Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2615 State: PUBLISHED Published: 2009-07-27T18:00:00Z Last Updated: 2024-09-16T23:15:42.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_admin_login.asp, (2) z_forgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35625
CVE ID: CVE-2009-2616 State: PUBLISHED Published: 2009-07-27T18:00:00Z Last Updated: 2024-09-17T03:33:47.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35625
CVE ID: CVE-2009-2617 State: PUBLISHED Published: 2009-07-27T18:00:00Z Last Updated: 2024-09-16T18:39:51.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=124624413120440&w=2 - http://www.securityfocus.com/bid/35512 - http://secunia.com/advisories/35592 - http://marc.info/?l=full-disclosure&m=124627617220913&w=2
CVE ID: CVE-2009-2618 State: PUBLISHED Published: 2009-07-27T18:00:00 Last Updated: 2024-08-07T05:59:57.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51385 - http://www.securityfocus.com/bid/35495 - http://www.exploit-db.com/exploits/9021
CVE ID: CVE-2009-2619 State: PUBLISHED Published: 2009-07-27T18:00:00Z Last Updated: 2024-09-17T01:00:57.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35612
CVE ID: CVE-2009-2620 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T05:59:55.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infinite loop or NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35842 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01341.html - http://www.coresecurity.com/content/f
ttps://www.redhat.com/archives/fedora-package-announce/2009-August/msg01341.html - http://www.coresecurity.com/content/firebird-sql-dos - http://www.exploit-db.com/exploits/9295 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01370.html - https://bugzilla.redhat.com/show_bug.cgi?id=514463 - http://tracker.firebirdsql.org/browse/CORE-2563
CVE ID: CVE-2009-2621 State: PUBLISHED Published: 2009-07-28T17:00:00 Last Updated: 2024-08-07T05:59:55.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patch - http://www.securitytracker.com/id?1022607 - http://www.securityfocus.com/bid/35812 - http://w
1/changesets/b9654.patch - http://www.securitytracker.com/id?1022607 - http://www.securityfocus.com/bid/35812 - http://www.vupen.com/english/advisories/2009/2013 - http://secunia.com/advisories/36007 - http://www.squid-cache.org/Advisories/SQUID-2009_2.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2009:161 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:178
CVE ID: CVE-2009-2622 State: PUBLISHED Published: 2009-07-28T17:00:00 Last Updated: 2024-08-07T05:59:56.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022607 - http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch - http://www.
p://www.securitytracker.com/id?1022607 - http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch - http://www.securityfocus.com/bid/35812 - http://www.vupen.com/english/advisories/2009/2013 - http://secunia.com/advisories/36007 - http://www.squid-cache.org/Advisories/SQUID-2009_2.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2009:161 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:178
CVE ID: CVE-2009-2624 State: PUBLISHED Published: 2010-01-29T18:00:00 Last Updated: 2024-08-07T05:59:56.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service (application crash or infinite loop) or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a CVE-2006-4334 regression. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/advisories/2010/0185 - http://www.ubuntu.com/usn/USN-889-1 - https://bugzil
com/kb/HT4435 - http://www.vupen.com/english/advisories/2010/0185 - http://www.ubuntu.com/usn/USN-889-1 - https://bugzilla.redhat.com/show_bug.cgi?id=514711 - http://article.gmane.org/gmane.comp.gnu.gzip.bugs/258 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.debian.org/security/2010/dsa-1974 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:020 - http://git.savannah.gnu.org/cgit/gzip.git/commit/?id=39a362ae9d9b007473381dba5032f4dfc1744cf2 - http://secunia.com/advisories/38223 - http://secunia.com/advisories/38132 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://secunia.com/advisories/38232 - http://bu
://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://secunia.com/advisories/38232 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507263
CVE ID: CVE-2009-2625 State: PUBLISHED Published: 2009-08-06T15:00:00 Last Updated: 2024-08-07T05:59:56.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework. Additional Analyst Notes: - CVE Program Container: References: - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026 - https://rhn.re
