Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
0/0/threaded - http://www.bugreport.ir/?/44 - http://securityreason.com/securityalert/3959 - http://www.securityfocus.com/bid/29813
CVE ID: CVE-2008-2971 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links-extern.php in CiBlog 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29852 - https://www.exploit-db.com/exploits/5875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43267 - http://secunia.com/advisories/30807
CVE ID: CVE-2008-2972 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a comment action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5883 - http://secunia.com/advisories/31123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43272 - http://www.securityfocus.com/bid/29859
CVE ID: CVE-2008-2973 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) sitename and (2) wmessage parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5919 - http://www.securityfocus.com/bid/29910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43331
CVE ID: CVE-2008-2974 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5919 - http://www.securityfocus.com/bid/29910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43327
CVE ID: CVE-2008-2975 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43306 - http://www.securityfocus.com/bid/29907
CVE ID: CVE-2008-2976 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in TinX/cms 1.1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) language parameter to (a) include_me.php, (b) admin/ajax.php, and (c) admin/objects/catalog.ajaxhandler.php; and the (2) prefix parameter to (d) admin/inc/config.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5917 - https://exchange.xforce.ibmcloud.com/vulnerabili
ram Container: References: - https://www.exploit-db.com/exploits/5917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43305 - http://www.securityfocus.com/bid/29907
CVE ID: CVE-2008-2977 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the include_connection parameter to (1) edit_top_feature.php and (2) edit_topics_feature.php in phpi/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43311 - https://www.exploit-db.com/exploits/5920 - http://www.securityfocus.com/bid/29909
CVE ID: CVE-2008-2978 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43312 - http://www.securityfocus.com/bid/29909
CVE ID: CVE-2008-2979 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTML via the (1) top_page and (2) end_page parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43313 - https://www.exploit-db.com/exploits/5920 - http://www.securityfocus.com/bid/29909
CVE ID: CVE-2008-2980 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) error_meldung parameter to admin/features/register/register.php, the (2) feature_language[ueberschrift] parameter to admin/features/memberlist/memberlist.php, the (3) language_array[ueberschrift] parameter to admin/features/lostpassword/lostpassword.php, the (4) language_feature[titel] parameter to admin/features/kalender/eingabe.php, and the (5) language_feature[bildmenu] para
4) language_feature[titel] parameter to admin/features/kalender/eingabe.php, and the (5) language_feature[bildmenu] parameter to admin/features/fotogalerie/eingabe.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43260
CVE ID: CVE-2008-2981 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/templates/template_thumbnail.php in HomePH Design 2.10 RC2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the thumb_template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43256 - https://www.exploit-db.com/exploits/5903
CVE ID: CVE-2008-2982 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) thumb_template parameter to (a) admin/templates/template_thumbnail.php, and the (2) language parameter to (b) account/account.php, (c) downloads/downloads.php, (d) forum/forum.php, (e) fotogalerie/delete.php, and (f) fotogalerie/fotogalerie.php in admin/features/. Additional Analyst Notes: - CVE Program Containe
rie/delete.php, and (f) fotogalerie/fotogalerie.php in admin/features/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43258
CVE ID: CVE-2008-2983 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43291 - https://www.exploit-db.com/exploits/5914
CVE ID: CVE-2008-2984 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers to inject arbitrary web script or HTML via the lang[be_red_text] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29891 - https://www.exploit-db.com/exploits/5905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43266
CVE ID: CVE-2008-2985 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page_language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29891 - https://www.exploit-db.com/exploits/5905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43265
CVE ID: CVE-2008-2986 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the ourlinux_root_path parameter to (1) adodb-errorpear.inc.php and (2) adodb-pear.inc.php in adodb/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5897 - http://www.securityfocus.com/bid/29880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43253
CVE ID: CVE-2008-2987 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_edit_submenu.php, (2) admin_new_submenu.php, and (3) admin_edit_topmenu.php in admin/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493568/100/0/threaded - http://securityreason.com/securityalert/3958 - http://secunia.com/advisories/30834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43284 - http://ww
lert/3958 - http://secunia.com/advisories/30834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43284 - http://www.securityfocus.com/bid/29884
CVE ID: CVE-2008-2988 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493568/100/0/threaded - http://securityreason.com/securityalert/3958 - http://secunia.com/advisories/30834 - http://www.securityfocus.com/bid/29884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/432
com/advisories/30834 - http://www.securityfocus.com/bid/29884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43282
CVE ID: CVE-2008-2989 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary SQL commands via the go parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5908 - http://www.securityfocus.com/bid/29897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43257
CVE ID: CVE-2008-2990 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ff_compath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43290 - http://www.securityfocus.com/bid/29904 - http://securityreason.com/securityalert/3967 - https://www.exploit-db.com/exploits/5915
