Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4458 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote attackers to execute arbitrary SQL commands via the cid parameter in a product action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44975 - http://www.securityfocus.com/archive/1/496186/100/0/threaded - http://secunia.com/advisories/31795 - http://packetstorm.linuxsecurity.com/0809-exploits/ephpb2b-sql.txt
CVE ID: CVE-2008-4459 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pick_users.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to execute arbitrary SQL commands via the uname_search parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44970 - http://www.securityfocus.com/bid/31063 - http://secunia.com/advisories/31782 - http://www.digitrustgroup.com/advisories/web-application-security-thyme.html
CVE ID: CVE-2008-4460 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the game_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6379 - http://www.securityfocus.com/bid/31033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44951
CVE ID: CVE-2008-4461 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44946 - https://www.exploit-db.com/exploits/6388 - http://secunia.com/advisories/31747 - http://z0rlu.blogspot.com/2008/09/vastal-i-tech-dating-zone-fage-sql.html
CVE ID: CVE-2008-4462 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31033 - https://www.exploit-db.com/exploits/6373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44956
CVE ID: CVE-2008-4463 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44952 - http://securityreason.com/securityalert/4358 - https://www.exploit-db.com/exploits/6378
CVE ID: CVE-2008-4464 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44949 - https://www.exploit-db.com/exploits/6380
CVE ID: CVE-2008-4465 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6376 - http://www.securityfocus.com/bid/31033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44953
CVE ID: CVE-2008-4466 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44948 - http://secunia.com/advisories/31718 - https://www.exploit-db.com/exploits/6382
CVE ID: CVE-2008-4467 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31033 - https://www.exploit-db.com/exploits/6374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44955
CVE ID: CVE-2008-4468 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44954 - http://www.securityfocus.com/bid/31033 - https://www.exploit-db.com/exploits/6375
CVE ID: CVE-2008-4469 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coder_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6381 - http://www.securityfocus.com/bid/31033 - http://secunia.com/advisories/31717 - http://securityreason.com/securityalert/4359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44950
CVE ID: CVE-2008-4470 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service (application crash) or execute arbitrary code via an M3U playlist file that contains a long absolute pathname. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4354 - https://www.exploit-db.com/exploits/6389 - http://www.vupen.com/english/advisories/2008/2516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44958 - http://www.securityfocus.com/bid/31042
CVE ID: CVE-2008-4471 State: PUBLISHED Published: 2008-10-07T18:27:00 Last Updated: 2024-08-07T10:17:09.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via "..\" sequences in the argument to the SaveAS method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6630 - http://securityreason.com/securityalert/4361 - http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.
30 - http://securityreason.com/securityalert/4361 - http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45519 - http://www.securityfocus.com/bid/31487 - http://www.vupen.com/english/advisories/2008/2704 - http://www.securityfocus.com/archive/1/496847/100/0/threaded - http://secunia.com/advisories/31989
CVE ID: CVE-2008-4472 State: PUBLISHED Published: 2008-10-07T18:27:00 Last Updated: 2024-08-07T10:17:09.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to execute arbitrary programs via the second argument to the ApplyPatch method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45521 - http://www.securityfocus.com/bid/31490 - http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=12452198&linkID=11705366 - https://www.
com/bid/31490 - http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=12452198&linkID=11705366 - https://www.exploit-db.com/exploits/6630 - http://images.autodesk.com/adsk/files/live_update_hotfix0.html - http://securityreason.com/securityalert/4361 - http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html - http://www.vupen.com/english/advisories/2008/2704 - http://www.securityfocus.com/archive/1/496847/100/0/threaded
CVE ID: CVE-2008-4473 State: PUBLISHED Published: 2008-10-17T18:00:00 Last Updated: 2024-08-07T10:17:09.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45914 - http://securitytracker.com/id?1021060 - http://www.securityfocus.com/bid/31769 - http://www.securityfocus.com/archive/1/497397/100/0/threaded - http://www.adobe.com/support/security/advisories/apsa08-09.html
/www.securityfocus.com/archive/1/497397/100/0/threaded - http://www.adobe.com/support/security/advisories/apsa08-09.html - http://www.vupen.com/english/advisories/2008/2837 - http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf - http://secunia.com/advisories/32246 - http://securityreason.com/securityalert/4429
CVE ID: CVE-2008-4474 State: PUBLISHED Published: 2008-10-07T21:00:00 Last Updated: 2024-08-07T10:17:09.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in (1) backup_radacct, (2) clean_radacct, (3) monthly_tot_stats, (4) tot_stats, and (5) truncate_radacct. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33151 - http://secunia.com/advisories/32170 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://www.sec
security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://www.securityfocus.com/bid/30901 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496389 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html - http://lists.debian.org/debian-devel/2008/08/msg00271.html - http://dev.gentoo.org/~rbu/security/debiantemp/freeradius-dialupadmin
CVE ID: CVE-2008-4475 State: PUBLISHED Published: 2008-10-07T21:00:00 Last Updated: 2024-08-07T10:17:09.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496464 - http://dev.gentoo.org/~rbu/security/debiantemp/ibackup - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45852 - http://lists.debian.org/
cgi-bin/bugreport.cgi?bug=496432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45852 - http://lists.debian.org/debian-devel/2008/08/msg00271.html
