Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3026 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in OneClick CMS (aka Sisplet CMS) 2008-01-24 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43544 - https://www.exploit-db.com/exploits/5984
CVE ID: CVE-2008-3027 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in get_article.php in VanGogh Web CMS 0.9 allows remote attackers to execute arbitrary SQL commands via the article_ID parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5985 - http://www.securityfocus.com/bid/30033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43534
CVE ID: CVE-2008-3028 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Send-A-Card (sr_sendcard) extension 2.2.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43510 - http://osvdb.org/46624 - http://www.securityfocus.com/bid/30028 - http://typo3.org/teams/security/security-bulletins/typo3-20080701-3/ - http://secunia.com/advisories/30906
CVE ID: CVE-2008-3029 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WEC Discussion Forum (wec_discussion) extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-4/ - http://www.securityfocus.com/bid/30026 - http://secunia.com/advisories/30905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43514
CVE ID: CVE-2008-3030 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in an urunler action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5987 - http://secunia.com/advisories/30896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43531 - http://www.securityfocus.com/bid/30044
CVE ID: CVE-2008-3031 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Simple PHP Agenda 2.2.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43540 - https://www.exploit-db.com/exploits/5982 - http://secunia.com/advisories/30909
CVE ID: CVE-2008-3032 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the phpMyAdmin (phpmyadmin) extension 3.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43508 - http://www.securityfocus.com/bid/30039 - http://typo3.org/teams/security/security-bulletins/typo3-20080701-2/ - http://secunia.com/advisories/30884
CVE ID: CVE-2008-3033 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to access admin functions and have unspecified other impact, as demonstrated by (1) an IdFlux request to supprimer_flux.php and (2) a TpsRafraich request to modifier_tps_rafraich.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30016 - http://securityreason.com/securityalert/3975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43509 - ht
d/30016 - http://securityreason.com/securityalert/3975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43509 - http://www.securityfocus.com/archive/1/493783/100/0/threaded
CVE ID: CVE-2008-3034 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) IdFlux parameter to admin/fonctions/supprimer_flux.php and the (2) IdTag parameter to admin/fonctions/supprimer_tag.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43507 - http://securityreason.com/securityalert/3975 - http://www.securityfocus.com/archive/1/493783/100/0/threaded
CVE ID: CVE-2008-3035 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier allows remote authenticated users to execute arbitrary SQL commands via the boardID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43529 - https://www.exploit-db.com/exploits/5991 - http://www.securityfocus.com/bid/30059 - http://secunia.com/advisories/30919
CVE ID: CVE-2008-3036 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitrary local files, and probably remote files, via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43539 - http://www.securityfocus.com/bid/30061 - https://www.exploit-db.com/exploits/5992
CVE ID: CVE-2008-3037 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43491 - http://www.securityfocus.com/bid/30048
CVE ID: CVE-2008-3038 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://www.securityfocus.com/bid/30049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43492
CVE ID: CVE-2008-3039 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://www.securityfocus.com/bid/30054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43477
CVE ID: CVE-2008-3040 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://www.securityfocus.com/bid/30054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43478
CVE ID: CVE-2008-3041 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "broken access control." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://www.securityfocus.com/bid/30054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43476
CVE ID: CVE-2008-3042 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://www.securityfocus.com/bid/30054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43476
CVE ID: CVE-2008-3043 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WEC Discussion Forum (wec_discussion) extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-4/ - http://www.securityfocus.com/bid/30026 - http://secunia.com/advisories/30905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43512
CVE ID: CVE-2008-3044 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the News Calendar (newscalendar) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://www.securityfocus.com/bid/30056 - http://secunia.com/advisories/30885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43485
CVE ID: CVE-2008-3045 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Industry Database (aka Branchendatenbank pro_industrydb) extension 1.0.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Insufficient Verification of Data Authenticity." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30047 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-20080701-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43490
