Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5225 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:06:52.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-12/0087.html - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6
CVE ID: CVE-2013-5226 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:31.391Z Description: No description available.
CVE ID: CVE-2013-5227 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:06:52.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-12/0087.html - http://www.securityfocus.com/bid/64355 - http://support.apple.com/kb/HT6441 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - http://support.apple.com/kb/HT6162 - http://archives.neohapsis.com/archives/bu
.com/archives/bugtraq/2014-09/0106.html - http://support.apple.com/kb/HT6162 - http://archives.neohapsis.com/archives/bugtraq/2013-12/0086.html
CVE ID: CVE-2013-5228 State: PUBLISHED Published: 2013-12-18T11:00:00 Last Updated: 2024-08-06T17:06:52.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-12/0087.html - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://support.apple.com/kb/HT6
CVE ID: CVE-2013-5229 State: PUBLISHED Published: 2015-11-14T02:00:00 Last Updated: 2024-08-06T17:06:52.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000177 - http://jvn.jp/en/jp/JVN56210048/741993/index.html - http://www.securitytracker.com/id/1034187 - http://jvn.jp/en/jp/JVN56210
://jvn.jp/en/jp/JVN56210048/741993/index.html - http://www.securitytracker.com/id/1034187 - http://jvn.jp/en/jp/JVN56210048/index.html
CVE ID: CVE-2013-5230 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:31.815Z Description: No description available.
CVE ID: CVE-2013-5231 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:32.178Z Description: No description available.
CVE ID: CVE-2013-5232 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:32.560Z Description: No description available.
CVE ID: CVE-2013-5233 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:32.936Z Description: No description available.
CVE ID: CVE-2013-5234 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:33.317Z Description: No description available.
CVE ID: CVE-2013-5235 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:33.682Z Description: No description available.
CVE ID: CVE-2013-5236 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:34.050Z Description: No description available.
CVE ID: CVE-2013-5237 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:34.420Z Description: No description available.
CVE ID: CVE-2013-5238 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:34.839Z Description: No description available.
CVE ID: CVE-2013-5239 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:35.211Z Description: No description available.
CVE ID: CVE-2013-5240 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:35.600Z Description: No description available.
CVE ID: CVE-2013-5241 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:35.982Z Description: No description available.
CVE ID: CVE-2013-5242 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:36.363Z Description: No description available.
CVE ID: CVE-2013-5243 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:36.756Z Description: No description available.
CVE ID: CVE-2013-5244 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:37.128Z Description: No description available.
CVE ID: CVE-2013-5245 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:37.505Z Description: No description available.
CVE ID: CVE-2013-5246 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:37.867Z Description: No description available.
CVE ID: CVE-2013-5247 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:38.241Z Description: No description available.
CVE ID: CVE-2013-5248 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:38.654Z Description: No description available.
CVE ID: CVE-2013-5249 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:39.042Z Description: No description available.
CVE ID: CVE-2013-5250 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:39.408Z Description: No description available.
CVE ID: CVE-2013-5251 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:39.779Z Description: No description available.
CVE ID: CVE-2013-5252 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:40.165Z Description: No description available.
CVE ID: CVE-2013-5253 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:40.543Z Description: No description available.
CVE ID: CVE-2013-5254 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:40.931Z Description: No description available.
CVE ID: CVE-2013-5255 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:41.297Z Description: No description available.
CVE ID: CVE-2013-5256 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:41.674Z Description: No description available.
CVE ID: CVE-2013-5257 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:42.050Z Description: No description available.
CVE ID: CVE-2013-5258 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:42.413Z Description: No description available.
CVE ID: CVE-2013-5259 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:42.795Z Description: No description available.
CVE ID: CVE-2013-5260 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:43.165Z Description: No description available.
CVE ID: CVE-2013-5261 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:43.530Z Description: No description available.
CVE ID: CVE-2013-5262 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:43.897Z Description: No description available.
CVE ID: CVE-2013-5263 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:44.267Z Description: No description available.
CVE ID: CVE-2013-5264 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:44.620Z Description: No description available.
CVE ID: CVE-2013-5265 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:44.982Z Description: No description available.
CVE ID: CVE-2013-5266 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:45.397Z Description: No description available.
CVE ID: CVE-2013-5267 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:45.823Z Description: No description available.
CVE ID: CVE-2013-5268 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:46.191Z Description: No description available.
CVE ID: CVE-2013-5269 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:46.564Z Description: No description available.
CVE ID: CVE-2013-5270 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:46.919Z Description: No description available.
CVE ID: CVE-2013-5271 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:47.308Z Description: No description available.
CVE ID: CVE-2013-5272 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:47.680Z Description: No description available.
CVE ID: CVE-2013-5273 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:48.047Z Description: No description available.
CVE ID: CVE-2013-5274 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:48.414Z Description: No description available.
CVE ID: CVE-2013-5275 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:48.795Z Description: No description available.
CVE ID: CVE-2013-5276 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:49.156Z Description: No description available.
CVE ID: CVE-2013-5277 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:49.536Z Description: No description available.
CVE ID: CVE-2013-5278 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:49.914Z Description: No description available.
CVE ID: CVE-2013-5279 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:50.285Z Description: No description available.
CVE ID: CVE-2013-5280 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:50.643Z Description: No description available.
CVE ID: CVE-2013-5281 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:51.046Z Description: No description available.
CVE ID: CVE-2013-5282 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:51.404Z Description: No description available.
CVE ID: CVE-2013-5283 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:51.770Z Description: No description available.
CVE ID: CVE-2013-5284 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:52.134Z Description: No description available.
CVE ID: CVE-2013-5285 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:52.498Z Description: No description available.
CVE ID: CVE-2013-5286 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:52.861Z Description: No description available.
CVE ID: CVE-2013-5287 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:53.222Z Description: No description available.
CVE ID: CVE-2013-5288 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:53.585Z Description: No description available.
CVE ID: CVE-2013-5289 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:53.951Z Description: No description available.
CVE ID: CVE-2013-5290 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:54.324Z Description: No description available.
CVE ID: CVE-2013-5291 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:54.682Z Description: No description available.
CVE ID: CVE-2013-5292 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:55.044Z Description: No description available.
CVE ID: CVE-2013-5293 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:55.405Z Description: No description available.
CVE ID: CVE-2013-5294 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:55.817Z Description: No description available.
CVE ID: CVE-2013-5295 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:56.203Z Description: No description available.
CVE ID: CVE-2013-5296 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:56.570Z Description: No description available.
CVE ID: CVE-2013-5297 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:56.941Z Description: No description available.
CVE ID: CVE-2013-5298 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:57.313Z Description: No description available.
CVE ID: CVE-2013-5299 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:57.678Z Description: No description available.
CVE ID: CVE-2013-5300 State: PUBLISHED Published: 2013-08-15T20:00:00 Last Updated: 2024-08-06T17:06:52.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to (1) vulnmeter/index.php or (2) vulnmeter/sched.php; the (3) section parameter to av_inventory/task_edit.php; the (4) profile parameter to nfsen/rrdgraph.php; or the (5) scan_server or (6) targets parameter to vulnmeter/simulate.php. Additional Analyst Notes: - CVE Program Container: References: - http://w
) targets parameter to vulnmeter/simulate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/show/osvdb/95814 - http://www.osvdb.org/show/osvdb/95818 - http://secunia.com/advisories/54264 - http://www.osvdb.org/show/osvdb/95816 - http://packetstormsecurity.com/files/122547/Alienvault-OSSIM-Cross-Site-Scripting.html - http://secunia.com/advisories/54287 - http://www.securityfocus.com/bid/61456 - http://www.osvdb.org/show/osvdb/95813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85994 - http://forums.alienvault.com/discussion/1609/patch-release-4-3-1 - http://www.osvdb.org/show/osvdb/95817
