Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2545 State: PUBLISHED Published: 2008-06-06T22:00:00 Last Updated: 2024-08-07T09:05:29.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020201 - http://secunia.com/advisories/30547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43044 - http://www.vupen.com
http://secunia.com/advisories/30547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43044 - http://www.vupen.com/english/advisories/2008/1749/references - http://www.securityfocus.com/bid/29553 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=711 - http://www.skype.com/security/skype-sb-2008-003.html
CVE ID: CVE-2008-2546 State: REJECTED Published: 2008-06-06T22:00:00Z Last Updated: 2024-09-16T16:14:00.308Z Description: No description available.
CVE ID: CVE-2008-2547 State: PUBLISHED Published: 2008-06-04T19:17:00 Last Updated: 2024-08-07T09:05:29.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x (aka /uninstall) option. NOTE: this issue might cross privilege boundaries if msiexec.exe is reachable via components such as ActiveX controls, and might additionally require a separate vulnerability in the control. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492992/100/
rol. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492992/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42887 - http://www.securityfocus.com/archive/1/492986/100/0/threaded - http://www.aushack.com/200806-msiexec.txt - http://www.securityfocus.com/archive/1/492961/100/0/threaded
CVE ID: CVE-2008-2548 State: PUBLISHED Published: 2008-06-04T19:17:00 Last Updated: 2024-08-07T09:05:29.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30409 - http://www.securityfocus.com/archive/1/492668/100/0/threaded - http://www.securitytracker.com/id?1020117 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
1/492668/100/0/threaded - http://www.securitytracker.com/id?1020117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42656 - http://www.vupen.com/english/advisories/2008/1671/references - http://www.zerodayinitiative.com/advisories/ZDI-08-033/
CVE ID: CVE-2008-2549 State: PUBLISHED Published: 2008-06-04T19:17:00 Last Updated: 2024-08-07T09:05:30.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32700 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=909609 - http://www.adobe.com/support/security/bulletins/apsb09-04.html - http://secunia.com/advisories/35163 - http://download.oracle.com/su
dobe.com/support/security/bulletins/apsb09-04.html - http://secunia.com/advisories/35163 - http://download.oracle.com/sunalerts/1019937.1.html - http://secunia.com/advisories/32872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42886 - http://www.adobe.com/support/security/bulletins/apsb08-19.html - https://www.exploit-db.com/exploits/5687 - http://www.securityfocus.com/bid/29420 - http://www.vupen.com/english/advisories/2009/0098 - http://www.us-cert.gov/cas/techalerts/TA08-309A.html - http://www.securitytracker.com/id?1021140 - http://www.vupen.com/english/advisories/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.redhat.com/suppo
ies/2008/3001 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.redhat.com/support/errata/RHSA-2008-0974.html - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=800801
CVE ID: CVE-2008-2550 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T09:05:29.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42822 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK61315 - http://www.vupen.com/english/advisories/2008/1734 - http://www-1.ibm.com/support/docview.ws
ocview.wss?uid=swg1PK61315 - http://www.vupen.com/english/advisories/2008/1734 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 - http://www.securitytracker.com/id?1020168
CVE ID: CVE-2008-2551 State: PUBLISHED Published: 2008-06-04T23:00:00 Last Updated: 2024-08-07T09:05:30.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1733/references - http://securityreason.com/securityalert/3926 - http://secunia.com/advisories/30512 - http://www.securityfocus.com/bid/29519 - http://www.s
son.com/securityalert/3926 - http://secunia.com/advisories/30512 - http://www.securityfocus.com/bid/29519 - http://www.securityfocus.com/archive/1/493019/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42825 - https://www.exploit-db.com/exploits/5732
CVE ID: CVE-2008-2552 State: PUBLISHED Published: 2008-06-05T20:21:00 Last Updated: 2024-08-07T09:05:30.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service (disk consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238414-1 - http://www.securitytracker.com/id?1020203 - http://www.vupen.com/english/advisories/2008/1748/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42874 - http://sunsolve.sun.com/search/d
