Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
xforce.ibmcloud.com/vulnerabilities/62379 - http://securityreason.com/securityalert/8223 - http://adv.salvatorefresta.net/JS_Calendar_1.5.1_Joomla_Component_Multiple_Remote_Vulnerabilities-09102010.txt - http://secunia.com/advisories/41766 - http://www.exploit-db.com/exploits/15224
CVE ID: CVE-2010-4796 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e parameter to resumeview.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62391 - http://bbs.wolvez.org/viewtopic.php?id=172 - http://www.securityfocus.com/bid/43907
CVE ID: CVE-2010-4797 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62374 - http://securityreason.com/securityalert/8222 - http://secunia.com/advisories/41763 - http://www.exploit-db.com/exploits/15220 - http://www.securityfocus.com/bid/43886 - http://packetstormsecurity.org/1010-exploits/flex
ploit-db.com/exploits/15220 - http://www.securityfocus.com/bid/43886 - http://packetstormsecurity.org/1010-exploits/flextimesheet-sql.txt
CVE ID: CVE-2010-4798 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62388 - http://www.securityfocus.com/bid/43905 - http://www.exploit-db.com/exploits/15232
CVE ID: CVE-2010-4799 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to authenticate.php and the (3) ID parameter to pwn.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8224 - http://www.securityfocus.com/bid/43906 - http://www.exploit-db.com/exploits/15223 - htt
yreason.com/securityalert/8224 - http://www.securityfocus.com/bid/43906 - http://www.exploit-db.com/exploits/15223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62377 - http://packetstormsecurity.org/1010-exploits/chipmunkpwngame-sql.txt - http://secunia.com/advisories/41760
CVE ID: CVE-2010-4800 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62389 - http://packetstormsecurity.org/1010-exploits/baconmap10-sql.txt - http://www.securityfocus.com/bid/43908 - http://www.exploit-db.com/exploits/15233 - http://www.johnleitch.net/Vulnerabilities/BaconMap.1.0.SQL.Injection/51 - http://secunia.com/advisories/41749 - http:
- http://www.johnleitch.net/Vulnerabilities/BaconMap.1.0.SQL.Injection/51 - http://secunia.com/advisories/41749 - http://securityreason.com/securityalert/8225
CVE ID: CVE-2010-4801 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the filepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15234 - http://www.securityfocus.com/bid/43908 - http://secunia.com/advisories/41749 - http://www.johnleitch.net/Vulnerabilities/BaconMap.1.0.Local.File.Inclusion/50 - http://packetstormsecurity.org/1010-exploits/baconmap10-lfi.txt - https://e
ities/BaconMap.1.0.Local.File.Inclusion/50 - http://packetstormsecurity.org/1010-exploits/baconmap10-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62390 - http://securityreason.com/securityalert/8229
CVE ID: CVE-2010-4802 State: PUBLISHED Published: 2011-05-03T00:03:00 Last Updated: 2024-08-07T04:02:29.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.20/Changes - https://github.com/kraih/mojo/commit/b3a1fb453eda447c0bb082cd9eed81bb75a7564a - https://github.com/kraih/mojo/commit/aa7c8da54b1ebd4ccb64aa66dede7b7cdb381c44 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952 - http://www.debian.org/security/20
4ccb64aa66dede7b7cdb381c44 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952 - http://www.debian.org/security/2011/dsa-2239
CVE ID: CVE-2010-4803 State: PUBLISHED Published: 2011-05-03T00:03:00 Last Updated: 2024-08-07T04:02:29.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.20/Changes - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952 - http://www.debian.org/security/2011/dsa-2239
CVE ID: CVE-2010-4804 State: PUBLISHED Published: 2011-06-09T10:00:00 Last Updated: 2024-08-07T04:02:29.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48256 - http://www.slashgear.com/android-data-theft-exploit-to-be-plugged-in-gingerbread-video-24116054/ - http://android.git.kernel.org/?p=platform/packages/apps/Browser.git%3Ba=commit%3Bh=604a598e1e01bda781600a45e0a971
054/ - http://android.git.kernel.org/?p=platform/packages/apps/Browser.git%3Ba=commit%3Bh=604a598e1e01bda781600a45e0a971898a582666 - http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability/ - http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=f440831d76817e837164ca18c7705e81d2391f87 - http://www.csc.ncsu.edu/faculty/jiang/nexuss.html
CVE ID: CVE-2010-4805 State: PUBLISHED Published: 2011-05-26T16:00:00Z Last Updated: 2024-09-17T00:21:21.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251. Additional Analyst Notes: - CVE Program Container: References: - http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread
st Notes: - CVE Program Container: References: - http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c377411f2494a931ff7facdbb3a6839b1266bcf6 - http://www.securityfocus.com/bid/46637 - https://bugzilla.redhat.com/show_bug.cgi?id=657303
CVE ID: CVE-2010-4806 State: PUBLISHED Published: 2011-05-26T16:00:00Z Last Updated: 2024-09-16T23:15:34.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authoring tool in IBM Web Content Manager (WCM) 6.1.5, and 7.0.0.1 before CF003, allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain resource editor privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM26755 - http://www.ibm.com/support/docview.wss?uid=swg24029452
