Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4343 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the (1) SaveToFile, (2) SaveToTempFile, or (3) AppendBinary method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.
n by accessing files using hcp:// URLs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45333 - https://www.exploit-db.com/exploits/6537 - http://www.securityfocus.com/bid/31332 - http://www.shinnai.net/xplits/TXT_rNowA1916DKFNUF48NyS
CVE ID: CVE-2008-4344 State: PUBLISHED Published: 2008-09-30T17:00:00 Last Updated: 2024-08-07T10:08:35.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45339 - http://packetstormsecurity.org/0809-exploits/6rbscriptcat-sql.txt - http://secunia.com/advisories/31945
CVE ID: CVE-2008-4345 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:08:35.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45113 - http://secunia.com/advisories/31784 - http://www.vupen.com/english/advisories/2008/2560 - http://www.securityfocus.com/bid/31156
CVE ID: CVE-2008-4346 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:08:35.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to comments.php, a different vector than CVE-2008-3371. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45102 - http://www.vupen.com/english/advisories/2008/2565 - http://securityreason.com/securityalert/4267 - http://secunia.com/advisories/
w.vupen.com/english/advisories/2008/2565 - http://securityreason.com/securityalert/4267 - http://secunia.com/advisories/31879 - http://www.securityfocus.com/bid/31164
CVE ID: CVE-2008-4347 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:08:35.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6447 - http://www.securityfocus.com/bid/31160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45114
CVE ID: CVE-2008-4348 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:08:35.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31143 - http://secunia.com/advisories/31828 - http://packetstormsecurity.org/0809-exploits/phpportfolio-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45078
CVE ID: CVE-2008-4349 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:08:35.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) page parameter in a details action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45101 - http://www.securityfocus.com/bid/31152 - http://packetstorm.linuxsecurity.com/0809-exploits/paranews-xss.txt
CVE ID: CVE-2008-4350 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:08:35.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48107 - http://secunia.com/advisories/31829 - https://www.exploit-db.com/exploits/6446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45108 - http://www.vupen.com/english/advisories/2008/2563 - http://www.securityfocus.com/bid/31157
CVE ID: CVE-2008-4351 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:08:35.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45125 - https://www.exploit-db.com/exploits/6452 - http://www.securityfocus.com/bid/31167
CVE ID: CVE-2008-4352 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:17:08.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45126 - http://www.securityfocus.com/bid/31167
CVE ID: CVE-2008-4353 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:17:08.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. NOTE: although one component of Linkarity is distributable PHP code, this issue might be site-specific. If so, it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45100
CVE ID: CVE-2008-4354 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:17:08.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45110 - http://www.vupen.com/english/advisories/2008/2561 - http://www.securityfocus.com/bid/31159 - http://secunia.com/advisories/31871 - https://www.exploit-db.com/exploits/6444
CVE ID: CVE-2008-4355 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:17:09.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6442 - http://secunia.com/advisories/31872 - http://www.vupen.com/english/advisories/2008/2559 - http://www.securityfocus.com/bid/31150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45079
CVE ID: CVE-2008-4356 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:17:08.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to index.php in a View action to the News module; (2) the vid parameter to index.php in a Result action to the Voting module; (3) the fid parameter to index.php in a ShowForum action to the Forum module; (4) the tid parameter to index.php in a ShowTopic action to the Forum module; (5) the uname parameter to index.php in a UserInfo action to the Account module; or (6) the modu