CVE ID: CVE-2013-5301 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in help.php in Trustport Webfilter 5.5.0.2232 allows remote attackers to read arbitrary files via a .. (dot dot) in the hf parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61662 - http://packetstormsecurity.com/files/122735/Trustport-Webfilter-Traversal-File-Disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/86289 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0043.html
CVE ID: CVE-2013-5302 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54306 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - http://osvdb.org/95959 - http://www.securityfocus.com/bid/61609 - http://typo3.org/extensions/repository/view/ke_search - https://exchange.xforce.ibmcloud.com/
urityfocus.com/bid/61609 - http://typo3.org/extensions/repository/view/ke_search - https://exchange.xforce.ibmcloud.com/vulnerabilities/86235
CVE ID: CVE-2013-5303 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95967 - http://secunia.com/advisories/54350 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86233 - http://typo3.org/extensions/repository/view/locator - http://www.securityfocus.c
ce.ibmcloud.com/vulnerabilities/86233 - http://typo3.org/extensions/repository/view/locator - http://www.securityfocus.com/bid/61606
CVE ID: CVE-2013-5304 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54350 - http://osvdb.org/95962 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86230 - http://typo3.org/extensions/repository/view/locator - http://www.securityfoc
xforce.ibmcloud.com/vulnerabilities/86230 - http://typo3.org/extensions/repository/view/locator - http://www.securityfocus.com/bid/61606
CVE ID: CVE-2013-5305 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95961 - http://secunia.com/advisories/54350 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86231 - http://typo3.org/extensions/repository/view/locator - http
https://exchange.xforce.ibmcloud.com/vulnerabilities/86231 - http://typo3.org/extensions/repository/view/locator - http://www.securityfocus.com/bid/61606
CVE ID: CVE-2013-5306 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/browser - http://osvdb.org/95963 - http://www.securityfocus.com/bid/61656 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86228
CVE ID: CVE-2013-5307 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86236 - http://secunia.com/advisories/54306 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - http://www.securityfocus.com/bid/61609 - http://typo3.o
rity/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - http://www.securityfocus.com/bid/61609 - http://typo3.org/extensions/repository/view/ke_search
CVE ID: CVE-2013-5308 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension 0.3.4 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86237 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - http://osvdb.org/95958
CVE ID: CVE-2013-5309 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web script or HTML via a custom profile field to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/fudforum/code/5589/ - http://secunia.com/advisories/54293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86030
CVE ID: CVE-2013-5310 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T17:06:52.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95957 - http://typo3.org/extension-manuals/wfqbe/2.0.1/view/1/5/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/86238 - http://typo3.org/extensions/repository/view/wfqbe - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - http
repository/view/wfqbe - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 - http://www.securityfocus.com/bid/61653
CVE ID: CVE-2013-5311 State: PUBLISHED Published: 2013-08-19T20:00:00Z Last Updated: 2024-09-16T18:23:48.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to (1) browse_videos.php or (2) members.php. NOTE: the cat parameter is already covered by CVE-2008-4157. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27519 - http://osvdb.org/96223 - http://www.securityfocus.com/bid/61734 - http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html - http://osvd
.com/bid/61734 - http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html - http://osvdb.org/96222
CVE ID: CVE-2013-5312 State: PUBLISHED Published: 2013-08-19T20:00:00Z Last Updated: 2024-09-17T02:47:02.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to browse_videos.php or the (2) cat parameter to groups.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27519 - http://osvdb.org/96226 - http://osvdb.org/show/osvdb/96225 - http://www.securityfocus.com/bid/61734 - http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html
CVE ID: CVE-2013-5313 State: PUBLISHED Published: 2013-08-19T20:00:00Z Last Updated: 2024-09-17T00:21:53.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/commit/4b0faa90fa8b9e1776c86db716894dcd7e6b4834
CVE ID: CVE-2013-5314 State: PUBLISHED Published: 2013-08-19T20:00:00Z Last Updated: 2024-09-17T00:35:57.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the serendipity[htmltarget] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.mavitunasecurity.com/xss-vulnerabilities-in-serendipity - http://archives.neohapsis.com/archives/bugtraq/2013-07/0135.html