CVE ID: CVE-2008-3046 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the Packman (kb_packman) extension 0.2.1 and earlier for TYPO3 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30052 - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://secunia.com/advisories/30885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43480
CVE ID: CVE-2008-3047 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the KB Unpack (kb_unpack) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43481 - http://www.securityfocus.com/bid/30053 - http://secunia.com/advisories/30885
CVE ID: CVE-2008-3048 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Unprotected test functionality." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43487 - http://www.securityfocus.com/bid/30057
CVE ID: CVE-2008-3049 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43486 - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://www.securityfocus.com/bid/30057
CVE ID: CVE-2008-3050 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43488 - http://www.securityfocus.com/bid/30057
CVE ID: CVE-2008-3051 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Pinboard extension 0.0.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43489 - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/
CVE ID: CVE-2008-3052 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://secunia.com/advisories/30885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43484 - http://www.securityfocus.com/bid/30051
CVE ID: CVE-2008-3053 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://secunia.com/advisories/30885 - http://www.securityfocus.com/bid/30051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43483
CVE ID: CVE-2008-3054 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Branchenbuch (aka Yellow Pages o (mh_branchenbuch) extension 0.8.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://secunia.com/advisories/30885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43482
CVE ID: CVE-2008-3055 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:35.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Support view (ext_tbl) extension 0.0.102 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - http://www.securityfocus.com/bid/30041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43479
CVE ID: CVE-2008-3056 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Codeon Petition (cd_petition) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43475 - http://www.securityfocus.com/bid/30040
CVE ID: CVE-2008-3057 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T09:21:34.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/50/oempro.txt - http://www.osvdb.org/50321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47109 - http://octeth.com/blog/category/oempro4/
CVE ID: CVE-2008-3058 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T09:21:35.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote attackers to execute arbitrary SQL commands via the FormValue_Email parameter (aka Email field) to index.php in (1) member/, (2) client/, or (3) admin/; or (4) the FormValue_SearchKeywords parameter to client/campaign_track.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/50323 - http://osvdb.org/ref/50/oempro.txt - http://www.osvdb.org/50322 - https://exchange.xforce.ibm
tp://www.osvdb.org/50323 - http://osvdb.org/ref/50/oempro.txt - http://www.osvdb.org/50322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47112 - http://octeth.com/blog/category/oempro4/ - http://www.securityfocus.com/bid/32784
CVE ID: CVE-2008-3059 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T09:21:35.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: member/settings_account.php in Octeth Oempro 3.5.5.1, and possibly other versions before 4, uses cleartext to transmit a password entered in the FormValue_Password field, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to the "Settings - Account Information" tab. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/50/oempro.txt - http://www.osvdb.org/50324 - http://octeth.com/blog/category/oempro4/ - https://exchange.xforce.ibmcloud.c
/oempro.txt - http://www.osvdb.org/50324 - http://octeth.com/blog/category/oempro4/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/47115
CVE ID: CVE-2008-3060 State: PUBLISHED Published: 2008-10-07T22:00:00 Last Updated: 2024-08-07T09:21:35.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: V-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input in the login page (includes/local.hooks.php) and (2) an invalid session ID, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/48/48-v-webmail.txt - http://www.osvdb.org/48794 - http://www.osvdb.org/48793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45853
CVE ID: CVE-2008-3061 State: PUBLISHED Published: 2008-10-07T23:00:00 Last Updated: 2024-08-07T09:21:34.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/48/48-v-webmail.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45855 - http://www.osvdb.org/48796
CVE ID: CVE-2008-3063 State: PUBLISHED Published: 2008-10-07T22:00:00 Last Updated: 2024-08-07T09:21:34.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/48/48-v-webmail.txt - http://www.osvdb.org/48795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45856
CVE ID: CVE-2008-3064 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:21:34.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 has unknown impact and attack vectors, probably related to accessing local files, aka a "Local resource reference vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2194/references - http://service.real.com/realplayer/security/07252008_player/en/ - http://www.securityfocus.com/archive/1/494934/100/0/threaded - https://exchange.xfo
layer/security/07252008_player/en/ - http://www.securityfocus.com/archive/1/494934/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44014 - http://www.securitytracker.com/id?1020564 - http://www.securityfocus.com/bid/30378