Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6119 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote attackers to inject arbitrary PHP code into admin/userandpass.php via the (1) username and (2) password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46800 - http://www.securityfoc
ttp://secunia.com/advisories/32819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46800 - http://www.securityfocus.com/bid/33848
CVE ID: CVE-2008-6120 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile_comments.php in SocialEngine (SE) 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the comment_secure parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46770 - http://marc.info/?l=bugtraq&m=122720734728665&w=2 - http://www.securityfocus.com/bid/32382
CVE ID: CVE-2008-6121 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the PHPSESSID cookie. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122720734728665&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46771 - http://www.securityfocus.com/bid/32382
CVE ID: CVE-2008-6122 State: PUBLISHED Published: 2009-02-11T17:25:00 Last Updated: 2024-08-07T11:20:25.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service (crash) via a request that contains a question mark ("?"). Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065619.html - http://www.securityfocus.com/bid/32290 - http://www.vupen.com/english/advisories/2008/3174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46602 - http://secunia.com/advisories/32716
CVE ID: CVE-2008-6123 State: PUBLISHED Published: 2009-02-12T16:00:00 Last Updated: 2024-08-07T11:20:25.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/02/12/2 - http://www.openwall.com/lists/oss-security/2009/02/12/7 - http://bugs.gen
openwall.com/lists/oss-security/2009/02/12/2 - http://www.openwall.com/lists/oss-security/2009/02/12/7 - http://bugs.gentoo.org/show_bug.cgi?id=250429 - https://bugzilla.redhat.com/show_bug.cgi?id=485211 - http://www.openwall.com/lists/oss-security/2009/02/12/4 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html - http://www.redhat.com/support/errata/RHSA-2009-0295.html - http://secunia.com/advisories/35685 - http://secunia.com/advisories/34499 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://secunia.com/advisories/35416 - http://net-snmp.svn.sourceforge.
pensuse-security-announce/2009-07/msg00002.html - http://secunia.com/advisories/35416 - http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=rev&revision=17367 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10289 - http://www.securitytracker.com/id?1021921 - http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/snmplib/snmpUDPDomain.c?r1=17325&r2=17367&pathrev=17367
CVE ID: CVE-2008-6124 State: PUBLISHED Published: 2009-02-13T01:00:00Z Last Updated: 2024-09-16T23:11:14.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the hotpot_delete_selected_attempts function in report.php in the HotPot module in Moodle 1.6 before 1.6.7, 1.7 before 1.7.5, 1.8 before 1.8.6, and 1.9 before 1.9.2 allows remote attackers to execute arbitrary SQL commands via a crafted selected attempt. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=101402 - http://cvs.moodle.org/moodle/mod/hotpot/report.php?r1=1.8.6.1&r2=1.8.6.2 - http://www.debian.org/security/2008/dsa-1691
CVE ID: CVE-2008-6125 State: PUBLISHED Published: 2009-02-13T01:00:00Z Last Updated: 2024-09-16T19:40:40.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=87971 - http://www.debian.org/security/2008/dsa-1691
CVE ID: CVE-2008-6126 State: PUBLISHED Published: 2009-02-13T18:00:00 Last Updated: 2024-08-07T11:20:25.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter to download.php and the (2) page parameter to index.php, a different vector than CVE-2008-3589. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32021 - http://www.securityfocus.com/bid/31495 - http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog - http://www.majorsecurity.de/index_2.php?major_rls=major
p://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog - http://www.majorsecurity.de/index_2.php?major_rls=major_rls55 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45524
CVE ID: CVE-2008-6127 State: PUBLISHED Published: 2009-02-13T18:00:00 Last Updated: 2024-08-07T11:20:25.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) query parameters to (a) index.php, (3) cat and (4) file parameters to (b) download.php, (5) gal parameter to gallery.php, and the (6) URL to admin/login.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32021 - http://www.securityfocus.com/bid/31495 - http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Cha
/advisories/32021 - http://www.securityfocus.com/bid/31495 - http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog - http://www.majorsecurity.de/index_2.php?major_rls=major_rls55 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45525
