Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6370 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32903 - https://www.exploit-db.com/exploits/7244 - http://www.securityfocus.com/bid/32503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46962 - http://osvdb.org/50317
CVE ID: CVE-2008-6371 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username (Username parameter). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50318 - http://www.securityfocus.com/bid/32508 - http://secunia.com/advisories/32893 - https://www.exploit-db.com/exploits/7254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46959
CVE ID: CVE-2008-6372 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46945 - http://www.securityfocus.com/bid/32524 - http://secunia.com/advisories/32930 - https://www.exploit-db.com/exploits/7271
CVE ID: CVE-2008-6373 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, "adaptive external commands," and "writing newlines and submitting service comments." Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200907-15.xml - http://www.nagios.org/news/#88 - http://www.securitytracker.com/id?1022165 - http://marc.info/?l=bugtraq&m=124156641928637&w=2 - http://www.nagios.org/development/history/nagios-3x.php - http://secunia.com
arc.info/?l=bugtraq&m=124156641928637&w=2 - http://www.nagios.org/development/history/nagios-3x.php - http://secunia.com/advisories/32909 - http://marc.info/?l=bugtraq&m=124156641928637&w=2 - http://www.vupen.com/english/advisories/2009/1256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47081 - http://secunia.com/advisories/35002 - http://www.securityfocus.com/bid/32611
CVE ID: CVE-2008-6374 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to db/MailingList.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47018 - http://secunia.com/advisories/33000 - https://www.exploit-db.com/exploits/7325
CVE ID: CVE-2008-6375 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47034 - http://packetstormsecurity.org/0812-exploits/jbook-disclosesql.txt
CVE ID: CVE-2008-6376 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47033 - http://packetstormsecurity.org/0812-exploits/jbook-disclosesql.txt
CVE ID: CVE-2008-6377 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47069 - https://www.exploit-db.com/exploits/7335 - http://secunia.com/advisories/32986
CVE ID: CVE-2008-6378 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in calendar_Eventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47040 - http://www.securityfocus.com/bid/32609 - https://www.exploit-db.com/exploits/7327
CVE ID: CVE-2008-6379 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47039 - http://www.securityfocus.com/bid/32607 - http://secunia.com/advisories/32976
CVE ID: CVE-2008-6380 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46905 - http://www.securityfocus.com/bid/32548 - http://secunia.com/advisories/32911
CVE ID: CVE-2008-6381 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46973 - http://www.securityfocus.com/bid/32561 - https://www.exploit-db.com/exploits/7317 - http://osvdb.org/50373 - http://secunia.com/advisories/32870
CVE ID: CVE-2008-6382 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32889 - http://osvdb.org/50372 - https://www.exploit-db.com/exploits/7316
CVE ID: CVE-2008-6383 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47077 - http://secunia.com/advisories/32978 - http://www.securityfocus.com/bid/32626 - http://drupal.org/node/342246
CVE ID: CVE-2008-6384 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46944 - http://drupal.org/node/339495 - http://secunia.com/advisories/32905
CVE ID: CVE-2008-6385 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47066 - http://packetstorm.linuxsecurity.com/0812-exploits/revsense-sqlxss.txt
CVE ID: CVE-2008-6386 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47028 - http://www.securityfocus.com/bid/32598 - http://packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt
CVE ID: CVE-2008-6387 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46956 - https://www.exploit-db.com/exploits/7303 - http://www.vupen.com/english/advisories/2008/3293
CVE ID: CVE-2008-6388 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to cldb.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47016 - https://www.exploit-db.com/exploits/7324
CVE ID: CVE-2008-6389 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterprise allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32616 - https://www.exploit-db.com/exploits/7333 - http://secunia.com/advisories/32988
CVE ID: CVE-2008-6390 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/50318 - http://secunia.com/advisories/32893 - https://www.exploit-db.com/exploits/7254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46959
CVE ID: CVE-2008-6391 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47033
CVE ID: CVE-2008-6392 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46938 - http://packetstormsecurity.org/0812-exploits/z1exchange-sqlxss.txt
CVE ID: CVE-2008-6393 State: PUBLISHED Published: 2009-03-03T16:00:00 Last Updated: 2024-08-07T11:27:35.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34259 - http://bugs.gentoo.org/show_bug.cgi?id=252830 - http://secunia.com/advisories/34301 - https://www.exploit-db.com/exploits/755
