Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3389 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T06:22:24.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39317 - http://secunia.com/advisories/37699 - http://www.mozilla.org/security/announce/2009/mfsa2009-67.html - https://oval.cisecurity.org/repository/search/defi
99 - http://www.mozilla.org/security/announce/2009/mfsa2009-67.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7967 - http://www.vupen.com/english/advisories/2009/3547 - https://bugzilla.mozilla.org/show_bug.cgi?id=515882 - http://secunia.com/advisories/37881 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html - http://secunia.com/advisories/37785 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.ubuntu.com/usn/USN-874-1 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54805 - http:/
edora-package-announce/2009-December/msg00995.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54805 - http://www.securityfocus.com/bid/37349 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html - http://www.theora.org/news/#libtheora-1.1.0 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:043 - http://secunia.com/advisories/37856 - http://www.securityfocus.com/bid/37368 - https://bugzilla.mozilla.org/show_bug.cgi?id=504613 - http://www.novell.com/linux/security/advisories/2009_63_firefox.html
CVE ID: CVE-2009-3390 State: PUBLISHED Published: 2009-09-24T18:00:00Z Last Updated: 2024-09-16T17:23:22.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the (1) iscsiadm and (2) iscsitadm programs in Sun Solaris 10, and OpenSolaris snv_28 through snv_109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-261849-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-119090-33-1
CVE ID: CVE-2009-3392 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Agile Engineering Data Management (EDM) component in Oracle E-Business Suite 6.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36770 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023059
CVE ID: CVE-2009-3393 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023059 - http://www.securityfocus.com/bid/36757
CVE ID: CVE-2009-3394 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3395 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the AutoVue component in Oracle E-Business Suite 19.3.2 allows remote attackers to affect availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36761 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023059
CVE ID: CVE-2009-3396 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2.3, 10.0.1, and 10.3 allows remote attackers to affect integrity, related to WLS Console. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36766 - http://www.securitytracker.com/id?1023062 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE ID: CVE-2009-3397 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36762 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023059
CVE ID: CVE-2009-3398 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3399 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and 8.1.5 allows remote attackers to affect integrity, related to WLS Console. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023062 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securityfocus.com/bid/36769
CVE ID: CVE-2009-3400 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Advanced Benefits component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36767 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023059
CVE ID: CVE-2009-3401 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows local users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36768 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023059
CVE ID: CVE-2009-3402 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.securityfocus.com/bid/36764 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023059
CVE ID: CVE-2009-3403 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: this issue subsumes CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, and CVE-2009-2676. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-09630
ttp://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE ID: CVE-2009-3404 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.23 allows remote authenticated users to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36773 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.securitytracker.com/id?1023061 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE ID: CVE-2009-3405 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows remote authenticated users to affect integrity and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36772 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.securitytracker.com/id?1023061 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
CVE ID: CVE-2009-3406 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows remote authenticated users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.securitytracker.com/id?1023061 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securityfocus.com/bid/36771
CVE ID: CVE-2009-3407 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-0983. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36753 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023058 - http://secunia.com/adv
/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023058 - http://secunia.com/advisories/37099 - http://osvdb.org/59116
CVE ID: CVE-2009-3408 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securitytracker.com/id?1023059
CVE ID: CVE-2009-3409 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T06:22:24.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.securitytracker.com/id?1023061 - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securityfocus.com/bid/36776