CVE ID: CVE-2010-4807 State: PUBLISHED Published: 2011-05-26T16:00:00Z Last Updated: 2024-09-16T20:02:15.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in IBM Web Content Manager (WCM) 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service (infinite recursive query) via unspecified vectors, related to a StackOverflowError exception. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg24029452 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM36141
CVE ID: CVE-2010-4808 State: PUBLISHED Published: 2011-07-08T22:00:00 Last Updated: 2024-08-07T04:02:29.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63241 - http://www.exploit-db.com/exploits/15517 - http://www.securityfocus.com/bid/44863 - http://packetstormsecurity.org/files/view/95827/webmatic-sql.txt
CVE ID: CVE-2010-4809 State: PUBLISHED Published: 2011-07-08T22:00:00 Last Updated: 2024-08-07T04:02:30.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63237 - http://packetstormsecurity.org/files/view/95823/dbsite-sql.txt - http://www.securityfocus.com/bid/44870
CVE ID: CVE-2010-4810 State: PUBLISHED Published: 2011-07-08T22:00:00 Last Updated: 2024-08-07T04:02:29.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the theme_file parameter to (1) includes/window_top.php and (2) header.php, and the (3) lang_file parameter to control/common.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15510 - http://www.securityfocus.com/bid/44868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63236
CVE ID: CVE-2010-4811 State: PUBLISHED Published: 2011-07-08T22:00:00 Last Updated: 2024-08-07T04:02:29.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email], and (3) user[phone] parameters in a modifyDetails action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63284 - http://bbs.wolvez.org/viewtopic.php?id=180
CVE ID: CVE-2010-4812 State: PUBLISHED Published: 2011-07-08T22:00:00 Last Updated: 2024-08-07T04:02:29.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL commands via the (1) tids[] parameter to ajaxadmin.php and the (2) msgids[] parameter to ajaxmember.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63286 - http://www.6kbbs.net/view-487.html - http://secunia.com/advisories/42204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63285 - http://bbs.wolvez.org/viewtopic.php?id=180
CVE ID: CVE-2010-4813 State: PUBLISHED Published: 2011-07-08T22:00:00 Last Updated: 2024-08-07T04:02:29.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Category Tokens module 6.x before 6.x-1.1 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML by editing or creating vocabulary names, which are not properly handled in token help. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42168 - http://osvdb.org/69145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63203 - http://www.securityfocus.com/bid/44780 - http
b.org/69145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63203 - http://www.securityfocus.com/bid/44780 - http://drupal.org/node/968176
CVE ID: CVE-2010-4814 State: PUBLISHED Published: 2011-07-08T22:00:00 Last Updated: 2024-08-07T04:02:29.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index1.php in Best Soft Inc. (BSI) Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44854 - http://www.exploit-db.com/exploits/15531 - http://packetstormsecurity.org/files/view/95829/phpbsiahbs-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/63268
CVE ID: CVE-2010-4815 State: PUBLISHED Published: 2020-02-05T18:54:09 Last Updated: 2024-08-07T04:02:29.503Z Vendors: coppermine gallery Products: coppermine gallery Problem Types: Other Description: Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/08/19/7 - https://seclists.org/oss-sec/2010/q1/121 - https://forum.coppermine-gallery.net/index.php/topic%2C63510.0.html
CVE ID: CVE-2010-4816 State: PUBLISHED Published: 2021-06-22T13:44:58 Last Updated: 2024-08-07T04:02:29.038Z Vendors: n/a Products: FreeBSD and OpenBSD ftpd service Problem Types: CWE-476 Description: It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd service. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=144761 - https://seclists.org/fulldisclosure/2010/Mar/117 - https://seclists.org/oss-sec/2011/q3/284
CVE ID: CVE-2010-4817 State: PUBLISHED Published: 2019-11-13T21:54:03 Last Updated: 2024-08-07T04:02:29.528Z Vendors: pithos Products: pithos Problem Types: of arbitrary file via symlinks Description: pithos before 0.3.5 allows overwrite of arbitrary files via symlinks. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4817 - https://access.redhat.com/security/cve/cve-2010-4817 - https://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-4817.html - https://www.openwall.com/lists/oss-security/2011/08/19/10 - https://bugs.launchpad.net/pithos/%2Bbug/667896
CVE ID: CVE-2010-4818 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-08-07T04:02:29.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via (1) a crafted request that triggers a client swap in glx/glxcmdsswap.c; or (2) a crafted length or (3) a negative value in the screen field in a request to glx/glxcmds.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=28823 - http://www.openwall.com/lists/oss-security/2011/09/23/6 - http://rhn.redhat.com/err
