Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6481 State: PUBLISHED Published: 2009-03-17T19:12:00 Last Updated: 2024-08-07T11:34:46.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43526 - https://www.exploit-db.com/exploits/5989
CVE ID: CVE-2008-6482 State: PUBLISHED Published: 2009-03-18T15:00:00 Last Updated: 2024-08-07T11:34:46.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfig_live_site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46260 - http://www.securityfocus.com/bid/32041 - https://www.exploit-db.com/exploits/6928 - http://secunia.com/advisories/32520
CVE ID: CVE-2008-6483 State: PUBLISHED Published: 2009-03-18T15:00:00 Last Updated: 2024-08-07T11:34:46.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase or Froogle) component 1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32533 - https://www.exploit-db.com/exploits/6975 - http://osvdb.org/49529 - http://www.securityfocus.com/bid/32098
CVE ID: CVE-2008-6484 State: PUBLISHED Published: 2009-03-18T15:00:00 Last Updated: 2024-08-07T11:34:46.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Mole Group Taxi Map Script (aka Taxi Calc Dist Script) allows remote attackers to execute arbitrary SQL commands via the user field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32576 - http://osvdb.org/49695 - https://www.exploit-db.com/exploits/7010 - http://www.securityfocus.com/bid/32140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46382
CVE ID: CVE-2008-6485 State: PUBLISHED Published: 2009-03-18T15:00:00 Last Updated: 2024-08-07T11:34:46.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers to execute arbitrary SQL commands via the ctg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46436 - https://www.exploit-db.com/exploits/7026
CVE ID: CVE-2008-6486 State: PUBLISHED Published: 2009-03-18T15:00:00 Last Updated: 2024-08-07T11:34:46.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in slideshow_uploadvideo.content.php in SharedLog, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46293 - http://www.securityfocus.com/bid/32035 - http://www.securityfocus.com/archive/1/497978/100/0/threaded - http://osvdb.org/51911
CVE ID: CVE-2008-6487 State: PUBLISHED Published: 2009-03-18T15:00:00 Last Updated: 2024-08-07T11:34:47.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin and (2) password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46500 - https://www.exploit-db.com/exploits/7067 - http://www.securityfocus.com/bid/32217
CVE ID: CVE-2008-6488 State: PUBLISHED Published: 2009-03-18T15:00:00 Last Updated: 2024-08-07T11:34:47.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the Admin field in a login action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49337 - http://www.securityfocus.com/bid/32159
CVE ID: CVE-2008-6489 State: PUBLISHED Published: 2009-03-19T10:00:00 Last Updated: 2024-08-07T11:34:47.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MyAlbum component (com_myalbum) 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the album parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41510 - http://www.securityfocus.com/bid/28496
CVE ID: CVE-2008-6490 State: PUBLISHED Published: 2009-03-19T10:00:00 Last Updated: 2024-08-07T11:34:46.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: function/update_xml.php in FLABER 1.1 and earlier allows remote attackers to overwrite arbitrary files by specifying the target filename in the target_file parameter. NOTE: this can be leveraged for code execution by overwriting a PHP file, as demonstrated using function/upload_file.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41715 - http://www.vupen.com/english/advisories/2008/1163/references
CVE ID: CVE-2008-6491 State: PUBLISHED Published: 2009-03-19T10:00:00 Last Updated: 2024-08-07T11:34:47.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28526/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/41574 - http://www.securityfocus.com/bid/28526
CVE ID: CVE-2008-6492 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T11:34:46.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33007 - http://osvdb.org/51305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47129 -
p://secunia.com/advisories/33007 - http://osvdb.org/51305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47129 - http://www.securityfocus.com/bid/32661 - https://www.exploit-db.com/exploits/7354
CVE ID: CVE-2008-6493 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T11:34:46.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy Content Management Publishing stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database/News.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49392 - https://www.exploit-db.com/exploits/7340
CVE ID: CVE-2008-6494 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T11:34:46.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49400 - https://www.exploit-db.com/exploits/7332
