Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2885 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:04.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to application exit. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=142310 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15561 - http://osvdb.org/85755 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https:
15561 - http://osvdb.org/85755 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78840 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
CVE ID: CVE-2012-2886 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:04.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14916 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78824 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.g
/vulnerabilities/78824 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.com/p/chromium/issues/detail?id=143437 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
CVE ID: CVE-2012-2887 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:05.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving onclick events. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78828 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15797 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.com/p/chrom
15797 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.com/p/chromium/issues/detail?id=143609 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
CVE ID: CVE-2012-2888 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:04.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG text references. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=143656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78829 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2012-10
leases.blogspot.com/2012/09/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15612
CVE ID: CVE-2012-2889 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:04.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5642 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - http://lists.apple.com/archives/security-announce/2013/Mar/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.o
s/security-announce/2013/Mar/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15829 - https://code.google.com/p/chromium/issues/detail?id=143439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78823 - http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
CVE ID: CVE-2012-2890 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:05.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=144072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15766 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.
al%3Adef%3A15766 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.com/p/chromium/issues/detail?id=147402 - https://code.google.com/p/chromium/issues/detail?id=143798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78841
CVE ID: CVE-2012-2891 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:04.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPC implementation in Google Chrome before 22.0.1229.79 allows attackers to obtain potentially sensitive information about memory addresses via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78842 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.com/p/chromium/issues/detail?id=144051 -
eases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.com/p/chromium/issues/detail?id=144051 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
CVE ID: CVE-2012-2892 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:05.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78843 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15807 - https://code.google.com/p/chromium/issues/detail?id=144704 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - http://lists.opensuse.org/opensu
4704 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
CVE ID: CVE-2012-2893 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:04.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50838 - http://www.debian.org/security/2012/dsa-2555 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15714 - https://chromiumcodereview.appspot.com/10919019 - http://googlechrome
h/definition/oval%3Aorg.mitre.oval%3Adef%3A15714 - https://chromiumcodereview.appspot.com/10919019 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://src.chromium.org/viewvc/chrome?view=rev&revision=154331 - http://git.chromium.org/gitweb/?p=chromium.git%3Ba=commit%3Bh=9a5da8e7d4b6f3454614b0331a51bf29c966f556 - https://code.google.com/p/chromium/issues/detail?id=144799 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:164
CVE ID: CVE-2012-2894 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:04.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=144899 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158
able-channel-update_25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15855 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78830
CVE ID: CVE-2012-2895 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:04.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=145029 - https://code.google.com/p/chromium/issues/detail?id=145157 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.com/p/chromium/issues/detail?id=1
hromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.com/p/chromium/issues/detail?id=146460 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15773
CVE ID: CVE-2012-2896 State: PUBLISHED Published: 2012-09-26T10:00:00 Last Updated: 2024-08-06T19:50:04.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=145544 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78831 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2
romereleases.blogspot.com/2012/09/stable-channel-update_25.html - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
CVE ID: CVE-2012-2897 State: PUBLISHED Published: 2012-09-26T10:00:00.000Z Last Updated: 2025-01-28T17:10:52.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability." Additional Analyst Notes: - C
t file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78822 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15847 - http://www.securitytracker.com/id?1027750 - http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html - https://code.google.com/p/chromium/issues/detail?id=146254 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-075 - http://secunia.com/advisories/51239
CVE ID: CVE-2012-2898 State: PUBLISHED Published: 2014-01-05T20:00:00 Last Updated: 2024-08-06T19:50:04.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 21.0.1180.82 on iOS on iPad devices allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages, a related issue to CVE-2012-0674. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2012/09/chrome-for-ios-update_24.html - https://code.google.com/p/chromium/issues/detail?id=146760
CVE ID: CVE-2012-2899 State: PUBLISHED Published: 2014-01-05T20:00:00 Last Updated: 2024-08-06T19:50:05.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=147625 - http://googlechromereleases.blogspot.com/2012/09/chrome-for-ios-update_24.html
