: CVE-2008-6013 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the (1) advanced search result and (2) service resource pages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45549 - http://www.openfreeway.org/download/change-log.html - http://www.securityfocus.com/bid/31508
CVE ID: CVE-2008-6014 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45552 - http://www.securityfocus.com/bid/31502
CVE ID: CVE-2008-6015 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) keywords and (2) cat parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44979
CVE ID: CVE-2008-6016 State: PUBLISHED Published: 2009-01-30T18:03:00 Last Updated: 2024-08-07T11:13:13.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48535
CVE ID: CVE-2008-6017 State: PUBLISHED Published: 2009-02-02T21:29:00 Last Updated: 2024-08-07T11:13:13.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32912 - http://secunia.com/advisories/33213 - https://www.exploit-db.com/exploits/7514
CVE ID: CVE-2008-6018 State: PUBLISHED Published: 2009-02-02T21:29:00 Last Updated: 2024-08-07T11:13:13.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in MyPHPSite, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7519 - http://secunia.com/advisories/33171 - http://www.securityfocus.com/bid/32919
CVE ID: CVE-2008-6019 State: PUBLISHED Published: 2009-02-02T21:29:00 Last Updated: 2024-08-07T11:13:13.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47467 - http://www.securityfocus.com/bid/32906
CVE ID: CVE-2008-6020 State: PUBLISHED Published: 2009-02-02T21:29:00 Last Updated: 2024-08-07T11:13:13.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "an exposed filter on CCK text fields." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/348321 - http://www.securityfocus.com/bid/32895 - http://secunia.com/advisories/33225 - http://osvdb.org/50795 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01024.html - http://secunia.com/advisories/3328
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01024.html - http://secunia.com/advisories/33289 - http://drupal.org/node/347831 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47454
CVE ID: CVE-2008-6021 State: PUBLISHED Published: 2009-02-02T21:29:00 Last Updated: 2024-08-07T11:13:13.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Attachmate Reflection for Secure IT UNIX Client and Server before 7.0 SP1 have unknown impact and attack vectors, aka "security vulnerabilities found by 3rd party analysis." Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/2374.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48536 - http://www.securityfocus.com/bid/30723
CVE ID: CVE-2008-6022 State: PUBLISHED Published: 2009-02-02T21:29:00 Last Updated: 2024-08-07T11:13:13.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the ugamela_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44513 - http://www.securityfocus.com/bid/30715
CVE ID: CVE-2008-6023 State: PUBLISHED Published: 2009-02-02T21:29:00 Last Updated: 2024-08-07T11:13:14.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the xnova_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48533 - http://www.vupen.com/english/advisories/2008/2412 - https://www.exploit-db.com/exploits/6254 - http://www.securityfocus.com/bid/30715
CVE ID: CVE-2008-6024 State: PUBLISHED Published: 2009-02-02T21:29:00 Last Updated: 2024-08-07T11:13:13.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv_37, when automountd is used, allows user-assisted remote attackers to cause a denial of service (unresponsive NFS filesystems) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240546-1 - http://secunia.com/advisories/31517 - http://www.securityfocus.com/bid/30753 - http://securitytracker.com/id?1020716 - http://www.vupen.com
advisories/31517 - http://www.securityfocus.com/bid/30753 - http://securitytracker.com/id?1020716 - http://www.vupen.com/english/advisories/2008/2415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44546
CVE ID: CVE-2008-6025 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the obj parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31953 - https://www.exploit-db.com/exploits/6530 - http://www.securityfocus.com/bid/31307 - http://www.vupen.com/english/advisories/2008/2655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45299
CVE ID: CVE-2008-6026 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45322 - http://secunia.com/advisories/31967 - http://packetstorm.linuxsecurity.com/0809-exploits/bluecube.txt
CVE ID: CVE-2008-6027 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) whl, (2) var_1, and (3) search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31968 - http://www.securityfocus.com/bid/31312 - http://www.securityfocus.com/archive/1/496582/100/0/threaded - http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 - https://exchange.xforce.ibmcloud.com/vulnerabil
readed - http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45321
CVE ID: CVE-2008-6028 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter in a subject action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45332 - https://www.exploit-db.com/exploits/6535 - http://www.securityfocus.com/bid/31324
CVE ID: CVE-2008-6029 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6527 - http://www.securityfocus.com/bid/31308
CVE ID: CVE-2008-6030 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in NetArtMedia Jobs Portal 1.3 allow remote attackers to execute arbitrary SQL commands via (1) the job parameter to index.php in the search module or (2) the news_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31937 - http://www.securityfocus.com/bid/31281 - https://www.exploit-db.com/exploits/6517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45272