CVE ID: CVE-2008-6128 State: PUBLISHED Published: 2009-02-13T18:00:00 Last Updated: 2024-08-07T11:20:25.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32021 - http://www.securityfocus.com/bid/31495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45526 - http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog - http://www.majorsecurity.de/index_2.php?major_rls=major_rls55
CVE ID: CVE-2008-6129 State: PUBLISHED Published: 2009-02-13T18:00:00 Last Updated: 2024-08-07T11:20:25.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in print.php in moziloWiki 1.0.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122278832621348&w=2 - http://wiki.mozilo.de/index.php?page=Changelog - http://secunia.com/advisories/32024 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls56 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45523 - http://www.securityfocus.com/bid/3
?major_rls=major_rls56 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45523 - http://www.securityfocus.com/bid/31493
CVE ID: CVE-2008-6130 State: PUBLISHED Published: 2009-02-13T18:00:00 Last Updated: 2024-08-07T11:20:25.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) action and (2) page parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122278832621348&w=2 - http://wiki.mozilo.de/index.php?page=Changelog - http://secunia.com/advisories/32024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45527 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls56 - http://www
e.xforce.ibmcloud.com/vulnerabilities/45527 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls56 - http://www.securityfocus.com/bid/31493
CVE ID: CVE-2008-6131 State: PUBLISHED Published: 2009-02-13T18:00:00 Last Updated: 2024-08-07T11:20:25.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in moziloWiki 1.0.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122278832621348&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45528 - http://wiki.mozilo.de/index.php?page=Changelog - http://secunia.com/advisories/32024 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls56 - http://www.securityfocus.com/bid/31493
CVE ID: CVE-2008-6132 State: PUBLISHED Published: 2009-02-13T18:00:00 Last Updated: 2024-08-07T11:20:25.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter. Additional Analyst Notes: - CVE Program Container: References: - http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328 - http://www.exploit-db.com/exploits/18037 - http://www.osvdb.org/48797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45617 - http://www.exploit-db.com/exploits/66
www.osvdb.org/48797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45617 - http://www.exploit-db.com/exploits/6646 - http://secunia.com/advisories/32073 - http://sourceforge.net/project/shownotes.php?release_id=662749 - http://www.securityfocus.com/bid/31520
CVE ID: CVE-2008-6133 State: PUBLISHED Published: 2009-02-13T18:00:00 Last Updated: 2024-08-07T11:20:25.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in arsaprint.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3942. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45643
CVE ID: CVE-2008-6134 State: PUBLISHED Published: 2009-02-14T02:00:00 Last Updated: 2024-08-07T11:20:25.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31656 - http://secunia.com/advisories/32194 - http://drupal.org/node/318746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45756
CVE ID: CVE-2008-6135 State: PUBLISHED Published: 2009-02-14T02:00:00 Last Updated: 2024-08-07T11:20:25.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31656 - http://secunia.com/advisories/32194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45757 - http://drupal.org/node/318746
CVE ID: CVE-2008-6136 State: PUBLISHED Published: 2009-02-14T02:00:00 Last Updated: 2024-08-07T11:20:25.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to gain privileges as another user or an administrator via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31656 - http://secunia.com/advisories/32194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45760 - http://drupal.org/node/318746
CVE ID: CVE-2008-6137 State: PUBLISHED Published: 2009-02-14T02:00:00 Last Updated: 2024-08-07T11:20:25.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: EveryBlog 5.x and 6.x, a module for Drupal, allows remote attackers to bypass access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45759 - http://www.securityfocus.com/bid/31656 - http://secunia.com/advisories/32194 - http://drupal.org/node/318746
CVE ID: CVE-2008-6138 State: PUBLISHED Published: 2009-02-14T02:00:00 Last Updated: 2024-08-07T11:20:25.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6703 - http://www.securityfocus.com/bid/31655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45771
CVE ID: CVE-2008-6139 State: PUBLISHED Published: 2009-02-14T02:00:00 Last Updated: 2024-08-07T11:20:25.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the download parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6703 - http://www.securityfocus.com/bid/31655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45772
