Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4344 State: PUBLISHED Published: 2010-12-14T15:00:00.000Z Last Updated: 2025-10-22T00:05:50.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html - http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.ht
org/opensuse-security-announce/2010-12/msg00003.html - http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html - http://bugs.exim.org/show_bug.cgi?id=787 - http://www.securitytracker.com/id?1024858 - http://www.redhat.com/support/errata/RHSA-2010-0970.html - http://www.vupen.com/english/advisories/2010/3186 - http://www.securityfocus.com/bid/45308 - http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format - http://atmail.com/blog/2010/atmail-6204-now-available/ - http://secunia.com/advisories/42576 - http://secunia.com/advisories/42587 - https://bugzilla.redhat.com/show_bug.cgi?id=661756 - http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html - http
ugzilla.redhat.com/show_bug.cgi?id=661756 - http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html - http://secunia.com/advisories/40019 - http://www.vupen.com/english/advisories/2010/3172 - http://www.kb.cert.org/vuls/id/682457 - http://www.vupen.com/english/advisories/2010/3181 - http://secunia.com/advisories/42586 - http://www.vupen.com/english/advisories/2010/3317 - http://www.ubuntu.com/usn/USN-1032-1 - http://www.cpanel.net/2010/12/exim-remote-memory-corruption-vulnerability-notification-cve-2010-4344.html - http://www.osvdb.org/69685 - http://www.securityfocus.com/archive/1/515172/100/0/threaded - http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ - http
ityfocus.com/archive/1/515172/100/0/threaded - http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ - http://www.vupen.com/english/advisories/2010/3246 - ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.70 - http://www.vupen.com/english/advisories/2010/3204 - http://git.exim.org/exim.git/commit/24c929a27415c7cfc7126c47e4cad39acf3efa6b - http://www.debian.org/security/2010/dsa-2131 - http://www.vupen.com/english/advisories/2010/3171 - http://secunia.com/advisories/42589 - http://openwall.com/lists/oss-security/2010/12/10/1 - http://www.openwall.com/lists/oss-security/2021/05/04/7
CVE ID: CVE-2010-4345 State: PUBLISHED Published: 2010-12-14T15:00:00.000Z Last Updated: 2025-10-22T00:05:50.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/43128 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html - http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.ht
g/opensuse-security-announce/2010-12/msg00003.html - http://lists.exim.org/lurker/message/20101209.172233.abcba158.en.html - http://www.kb.cert.org/vuls/id/758489 - http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html - https://bugzilla.redhat.com/show_bug.cgi?id=662012 - http://www.vupen.com/english/advisories/2011/0364 - http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format - http://www.redhat.com/support/errata/RHSA-2011-0153.html - http://www.securityfocus.com/bid/45341 - http://secunia.com/advisories/42930 - http://secunia.com/advisories/42576 - http://secunia.com/advisories/43243 - http://www.securitytracker.com/id?1024859 - http://lists.exim.org/lurker
s/42576 - http://secunia.com/advisories/43243 - http://www.securitytracker.com/id?1024859 - http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html - http://www.debian.org/security/2011/dsa-2154 - http://www.securityfocus.com/archive/1/515172/100/0/threaded - http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ - http://www.vupen.com/english/advisories/2011/0245 - http://www.vupen.com/english/advisories/2011/0135 - http://www.ubuntu.com/usn/USN-1060-1 - http://www.vupen.com/english/advisories/2010/3204 - http://bugs.exim.org/show_bug.cgi?id=1044 - http://www.debian.org/security/2010/dsa-2131 - http://www.vupen.com/english/advisories/2010/3171 - http://www.cpanel.n
- http://www.debian.org/security/2010/dsa-2131 - http://www.vupen.com/english/advisories/2010/3171 - http://www.cpanel.net/2010/12/critical-exim-security-update.html - http://openwall.com/lists/oss-security/2010/12/10/1 - http://www.openwall.com/lists/oss-security/2021/05/04/7
CVE ID: CVE-2010-4346 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:43:14.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520102/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=662189 - http://secunia.com/advisories/463
archive/1/520102/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=662189 - http://secunia.com/advisories/46397 - http://openwall.com/lists/oss-security/2010/12/09/13 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=462e635e5b73ba9a4c03913b77138cd57ce4b050 - https://lkml.org/lkml/2010/12/9/222 - http://openwall.com/lists/oss-security/2010/12/10/3 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://www.securityfocus.com/bid/45323 - http://openwall.com/lists/oss-security/2010/12/10/2 - http:
me=MDVSA-2011:029 - http://www.securityfocus.com/bid/45323 - http://openwall.com/lists/oss-security/2010/12/10/2 - http://openwall.com/lists/oss-security/2010/12/09/12 - http://secunia.com/advisories/42570
CVE ID: CVE-2010-4347 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:43:14.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=663542 - http://secunia.com/advisories/42778 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://ww