CVE ID: CVE-2008-2991 State: PUBLISHED Published: 2008-07-09T18:00:00.000Z Last Updated: 2025-04-23T15:43:37.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Help Errors log. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/30137 - http://www.vupen.com/english/advisories/2008/2026/references - http://secunia.com/advisories/31001 - http://securitytracker.com/id?1020442 - http://www.adobe.com/support/security/bulletins/apsb08-16.html
CVE ID: CVE-2008-2992 State: PUBLISHED Published: 2008-11-04T18:00:00.000Z Last Updated: 2025-10-22T00:05:55.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/30035 - http://secunia.com/advisories/32700 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609 - http://www.securityfocus.com/arc
m/advisories/32700 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609 - http://www.securityfocus.com/archive/1/498027/100/0/threaded - http://secunia.com/secunia_research/2008-14/ - http://www.securityfocus.com/bid/32091 - http://osvdb.org/49520 - http://secunia.com/advisories/35163 - http://download.oracle.com/sunalerts/1019937.1.html - http://secunia.com/advisories/32872 - https://www.exploit-db.com/exploits/7006 - http://securityreason.com/securityalert/4549 - http://www.coresecurity.com/content/adobe-reader-buffer-overflow - http://www.zerodayinitiative.com/advisories/ZDI-08-072/ - http://www.adobe.com/support/security/bulletins/apsb08-19.html - http://www.securityfocus.c
com/advisories/ZDI-08-072/ - http://www.adobe.com/support/security/bulletins/apsb08-19.html - http://www.securityfocus.com/archive/1/498055/100/0/threaded - https://www.exploit-db.com/exploits/6994 - http://www.vupen.com/english/advisories/2009/0098 - http://secunia.com/advisories/29773 - http://www.us-cert.gov/cas/techalerts/TA08-309A.html - http://www.securitytracker.com/id?1021140 - http://www.securityfocus.com/archive/1/498032/100/0/threaded - http://www.vupen.com/english/advisories/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.redhat.com/support/errata/RHSA-2008-0974.html - http://www.kb.cert.org/vuls/id/593409 - http://support.norte
http://www.redhat.com/support/errata/RHSA-2008-0974.html - http://www.kb.cert.org/vuls/id/593409 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801
CVE ID: CVE-2008-2993 State: PUBLISHED Published: 2008-07-03T17:47:00 Last Updated: 2024-08-07T09:21:35.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) fog_lang and (2) fog_skin parameters, probably related to libs/required/share.inc; and possibly the (3) fog_pseudo, (4) fog_posted, (5) fog_password, and (6) fog_cook parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3971 - http://www.securityfocus.com/bid/29651 - https://exchange.xforce.i
ces: - http://securityreason.com/securityalert/3971 - http://www.securityfocus.com/bid/29651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42985 - https://www.exploit-db.com/exploits/5784 - http://secunia.com/advisories/30613
CVE ID: CVE-2008-2994 State: PUBLISHED Published: 2008-07-03T17:47:00 Last Updated: 2024-08-07T09:21:34.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the (1) annuaire parameter to (a) last_records.php and (b) annuaire.php and the (2) by and (3) cat_id parameters to annuaire.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493273/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42997 - http://securityreason.com/securityalert/3969 - http://www.securityfocus.co
e.xforce.ibmcloud.com/vulnerabilities/42997 - http://securityreason.com/securityalert/3969 - http://www.securityfocus.com/bid/29659
CVE ID: CVE-2008-2995 State: PUBLISHED Published: 2008-07-03T17:47:00 Last Updated: 2024-08-07T09:21:34.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via (1) the annuaire parameter to annuaire.php or (2) the username field in admin/login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493273/100/0/threaded - http://securityreason.com/securityalert/3969 - http://www.securityfocus.com/bid/29659
CVE ID: CVE-2008-2996 State: PUBLISHED Published: 2008-07-03T17:47:00 Last Updated: 2024-08-07T09:21:34.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchquery parameter in a getsearch action, and the (2) board_id parameter in a viewboard action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43022 - http://www.securityfocus.com/bid/29685 - https://www.exploit-db.com/exploits/5791 - http://securityreason.com/securi
2 - http://www.securityfocus.com/bid/29685 - https://www.exploit-db.com/exploits/5791 - http://securityreason.com/securityalert/3970
CVE ID: CVE-2008-2997 State: PUBLISHED Published: 2008-07-03T17:47:00 Last Updated: 2024-08-07T09:21:34.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Gravity Board X (GBX) 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit (aka create new thread) action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29685 - https://www.exploit-db.com/exploits/5791 - http://securityreason.com/securityalert/3970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43021
CVE ID: CVE-2008-2998 State: PUBLISHED Published: 2008-07-03T17:47:00 Last Updated: 2024-08-07T09:21:34.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/269479 - http://www.securityfocus.com/bid/29677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43008 - http://secunia.com/advisories/30618
CVE ID: CVE-2008-2999 State: PUBLISHED Published: 2008-07-03T17:47:00 Last Updated: 2024-08-07T09:21:34.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/269479 - http://www.securityfocus.com/bid/29677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43010 - http://secunia.com/advisories/30618
CVE ID: CVE-2008-3000 State: PUBLISHED Published: 2008-07-03T17:47:00 Last Updated: 2024-08-07T09:21:34.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/269479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43017 - http://www.securityfocus.com/bid/29677 - http://secunia.com/advisories/30618
CVE ID: CVE-2008-3001 State: PUBLISHED Published: 2008-07-03T17:47:00 Last Updated: 2024-08-07T09:21:35.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/269479 - http://www.securityfocus.com/bid/29677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43011 - http://secunia.com/advisories/30618
CVE ID: CVE-2008-3002 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3003 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:21:34.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.securityfocus.com/bid/30641 - http://marc.info/?l=bugtraq&m=
/www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.securityfocus.com/bid/30641 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043 - http://www.securitytracker.com/id?1020669 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5951 - http://secunia.com/advisories/31454 - http://www.vupen.com/english/advisories/2008/2347