CVE ID: CVE-2008-6495 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T11:34:46.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47078 - http://secunia.com/advisories/32325 - http://packetstormsecurity.org/0812-exploits/yappang-xss.txt - http://www.securityfocus.com/bid/32623 - http://jvn.jp/en/jp/JVN55833077/index.html
CVE ID: CVE-2008-6496 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T11:34:46.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7358 - http://secunia.com/advisories/32990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47166 - http://www.securityfocus.com/bid/32664
CVE ID: CVE-2008-6497 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T11:34:47.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTTP requests for the /- URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33026 - http://osvdb.org/50673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47183 - https://www.exploit-db.com/exploits/7387 - http://www.securityfocus.com/archive/1/499010/100/0/threaded - http://www.securityfocus.com/bid/32696
CVE ID: CVE-2008-6498 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T11:34:46.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7384 - http://secunia.com/advisories/32134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47201
CVE ID: CVE-2008-6499 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T11:34:46.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows remote attackers to spoof critical variables, as demonstrated by setting the REMOTE_ADDR variable to 127.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47202
CVE ID: CVE-2008-6500 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T11:34:47.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47003 - http://www.securityfocus.com/bid/32568 - http://packetstormsecurity.org/0812-exploits/aspshoppingcart-xss.txt
CVE ID: CVE-2008-6501 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T11:34:47.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32758 - https://www.exploit-db.com/exploits/7409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47241 - http://secunia.com/advisories/33088 - http://osvdb.org/50696
CVE ID: CVE-2008-6502 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T11:34:47.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to select an arbitrary local PHP script as an avatar via a .. (dot dot) in the avatar parameter, and cause other users to execute this script by using sendData.php to send a message to (1) an individual user or (2) a room, leading to cross-site request forgery (CSRF), cross-site scripting (XSS), or other impacts. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50697 - https://www.exploit-db.com/exploits
ional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50697 - https://www.exploit-db.com/exploits/7409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47242 - http://secunia.com/advisories/33088
CVE ID: CVE-2008-6503 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T11:34:47.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/login.php and (2) order.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498994/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47158 - http://www.securityfocus.com/bid/32689
CVE ID: CVE-2008-6504 State: PUBLISHED Published: 2009-03-23T14:00:00 Last Updated: 2024-08-07T11:34:47.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \u0023 representation for the # character. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32495 - http://fisheye6.atlas
tional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32495 - http://fisheye6.atlassian.com/cru/CR-9/ - http://struts.apache.org/2.x/docs/s2-003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46328 - http://www.vupen.com/english/advisories/2008/3003 - http://www.vupen.com/english/advisories/2008/3004 - http://www.securityfocus.com/bid/32101 - http://secunia.com/advisories/32497 - http://jira.opensymphony.com/browse/XW-641 - http://issues.apache.org/struts/browse/WW-2692 - http://osvdb.org/49732
CVE ID: CVE-2008-6505 State: PUBLISHED Published: 2009-03-23T14:00:00 Last Updated: 2024-08-07T11:34:46.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbitrary files via a ..%252f (encoded dot dot slash) in a URI with a /struts/ path, related to (1) FilterDispatcher in 2.0.x and (2) DefaultStaticContentLoader in 2.1.x. Additional Analyst Notes: - CVE Program Container: References: - http://issues.apache.org/struts/browse/WW-2779 - http://struts.apache.org/2.x/docs/s2-004.html - http://www.vupen.com/english/advisories/2008/3003 - http://secu
W-2779 - http://struts.apache.org/2.x/docs/s2-004.html - http://www.vupen.com/english/advisories/2008/3003 - http://secunia.com/advisories/32497 - http://www.securityfocus.com/bid/32104 - http://osvdb.org/49733 - http://osvdb.org/49734
CVE ID: CVE-2008-6506 State: PUBLISHED Published: 2009-03-23T16:00:00 Last Updated: 2024-08-07T11:34:47.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpbb.com/community/viewtopic.php?f=14&t=1352565 - http://secunia.com/advisories/33166 - http://www.securityfocus.com/bid/32842 - http://www.phpbb.com/support/documents.php?mode=changelog&version=3#v303 - http://www.openwall.com/lists/oss-security/2009/02/06/2 - http://www.osvdb.org/50806 - http
