Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4155 State: PUBLISHED Published: 2010-11-03T19:00:00 Last Updated: 2024-08-07T03:34:37.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to (2) modules/news/archive.php, (3) modules/news/topics.php, and (4) modules/contact/index.php, different vectors than CVE-2007-1965. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62630 - http://www.ze
s: - http://www.securityfocus.com/bid/44169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62630 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4970.php - http://www.packetstormsecurity.com/1010-exploits/exv2-xss.txt
CVE ID: CVE-2010-4156 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T03:34:37.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0077 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html - http://secunia.com/advisories/42812 - http://www.redhat.com/support/errata/RHSA-2011-0196.html - http://m
/052836.html - http://secunia.com/advisories/42812 - http://www.redhat.com/support/errata/RHSA-2011-0196.html - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://pastie.org/1279428 - http://www.ubuntu.com/usn/USN-1042-1 - http://www.vupen.com/english/advisories/2011/0021 - http://www.php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/44727 - http://www.openwall.com/lists/oss-security/2010/11/08/13 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:225 - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html - http://www.vupen.com/english/advisories/2011/0020 - http://secunia.com/adviso
ackage-announce/2011-January/052845.html - http://www.vupen.com/english/advisories/2011/0020 - http://secunia.com/advisories/43189 - http://secunia.com/advisories/42135 - http://pastie.org/1279682 - http://www.openwall.com/lists/oss-security/2010/11/07/2
CVE ID: CVE-2010-4157 State: PUBLISHED Published: 2010-12-10T18:00:00 Last Updated: 2024-08-07T03:34:37.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://ns3.spinics.net/lists/linux-scsi/msg47361.html - https://bugzilla.redhat.com/show_bug.cgi?id=651147 - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/00
edhat.com/show_bug.cgi?id=651147 - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://openwall.com/lists/oss-security/2010/11/09/3 - http://secunia.com/advisories/42801 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f63ae56e4e97fb12053590e41a4fa59e7daa74a4 - http://l
kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f63ae56e4e97fb12053590e41a4fa59e7daa74a4 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://openwall.com/lists/oss-security/2010/11/09/1 - http://openwall.com/lists/oss-security/2010/11/09/4 - http://www.vupen.com/english/advisories/2011/0124 - http://openwall.com/lists/oss-security/2010/11/09/5 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.co
2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2010/3321 - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://secunia.com/advisories/42963 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://openwall.com/lists/oss-security/2010/11/10/12 - http://www.securityfocus.com/bid/44648 - http://www.vupen.com/english/advisories/2011/0375 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html
www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.1 - http://www.vupen.com/english/advisories/2011/0168 - http://secunia.com/advisories/42745 - http://secunia.com/advisories/43291
CVE ID: CVE-2010-4158 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:34:37.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http:
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2011/0124
es/42932 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2011/0124 - http://www.spinics.net/lists/netdev/msg146361.html - http://www.securityfocus.com/archive/1/514845 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2010/3321 - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://secunia.com/advisories/42963 - http://www.securityfocus.com/bid/44758 - http://www.vmwar
2.6/ChangeLog-2.6.36.2 - http://secunia.com/advisories/42963 - http://www.securityfocus.com/bid/44758 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://www.vupen.com/english/advisories/2011/0375 - http://secunia.com/advisories/42890 - https://bugzilla.redhat.com/show_bug.cgi?id=651698 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.vupen.com/english/advisories/2011/0168 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://secunia.com/advisories/42745 - http://
1/0168 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://secunia.com/advisories/42745 - http://secunia.com/advisories/43291 - http://www.securityfocus.com/archive/1/514705 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=57fe93b374a6b8711995c2d466c502af9f3a08bb - http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077321.html
CVE ID: CVE-2010-4159 State: PUBLISHED Published: 2010-11-17T15:00:00 Last Updated: 2024-08-07T03:34:37.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mono/mono/commit/8e890a3bf80a4620e417814dc14886b1bbd17625 - http://www.vupen.com/english/advisories/2010/3059 - http://lists.ximian.com/pipermail/mono-patches/2010-October/177900.html - http://marc.info/?l=oss-security&m=128941802415318&w=2 - http://www.mandriv
mail/mono-patches/2010-October/177900.html - http://marc.info/?l=oss-security&m=128941802415318&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:240 - http://www.mono-project.com/Vulnerabilities#Mono_Runtime_Insecure_Native_Library_Loading - http://secunia.com/advisories/42174 - https://bugzilla.novell.com/show_bug.cgi?id=641915 - http://www.securityfocus.com/bid/44810 - http://marc.info/?l=oss-security&m=128939912716499&w=2 - http://marc.info/?l=oss-security&m=128939873515821&w=2
CVE ID: CVE-2010-4160 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:34:37.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43056 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg
er: References: - http://secunia.com/advisories/43056 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://openwall.com/lists/oss-security/2010/11/24/6 - http://secunia.com/advisories/42932 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2011/0124 - http://www.spinics.net/lists/netdev/msg145673.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://openwall.com/lists/oss-security/2010/11/24/12 - https://bugzilla.redhat.com/show_bug.cgi?id=651892 - http://lists.opensuse.o
wall.com/lists/oss-security/2010/11/24/12 - https://bugzilla.redhat.com/show_bug.cgi?id=651892 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html - http://www.vupen.com/english/advisories/2011/0375 - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8acfe468b0384e834a303f08ebc4953d72fb690a - http://www.securityfocus.com/bid/44762 - http://openwall.com/lists/oss-security/2010/11/24/4 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://openwall.com/lists/oss-security/2010/11/10/5 - http://xorl.wordpress.com/2010/11/1