edesktop.org/show_bug.cgi?id=28823 - http://www.openwall.com/lists/oss-security/2011/09/23/6 - http://rhn.redhat.com/errata/RHSA-2011-1359.html - http://rhn.redhat.com/errata/RHSA-2011-1360.html - http://www.openwall.com/lists/oss-security/2011/09/23/4 - http://www.openwall.com/lists/oss-security/2011/09/22/7 - http://cgit.freedesktop.org/xorg/xserver/commit?id=3f0d3f4d97bce75c1828635c322b6560a45a037f - https://bugzilla.redhat.com/show_bug.cgi?id=740954 - http://cgit.freedesktop.org/xorg/xserver/commit?id=ec9c97c6bf70b523bc500bd3adf62176f1bb33a4 - http://cgit.freedesktop.org/xorg/xserver/commit?id=6c69235a9dfc52e4b4e47630ff4bab1a820eb543
CVE ID: CVE-2010-4819 State: PUBLISHED Published: 2012-09-05T23:00:00Z Last Updated: 2024-08-07T04:02:29.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/09/23/5 - http://rhn.redhat.com/errata/RHSA-2011-1359.html - http://rhn.redhat.com/errata/RHSA-2011-1360.html - https://bugs.freedesktop.org/show
at.com/errata/RHSA-2011-1359.html - http://rhn.redhat.com/errata/RHSA-2011-1360.html - https://bugs.freedesktop.org/show_bug.cgi?id=28801 - http://cgit.freedesktop.org/xorg/xserver/commit/render/render.c?id=5725849a1b427cd4a72b84e57f211edb35838718 - http://aix.software.ibm.com/aix/efixes/security/X_advisory2.asc - http://securitytracker.com/id?1026149 - http://www.openwall.com/lists/oss-security/2011/09/22/8
CVE ID: CVE-2010-4820 State: PUBLISHED Published: 2014-10-27T01:00:00 Last Updated: 2024-08-07T04:02:29.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=599564 - https://bugzilla.redhat.com/show_bug.cgi?id=771853 - http://www.openwall.com/lists/oss-security/2012/01/04/7 - http://bugs.ghostscript.com/show_bug.cgi?id=691339 -
=771853 - http://www.openwall.com/lists/oss-security/2012/01/04/7 - http://bugs.ghostscript.com/show_bug.cgi?id=691339 - http://rhn.redhat.com/errata/RHSA-2012-0096.html - http://rhn.redhat.com/errata/RHSA-2012-0095.html - http://www.securityfocus.com/archive/1/511433 - http://www.securityfocus.com/bid/51847
CVE ID: CVE-2010-4821 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-07T04:02:30.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://dl.packetstormsecurity.net/1009-exploits/phpmyfaq268-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62092 - http://secunia.com/advisories/41625 - http://www.phpmyfaq.de/advisory_2010-09-28.php - http://www.openwall.com/lists/oss-security/2012/03/08/2 - http://seclists.org/bugtraq/20
aq.de/advisory_2010-09-28.php - http://www.openwall.com/lists/oss-security/2012/03/08/2 - http://seclists.org/bugtraq/2010/Sep/207 - http://www.openwall.com/lists/oss-security/2012/03/08/7 - http://www.osvdb.org/68268
CVE ID: CVE-2010-4822 State: PUBLISHED Published: 2012-09-17T17:00:00Z Last Updated: 2024-09-17T00:16:31.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/model/MySQLDatabase.php in SilverStripe 2.4.x before 2.4.4, when the site is running in "live mode," allows remote attackers to obtain the SQL queries for a page via the showqueries and ajax parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://secunia.com/advisories/42346 - http://www.osvdb.org/69885 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://www.openwa
enwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://www.openwall.com/lists/oss-security/2011/01/03/12 - http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4 - http://open.silverstripe.org/changeset/114783
CVE ID: CVE-2010-4823 State: PUBLISHED Published: 2012-09-17T17:00:00 Last Updated: 2024-08-07T04:02:30.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when custom error handling is not used, allows remote attackers to inject arbitrary web script or HTML via "missing URL actions." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/69886 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://www.securityfocus.com/bid/45367 - http://secunia.com/advisories/42346 - ht
.com/lists/oss-security/2012/05/01/3 - http://www.securityfocus.com/bid/45367 - http://secunia.com/advisories/42346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63988 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://www.openwall.com/lists/oss-security/2011/01/03/12 - http://open.silverstripe.org/changeset/114444 - http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4
CVE ID: CVE-2010-4824 State: PUBLISHED Published: 2012-09-17T17:00:00 Last Updated: 2024-08-07T04:02:29.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remote attackers to execute arbitrary SQL commands via the locale parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63989 - http://open.silverstripe.org/changeset/114517 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://open.silverstripe.org
lverstripe.org/changeset/114517 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://open.silverstripe.org/changeset/114515 - http://www.securityfocus.com/bid/45367 - http://secunia.com/advisories/42346 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://www.osvdb.org/69884 - http://www.openwall.com/lists/oss-security/2011/01/03/12 - http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4 - http://doc.silverstripe.org/framework/en/trunk/changelogs//2.3.10