CVE ID: CVE-2008-4476 State: PUBLISHED Published: 2008-10-07T21:00:00 Last Updated: 2024-08-07T10:17:09.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa_aliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00312.html - http://bugs.debian.org/496405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44499 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https:
://exchange.xforce.ibmcloud.com/vulnerabilities/44499 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://www.securityfocus.com/bid/30727 - http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantemp/sympa - http://secunia.com/advisories/31458 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494969
CVE ID: CVE-2008-4477 State: PUBLISHED Published: 2008-10-07T22:00:00 Last Updated: 2024-08-07T10:17:09.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32183 - http://lists.debian.org/debian-devel/2008/08/msg00312.html - http://www.us.debian.org/security/2008/dsa-1648 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45738 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - h
https://exchange.xforce.ibmcloud.com/vulnerabilities/45738 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/mon - http://www.mandriva.com/security/advisories?name=MDVSA-2008:214 - http://www.securityfocus.com/bid/31597
CVE ID: CVE-2008-4478 State: PUBLISHED Published: 2008-10-14T22:00:00 Last Updated: 2024-08-07T10:17:09.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-08-065 - http://securityreason.com/securityalert/4406 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
visories/ZDI-08-065 - http://securityreason.com/securityalert/4406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45628 - http://www.securitytracker.com/id?1020989 - http://www.vupen.com/english/advisories/2008/2738 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html - http://secunia.com/advisories/32111 - http://www.zerodayinitiative.com/advisories/ZDI-08-063 - http://www.securityfocus.com/archive/1/497163/100/0/threaded - http://www.securityfocus.com/archive/1/497165/100/0/threaded - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId
ument/patchbuilder/readme_5037180.html - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000087&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001184&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 - http://www.securitytracker.com/id?1020990
CVE ID: CVE-2008-4479 State: PUBLISHED Published: 2008-10-14T22:00:00 Last Updated: 2024-08-07T10:17:09.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000086&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 - http://www.securitytracker.com/id?1020989 - http://www.vupen.com/english/advisories/200
66829&stateId=0%200%2078062953 - http://www.securitytracker.com/id?1020989 - http://www.vupen.com/english/advisories/2008/2738 - http://www.zerodayinitiative.com/advisories/ZDI-08-064 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html - http://www.securityfocus.com/archive/1/497164/100/0/threaded - http://secunia.com/advisories/32111 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html - http://securityreason.com/securityalert/4405
CVE ID: CVE-2008-4480 State: PUBLISHED Published: 2008-10-14T22:00:00 Last Updated: 2024-08-07T10:17:09.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3426981 - http://www.vupen.com/english/advisories/2008/2738 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuild
981 - http://www.vupen.com/english/advisories/2008/2738 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html - http://securityreason.com/securityalert/4404 - http://secunia.com/advisories/32111 - http://www.zerodayinitiative.com/advisories/ZDI-08-066/ - http://www.novell.com/support/viewContent.do?externalId=3477912 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html - http://www.securityfocus.com/archive/1/497169/100/0/threaded - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001183&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 - http://www.securitytracker.com/i
lId=7001183&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 - http://www.securitytracker.com/id?1020990
CVE ID: CVE-2008-4481 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redmine.org/wiki/redmine/Changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/43884 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000038.html - http://jvn.jp/en/jp/JVN00945448/index.html - http://www.securityfocus.com/bid/30241
CVE ID: CVE-2008-4482 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45596 - http://www.securityfocus.com/bid/31533 - http://xerces.apache.org/xerces-c/releases.html - http://secunia.com/advisories/32108 - http
curityfocus.com/bid/31533 - http://xerces.apache.org/xerces-c/releases.html - http://secunia.com/advisories/32108 - http://issues.apache.org/jira/browse/XERCESC-1051
CVE ID: CVE-2008-4483 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31516 - http://secunia.com/advisories/32058 - http://securityreason.com/securityalert/4366 - https://www.exploit-db.com/exploits/6645
CVE ID: CVE-2008-4484 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative access by setting the name parameter to "users," as demonstrated via index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496763/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45443 - http://securityreason.com/securityalert/4365 - https://www.exploit-db.com/exploits/6586 - http://www.securityfocus.com/bid/31430 - http://www.attrition.org/pipermail/vim/2008
/www.exploit-db.com/exploits/6586 - http://www.securityfocus.com/bid/31430 - http://www.attrition.org/pipermail/vim/2008-October/002083.html - http://secunia.com/advisories/32058
CVE ID: CVE-2008-4485 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45625 - http://marc.info/?l=bugtraq&m=122298544725313&w=2 - http://www.securityfocus.com/bid/31543 - http://secunia.com/advisories/32122 - http://www.securitytracker.com/id
3&w=2 - http://www.securityfocus.com/bid/31543 - http://secunia.com/advisories/32122 - http://www.securitytracker.com/id?1020979 - http://www.vupen.com/english/advisories/2008/2739 - http://securityreason.com/securityalert/4367 - http://marc.info/?l=bugtraq&m=122210321731789&w=2 - http://www.bluecoat.com/support/securityadvisories/icap_patience
CVE ID: CVE-2008-4486 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in SAC.php (SACphp), as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4368 - http://www.securityfocus.com/bid/31606 - http://secunia.com/advisories/32093 - http://www.vupen.com/english/advisories/2008/2754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45708 - https://www.expl