CVE ID: CVE-2012-2900 State: PUBLISHED Published: 2012-10-09T10:00:00 Last Updated: 2024-08-06T19:50:04.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skia, as used in Google Chrome before 22.0.1229.92, does not properly render text, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15725 - http://googlechromereleases.blogspot.com/2012/10/stable-channel-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79063 - https://
.blogspot.com/2012/10/stable-channel-update.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79063 - https://code.google.com/p/chromium/issues/detail?id=138208
CVE ID: CVE-2012-2901 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:05.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor (JCE) component before 2.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the search parameter to administrator/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53559 - http://www.joomlacontenteditor.net/news/item/jce-21-released?category_id=32 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75670 - http://secunia.com/advisories/49206 - http
category_id=32 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75670 - http://secunia.com/advisories/49206 - http://secunia.com/secunia_research/2012-14/
CVE ID: CVE-2012-2902 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:03.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the Joomla Content Editor (JCE) component before 2.1 for Joomla!, when chunking is set to greater than zero, allows remote authors to execute arbitrary PHP code by uploading a PHP file with a double extension as demonstrated by .jpg.pht. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51002 - http://secunia.com/secunia_research/2012-15/ - http://osvdb.org/81980 - http://www.joomlacontenteditor.net/n
bid/51002 - http://secunia.com/secunia_research/2012-15/ - http://osvdb.org/81980 - http://www.joomlacontenteditor.net/news/item/jce-21-released?category_id=32 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75671 - http://secunia.com/advisories/49206
CVE ID: CVE-2012-2903 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:04.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) target_language or (3) target_flag parameter to translate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53598 - http://secunia.com/advisories/49212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75703 - http://sourceforge.net/tracker/?func=detail&aid=3527242&group_id=15
exchange.xforce.ibmcloud.com/vulnerabilities/75703 - http://sourceforge.net/tracker/?func=detail&aid=3527242&group_id=157964&atid=805929 - http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html
CVE ID: CVE-2012-2904 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:05.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject arbitrary web script or HTML via multiple "javascript:" sequences in the debug parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.longtailvideo.com/support/forums/jw-player/bug-reports/26699/xss-exists-in-debug-functionality - http://www.wooyun.org/bugs/wooyun-2010-07166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75672 - http://secunia.com/advisories/49130 - http:/
n-2010-07166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75672 - http://secunia.com/advisories/49130 - http://developer.longtailvideo.com/trac/ticket/1585 - http://www.securityfocus.com/bid/53554 - http://seclists.org/fulldisclosure/2012/May/132
CVE ID: CVE-2012-2905 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:04.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5091.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/75690 - http://osvdb.org/81991 - http://secunia.com/advisories/49195 - http://www.exploit-db.com/exploits/18889
CVE ID: CVE-2012-2906 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:04.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo (r422) allow remote attackers to inject arbitrary web script or HTML via the (1) add_img_name_post, (2) asciiart_post, (3) expediteur, (4) titre_sav, or (5) z39d27af885b32758ac0e7d4014a61561 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5090.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/75689 - http://packetstormsecuri
ulnerabilities/ZSL-2012-5090.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/75689 - http://packetstormsecurity.org/files/112804/Artiphp-CMS-5.5.0-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53586 - http://secunia.com/advisories/49195 - http://www.osvdb.org/81990
CVE ID: CVE-2012-2907 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:05.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the aberdeen_breadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the breadcrumb, allows remote attackers to inject arbitrary web script or HTML via the content title in a breadcrumb. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/06/27/10 - http://www.securityfocus.com/bid/53581 - http://drupal.org/node/1585878 - http://drupal.org/node/15
rity/2012/06/27/10 - http://www.securityfocus.com/bid/53581 - http://drupal.org/node/1585878 - http://drupal.org/node/1585890 - http://drupalcode.org/project/aberdeen.git/commitdiff/1994e8e - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://secunia.com/advisories/49150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75712
CVE ID: CVE-2012-2908 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:04.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) bbcodeexample, (2) buttonimage, or (3) bbcodetag parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75575 - http://www.exploit-db.com/exploits/18873 - http://www.securityfocus.com/bid/53496
CVE ID: CVE-2012-2909 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:04.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) text field in the Private Messages System, (2) Bad Word field in Zensur, or (3) Portal or (4) Topic field in Kommentar. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=525 - http://www.exploit-db.com/exploits/18873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75577 - http://www.securityfocus.com/bid/53496
CVE ID: CVE-2012-2910 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:05.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SiliSoftware phpThumb() 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter to demo/phpThumb.demo.random.php or (2) title parameter to demo/phpThumb.demo.showpic.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5088.php - http://packetstormsecurity.org/files/112797/SiliSoftware-phpThumb-1.7.11-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com
msecurity.org/files/112797/SiliSoftware-phpThumb-1.7.11-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75709 - http://www.securityfocus.com/bid/53572
CVE ID: CVE-2012-2911 State: PUBLISHED Published: 2012-05-21T18:00:00 Last Updated: 2024-08-06T19:50:04.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in backupDB.php in SiliSoftware backupDB() 1.2.7a allows remote attackers to inject arbitrary web script or HTML via the onlyDB parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112801/SiliSoftware-backupDB-1.2.7a-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/53575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75710 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5089.php