on to the Forum module; (5) the uname parameter to index.php in a UserInfo action to the Account module; or (6) the module parameter to index.php, probably related to the TopSites module. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45120 - http://www.securityfocus.com/bid/31170 - https://www.exploit-db.com/exploits/6460 - http://secunia.com/advisories/31862
CVE ID: CVE-2008-4357 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:17:08.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45115 - http://www.securityfocus.com/bid/31163 - https://www.exploit-db.com/exploits/6449
CVE ID: CVE-2008-4358 State: PUBLISHED Published: 2008-09-30T18:00:00 Last Updated: 2024-08-07T10:17:08.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45104 - http://sourceforge.net/project/shownotes.php?release_id=625333&group_id=77954 - http://spaw.svn.sourceforge.net/viewvc/spaw/spaw2/trunk/class/theme.class.php?r1=151&r2=359 - http://www.securityfocus.com/bi
//spaw.svn.sourceforge.net/viewvc/spaw/spaw2/trunk/class/theme.class.php?r1=151&r2=359 - http://www.securityfocus.com/bid/31185 - http://secunia.com/advisories/31796 - http://blog.solmetra.com/2008/09/10/spaw-editor-php-edition-hotfix-release/
CVE ID: CVE-2008-4359 State: PUBLISHED Published: 2008-10-03T17:18:00 Last Updated: 2024-08-07T10:17:08.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32069 - http://trac.lighttpd.net/trac/changeset/2307 - http://www.lighttpd.net/security/lighttpd_sa_2008_05.txt - http://secunia.com/advisories/32972 - http
c/changeset/2307 - http://www.lighttpd.net/security/lighttpd_sa_2008_05.txt - http://secunia.com/advisories/32972 - http://trac.lighttpd.net/trac/changeset/2278 - http://wiki.rpath.com/Advisories:rPSA-2008-0309 - http://www.securityfocus.com/bid/31599 - http://secunia.com/advisories/32834 - http://trac.lighttpd.net/trac/ticket/1720 - http://trac.lighttpd.net/trac/changeset/2309 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309 - http://secunia.com/advisories/32132 - http://openwall.com/lists/oss-security/2008/09/30/1 - http://www.securityfocus.com/archive/1/497932/100/0/threaded - http://trac.lighttpd.net/trac/changeset/2310 - http://www.vupen.com/english/advisories/2008/2741 - http://w
0/threaded - http://trac.lighttpd.net/trac/changeset/2310 - http://www.vupen.com/english/advisories/2008/2741 - http://www.debian.org/security/2008/dsa-1645 - http://openwall.com/lists/oss-security/2008/09/30/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45690 - http://openwall.com/lists/oss-security/2008/09/30/2 - http://secunia.com/advisories/32480 - http://www.lighttpd.net/security/lighttpd-1.4.x_rewrite_redirect_decode_url.patch - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://security.gentoo.org/glsa/glsa-200812-04.xml
CVE ID: CVE-2008-4360 State: PUBLISHED Published: 2008-10-03T17:18:00 Last Updated: 2024-08-07T10:17:08.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32069 - http://www.lighttpd.net/security/lighttpd-1.4.x_userdir_lowercase.patc
ferences: - http://secunia.com/advisories/32069 - http://www.lighttpd.net/security/lighttpd-1.4.x_userdir_lowercase.patch - http://secunia.com/advisories/32972 - http://wiki.rpath.com/Advisories:rPSA-2008-0309 - http://www.securityfocus.com/bid/31600 - http://secunia.com/advisories/32834 - http://trac.lighttpd.net/trac/changeset/2283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45689 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309 - http://secunia.com/advisories/32132 - http://trac.lighttpd.net/trac/changeset/2308 - http://openwall.com/lists/oss-security/2008/09/30/1 - http://www.securityfocus.com/archive/1/497932/100/0/threaded - http://www.vupen.com/english/advisories/2008
08/09/30/1 - http://www.securityfocus.com/archive/1/497932/100/0/threaded - http://www.vupen.com/english/advisories/2008/2741 - http://www.debian.org/security/2008/dsa-1645 - http://openwall.com/lists/oss-security/2008/09/30/3 - http://openwall.com/lists/oss-security/2008/09/30/2 - http://secunia.com/advisories/32480 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://trac.lighttpd.net/trac/ticket/1589 - http://security.gentoo.org/glsa/glsa-200812-04.xml - http://www.lighttpd.net/security/lighttpd_sa_2008_06.txt
CVE ID: CVE-2008-4361 State: PUBLISHED Published: 2008-09-30T21:00:00 Last Updated: 2024-08-07T10:17:08.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary files via a .. (dot dot) in the path parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45491 - https://www.exploit-db.com/exploits/6604 - http://secunia.com/advisories/32031 - http://www.securityfocus.com/bid/31454
