Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6940 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46587 - http://www.securityfocus.com/bid/32283 - https://www.exploit-db.com/exploits/7107 - http://www.vupen.com/english/advisories/2008/3143 - http://osvdb.org
/32283 - https://www.exploit-db.com/exploits/7107 - http://www.vupen.com/english/advisories/2008/3143 - http://osvdb.org/49839
CVE ID: CVE-2008-6941 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36166 - https://www.exploit-db.com/exploits/7107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52448
CVE ID: CVE-2008-6942 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46609 - http://secunia.com/advisories/32690 - http://osvdb.org/499
https://exchange.xforce.ibmcloud.com/vulnerabilities/46609 - http://secunia.com/advisories/32690 - http://osvdb.org/49960 - http://www.securityfocus.com/bid/32293
CVE ID: CVE-2008-6943 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing it via a direct request to the file in pictures/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46607 - http://secunia.com/advisories/32690 - http://osvdb.org/49960 - http://www.securityfocus.com/bid/32293 - https://www.exploit-db.com/explo
om/advisories/32690 - http://osvdb.org/49960 - http://www.securityfocus.com/bid/32293 - https://www.exploit-db.com/exploits/7112
CVE ID: CVE-2008-6944 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in cars_images/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32690 - http://osvdb.org/49960 - https://www.exploit-db.com/exploits/7111 - http://www.securityfocus.com/bid/32293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
it-db.com/exploits/7111 - http://www.securityfocus.com/bid/32293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46608
CVE ID: CVE-2008-6945 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mv_order_item CGI variable parameter in Core, (2) the country-select widget, or (3) possibly the value specifier when used in the UserTag feature. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46598 - http://www.icdevgroup.o
tp://secunia.com/advisories/32658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46598 - http://www.icdevgroup.org/i/dev/news?id=ssEkj9j8&mv_arg=00030&mv_pc=96 - http://ftp.icdevgroup.org/interchange/5.7/WHATSNEW - https://exchange.xforce.ibmcloud.com/vulnerabilities/46599 - http://osvdb.org/49853 - http://www.securityfocus.com/bid/32297 - http://osvdb.org/49852
CVE ID: CVE-2008-6946 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not properly handled when the administrator performs an editform action, related to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46496 - https://www.exploit-db.com/exploits/7076 - http://www.securityfocus.com/archive/1/498186/100/0/threaded - http://www.secu
ttps://www.exploit-db.com/exploits/7076 - http://www.securityfocus.com/archive/1/498186/100/0/threaded - http://www.securityfocus.com/bid/32229
CVE ID: CVE-2008-6947 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via unspecified vectors associated with the added mode in a users action to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7076 - http://www.securityfocus.com/archive/1/498186/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46497 - http://www.securityfocus.com/bid/32229
CVE ID: CVE-2008-6948 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and using a text/plain MIME type, then accessing it via a direct request to the file in files/, related to (1) the showproject action in managefile.php or (2) the Messages feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7076 - http://www.securityfocus.com/archive/1/498186/100/0/threaded - http://www.s
- https://www.exploit-db.com/exploits/7076 - http://www.securityfocus.com/archive/1/498186/100/0/threaded - http://www.securityfocus.com/bid/32229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46498
CVE ID: CVE-2008-6949 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the authentication of administrators for requests that (1) submit or edit a new project, or (2) upload files to a project, or (3) attach files to messages via unknown vectors. NOTE: these issues can be leveraged with other vulnerabilities to create remote attack vectors that do not require authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7076 - http:
ation. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7076 - http://www.securityfocus.com/archive/1/498186/100/0/threaded
CVE ID: CVE-2008-6950 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46637 - http://www.securityfocus.com/bid/32299 - https://www.exploit-db.com/exploits/7120
CVE ID: CVE-2008-6951 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46802 - https://www.exploit-db.com/exploits/7203 - http://secunia.com/advisories/32787 - http://www.securityfocus.com/bid/32439
CVE ID: CVE-2008-6952 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46738 - http://www.securityfocus.com/bid/32364 - http://secunia.com/advisories/32787 - http://www.vupen.com/english/advisories/2008/3216 - http://osvdb.org/49963
CVE ID: CVE-2008-6953 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long oovoo: URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7090 - http://secunia.com/advisories/32698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46549 - http://www.vupen.com/english/advisories/2008/3124 - http://archives.neohapsis.com/archives/bugtraq/2008-11/0082.
46549 - http://www.vupen.com/english/advisories/2008/3124 - http://archives.neohapsis.com/archives/bugtraq/2008-11/0082.html - http://www.securityfocus.com/bid/32251 - http://osvdb.org/49791 - http://www.securityfocus.com/archive/1/498235/100/0/threaded - http://retrogod.altervista.org/9sg_oovoo_url_poc.html
CVE ID: CVE-2008-6954 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00462.html - http://osvdb.org/50291 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00485.html - http://secunia.com/advisories/32804 - http://secunia.com/adv
hives/fedora-package-announce/2008-November/msg00485.html - http://secunia.com/advisories/32804 - http://secunia.com/advisories/32737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46625 - http://www.securityfocus.com/bid/32317 - http://freshmeat.net/projects/cobbler/releases/288374
CVE ID: CVE-2008-6955 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7136 - http://www.securityfocus.com/bid/32324 - http://secunia.com/advisories/32751 - http://osvdb.org/49886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46647
CVE ID: CVE-2008-6956 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7136 - http://secunia.com/advisories/32751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46658 - ht
om/exploits/7136 - http://secunia.com/advisories/32751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46658 - http://osvdb.org/49887
CVE ID: CVE-2008-6957 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7185 - http://secunia.com/advisories/32731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46785 - http://www.discuz.net/archiver/?tid-1112426.html - http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php
es/46785 - http://www.discuz.net/archiver/?tid-1112426.html - http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm - http://www.securityfocus.com/bid/32424
CVE ID: CVE-2008-6958 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32303 - http://osvdb.org/50202 - https://www.exploit-db.com/exploits/7119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46644 - http://secunia.com/advisories/32731 - http://www.80vul.com/dzvul/sodb/13/dz-exp-sodb-2008-13_php.htm - http://www.discuz.net/archiver/?tid-1112426.
es/32731 - http://www.80vul.com/dzvul/sodb/13/dz-exp-sodb-2008-13_php.htm - http://www.discuz.net/archiver/?tid-1112426.html
CVE ID: CVE-2008-6959 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the Chilkat Socket ActiveX control (ChilkatSocket.ChilkatSocket.1) in ChilkatSocket.dll 2.3.1.1 allows remote attackers to overwrite arbitrary files via the SaveLastError method. NOTE: this might be related to CVE-2008-1647. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46657 - http://secunia.com/advisories/32738 - https://www.exploit-db.com/exploits/7142 - http://www.securityfocus.com/bid/32333
CVE ID: CVE-2008-6960 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7074 - http://www.securityfocus.com/bid/32227 - http://secunia.com/advisories/32537 - http://www.vupen.com/english/advisories/2008/3062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
ories/32537 - http://www.vupen.com/english/advisories/2008/3062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46489 - http://osvdb.org/49797
CVE ID: CVE-2008-6961 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46734 - https://bugzilla.mozilla.org/show_bug.cgi?id=458883 - http://www.
//exchange.xforce.ibmcloud.com/vulnerabilities/46734 - https://bugzilla.mozilla.org/show_bug.cgi?id=458883 - http://www.mozilla.org/security/announce/2008/mfsa2008-59.html - http://secunia.com/advisories/32715 - http://www.securitytracker.com/id?1021247 - http://secunia.com/advisories/32714
CVE ID: CVE-2008-6962 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that overwrites a kernel pointer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46567 - http://www.vupen.com/english/VUPEN-Security-Advisory-20081112.txt - http://www.vupen.com/english/advisories/2008/3130 - http://www.securityfocus.com/bid/32269
CVE ID: CVE-2008-6963 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32732 - http://osvdb.org/49868 - https://www.exploit-db.com/exploits/7118 - http://www.securityfocus.com/bid/32302
CVE ID: CVE-2008-6964 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46640 - http://www.securityfocus.com/bid/32309
CVE ID: CVE-2008-6965 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to (1) site.php, (2) auction.php, (3) mail.php, (4) fee_setting.php, (5) earnings.php, (6) insertion_fee_settings.php, (7) custom_category.php, (8) subcategory.php, (9) category.php, (10) report.php, (11) store_manager.php, and (12) choose_sell_format.php in admin/, and possibly other vectors. Addi
hp, (10) report.php, (11) store_manager.php, and (12) choose_sell_format.php in admin/, and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46528 - https://www.exploit-db.com/exploits/7087 - http://www.securityfocus.com/bid/32243
CVE ID: CVE-2008-6966 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46528 - https://www.exploit-db.com/exploits/7087 - http://www.securityfocus.com/bid/32243
CVE ID: CVE-2008-6967 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in WorldClient in Alt-N MDaemon before 10.02 have unknown impact and attack vectors, probably related to cross-site scripting (XSS) and WorldClient DLL 10.0.1, a different vulnerability than CVE-2008-6893. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3206 - http://secunia.com/advisories/32142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46688 - http://files.altn.com/MDaemon/Release/RelNotes_en.txt - http://osvdb.org/
ge.xforce.ibmcloud.com/vulnerabilities/46688 - http://files.altn.com/MDaemon/Release/RelNotes_en.txt - http://osvdb.org/50011 - http://www.securityfocus.com/bid/32355
CVE ID: CVE-2008-6968 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31062 - http://www.digitrustgroup.com/advisories/web-application-security-pligg - https://exchange.xforce.ibmcloud.com/vulnerabilities/45086
CVE ID: CVE-2008-6969 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in checkout.php in Avactis Shopping Cart 1.8.0 and 1.8.1 allow remote attackers to inject arbitrary web script or HTML via the (1) step_id and (2) CHECKOUT_CZ_BLOWFISH_KEY parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31768 - http://www.avactis.com/forums/index.php?showtopic=3577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44929 - http://osvdb.org/47946 - http://holisticinfosec.org/content/view/81/45/ - h
.xforce.ibmcloud.com/vulnerabilities/44929 - http://osvdb.org/47946 - http://holisticinfosec.org/content/view/81/45/ - http://www.securityfocus.com/bid/31054
CVE ID: CVE-2008-6970 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T11:49:02.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44976 - http://www.ubbcentral.com/forums/ubbthreads.php/topics/216722/ - http://osvdb.org/47954 - http://www.securityfocus.com/bid/31074 - http://www.gulftech.org/?node=research&article_id=00130-09082008 - http://secunia.com/advisories/31804