Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3189 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-17T02:51:58.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2443 - http://packetstormsecurity.org/0908-exploits/digiozgb-xss.txt - http://secunia.com/advisories/36489
CVE ID: CVE-2009-3190 State: PUBLISHED Published: 2009-09-15T21:00:00 Last Updated: 2024-08-07T06:14:56.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to list.php and (2) cat parameter to rss.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9531 - http://www.vupen.com/english/advisories/2009/2434
CVE ID: CVE-2009-3191 State: PUBLISHED Published: 2009-09-15T21:00:00 Last Updated: 2024-08-07T06:14:56.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary web script or HTML via the cat parameter to (1) rss.php and (2) opml.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9531 - http://www.vupen.com/english/advisories/2009/2434
CVE ID: CVE-2009-3192 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-16T16:42:39.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in LinkorCMS 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the searchstr parameter in a search action; or the (2) nikname, (3) realname, (4) homepage, or (5) city parameter in a registration action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36487 - http://packetstormsecurity.org/0908-exploits/linkorcms-xss.txt
CVE ID: CVE-2009-3193 State: PUBLISHED Published: 2009-09-15T21:00:00 Last Updated: 2024-08-07T06:14:56.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a project action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9534
CVE ID: CVE-2009-3194 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-17T02:32:58.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0908-exploits/searchfeed-xss.txt - http://www.vupen.com/english/advisories/2009/2439 - http://secunia.com/advisories/36482
CVE ID: CVE-2009-3195 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-17T01:06:08.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2444 - http://secunia.com/advisories/36490 - http://packetstormsecurity.org/0908-exploits/auctionrsscs-xss.txt
CVE ID: CVE-2009-3196 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-16T16:18:11.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2440 - http://packetstormsecurity.org/0908-exploits/phpvideoyoutube-xss.txt - http://secunia.com/advisories/36483
CVE ID: CVE-2009-3197 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-17T01:46:08.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2441 - http://secunia.com/advisories/36484 - http://packetstormsecurity.org/0908-exploits/phpcalsearch-xss.txt
CVE ID: CVE-2009-3198 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-17T03:28:39.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36491 - http://packetstormsecurity.org/0908-exploits/ams-xss.txt - http://www.vupen.com/english/advisories/2009/2445
CVE ID: CVE-2009-3199 State: PUBLISHED Published: 2009-09-15T21:00:00 Last Updated: 2024-08-07T06:14:56.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for system_admin/admin.ucf. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52724
CVE ID: CVE-2009-3200 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:14:56.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command. Additional Analyst Notes: - CVE Program Container: References: - http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt - http://secunia.com/advis
ences: - http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt - http://secunia.com/advisories/36793 - http://forum.qnap.com/viewtopic.php?f=12&t=12104&start=10#p63341 - http://forum.qnap.com/viewtopic.php?f=11&t=11214&start=20#p63346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53391 - http://www.securityfocus.com/archive/1/506607/100/0/threaded - http://www.securityfocus.com/bid/36467 - http://www.securitytracker.com/id?1022916
CVE ID: CVE-2009-3201 State: PUBLISHED Published: 2009-09-15T23:00:00 Last Updated: 2024-08-07T06:14:56.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service (application crash) via a MIDI file (.mid) with a malformed header, which triggers a buffer overflow, a different vulnerability than CVE-2007-4940. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9620 - http://www.securityfocus.com/bid/36333
CVE ID: CVE-2009-3202 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52611 - http://secunia.com/advisories/36407 - http://packetstormsecurity.org/0908-exploits/uloki-xss.txt - http://osvdb.org/57176
CVE ID: CVE-2009-3203 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36369 - http://osvdb.org/57159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52527 - http://packetstormsecurity.org/0908-exploits/ajauctionoopd2-sql.txt
CVE ID: CVE-2009-3204 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) demo.php and (2) forum.php, and the PATH_INFO to (3) include_forum.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57177 - http://osvdb.org/57178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52613 - http://secunia.com/advisories/36409 - http://packetstormsecurity.org/0908-exploits/stivaforum-xss.txt
CVE ID: CVE-2009-3205 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_product action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52547 - http://packetstormsecurity.org/0908-exploits/cbauthority-sql.txt - http://secunia.com/advisories/36345 - http://osvdb.org/57161
CVE ID: CVE-2009-3206 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, allow remote authenticated users, with "administer imagecache" permissions, to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52594 - http://drupal.org/node/554084 - http://secunia.com/advisories/36412