ces: - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026 - https://rhn.redhat.com/errata/RHSA-2009-1200.html - https://rhn.redhat.com/errata/RHSA-2009-1199.html - http://www.networkworld.com/columnists/2009/080509-xml-flaw.html - http://www.ubuntu.com/usn/USN-890-1 - http://secunia.com/advisories/36162 - http://www.vupen.com/english/advisories/2009/2543 - http://www.debian.org/security/2010/dsa-1984 - http://www.openwall.com/lists/oss-security/2009/10/22/9 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021506.1-1 - http://secunia.com/advisories/37460 - http://www.redhat.com/support/errata/RHSA-2009-1615.html - http://www.vmware.com/
http://secunia.com/advisories/37460 - http://www.redhat.com/support/errata/RHSA-2009-1615.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://secunia.com/advisories/37754 - https://rhn.redhat.com/errata/RHSA-2009-1637.html - http://www.cert.fi/en/reports/2009/vulnerability2009085.html - http://www.codenomicon.com/labs/xml/ - http://secunia.com/advisories/36199 - http://rhn.redhat.com/errata/RHSA-2012-1537.html - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-A
ww.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - http://www.redhat.com/support/errata/RHSA-2011-0858.html - http://marc.info/?l=bugtraq&m=125787273209737&w=2 - http://www.securitytracker.com/id?1022680 - http://secunia.com/advisories/37671 - http://secunia.com/advisories/38342 - https://rhn.redhat.com/errata/RHSA-2009-1636.html - http://www.securityfocus.com/bid/35958 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://rhn.redhat.com/errata/RHSA-2009-1649.html - http://www.openwall.com/lists/oss-security/2009/10/26/3 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http:/
http://www.openwall.com/lists/oss-security/2009/10/26/3 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://secunia.com/advisories/50549 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520 - http://secunia.com/advisories/36180 - http://secunia.com/advisories/38231 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-272209-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:108 - http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://secunia.com/advi
/cpuoct2009-096303.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 - http://secunia.com/advisories/36176 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html - http://secunia.com/advisories/43300 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356 - http://www.us-cert.gov/cas/techalerts/TA10-012A.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://rhn.redhat.com/errata/RHSA-2012-1232.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-263489-1 - http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=57205
etkey=1-66-263489-1 - http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=572055&r2=787352&pathrev=787353&diff_format=h - http://secunia.com/advisories/37300 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html - https://bugzilla.redhat.com/show_bug.cgi?id=512921 - https://rhn.redhat.com/errata/RHSA-2009-1201.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://www.openwall.com/lists/oss-security/2009/09/06/1 - http://www.openwall.com/lists/oss-security/2009/10/23/6 - http://www.vupen.com/english/advisories/2011/0359
09/09/06/1 - http://www.openwall.com/lists/oss-security/2009/10/23/6 - http://www.vupen.com/english/advisories/2011/0359 - http://www.vupen.com/english/advisories/2009/3316 - https://rhn.redhat.com/errata/RHSA-2009-1650.html - https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E
CVE ID: CVE-2009-2626 State: PUBLISHED Published: 2009-12-01T16:00:00Z Last Updated: 2024-09-16T23:56:55.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore function to restore the variable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37482 - http://www.debian.org/security/2009/dsa-1940 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540605 - http://
37482 - http://www.debian.org/security/2009/dsa-1940 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540605 - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/Zend/zend_ini.c?r1=272370&r2=284156 - http://www.securityfocus.com/bid/36009 - http://securityreason.com/achievement_securityalert/65
CVE ID: CVE-2009-2627 State: PUBLISHED Published: 2009-08-19T17:00:00 Last Updated: 2024-08-07T05:59:56.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remote attackers to execute arbitrary commands via the Run method, a different vulnerability than CVE-2006-6121. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36343 - http://www.vupen.com/english/advisories/2009/2299 - http://www.kb.cert.org/vuls/id/485961 - http://www.securitytracker.com/id?1022752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52592 - http:
/485961 - http://www.securitytracker.com/id?1022752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52592 - http://osvdb.org/57201 - http://www.securityfocus.com/bid/36068