://secunia.com/advisories/42778 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://www.securityfocus.com/bid/45408 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://openwall.com/lists/oss-security/2010/12/15/3 - http://www.vupen.com/english/advisories/2011/0012 - http://openwall.com/lists/oss-security/2010/12/15/7 - http://www.exploit-db.com/exploits/15774/ - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ed3aada1bf34c5a9e98af167f125f8a740fc726a - https://exchange.xforce.ibm
/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ed3aada1bf34c5a9e98af167f125f8a740fc726a - https://exchange.xforce.ibmcloud.com/vulnerabilities/64155
CVE ID: CVE-2010-4348 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:43:14.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the db_type parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0002 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4983.php - http://openwall.com/lists/oss-security/2010/12/16/1 - http://security.gentoo.org
/en/vulnerabilities/ZSL-2010-4983.php - http://openwall.com/lists/oss-security/2010/12/16/1 - http://security.gentoo.org/glsa/glsa-201211-01.xml - http://www.mantisbt.org/blog/?p=123 - http://www.mantisbt.org/bugs/view.php?id=12607 - http://secunia.com/advisories/51199 - https://bugzilla.redhat.com/show_bug.cgi?id=663230 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html - http://openwall.com/lists/oss-security/2010/12/15/4 - http://secunia.com/advisories/42772 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html - http://www.mantisbt.org/bugs/changelog_page.php?version_id=112
CVE ID: CVE-2010-4349 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:43:14.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid db_type parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0002 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4983.php - http://openwall.com/lists/oss-security/2010/12/16/1 - http://securi
eroscience.mk/en/vulnerabilities/ZSL-2010-4983.php - http://openwall.com/lists/oss-security/2010/12/16/1 - http://security.gentoo.org/glsa/glsa-201211-01.xml - http://www.mantisbt.org/blog/?p=123 - http://www.mantisbt.org/bugs/view.php?id=12607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64463 - http://secunia.com/advisories/51199 - https://bugzilla.redhat.com/show_bug.cgi?id=663230 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html - http://openwall.com/lists/oss-security/2010/12/15/4 - http://secunia.com/advisories/42772 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html - http://www.mantisbt.org/bugs/changelo
p://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html - http://www.mantisbt.org/bugs/changelog_page.php?version_id=112
CVE ID: CVE-2010-4350 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:43:14.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the db_type parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0002 - http://openwall.com/lists/oss-security/2010/12/15/5 - http://security.gentoo.org/glsa/glsa-201211-01.xml - http://www.mantisbt.o
penwall.com/lists/oss-security/2010/12/15/5 - http://security.gentoo.org/glsa/glsa-201211-01.xml - http://www.mantisbt.org/blog/?p=123 - http://openwall.com/lists/oss-security/2010/12/16/2 - http://www.mantisbt.org/bugs/view.php?id=12607 - http://secunia.com/advisories/51199 - https://bugzilla.redhat.com/show_bug.cgi?id=663230 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4984.php - http://secunia.com/advisories/42772 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html - http://www.mantisbt.org/bugs/changelog_page.php?version_id=112
CVE ID: CVE-2010-4351 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-07T03:43:14.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader. Additional Analyst Notes: - CVE Program Container: References: - http://blog.fuseyism.com/index.php/2011/01/18/security-icedtea6-177-184-194-released/ - http://www.ubuntu.com/usn/USN-1055
tp://blog.fuseyism.com/index.php/2011/01/18/security-icedtea6-177-184-194-released/ - http://www.ubuntu.com/usn/USN-1055-1 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053276.html - http://www.securityfocus.com/bid/45894 - http://secunia.com/advisories/43085 - http://www.ubuntu.com/usn/USN-1052-1 - http://www.vupen.com/english/advisories/2011/0215 - http://osvdb.org/70605 - http://www.vupen.com/english/advisories/2011/0239 - http://www.zerodayinitiative.com/advisories/ZDI-11-014/ - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053288.html - http://secunia.com/advisories/43002 - http://ww
.fedoraproject.org/pipermail/package-announce/2011-January/053288.html - http://secunia.com/advisories/43002 - http://www.vupen.com/english/advisories/2011/0165 - http://secunia.com/advisories/43078 - http://www.debian.org/security/2011/dsa-2224 - http://secunia.com/advisories/43135 - http://www.vupen.com/english/advisories/2011/0166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64893 - https://bugzilla.redhat.com/show_bug.cgi?id=663680 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:054 - http://www.redhat.com/support/errata/RHSA-2011-0176.html