CVE ID: CVE-2009-3207 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, when the private file system is used, does not properly perform access control for derivative images, which allows remote attackers to view arbitrary images via a request that specifies an image's filename. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/554086 - http://drupal.org/node/554084 - http://drupal.org/node/505904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52595 - http://sec
rg/node/554084 - http://drupal.org/node/505904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52595 - http://secunia.com/advisories/36412 - http://drupal.org/node/554090
CVE ID: CVE-2009-3208 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and (2) year parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52550 - http://packetstormsecurity.org/0908-exploits/phpfreebb-sql.txt
CVE ID: CVE-2009-3209 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in remove.php in PHP eMail Manager 3.3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52548 - http://osvdb.org/57171 - http://packetstormsecurity.org/0908-exploits/phpem-sql.txt - http://secunia.com/advisories/36346
CVE ID: CVE-2009-3210 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/57192 - http://drupal.org/node/554326 - http://drupal.org/node/554448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52593 - http://secunia.com/advisories/36395 - htt
org/node/554448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52593 - http://secunia.com/advisories/36395 - http://drupal.org/node/554328
CVE ID: CVE-2009-3211 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the options[style_dir] parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52555 - http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt
CVE ID: CVE-2009-3212 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52559 - http://packetstormsecurity.org/0908-exploits/infinity-disclose.txt
CVE ID: CVE-2009-3213 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:14:56.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in broid 1.0 Beta 3a allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .mp3 file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52532 - http://packetstormsecurity.org/0908-exploits/broid-overflow.txt
CVE ID: CVE-2009-3214 State: PUBLISHED Published: 2009-09-16T17:00:00 Last Updated: 2024-08-07T06:22:23.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/505957/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52606 - http://blog.bkis.com/?p=737 - http://secunia.com/advisories/36357 - http://osvdb.org/57226
CVE ID: CVE-2009-3215 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/ - http://www.exploit-db.com/exploits/9276 - http://secunia.com/advisories/36009 - http://www.securityfocus.com/archive/1/505266/100/0/threaded - http://www.securityfocus.com/
unia.com/advisories/36009 - http://www.securityfocus.com/archive/1/505266/100/0/threaded - http://www.securityfocus.com/bid/35810
CVE ID: CVE-2009-3216 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the show parameter to the admin module, reachable through index.php; or (2) the module parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36015 - http://www.exploit-db.com/exploits/9266
CVE ID: CVE-2009-3217 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9266
CVE ID: CVE-2009-3218 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in control/login.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51980 - http://osvdb.org/56338 - http://secunia.com/advisories/35955
CVE ID: CVE-2009-3219 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56336 - http://www.exploit-db.com/exploits/9237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51979 - http://secunia.com/advisories/35955
CVE ID: CVE-2009-3220 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/505250/100/0/threaded - http://www.securityfocus.com/bid/35811
CVE ID: CVE-2009-3221 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51873 - http://secunia.com/advisories/35867 - http://www.vupen.com/english/advisories/2009/1963 - http://packetstormsecurity.org/0907-exploits/alp-overflow.txt - http://www.osvdb.org/56047
CVE ID: CVE-2009-3222 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in FreeWebScriptz Honest Traffic (FWSHT) 1.x allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51821 - https://security-shell.ws/showthread.php?t=38085 - http://www.osvdb.org/56036 - http://secunia.com/advisories/35887 - http://packetstormsecurity.org/0907-exploits/honesttraffic-xss.txt
CVE ID: CVE-2009-3223 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote authenticated users to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9271 - http://www.vupen.com/english/advisories/2009/2028 - http://secunia.com/advisories/35975
CVE ID: CVE-2009-3224 State: PUBLISHED Published: 2009-09-16T19:00:00 Last Updated: 2024-08-07T06:22:23.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9270 - http://secunia.com/advisories/35973 - http://www.vupen.com/english/advisories/2009/2027
CVE ID: CVE-2009-3225 State: PUBLISHED Published: 2009-09-16T19:00:00Z Last Updated: 2024-09-17T04:14:12.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter in a browse action to index.php or (2) the addr parameter to gmap.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/almondclassifieds-xss.txt - http://secuni
Program Container: References: - http://packetstormsecurity.org/0907-exploits/almondclassifieds-xss.txt - http://secunia.com/advisories/36003 - http://www.securityfocus.com/bid/35816
CVE ID: CVE-2009-3226 State: PUBLISHED Published: 2009-09-16T19:00:00Z Last Updated: 2024-09-16T22:36:45.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_form action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36003 - http://www.securityfocus.com/bid/35816 - http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlx
36003 - http://www.securityfocus.com/bid/35816 - http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt