Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4825 State: PUBLISHED Published: 2011-08-24T10:00:00 Last Updated: 2024-08-07T04:02:30.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in magpie_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.johnleitch.net/Vulnerabilities/WordPress.Twitter.Feed.0.3.1.Reflected.Cross-site.Scripting/68 - http://secunia.com/advisories/42542 - http://www.securityfocus.com/bid/45294 - http://www.osvdb.org/69760 - https://exchange.xforce.ibmcloud.com/vul
s/42542 - http://www.securityfocus.com/bid/45294 - http://www.osvdb.org/69760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63942
CVE ID: CVE-2010-4826 State: PUBLISHED Published: 2011-08-24T10:00:00 Last Updated: 2024-08-07T04:02:29.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the M_NAME parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42308 - http://osvdb.org/69794 - http://www.securityfocus.com/bid/45381 - http://forum.snitz.com/forum/topic.asp?TOPIC_ID=69770
CVE ID: CVE-2010-4827 State: PUBLISHED Published: 2011-08-24T10:00:00 Last Updated: 2024-08-07T04:02:29.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script or HTML via the M_NAME parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42308 - http://osvdb.org/69793 - http://www.securityfocus.com/bid/45381 - http://forum.snitz.com/forum/topic.asp?TOPIC_ID=69770
CVE ID: CVE-2010-4828 State: PUBLISHED Published: 2011-08-24T10:00:00 Last Updated: 2024-08-07T04:02:30.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and the (4) ChartName parameter to CustomChart.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42486 - http://securityreason.com/securityalert/8349 - http://www.securityfocus.com/archive
ttp://secunia.com/advisories/42486 - http://securityreason.com/securityalert/8349 - http://www.securityfocus.com/archive/1/515083/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/63956 - http://www.securityfocus.com/bid/45257
CVE ID: CVE-2010-4829 State: PUBLISHED Published: 2011-08-24T10:00:00 Last Updated: 2024-08-07T04:02:29.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42488 - http://www.osvdb.org/69635 - http://www.securityfocus.com/bid/45200 - http://www.exploit-db.com/exploits/15677
CVE ID: CVE-2010-4830 State: PUBLISHED Published: 2011-08-24T10:00:00 Last Updated: 2024-08-07T04:02:30.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the z_Residency parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45203 - http://secunia.com/advisories/34996 - http://packetstormsecurity.org/files/view/96375/tdreamsjsp-sql.txt - http://securityreason.com/securityalert/8353 - http://www.exploit-db.com/exploits/15678
CVE ID: CVE-2010-4831 State: PUBLISHED Published: 2011-09-06T15:00:00Z Last Updated: 2024-09-16T22:45:51.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to gain privileges via a Trojan horse Wintab32.dll file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49449 - http://git.gnome.org/browse/gtk+/commit/gdk/win32/gdkinput-win32.c?h=gtk-2-24&id=88f54ea47d4a55bbbf9e34a7a0502f365eb69ae5&ss=1 - http://jvn.jp/en/jp/JVN58019849/index.html - http://ftp.gnome.org/pub/gnome/sources/gtk+/2.21/gtk+-
02f365eb69ae5&ss=1 - http://jvn.jp/en/jp/JVN58019849/index.html - http://ftp.gnome.org/pub/gnome/sources/gtk+/2.21/gtk+-2.21.8.changes - http://secunia.com/advisories/45815 - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000072
CVE ID: CVE-2010-4832 State: PUBLISHED Published: 2014-05-14T00:00:00 Last Updated: 2024-08-07T04:02:30.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android OS before 2.2 does not display the correct SSL certificate in certain cases, which might allow remote attackers to spoof trusted web sites via a web page containing references to external sources in which (1) the certificate of the last loaded resource is checked, instead of for the main page, or (2) later certificates are not checked when the HTTPS connection is reused. Additional Analyst Notes: - CVE Program Container: References: - http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=dba8cb76
E Program Container: References: - http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=dba8cb76371960457e91b31fa396478f809a5a34 - https://gitorious.org/atrix-aosp/frameworks_base/commit/dba8cb76371960457e91b31fa396478f809a5a34 - http://jvn.jp/en/jp/JVN43105011/index.html - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000053.html
CVE ID: CVE-2010-4833 State: PUBLISHED Published: 2011-09-06T15:00:00 Last Updated: 2024-08-07T04:02:29.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49449 - http://git.gnome.org/browse/gtk+/commit/modules/engines/ms-windows/xp_theme.c?h=gtk-2-24&id=d6e11a97e318158f5d210a0476870dfe14ed95e6 - http://secunia.com/advisories/45815
CVE ID: CVE-2010-4834 State: PUBLISHED Published: 2011-09-13T21:00:00 Last Updated: 2024-08-07T04:02:30.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter in a saved_search action and (2) item_types parameter in a show_item_search action in the search_management_manage subcontroller. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8375 - http://pack
itional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8375 - http://packetstormsecurity.org/files/view/95814/oneorzeroaims-lfisql.txt - http://www.exploit-db.com/exploits/15519 - http://secunia.com/advisories/42251 - http://www.xenuser.org/documents/security/OneOrZero_Aims_multiple_vulnerabilities.txt
CVE ID: CVE-2010-4835 State: PUBLISHED Published: 2011-09-13T21:00:00 Last Updated: 2024-08-07T04:02:29.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a show_report action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8375 - http://packetstormsecurity.org/files/view/95814/oneorzeroaims-lfisql.txt - http://www.exploit-db.com/exploits/15519 - http://www.xenuser.org/documents/security/OneOrZero_Aims_multiple_vuln
.txt - http://www.exploit-db.com/exploits/15519 - http://www.xenuser.org/documents/security/OneOrZero_Aims_multiple_vulnerabilities.txt
CVE ID: CVE-2010-4836 State: PUBLISHED Published: 2011-09-13T21:00:00 Last Updated: 2024-08-07T04:02:29.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inject arbitrary web script or HTML via the name_new parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63157 - http://secunia.com/advisories/42132 - http://websecurity.com.ua/4512/ - http://www.securityfocus.com/bid/44763 - http://www.securityfocus.com/archive/1/514672/100/0/threaded - http
.ua/4512/ - http://www.securityfocus.com/bid/44763 - http://www.securityfocus.com/archive/1/514672/100/0/threaded - http://osvdb.org/69101
CVE ID: CVE-2010-4837 State: PUBLISHED Published: 2011-09-13T21:00:00 Last Updated: 2024-08-07T04:02:29.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter (title field) in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42262 - http://www.xenuser.org/documents/security/Joomla_com_jsupport_XSS.txt - http://packetstormsecurity.org/files/view/957
- http://www.xenuser.org/documents/security/Joomla_com_jsupport_XSS.txt - http://packetstormsecurity.org/files/view/95796/joomlajsupport-xss.txt - http://www.exploit-db.com/exploits/15501 - http://securityreason.com/securityalert/8377
CVE ID: CVE-2010-4838 State: PUBLISHED Published: 2011-09-13T21:00:00 Last Updated: 2024-08-07T04:02:29.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users, with Public Back-end permissions, to execute arbitrary SQL commands via the alpha parameter in a (1) listTickets or (2) listFaqs action to administrator/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42262 - http://www.exploit-db.com/exploits/15502 - http://packetstormsecurity.org/files/view/95797/joomlajsupport-sql.txt - http://www.xenuser.org/docu
om/exploits/15502 - http://packetstormsecurity.org/files/view/95797/joomlajsupport-sql.txt - http://www.xenuser.org/documents/security/Joomla_com_jsupport_SQLi.txt - http://securityreason.com/securityalert/8379
CVE ID: CVE-2010-4839 State: PUBLISHED Published: 2011-09-13T21:00:00Z Last Updated: 2024-09-16T23:55:27.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the event_id parameter in a register action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42265 - http://www.exploit-db.com/exploits/15513
CVE ID: CVE-2010-4840 State: PUBLISHED Published: 2011-09-27T19:00:00 Last Updated: 2024-08-07T04:02:30.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service (SysEvttCol.exe process crash) or possibly execute arbitrary code via a long Syslog PRI message header to UDP port (1) 513 or (2) 514. Fixed in 7.2 Build 7020. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/ManageEngine-Eventlog-Analyzer-Syslog-Renite-DoS-vuln.html
CVE ID: CVE-2010-4841 State: PUBLISHED Published: 2011-09-27T19:00:00 Last Updated: 2024-08-07T04:02:30.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HOST_ID, (2) OS, (3) GROUP, (4) exportFile, (5) load, (6) type, or (7) tab parameter to INDEX.do, the (8) reported parameter to INDEX2.do, the (9) gId parameter to hostlist.do, the (10) newWindow parameter to globalSettings.do, or the (11) STATUS parameter to enableHost.do. Fixed in Build 9000. Additional Analyst Notes: - CVE Program Container: References: - http://
arameter to enableHost.do. Fixed in Build 9000. Additional Analyst Notes: - CVE Program Container: References: - http://www.solutionary.com/index/SERT/Vuln-Disclosures/ManageEngine-XSS-vulnerabilities.html
CVE ID: CVE-2010-4842 State: PUBLISHED Published: 2011-09-27T10:00:00Z Last Updated: 2024-09-17T00:35:51.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.php in MHP DownloadScript (aka MH Products Download Center) 2.2 allows remote attackers to execute arbitrary SQL commands via the Name parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45494 - http://secunia.com/advisories/42714 - http://www.exploit-db.com/exploits/15770
CVE ID: CVE-2010-4843 State: PUBLISHED Published: 2011-09-27T10:00:00 Last Updated: 2024-08-07T04:02:30.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8395 - http://www.securityfocus.com/bid/45519 - http://www.exploit-db.com/exploits/15790 - http://packetstormsecurity.org/files/view/96822/phpwsamp-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/64222
CVE ID: CVE-2010-4844 State: PUBLISHED Published: 2011-09-27T10:00:00 Last Updated: 2024-08-07T04:02:30.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/96780/easyonlineshop-sql.txt - http://www.securityfocus.com/bid/45477 - http://securityreason.com/securityalert/8396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64192 - http://secunia.com/advisories/42680 - http://www.exploit-db.com/exploits/15755
CVE ID: CVE-2010-4845 State: PUBLISHED Published: 2011-09-27T10:00:00 Last Updated: 2024-08-07T04:02:29.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details.php and possibly the (2) ilceler parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64205 - http://secunia.com/advisories/42711 - http://www.securityfocus.com/bid/45506 - http://www.exploit-db.com/exploits/15773
CVE ID: CVE-2010-4846 State: PUBLISHED Published: 2011-09-27T10:00:00 Last Updated: 2024-08-07T04:02:29.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45495 - http://www.exploit-db.com/exploits/15772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64204 - http://secunia.com/advisories/42712
CVE ID: CVE-2010-4847 State: PUBLISHED Published: 2011-09-27T10:00:00 Last Updated: 2024-08-07T04:02:29.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via the ItemID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/96774/mhpdownloadshop-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/64193 - http://www.exploit-db.com/exploits/15756 - http://www.securityfocus.com/bid/45474 - http://secunia.com/advisories/42675 - http://securityreason.com/securityalert/8397
CVE ID: CVE-2010-4848 State: PUBLISHED Published: 2011-09-27T10:00:00 Last Updated: 2024-08-07T04:02:29.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514843/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/63411 - http://www.securityfocus.com/bid/44979 - http://packetstormsecurity.org/files/view/96006/axslinks-xss.txt - http://evuln.com/vulns/139/summary.html
CVE ID: CVE-2010-4849 State: PUBLISHED Published: 2011-09-27T10:00:00Z Last Updated: 2024-09-16T18:56:00.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the es_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15650 - http://www.securityfocus.com/bid/45130
CVE ID: CVE-2010-4850 State: PUBLISHED Published: 2011-09-27T10:00:00 Last Updated: 2024-08-07T04:02:29.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web script or HTML via the (1) post_content parameter to post/edit/2/p1.html, related to views/post.php; the (2) slogan parameter to admin/site/2.html, related to views/admin.php; or the (3) subcatname or (4) description parameter to admin/forum/create_sub.html, related to views/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/cross_site_scripting_vulnerabili
l Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/cross_site_scripting_vulnerability_in_diferior.html - http://www.securityfocus.com/bid/45088 - http://www.exploit-db.com/exploits/15633 - http://www.htbridge.ch/advisory/xss_vulnerability_in_diferior.html - http://packetstormsecurity.org/files/view/96207/diferior-xss.txt - http://securityreason.com/securityalert/8398 - http://www.htbridge.ch/advisory/stored_xss_cross_site_scripting_vulnerability_in_diferior.html
CVE ID: CVE-2010-4851 State: PUBLISHED Published: 2011-09-27T10:00:00 Last Updated: 2024-08-07T04:02:29.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the (1) ref or (2) poll_id parameter to index.php, or the (3) country parameter to create_account.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8399 - http://www.htbridge.ch/advisory/sql_injection_in_eclime.html - http://www.htbridge.ch/advisory/sql_injection_in_eclime_2.html - http://www.securityfocus.com/bid/45124 - http://www.exploit-db.com/explo
ge.ch/advisory/sql_injection_in_eclime_2.html - http://www.securityfocus.com/bid/45124 - http://www.exploit-db.com/exploits/15644 - http://www.htbridge.ch/advisory/sql_injection_in_eclime_1.html - http://packetstormsecurity.org/files/view/96228/eclime112b-sql.txt
CVE ID: CVE-2010-4852 State: PUBLISHED Published: 2011-09-27T10:00:00 Last Updated: 2024-08-07T04:02:29.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web script or HTML via the reason parameter in a fail action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8399 - http://www.securityfocus.com/bid/45124 - http://www.htbridge.ch/advisory/xss_in_eclime.html - http://www.exploit-db.com/exploits/15644 - http://packetstormsecurity.org/files/view/96228/eclime112b-sql.txt
CVE ID: CVE-2010-4853 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1011-exploits/joomlaccinvoices-sql.txt - http://securityreason.com/securityalert/8413 - http://www.exploit-db.com/exploits/15430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63079
CVE ID: CVE-2010-4854 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:30.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62397 - http://secunia.com/advisories/41732 - http://bbs.wolvez.org/viewtopic.php?id=170
CVE ID: CVE-2010-4855 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15218 - http://packetstormsecurity.org/1010-exploits/xweblog22-sql.txt - http://securityreason.com/securityalert/8414 - http://secunia.com/advisories/41708
CVE ID: CVE-2010-4856 State: PUBLISHED Published: 2011-10-05T10:00:00Z Last Updated: 2024-09-16T19:55:47.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15219
CVE ID: CVE-2010-4857 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:30.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1010-exploits/cagcms-sqlxss.txt - http://securityreason.com/securityalert/8415 - http://www.securityfocus.com/bid/43719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62250 - http://www.exploit-db.com/exploits/15210