CVE ID: CVE-2008-6031 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported that 2.34 is also vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6524 - http://www.securityfocus.com/bid/31305
CVE ID: CVE-2008-6032 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:14.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48534 - https://www.exploit-db.com/exploits/6529 - http://www.vupen.com/english/advisories/2008/2656
CVE ID: CVE-2008-6033 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31302 - https://www.exploit-db.com/exploits/6525
CVE ID: CVE-2008-6034 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:14.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the atkaction parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45331 - http://secunia.com/advisories/31973
CVE ID: CVE-2008-6035 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:14.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2-STABLE allows remote attackers to inject arbitrary web script or HTML via the atknodetype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0809-exploits/achievo-xss.txt - http://www.securityfocus.com/bid/31326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45344
CVE ID: CVE-2008-6036 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in main.inc.php in BaseBuilder 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mj_config[src_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31330 - http://www.vupen.com/english/advisories/2008/2653 - http://secunia.com/advisories/31947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45337 - https://www.exploit-db.com/exploits/6533
CVE ID: CVE-2008-6037 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:14.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6522 - http://secunia.com/advisories/31816 - http://www.securityfocus.com/bid/31283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45294
CVE ID: CVE-2008-6038 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dsp_editevent.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2647 - http://0x90.com.ar/Advisory/20080920-2.txt - http://www.securityfocus.com/bid/31304 - http://www.securityfocus.com/archive/1/496576/100/0/threaded
CVE ID: CVE-2008-6039 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:14.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45323 - http://www.securityfocus.com/archive/1/496582/100/0/threaded - http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 - http://www.securityfocus.com/bid/31315
CVE ID: CVE-2008-6040 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0809-exploits/arcadempro-sql.txt - http://www.vupen.com/english/advisories/2008/2700 - http://www.securityfocus.com/bid/31322 - http://secunia.com/advisories/31975 - https://secure.agaresmedia.com/forums/viewtopic.php?f
ecurityfocus.com/bid/31322 - http://secunia.com/advisories/31975 - https://secure.agaresmedia.com/forums/viewtopic.php?f=12&t=2032
CVE ID: CVE-2008-6041 State: PUBLISHED Published: 2009-02-03T11:00:00Z Last Updated: 2024-09-16T22:50:42.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Index.asp in Dataspade 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ViewName, (2) TableName, (3) OrderBy, and (4) FilterField parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31317 - http://pridels-team.blogspot.com/2008/09/dataspade-xss-vuln.html - http://secunia.com/advisories/31999
CVE ID: CVE-2008-6042 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the re_search module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45271 - http://secunia.com/advisories/31940 - https://www.exploit-db.com/exploits/6518 - http://www.securityfocus.com/bid/31280
CVE ID: CVE-2008-6043 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:13.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL commands via the (1) order_field and (2) order_type parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48484 - http://secunia.com/advisories/31981 - http://www.securityfocus.com/bid/31263 - http://www.securityfocus.com/archive/1/496533/100/0/threaded
CVE ID: CVE-2008-6044 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:14.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in advanced_search_result.php in xt:Commerce 3.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.majorsecurity.de/index_2.php?major_rls=major_rls54 - http://www.securityfocus.com/archive/1/496583/100/0/threaded - http://www.securityfocus.com/bid/31313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45340
CVE ID: CVE-2008-6045 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T11:13:14.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496588/100/0/threaded - http://www.majorsecurity.de/index_2.php?major_rls=major_rls54 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45341 - http://www.securityfocus.com/archive/1/496583/100/0/threaded - http://www.securityfocus.com/bid/31313
CVE ID: CVE-2008-6046 State: PUBLISHED Published: 2009-02-04T15:10:00Z Last Updated: 2024-09-16T22:40:20.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) opt_in_out.php.inc, (2) confirmation.php.inc, and (3) renewal.php.inc in mailinglist/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32903 - http://sourceforge.net/project/shownotes.php?release_id=647876 - http://secunia.com/advisories/33224
CVE ID: CVE-2008-6047 State: PUBLISHED Published: 2009-02-04T15:10:00Z Last Updated: 2024-09-17T02:05:48.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) subscribing and (2) unsubscribing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32903 - http://sourceforge.net/project/shownotes.php?release_id=647876 - http://secunia.com/advisories/33224
CVE ID: CVE-2008-6048 State: PUBLISHED Published: 2009-02-04T15:10:00 Last Updated: 2024-08-07T11:13:14.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50777 - http://tangocms.org/article/view/2.2.0-eagle-released%21 - http://secunia.com/advisories/33206