nounce/2011-02/msg00002.html - http://openwall.com/lists/oss-security/2010/11/10/5 - http://xorl.wordpress.com/2010/11/11/cve-2010-4160-linux-kernel-l2tp-integer-overflows/ - http://openwall.com/lists/oss-security/2010/11/24/5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=253eacc070b114c2ec1f81b067d2fed7305467b0 - http://secunia.com/advisories/43291 - http://openwall.com/lists/oss-security/2010/11/10/16 - http://www.vupen.com/english/advisories/2011/0213 - http://www.spinics.net/lists/netdev/msg145248.html
CVE ID: CVE-2010-4161 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:34:37.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (deadlock and system hang) by sending UDP traffic to a socket that has a crafted socket filter, a related issue to CVE-2010-4158. Additional Analyst Notes: - CVE Program Container: References: - http://www.spinics.net/lists/netdev/msg146404.html - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://w
tdev/msg146404.html - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64497 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.securityfocus.com/archive/1/514845 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - https://bugzilla.redhat.com/show_bug.cgi?id=651698 - https://bugzilla.redhat.com/show_bug.cgi?id=652534
CVE ID: CVE-2010-4162 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:34:37.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announ
.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://www.securityfocus.com/bid/44793 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2011/0124 - http://openwall.com/lists/oss-security/2010/11/10/18 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2010/3321 - http://openwall.com/l
suse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2010/3321 - http://openwall.com/lists/oss-security/2010/11/12/2 - http://www.vupen.com/english/advisories/2011/0298 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - https://bugzilla.redhat.com/show_bug.cgi?id=652529 - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb4644cac4a2797afc847e6c92736664d4b0ea34 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://secunia.com/advisories/42745
CVE ID: CVE-2010-4163 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:34:37.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://www.securityfocus.co
isories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://www.securityfocus.com/bid/44793 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9284bcf4e335e5f18a8bc7b26461c33ab60d0689 - http://openwall.com/lists/oss-security/2010/11/29/1 - http://www.vupen.com/english/advisories/2011/0124 - http://openwall.com/lists/oss-security/2010/11/10/18 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://openwall.com/lists/oss-s
/11/10/18 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://openwall.com/lists/oss-security/2010/11/12/2 - http://www.vupen.com/english/advisories/2011/0298 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - https://bugzilla.redhat.com/show_bug.cgi?id=652957
CVE ID: CVE-2010-4164 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:34:37.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of service (system crash) via malformed X.25 (1) X25_FAC_CLASS_A, (2) X25_FAC_CLASS_B, (3) X25_FAC_CLASS_C, or (4) X25_FAC_CLASS_D facility data, a different vulnerability than CVE-2010-3873. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/11/11/2 - http://lists.opensuse.org/opensuse-security-announc
References: - http://openwall.com/lists/oss-security/2010/11/11/2 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://www.vupen.com/english/advisories/2011/0124 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://openwall.com/lists/os
curity-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://openwall.com/lists/oss-security/2010/11/12/3 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://www.securityfocus.com/bid/45055 - http://www.vupen.com/english/advisories/2011/0375 - http://www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://secunia.com/advisories/43291 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ef41308f94dcbb3b7afc56cdef1c2ba53fa5d2f - http://marc.info/?l=linux-netdev&m=12895
orvalds/linux-2.6.git%3Ba=commit%3Bh=5ef41308f94dcbb3b7afc56cdef1c2ba53fa5d2f - http://marc.info/?l=linux-netdev&m=128951543005554&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=652517 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-4165 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:34:37.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://www.spinics.net/l
se.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://www.spinics.net/lists/netdev/msg146405.html - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://www.openwall.com/lists/oss-security/2010/11/12/4 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://www.osvdb.org/69241 - http://www.vupen.com/english/advisories/2011/0124 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/a
/2011/0124 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.securityfocus.com/bid/44830 - https://bugzilla.redhat.com/show_bug.cgi?id=652508 - http://www.spinics.net/lists/netdev/msg146495.html - http://www.openwall.com/lists/oss-security/2010/11/12/1 - http://www.vupen.com/english/advisories/2011/0012 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7a1abd08d52fdeddb3e9a5a33f2f15cc6a5674d2 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://securityreason.com/securityalert/8111 -
674d2 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://securityreason.com/securityalert/8111 - http://securityreason.com/securityalert/8123
CVE ID: CVE-2010-4166 State: PUBLISHED Published: 2011-01-18T17:00:00Z Last Updated: 2024-09-16T23:11:40.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_order parameter in a com_weblinks category action to index.php, (2) the filter_order_Dir parameter in a com_weblinks category action to index.php, or (3) the filter_order_Dir parameter in a com_messages action to administrator/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://yehg.net/lab/pr0js/advisories/joomla/core/1.5.21/sql_injection/sqli_%28filt
CVE Program Container: References: - http://yehg.net/lab/pr0js/advisories/joomla/core/1.5.21/sql_injection/sqli_%28filter_order%29_front.jpg - http://yehg.net/lab/pr0js/advisories/joomla/core/1.5.21/sql_injection/sqli_%28filter_order_Dir%29_front.jpg - http://openwall.com/lists/oss-security/2010/11/12/5 - http://archives.neohapsis.com/archives/fulldisclosure/2010-10/0514.html - http://developer.joomla.org/security/news/9-security/10-core-security/323-20101101-core-sqli-info-disclosurevulnerabilities.html - http://yehg.net/lab/pr0js/advisories/joomla/core/1.5.21/sql_injection/sqli_%28filter_order_Dir%29_back.jpg - http://secunia.com/advisories/42133 - http://openwall.com/lists/oss-security/2
on/sqli_%28filter_order_Dir%29_back.jpg - http://secunia.com/advisories/42133 - http://openwall.com/lists/oss-security/2010/11/12/6