CVE ID: CVE-2010-4352 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:43:14.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0178 - http://openwall.com/lists/oss-security/2010/12/16/3 - http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052550.html - http://cgit.freedesktop.org/dbus/
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052550.html - http://cgit.freedesktop.org/dbus/dbus/commit/?id=7d65a3a6ed8815e34a99c680ac3869fde49dbbd4 - http://www.remlab.net/op/dbus-variant-recursion.shtml - http://secunia.com/advisories/42911 - http://openwall.com/lists/oss-security/2010/12/21/3 - http://secunia.com/advisories/42580 - http://secunia.com/advisories/42960 - http://www.debian.org/security/2011/dsa-2149 - https://bugzilla.redhat.com/show_bug.cgi?id=663673 - http://www.securityfocus.com/bid/45377 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html - http://www.ubuntu.com/usn/USN-1044-1 - https://bugs.freedesktop.org/show_bug.cg
ecurity-announce/2011-02/msg00004.html - http://www.ubuntu.com/usn/USN-1044-1 - https://bugs.freedesktop.org/show_bug.cgi?id=32321 - http://www.vupen.com/english/advisories/2011/0464 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.vupen.com/english/advisories/2011/0161 - http://www.vupen.com/english/advisories/2010/3325 - http://secunia.com/advisories/42760 - http://openwall.com/lists/oss-security/2010/12/16/6
CVE ID: CVE-2010-4353 State: PUBLISHED Published: 2011-01-25T00:00:00 Last Updated: 2024-08-07T03:43:14.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64870 - http://gallery.menalto.com/gallery_3.0.1_
dvisories/43028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64870 - http://gallery.menalto.com/gallery_3.0.1_released - http://osvdb.org/70628 - http://www.securityfocus.com/bid/45964
CVE ID: CVE-2010-4354 State: PUBLISHED Published: 2010-11-30T22:00:00Z Last Updated: 2024-09-16T18:18:43.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025. Additional Analyst Notes: - CVE Program Container: Reference
D CSCtj96108, a different vulnerability than CVE-2005-2025. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_response09186a0080b5992c.html
CVE ID: CVE-2010-4355 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T03:43:14.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the select_single parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.dadabik.org/index.php?function=show_changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/63219 - http://secunia.com/advisories/42220 - http://www.securityfocus.com/bid/44826
CVE ID: CVE-2010-4356 State: PUBLISHED Published: 2010-12-01T16:00:00Z Last Updated: 2024-09-17T00:35:45.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitrary SQL commands via the txtSiteId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15627 - http://secunia.com/advisories/42383 - http://packetstormsecurity.org/files/view/96148/site2nitebigtruck-sql.txt
CVE ID: CVE-2010-4357 State: PUBLISHED Published: 2010-12-01T16:00:00Z Last Updated: 2024-09-17T02:42:59.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15612 - http://www.securityfocus.com/bid/45056 - http://secunia.com/advisories/42353
CVE ID: CVE-2010-4358 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T03:43:14.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514884/100/0/threaded - http://www.securityfocus.com/bid/45043 - http://secunia.com/advisories/42315 - http://packetstormsecurity.org/files/view/96101/mcgguestbook-xss.txt - http://evuln.com/vulns/144/s
m/advisories/42315 - http://packetstormsecurity.org/files/view/96101/mcgguestbook-xss.txt - http://evuln.com/vulns/144/summary.html
CVE ID: CVE-2010-4359 State: PUBLISHED Published: 2010-12-01T16:00:00Z Last Updated: 2024-09-17T04:18:45.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15621 - http://secunia.com/advisories/42387 - http://packetstormsecurity.org/files/view/96131/jurpopage-sql.txt - http://www.vupen.com/english/advisories/2010/3071 - http://www.securityfocus.com/bid/45076
CVE ID: CVE-2010-4360 State: PUBLISHED Published: 2010-12-01T16:00:00Z Last Updated: 2024-09-17T03:02:07.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) note and (2) pg parameters, different vectors than CVE-2010-4359. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42387 - http://www.securityfocus.com/bid/45076
CVE ID: CVE-2010-4361 State: PUBLISHED Published: 2010-12-01T16:00:00Z Last Updated: 2024-09-17T02:00:41.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in url-gateway.php in Jurpopage 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42387 - http://www.securityfocus.com/bid/45076
CVE ID: CVE-2010-4362 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T03:43:14.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15629 - http://www.securityfocus.com/bid/45089 - http://secunia.com/advisories/41319
CVE ID: CVE-2010-4363 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T03:43:14.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) email parameters in a showtickets action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45053 - http://www.osvdb.org/69488 - http://packetstormsecurity.org/files/view/96138/freeticket-sql.txt - http://secunia.com/advisories/42313 - http://www.securityfocus.com/archive/1/5148
/files/view/96138/freeticket-sql.txt - http://secunia.com/advisories/42313 - http://www.securityfocus.com/archive/1/514890/100/0/threaded - http://evuln.com/vulns/146/summary.html