Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5790 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to misinterpretation of a certain TRUE value. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/79981
CVE ID: CVE-2012-5791 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79980 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5792 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79979 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5793 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79978 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5794 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79957 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5795 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79956 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5796 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79955 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5797 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79954 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5798 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-17T02:06:49.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5799 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-17T02:57:15.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP fsockopen function. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5800 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eBay module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/79951
CVE ID: CVE-2012-5801 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-16T23:31:26.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP fsockopen function. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5802 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79949 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5803 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Authorize.Net module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/79948
CVE ID: CVE-2012-5804 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CyberSource module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79947 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5805 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-16T20:02:18.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than CVE-2012-5806. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5806 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-16T20:17:39.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP fsockopen function, a different vulnerability than CVE-2012-5805. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5807 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-16T22:03:07.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Authorize.Net eCheck module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5808 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-16T22:09:22.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LinkPoint module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5809 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-17T01:30:35.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Groupon Redemptions application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5810 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chase mobile banking application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to overriding the default X509TrustManager. NOTE: this vulnerability was fixed in the summer of 2012, but the version number was not changed or is not known. Additional Analyst Notes: - CVE Program Container: References: - https:/
version number was not changed or is not known. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/pub?id=1roBIeSJsYq3Ntpf6N0PIeeAAvu4ddn7mGo6Qb7aL7ew - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5811 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-17T03:14:29.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Breezy application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5812 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACRA library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79939 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5813 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Android_Pusher library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/79938
CVE ID: CVE-2012-5814 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/79937
CVE ID: CVE-2012-5815 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Rackspace app 2.1.5 for iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79936 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5816 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79935 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5817 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/79934
CVE ID: CVE-2012-5818 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: ElephantDrive does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79933 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5819 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:14:16.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: FilesAnywhere does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79932 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5820 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:21:26.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: The developer-account sample code in Google AdMob does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79931 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5821 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:21:26.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0351 - http://www.ubuntu.com/usn/USN-1642-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79930 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:1
tps://exchange.xforce.ibmcloud.com/vulnerabilities/79930 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:101 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5822 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:21:26.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python urllib2 library. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79929 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5823 State: PUBLISHED Published: 2012-11-04T22:00:00Z Last Updated: 2024-09-17T03:08:18.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP fsockopen function. Additional Analyst Notes: - CVE Program Container: References: - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5824 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:21:26.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than CVE-2009-4831. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79915 - http://secunia.com/advisories/51190 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf - http://ww
ulnerabilities/79915 - http://secunia.com/advisories/51190 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf - http://www.securityfocus.com/bid/56454
CVE ID: CVE-2012-5825 State: PUBLISHED Published: 2012-11-04T22:00:00 Last Updated: 2024-08-06T21:21:27.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79831 - http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
CVE ID: CVE-2012-5827 State: PUBLISHED Published: 2012-11-11T11:00:00 Last Updated: 2024-08-06T21:21:27.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection." Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/543-20121101-core-clickjacking.html - http://secunia.com/advisories/51187 - http://www.securitytracker.com/id?1027744 - http://developer.joomla.org/security/news/544-20121102-core-clickjacking.html - http://www.securityfocus.com/bid/56397 - https://exchange.xf
mla.org/security/news/544-20121102-core-clickjacking.html - http://www.securityfocus.com/bid/56397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79925