CVE ID: CVE-2009-2628 State: PUBLISHED Published: 2009-09-08T22:00:00 Last Updated: 2024-08-07T05:59:56.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows does not properly handle certain small heights in video content, which might allow remote attackers to execute arbitrary code via a crafted AVI file that triggers heap memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/secur
ory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vmware.com/pipermail/security-announce/2009/000065.html - http://www.securityfocus.com/bid/36290 - http://www.securityfocus.com/archive/1/506286/100/0/threaded - http://www.vupen.com/english/advisories/2009/2553 - http://www.kb.cert.org/vuls/id/444513 - http://secunia.com/advisories/34938 - http://www.vmware.com/security/advisories/VMSA-2009-0012.html
CVE ID: CVE-2009-2629 State: PUBLISHED Published: 2009-09-15T22:00:00 Last Updated: 2024-08-07T05:59:56.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/180065 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html - http://nginx.net/CHANGES-0.7 - http://nginx.net/CHANGES - http://sysoev.ru/nginx/patch.180065.txt - http://www.debian.org
ttp://nginx.net/CHANGES-0.7 - http://nginx.net/CHANGES - http://sysoev.ru/nginx/patch.180065.txt - http://www.debian.org/security/2009/dsa-1884 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html - http://nginx.net/CHANGES-0.5 - http://nginx.net/CHANGES-0.6
CVE ID: CVE-2009-2631 State: PUBLISHED Published: 2009-12-04T11:00:00 Last Updated: 2025-06-16T20:54:35.965Z Vendors: Cisco, Palo Alto Products: Adaptive Security Appliance Web SSL VPN, PAN OS Web SSL VPN Problem Types: CWE-284 Description: Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate
s to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks. NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design Additional Analyst N
te implementations. Therefore a single CVE has been assigned for all products that have this design Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/261869 - https://security.paloaltonetworks.com/PAN-SA-2025-0005
CVE ID: CVE-2009-2632 State: PUBLISHED Published: 2009-09-08T23:00:00 Last Updated: 2024-08-07T05:59:56.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to the incorrect use of the sizeof operator for determining buffer length, combined with an integer signedness error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36377 - http://www.
r. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36377 - http://www.debian.org/security/2009/dsa-1881 - http://secunia.com/advisories/36713 - https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001254.html - http://secunia.com/advisories/36629 - https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sieve/script.c.diff?r1=1.62&r2=1.62.2.1&only_with_tag=cyrus-imapd-2_2-tail - http://dovecot.org/list/dovecot-news/2009-September/000135.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001253.html - http://secunia.com/advisories/36632 -
l - https://lists.andrew.cmu.edu/pipermail/cyrus-cvs/2009-September/001253.html - http://secunia.com/advisories/36632 - http://www.ubuntu.com/usn/USN-838-1 - http://www.osvdb.org/58103 - http://support.apple.com/kb/HT4077 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/36904 - http://secunia.com/advisories/36698 - http://www.securityfocus.com/bid/36296 - http://www.vupen.com/english/advisories/2009/2641 - http://www.vupen.com/english/advisories/2009/2559 - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00491.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1008
09-September/msg00491.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10082 - http://www.openwall.com/lists/oss-security/2009/09/14/3
CVE ID: CVE-2009-2633 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager (com_vehiclemanager) component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8920
CVE ID: CVE-2009-2634 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8912
CVE ID: CVE-2009-2635 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in toolbar_ext.php in the RealEstateManager (com_realestatemanager) component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8919
CVE ID: CVE-2009-2636 State: PUBLISHED Published: 2009-07-28T19:06:00Z Last Updated: 2024-09-16T16:23:55.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35392 - http://osvdb.org/54928 - http://www.kerio.com/support/security-advisories#0906 - http://www.securitytracker.com/id?1022348 - http://www.securityfocus.com/bid/35264
CVE ID: CVE-2009-2637 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in toolbar_ext.php in the BookLibrary (com_booklibrary) component 1.5.2.4 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8908
CVE ID: CVE-2009-2638 State: PUBLISHED Published: 2009-07-28T19:06:00 Last Updated: 2024-08-07T05:59:56.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the AkoBook (com_akobook) component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8911 - http://www.securityfocus.com/bid/35268