e=changelog&version=3#v303 - http://www.openwall.com/lists/oss-security/2009/02/06/2 - http://www.osvdb.org/50806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47370
CVE ID: CVE-2008-6507 State: PUBLISHED Published: 2009-03-23T16:00:00Z Last Updated: 2024-09-17T02:58:21.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpbb.com/community/viewtopic.php?f=14&t=1352565 - http://secunia.com/advisories/33166 - http://www.phpbb.com/support/documents.php?mode=changelog&version=3#v303 - http://www.openwall.com/lists/oss-security/2009/02/06/2 - http
com/support/documents.php?mode=changelog&version=3#v303 - http://www.openwall.com/lists/oss-security/2009/02/06/2 - http://www.osvdb.org/50806
CVE ID: CVE-2008-6508 State: PUBLISHED Published: 2009-03-23T19:26:00 Last Updated: 2024-08-07T11:34:47.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/.. sequence in a URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7075 - http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt - http://www.igniterealtime.org/builds/openfire/
ts/7075 - http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt - http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html - http://secunia.com/advisories/32478 - http://osvdb.org/49663 - http://www.andreas-kurtz.de/archives/63 - http://www.igniterealtime.org/issues/browse/JM-1489 - http://www.securityfocus.com/bid/32189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46488 - http://www.securityfocus.com/archive/1/498162/100/0/threaded - http://www.vupen.com/english/advisories/2008/3061
CVE ID: CVE-2008-6509 State: PUBLISHED Published: 2009-03-23T19:26:00 Last Updated: 2024-08-07T11:34:46.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7075 - http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt - http://www.igniterealtime.org/issues/browse/JM-1488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46487 - http://secunia.com/advisories/32478 - http://www.a
M-1488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46487 - http://secunia.com/advisories/32478 - http://www.andreas-kurtz.de/archives/63 - http://www.securityfocus.com/bid/32189 - http://www.securityfocus.com/archive/1/498162/100/0/threaded - http://osvdb.org/51912 - http://www.vupen.com/english/advisories/2008/3061
CVE ID: CVE-2008-6510 State: PUBLISHED Published: 2009-03-23T19:26:00 Last Updated: 2024-08-07T11:34:47.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7075 - http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt - http://www.igniterealtime.org/issues/browse/JM-629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46486 - http://www.securityfocus.com/bid/32189 - http://www.se
29 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46486 - http://www.securityfocus.com/bid/32189 - http://www.securityfocus.com/archive/1/498162/100/0/threaded - http://www.vupen.com/english/advisories/2008/3061
CVE ID: CVE-2008-6511 State: PUBLISHED Published: 2009-03-23T19:26:00 Last Updated: 2024-08-07T11:34:46.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7075 - http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt - http://www.securityfocus.com/archive/1/498162/100/0/threaded
CVE ID: CVE-2008-6512 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T11:34:46.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in the WorkerPool API in Google Gears before 0.5.4.2 allows remote attackers to bypass the Same Origin Policy and the intended access restrictions of the allowCrossOrigin function by hosting an assumed-safe file type containing Google Gear commands on the target domain, then accessing that file from the attacking domain, whose response headers are not checked and cause the worker code to run in the target domain. Additional Analyst Notes: - CVE Program Container: References: - http://blog.watchfire.c
de to run in the target domain. Additional Analyst Notes: - CVE Program Container: References: - http://blog.watchfire.com/wfblog/2008/12/breaking-google-gears-cross-origin-communication-model.html - http://code.google.com/apis/gears/upcoming/api_workerpool.html#cross_origin - https://exchange.xforce.ibmcloud.com/vulnerabilities/47173 - http://secunia.com/advisories/33062 - http://www.securityfocus.com/bid/32698 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-December/066291.html
CVE ID: CVE-2008-6513 State: PUBLISHED Published: 2009-03-24T14:00:00 Last Updated: 2024-08-07T11:34:46.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=113755&release_id=667918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46977 - http://secunia.com/advisories/34476 - http://www.securityfocus.com/bid/
ange.xforce.ibmcloud.com/vulnerabilities/46977 - http://secunia.com/advisories/34476 - http://www.securityfocus.com/bid/32559 - https://www.exploit-db.com/exploits/7312