CVE ID: CVE-2008-6140 State: PUBLISHED Published: 2009-02-14T02:00:00 Last Updated: 2024-08-07T11:20:25.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Avaya one-X Desktop Edition 2.1.0.78 allows remote attackers to cause a denial of service (crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45748 - http://support.avaya.com/elmodocs2/security/ASA-2008-370.htm - http://www.voipshield.com/research-details.php?id=124 - http://secunia.com/advisories/32205
CVE ID: CVE-2008-6141 State: PUBLISHED Published: 2009-02-14T02:00:00 Last Updated: 2024-08-07T11:20:25.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service (crash) via a large amount of H.323 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.voipshield.com/research-details.php?id=125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45745 - http://www.securityfocus.com/bid/31635 - http://www.vupen.com/english/advisories/2008/2775 - http://support.avaya.com/elmodocs2/security/ASA-2008-363.htm - http://secunia.com/advisories/3
sh/advisories/2008/2775 - http://support.avaya.com/elmodocs2/security/ASA-2008-363.htm - http://secunia.com/advisories/32206
CVE ID: CVE-2008-6142 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPic 0.0.4 and FlexPHPic Pro 0.0.3, and other 0.0.x versions, allow remote attackers to execute arbitrary SQL commands via (1) the checkuser parameter (aka username field), or (2) the checkpass parameter (aka password field), to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33376 - https://www.exploit-db.com/exploits/7624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47653
CVE ID: CVE-2008-6143 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: OwenPoll 1.0 allows remote attackers to bypass authentication and obtain administrative access via a modified account name in the username cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33032 - https://www.exploit-db.com/exploits/7597
CVE ID: CVE-2008-6144 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33254 - http://www.vupen.com/english/advisories/2008/3502 - http://typo3.org/teams/security/security-bulletins/typo3-20081222-2 - http://typo3.org/extensions/repository/view/wec
- http://typo3.org/teams/security/security-bulletins/typo3-20081222-2 - http://typo3.org/extensions/repository/view/wec_discussion/1.7.1
CVE ID: CVE-2008-6145 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33254 - http://www.vupen.com/english/advisories/2008/3502 - http://typo3.org/teams/security/security-bulletins/typo3-20081222-2 - http://typo3.org/extensions/repository/view/wec_discussion/1.7.1
CVE ID: CVE-2008-6146 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pm.php in DeluxeBB 1.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a delete##### parameter in a Delete action, a different vector than CVE-2005-2989. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7593 - http://www.securityfocus.com/bid/33037 - http://secunia.com/advisories/33351
CVE ID: CVE-2008-6147 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: ForumApp 3.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) data/8690.mdb or (2) data/8690BAK.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7599 - http://secunia.com/advisories/33344
CVE ID: CVE-2008-6148 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Live Ticker (com_liveticker) module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a viewticker action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47605 - http://secunia.com/advisories/33312 - https://www.exploit-db.com/exploits/7573
CVE ID: CVE-2008-6149 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the mDigg (com_mdigg) component 2.2.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cagtegory parameter in a story_lists action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47612 - http://www.securityfocus.com/bid/33009 - http://www.securityfocus.com/archive/1/499618/100/0/threaded - http://secunia.com/advisories/33306 - http://www.osvdb
- http://www.securityfocus.com/archive/1/499618/100/0/threaded - http://secunia.com/advisories/33306 - http://www.osvdb.org/51005
CVE ID: CVE-2008-6150 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47642 - http://www.securityfocus.com/bid/33050 - https://www.exploit-db.com/exploits/7613 - http://secunia.com/advisories/33354
CVE ID: CVE-2008-6151 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47622 - https://www.exploit-db.com/exploits/7609 - http://secunia.com/advisories/33358 - http://www.securityfocus.com/bid/33039
CVE ID: CVE-2008-6152 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in deptdisplay.asp in SepCity Faculty Portal allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: this was originally reported for Lawyer Portal, which does not have a deptdisplay.asp file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33357 - https://www.exploit-db.com/exploits/7610 - http://www.securityfocus.com/bid/33040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47621