Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-5200 State: PUBLISHED Published: 2012-09-23T17:00:00 Last Updated: 2024-08-07T00:30:46.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) list.php, (2) members.php, or (3) book.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/82508 - http://www.osvdb.org/82506 - http://www.osvdb.org/82507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72034 - http://www.exploit-db.com/exploits/18292 - http://www.securityfocus.com/bid/51211
CVE ID: CVE-2011-5201 State: PUBLISHED Published: 2012-09-23T17:00:00 Last Updated: 2024-08-07T00:30:46.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the (1) name and (2) msg parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72109 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0015.html - http://www.securityfocus.com/bid/51259 - http://code.google.com/p/tinyguestbook/issues/detail?id=3 - h
12-01/0015.html - http://www.securityfocus.com/bid/51259 - http://code.google.com/p/tinyguestbook/issues/detail?id=3 - http://secunia.com/advisories/47419 - http://www.osvdb.org/78128
CVE ID: CVE-2011-5202 State: PUBLISHED Published: 2012-10-01T20:00:00 Last Updated: 2024-08-07T00:30:46.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: BazisVirtualCDBus.sys in WinCDEmu 3.6 allows local users to cause a denial of service (system crash) via the unmount command to batchmnt.exe. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47760 - http://forum.sysprogs.org/viewtopic.php?f=3&t=1418 - http://www.securityfocus.com/bid/51658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72705
CVE ID: CVE-2011-5203 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-07T00:30:46.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2011-12/0475.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72036 - http://www.securityfocus.com/bid/51210 - http://osvdb.org/78069 - http://secunia.com/advisories/47318
rabilities/72036 - http://www.securityfocus.com/bid/51210 - http://osvdb.org/78069 - http://secunia.com/advisories/47318 - http://www.exploit-db.com/exploits/18293
CVE ID: CVE-2011-5204 State: PUBLISHED Published: 2012-10-04T17:00:00Z Last Updated: 2024-09-16T23:05:28.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading from the database. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2011-12/0475.html - http://secunia.com/advisories/47318 - http://www.exploit-db.com/exploits/18293
CVE ID: CVE-2011-5205 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-07T00:30:47.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in audl.php in Rapidleech 2.3 rev42 SVN r358, rev43 SVN r397, and earlier allows remote attackers to inject arbitrary web script or HTML via the links parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72071 - http://www.securityfocus.com/bid/51215 - http://secunia.com/advisories/47434 - http://packetstormsecurity.org/files/108239/rapidleech-xss.txt
CVE ID: CVE-2011-5206 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-07T00:30:46.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in notes.php in Rapidleech before 2.3 rev42 SVN r399 allows remote attackers to inject arbitrary web script or HTML via the notes parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72072 - http://secunia.com/advisories/47434 - http://code.google.com/p/rapidleech/source/detail?r=399 - http://code.google.com/p/rapidleech/source/diff?spec=svn399&r=399&format=side&path=/trunk/notes.php
CVE ID: CVE-2011-5207 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-07T00:30:46.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote attackers to inject arbitrary web script or HTML via the tcp_name_post_XXXXX parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/108272/wpcartpress-xss.txt - http://plugins.trac.wordpress.org/changeset/482746/thecartpress - http://secunia.com/advisories/47427 - http://www.securityfocus.com/bid/51216 - https:
rg/changeset/482746/thecartpress - http://secunia.com/advisories/47427 - http://www.securityfocus.com/bid/51216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72070
CVE ID: CVE-2011-5208 State: PUBLISHED Published: 2012-10-08T18:00:00Z Last Updated: 2024-09-16T19:10:57.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary files via a .. (dot dot) in the wpabs parameter to (1) app/options-view_log-iframe.php or (2) app/options-runnow-iframe.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/71242 - http://wordpress.org/extend/plugins/backwpup/changelog/ - http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0663.html - http://secunia.com/advisories/43565 - http:/
- http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0663.html - http://secunia.com/advisories/43565 - http://www.osvdb.org/71243
CVE ID: CVE-2011-5209 State: PUBLISHED Published: 2012-10-09T15:00:00 Last Updated: 2024-08-07T00:30:46.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web script or HTML via the term parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78107 - http://packetstormsecurity.org/files/108145/graphicclone-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/71971 - http://secunia.com/advisories/47372 - http://www.securityfocus.com/bid/51258
CVE ID: CVE-2011-5210 State: PUBLISHED Published: 2012-10-09T15:00:00 Last Updated: 2024-08-07T00:30:47.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the theme parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.autosectools.com/Advisories/Limny.3.0.0_Local.File.Inclusion_99.html - http://www.osvdb.org/70747 - http://secunia.com/advisories/43124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65083 - http://www.limny.org/releases/limny-3.0.2.7z
CVE ID: CVE-2011-5211 State: PUBLISHED Published: 2012-10-22T23:00:00Z Last Updated: 2024-09-16T17:15:23.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/17390 - http://secunia.com/advisories/44917 - http://epsilonlambda.wordpress.com/2011/06/11/subrion-cms-multiple-vulnerabilities/
CVE ID: CVE-2011-5212 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-07T00:30:46.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in Subrion CMS 2.0.4 allows remote attackers to execute arbitrary SQL commands via the (1) user name or (2) password field. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/72890 - http://www.exploit-db.com/exploits/17390 - http://secunia.com/advisories/44917 - http://www.securityfocus.com/bid/48224 - http://epsilonlambda.wordpress.com/2011/06/11/subrion-cms-multiple-vulnerabilities/
CVE ID: CVE-2011-5213 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id parameter to modules/Documents/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77734 - http://osvdb.org/77733 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_browser_crm.html - https://exchange.xforce.ibmclou
/77733 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_browser_crm.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71828 - http://osvdb.org/77735 - http://secunia.com/advisories/47217
CVE ID: CVE-2011-5214 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) modules/admin/admin_module_index.php, or (3) modules/calendar/customise_calendar_times.php; login[] parameter to (4) index.php or (5) pub/clients.php; or framed parameter to (6) licence/index.php or (7) licence/view.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77728 - http://osvdb.org/77731 - http://
ditional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77728 - http://osvdb.org/77731 - http://osvdb.org/77729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71827 - http://osvdb.org/77730 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_browser_crm.html - http://osvdb.org/77732 - http://secunia.com/advisories/47217
CVE ID: CVE-2011-5215 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71876 - http://secunia.com/advisories/47287 - http://packetstormsecurity.org/files/107970/videoportalneu-sql.txt - http://osvdb.org/77946
CVE ID: CVE-2011-5216 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ajax.php in SCORM Cloud For WordPress plugin before 1.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the active parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47198 - http://plugins.trac.wordpress.org/changeset/435356/scormcloud - https://exchange.xforce.ibmcloud.com/vulnerabilities/71788 - http://wordpress.org/extend/plugins/scormcloud
scormcloud - https://exchange.xforce.ibmcloud.com/vulnerabilities/71788 - http://wordpress.org/extend/plugins/scormcloud/changelog/ - http://www.osvdb.org/77679
CVE ID: CVE-2011-5217 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-55 Japanese and before 08-51 English allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71832 - http://secunia.com/advisories/47221 - http://osvdb.org/77739 - http://www.securitytracker.com/id?1026427 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-026
http://www.securitytracker.com/id?1026427 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-026/index.html
CVE ID: CVE-2011-5218 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51110 - http://osvdb.org/77944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71879 - http://secunia.com/advisories/47261 - http://www.exploit-db.com/exploits/18250
CVE ID: CVE-2011-5219 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77939 - http://secunia.com/advisories/47262 - http://www.exploit-db.com/exploits/18248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71862
CVE ID: CVE-2011-5220 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/default/Admin/Login.html in PHP-SCMS 1.6.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77692 - http://www.rul3z.de/advisories/SSCHADV2011-035.txt - http://www.securityfocus.com/bid/51062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71829 - http://secunia.com/advisories/46766
CVE ID: CVE-2011-5221 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to (1) comp.php, (2) diff.php, or (3) revision.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51109 - http://websvn.tigris.org/issues/show_bug.cgi?id=275 - http://osvdb.org/77942 - http://st2tea.blogspot.com/2011/12/websvn-cross-site-scripting.html - http://www.securitytracker.com/id?102
.org/77942 - http://st2tea.blogspot.com/2011/12/websvn-cross-site-scripting.html - http://www.securitytracker.com/id?1026438 - http://secunia.com/advisories/47288 - http://osvdb.org/77941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71888 - http://osvdb.org/77943
CVE ID: CVE-2011-5222 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rub2_w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the rub parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/107971/flirtportal-sql.txt - http://www.securityfocus.com/bid/51106 - http://osvdb.org/77945 - http://secunia.com/advisories/47290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71875
CVE ID: CVE-2011-5223 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.cacti.net/view.php?id=2062 - http://secunia.com/advisories/47195 - http://forums.cacti.net/viewtopic.php?f=4&t=45871 - http://forums.cacti.net/viewtopic.php?f=21&t=44116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71792 - http://www.securityfocus.com/bid/51048
CVE ID: CVE-2011-5224 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71858 - http://www.securityfocus.com/bid/51089 - http://wordpress.org/extend/plugins/wordpress-sentinel/changelog/ - http://osvdb.org/77779 - http://www.boiteaweb.fr/wordpress-sentinel-v1-0-0-3104.html - http://plugins.trac.wordpress.org/changeset?reponame=&ne
- http://www.boiteaweb.fr/wordpress-sentinel-v1-0-0-3104.html - http://plugins.trac.wordpress.org/changeset?reponame=&new=475315%40wordpress-sentinel&old=474998%40wordpress-sentinel
CVE ID: CVE-2011-5225 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:47.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51089 - http://wordpress.org/extend/plugins/wordpress-sentinel/changelog/ - http://www.boiteaweb.fr/wordpress-sentinel-v1-0-0-3104.html - http://plugins.trac.wordpress.org/changeset?reponame=&new=475315%40wordpress-sentinel&old=474998%40wor
1-0-0-3104.html - http://plugins.trac.wordpress.org/changeset?reponame=&new=475315%40wordpress-sentinel&old=474998%40wordpress-sentinel - https://exchange.xforce.ibmcloud.com/vulnerabilities/71854 - http://osvdb.org/77777 - http://secunia.com/advisories/47020
CVE ID: CVE-2011-5226 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:47.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51089 - http://wordpress.org/extend/plugins/wordpress-sentinel/changelog/ - http://osvdb.org/77778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71857 - http://www.boiteaweb.fr/wordpress-sentinel-v1
b.org/77778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71857 - http://www.boiteaweb.fr/wordpress-sentinel-v1-0-0-3104.html - http://plugins.trac.wordpress.org/changeset?reponame=&new=475315%40wordpress-sentinel&old=474998%40wordpress-sentinel - http://secunia.com/advisories/47020
CVE ID: CVE-2011-5227 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71889 - https://cp-enterasys.kb.net/utility/downloadArticle.aspx?aid=14206 - https://cp-enterasys.kb.net/display/4n/kb/article.aspx?aid=14206&n=3&tab=search&bt=4n&s= - http://www.securit
id=14206 - https://cp-enterasys.kb.net/display/4n/kb/article.aspx?aid=14206&n=3&tab=search&bt=4n&s= - http://www.securitytracker.com/id?1026440 - http://secunia.com/advisories/47263 - http://www.zerodayinitiative.com/advisories/ZDI-11-350/
CVE ID: CVE-2011-5228 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:47.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51105 - http://www.vulnerability-lab.com/get_content.php?id=362 - http://www.exploit-db.com/exploits/18249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71881
CVE ID: CVE-2011-5229 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71880 - http://www.securityfocus.com/bid/51105 - http://www.vulnerability-lab.com/get_content.php?id=362 - http://www.exploit-db.com/exploits/18249
CVE ID: CVE-2011-5230 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to sys/login/index or (2) memberLoginName parameter to sys/login/member. Additional Analyst Notes: - CVE Program Container: References: - http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-06.txt - http://osvdb.org/77736 - https://exchange.xforce.ibmcloud.com/vulnerabil
tem/files/advisories/INFOSERVE-ADV2011-06.txt - http://osvdb.org/77736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71843 - http://secunia.com/advisories/46881 - http://www.exploit-db.com/exploits/18246
CVE ID: CVE-2011-5231 State: REJECTED Published: 2012-10-25T17:00:00 Last Updated: 2012-11-01T09:00:00 Description: No description available.
CVE ID: CVE-2011-5232 State: REJECTED Published: 2012-10-25T17:00:00 Last Updated: 2012-11-06T10:00:00 Description: No description available.
CVE ID: CVE-2011-5233 State: PUBLISHED Published: 2012-10-25T17:00:00 Last Updated: 2024-08-07T00:30:46.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows Per Strip" and "Samples Per Pixel" values in a TIFF image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/77957 - http://www.exploit-db.com/exploits/18257 - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=30&Itemid=30 - http://secunia.com/advisories/47065 - http://www.irfanview.com/history_old.htm - https://exchange.xforce.ibmcloud.com/