CVE ID: CVE-2009-3410 State: PUBLISHED Published: 2010-01-13T01:00:00 Last Updated: 2024-08-07T06:22:24.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the RDBMS component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://www.us-cert.gov/cas/techalerts/TA10-012A.html
CVE ID: CVE-2009-3411 State: PUBLISHED Published: 2010-01-13T01:00:00 Last Updated: 2024-08-07T06:22:24.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://www.us-cert.gov/cas/techalerts/TA10-012A.html
CVE ID: CVE-2009-3412 State: PUBLISHED Published: 2010-01-13T01:00:00 Last Updated: 2024-08-07T06:22:24.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5; and Oracle Application Server 10.1.2.3; allows local users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023438 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://www.us-cert.gov/cas/techalerts/TA10-012A.html
CVE ID: CVE-2009-3413 State: PUBLISHED Published: 2010-01-13T01:00:00 Last Updated: 2024-08-07T06:22:24.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2008-3976 and CVE-2009-3414. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://www.us-cert.gov/cas/techalerts/TA10-012A.html
CVE ID: CVE-2009-3414 State: PUBLISHED Published: 2010-01-13T01:00:00 Last Updated: 2024-08-07T06:22:24.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2008-3976 and CVE-2009-3413. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://www.us-cert.gov/cas/techalerts/TA10-012A.html
CVE ID: CVE-2009-3415 State: PUBLISHED Published: 2010-01-13T01:00:00 Last Updated: 2024-08-07T06:22:24.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://www.us-cert.gov/cas/techalerts/TA10-012A.html
CVE ID: CVE-2009-3416 State: PUBLISHED Published: 2010-01-13T01:00:00 Last Updated: 2024-08-07T06:22:24.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://www.us-cert.gov/cas/techalerts/TA10-012A.html
CVE ID: CVE-2009-3417 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:22:24.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the IDoBlog (com_idoblog) component 1.1 build 30 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action to index.php, a different vector than CVE-2008-2627. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9413 - http://secunia.com/advisories/36243
CVE ID: CVE-2009-3418 State: PUBLISHED Published: 2009-09-25T22:00:00Z Last Updated: 2024-09-16T19:30:05.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL commands via the m parameter to manager/index.php and (2) remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit_link action to manager/tools.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.senseofsecurity.com.au/advisories/SOS-09-006.pdf - http://secunia.com/
- CVE Program Container: References: - http://www.senseofsecurity.com.au/advisories/SOS-09-006.pdf - http://secunia.com/advisories/36277
CVE ID: CVE-2009-3419 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:22:24.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35869 - http://www.exploit-db.com/exploits/9338
CVE ID: CVE-2009-3420 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:09.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter and the (2) PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35869 - http://www.exploit-db.com/exploits/9338
CVE ID: CVE-2009-3421 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:09.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52100 - http://www.exploit-db.com/exploits/9293 - http://www.osvdb.org/56757 - http://secunia.com/advisories/36023
CVE ID: CVE-2009-3422 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:08.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/56758 - http://secunia.com/advisories/36023 - http://www.exploit-db.com/exploits/9294
CVE ID: CVE-2009-3423 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:09.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52099 - http://secunia.com/advisories/36023 - http://www.exploit-db.com/exploits/9292 - http://www.osvdb.org/56756
CVE ID: CVE-2009-3424 State: PUBLISHED Published: 2009-09-25T22:00:00 Last Updated: 2024-08-07T06:31:10.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) is_projectPath parameter to includes/InstantSite/inc.is_root.php; GLOBALS[thCMS_root] parameter to (2) classes/class.Tree.php, (3) includes/inc.thcms_admin_mediamanager.php, and (4) modul/mod.rssreader.php; is_path parameter to (5) class.tasklist.php, (6) class.thcms.php, (7) class.thcms_content.php, (8) class.thcms_modul_parent.php, (9) class.thcms_p
lass.tasklist.php, (6) class.thcms.php, (7) class.thcms_content.php, (8) class.thcms_modul_parent.php, (9) class.thcms_page.php, and (10) class.thcsm_user.php in classes/; and (11) includes/InstantSite/class.Tree.php; and thCMS_root parameter to (12) classes/class.thcms_modul.php; (13) inc.page_edit_tasklist.php, (14) inc.thcms_admin_overview_backup.php, and (15) inc.thcms_edit_content.php in includes/; and (16) class.thcms_modul_parent_xml.php, (17) mod.cmstranslator.php, (18) mod.download.php, (19) mod.faq.php, (20) mod.guestbook.php, (21) mod.html.php, (22) mod.menu.php, (23) mod.news.php, (24) mod.newsticker.php, (25) mod.rss.php, (26) mod.search.php, (27) mod.sendtofriend.php, (28) mod.
(23) mod.news.php, (24) mod.newsticker.php, (25) mod.rss.php, (26) mod.search.php, (27) mod.sendtofriend.php, (28) mod.sitemap.php, (29) mod.tagdoc.php, (30) mod.template.php, (31) mod.test.php, (32) mod.text.php, (33) mod.upload.php, and (34) mod.users.php in modul/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36105 - http://www.exploit-db.com/exploits/9322 - http://www.vupen.com/english/advisories/2009/2136