CVE ID: CVE-2008-4362 State: PUBLISHED Published: 2008-09-30T21:00:00 Last Updated: 2024-08-07T10:17:08.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) via a crafted IOCTL request to \Device\DLPTokenWalter0. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2638 - http://securityreason.com/securityalert/4341 - https://www.exploit-db.com/exploits/6515 - http://secunia.com/advisories/31921
CVE ID: CVE-2008-4363 State: PUBLISHED Published: 2008-09-30T21:00:00 Last Updated: 2024-08-07T10:17:08.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially execute arbitrary code via a certain DLMFENC_IOCTL request to \\.\DLKPFSD_Device that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was intended. Additional Analyst Notes: - CVE Program Container: References: - http://digit-labs.org/files/exploits/deslock-probe-read.c - http://www.vupen.com/english/advisories/2008/2638 - http://secunia.com/advisories/31921 - https:
/deslock-probe-read.c - http://www.vupen.com/english/advisories/2008/2638 - http://secunia.com/advisories/31921 - https://www.exploit-db.com/exploits/6498 - http://securityreason.com/securityalert/4342
CVE ID: CVE-2008-4364 State: PUBLISHED Published: 2008-09-30T21:00:00 Last Updated: 2024-08-07T10:17:09.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the (1) id parameter in the "page" page and (2) txtSearch parameter in the "Search" page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31450 - http://securityreason.com/securityalert/4343 - http://www.securityfocus.com/archive/1/496799/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45494 - https://www.exploit-db.com/expl
e/1/496799/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45494 - https://www.exploit-db.com/exploits/6610 - http://www.bugreport.ir/index_53.htm
CVE ID: CVE-2008-4365 State: PUBLISHED Published: 2008-09-30T21:00:00 Last Updated: 2024-08-07T10:17:09.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Siteman 1.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45484
CVE ID: CVE-2008-4366 State: PUBLISHED Published: 2008-09-30T21:00:00 Last Updated: 2024-08-07T10:17:08.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a user directory under images/photos/upload. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45492 - https://www.exploit-db.com/exploits/6594 - http://securityreason.com/securityalert/4344 - http://www.secu
lities/45492 - https://www.exploit-db.com/exploits/6594 - http://securityreason.com/securityalert/4344 - http://www.securityfocus.com/bid/31456
CVE ID: CVE-2008-4368 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:10.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension (JCE) key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45650 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html - http://support.apple.com/kb/HT3179
CVE ID: CVE-2008-4369 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31085 - http://securityreason.com/securityalert/4330 - https://www.exploit-db.com/exploits/6411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45017
CVE ID: CVE-2008-4370 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to pics.php and the (2) a parameter to view.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31085 - http://securityreason.com/securityalert/4330 - https://www.exploit-db.com/exploits/6411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45018
CVE ID: CVE-2008-4371 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the aIDS parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45019 - http://www.securityfocus.com/bid/31095 - https://www.exploit-db.com/exploits/6409 - http://securityreason.com/securityalert/4331 - http://secunia.com/advisories/31816
CVE ID: CVE-2008-4372 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web script or HTML via the aIDS parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45020 - http://www.securityfocus.com/bid/31095 - https://www.exploit-db.com/exploits/6409 - http://securityreason.com/securityalert/4331 - http://secunia.com/advisories/31816
CVE ID: CVE-2008-4373 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4332 - https://www.exploit-db.com/exploits/6417 - http://www.securityfocus.com/bid/31101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45041
CVE ID: CVE-2008-4374 State: PUBLISHED Published: 2008-10-01T15:00:00 Last Updated: 2024-08-07T10:17:09.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the id parameter in a playgame action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6408 - http://secunia.com/advisories/31817 - http://www.securityfocus.com/bid/31097 - http://securityreason.com/securityalert/4333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45014