//bugs.gentoo.org/show_bug.cgi?id=252830 - http://secunia.com/advisories/34301 - https://www.exploit-db.com/exploits/7555 - http://www.securityfocus.com/archive/1/499563 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00071.html - http://www.openwall.com/lists/oss-security/2009/02/25/5 - http://jolmos.blogspot.com/2008/12/psi-remote-integer-overflow.html - http://sourceforge.net/project/shownotes.php?release_id=658912 - http://secunia.com/advisories/33311 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00080.html - http://www.debian.org/security/2009/dsa-1741 - http://
t.com/archives/fedora-package-announce/2009-March/msg00080.html - http://www.debian.org/security/2009/dsa-1741 - http://secunia.com/advisories/34119
CVE ID: CVE-2008-6394 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T11:27:35.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6352 - http://secunia.com/advisories/31686 - http://www.gulftech.org/?node=research&article_id=00128-09022008 - http://www.securityfocus.com/archive/1/495907/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44852 - http://w
ecurityfocus.com/archive/1/495907/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44852 - http://www.securityfocus.com/bid/30979
CVE ID: CVE-2008-6395 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T11:27:35.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service (device crash) via a malformed HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44890 - http://www.securityfocus.com/bid/30988 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064226.html - http://secunia.com/advisories/31714 - http://www.securitytracker.com/id?1020807
CVE ID: CVE-2008-6396 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T11:27:35.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31010 - http://packetstormsecurity.org/0809-exploits/uploader6-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44897 - http://secunia.com/advisories/31735
CVE ID: CVE-2008-6397 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T11:27:35.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00312.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44879 - http://www.securityfocus.com/bid/30963
CVE ID: CVE-2008-6398 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T11:27:35.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: sng_regress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/recompiled$$.png, (2) /tmp/decompiled$$.sng, and (3) /tmp/canonicalized$$.sng temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44881 - http://lists.debian.org/debian-devel/2008/08/msg00283.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496407 - http://www.securityfocus.com/bid/30965
CVE ID: CVE-2008-6399 State: PUBLISHED Published: 2009-03-05T20:00:00Z Last Updated: 2024-09-16T18:56:11.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their user account" via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33109 - http://osvdb.org/51141 - http://secunia.com/advisories/33401 - http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno24/tabid/1188/Default.aspx
CVE ID: CVE-2008-6400 State: PUBLISHED Published: 2009-03-05T20:00:00 Last Updated: 2024-08-07T11:27:35.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in refbase before 0.9.5 allows remote attackers to inject arbitrary web script or HTML via the headerMsg parameter to (1) show.php and (2) search.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32372 - http://secunia.com/advisories/32815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46735 - http://sourceforge.net/project/shownotes.php?release_id=641612
CVE ID: CVE-2008-6401 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the kat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45392 - http://www.securityfocus.com/bid/31343 - http://secunia.com/advisories/31932 - https://www.exploit-db.com/exploits/6542
CVE ID: CVE-2008-6402 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mod_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6539 - http://www.securityfocus.com/bid/31341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45380
CVE ID: CVE-2008-6403 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpl_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6538 - http://www.securityfocus.com/bid/31339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45363
CVE ID: CVE-2008-6404 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the callback parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45302 - http://www.digitrustgroup.com/advisories/web-application-security-thyme2.html
CVE ID: CVE-2008-6405 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showcategory.php in Hotscripts Clone allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6545 - http://www.securityfocus.com/bid/31345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45362
CVE ID: CVE-2008-6406 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496605/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45345 - http://www.securityfocus.com/bid/31335 - http://secunia.com/advisories/31998
CVE ID: CVE-2008-6407 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the framefile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31706 - http://www.securityfocus.com/bid/31348 - https://www.exploit-db.com/exploits/6547