ies/2008/1748/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42874 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019316.1-1 - http://www.securityfocus.com/bid/29561 - http://secunia.com/advisories/30545
CVE ID: CVE-2008-2553 State: PUBLISHED Published: 2008-06-05T20:21:00 Last Updated: 2024-08-07T09:05:30.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to inject arbitrary web script or HTML via the userfield parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.slashcode.com/article.pl?sid=08/01/07/2314232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42882 - http://secunia.com/advisories/31691 - http://slashcode.cvs.sourceforge.net/slashcode/slash/Slash/Utility/Environment/E
- http://secunia.com/advisories/31691 - http://slashcode.cvs.sourceforge.net/slashcode/slash/Slash/Utility/Environment/Environment.pm?r1=1.223&r2=1.225 - http://www.slashcode.com/article.pl?sid=08/01/04/1950244&tid=4 - http://www.debian.org/security/2008/dsa-1633 - http://www.securitytracker.com/id?1020207 - http://secunia.com/advisories/30551 - http://www.securityfocus.com/bid/29548
CVE ID: CVE-2008-2554 State: PUBLISHED Published: 2008-06-05T21:00:00 Last Updated: 2024-08-07T09:05:30.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp and (2) cat parameter to template_archives_cat.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42894 - http://www.securityfocus.com/archive/1/492902/100/0/threaded - https://www.exploit-db.com/exploits/5705 - http://www.securityfocus.com/bid/29460 - http://securityreason.com/securityalert/3925
CVE ID: CVE-2008-2555 State: PUBLISHED Published: 2008-06-05T21:00:00 Last Updated: 2024-08-07T09:05:30.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42787 - http://secunia.com/advisories/30494 - https://www.exploit-db.com/exploits/5706
CVE ID: CVE-2008-2556 State: PUBLISHED Published: 2008-06-05T21:00:00 Last Updated: 2024-08-07T09:05:30.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42789
CVE ID: CVE-2008-2557 State: PUBLISHED Published: 2008-06-05T21:00:00 Last Updated: 2024-08-07T09:05:30.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Links and (2) Links Submit pages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42888 - http://www.securityfocus.com/bid/29786 - http://secunia.com/advisories/30655 - http://oscommerceuniversity.com/lounge/index.php?topic=249.0
CVE ID: CVE-2008-2558 State: PUBLISHED Published: 2008-06-05T21:00:00 Last Updated: 2024-08-07T09:05:30.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42889 - http://oscommerceuniversity.com/lounge/index.php?topic=255.0
CVE ID: CVE-2008-2559 State: PUBLISHED Published: 2008-06-05T22:00:00 Last Updated: 2024-08-07T09:05:30.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Borland Interbase 2007 SP2 (8.1.0.256) allows remote attackers to execute arbitrary code via a malformed packet to TCP port 3050, which triggers a stack-based buffer overflow. NOTE: this issue might be related to CVE-2008-0467. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020092 - http://www.securityfocus.com/bid/29302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42558 - http://www.coresecurity.com/?action=item&id=2278 - http://www.vupen.com/engli
force.ibmcloud.com/vulnerabilities/42558 - http://www.coresecurity.com/?action=item&id=2278 - http://www.vupen.com/english/advisories/2008/1590 - http://secunia.com/advisories/30299
CVE ID: CVE-2008-2560 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the post parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42876 - http://secunia.com/advisories/30520 - http://www.securityfocus.com/bid/29564
CVE ID: CVE-2008-2561 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to (a) register.php, (b) reminder.php, and (c) search.php; the (2) uname, (3) email, and (4) email2 parameters to register.php; the (5) email parameter to reminder.php; and the (6) keywords parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5742 - http://secunia.com/advisories/30520 - https://exchange.xfo
ner: References: - https://www.exploit-db.com/exploits/5742 - http://secunia.com/advisories/30520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42877 - http://www.securityfocus.com/bid/29564
CVE ID: CVE-2008-2562 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the css_str parameter in an edit action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29566 - http://secunia.com/advisories/30423 - https://www.exploit-db.com/exploits/5744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42870
CVE ID: CVE-2008-2563 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) dsp_main.php and (2) dsp_task_editor.php in SamTodo 1.1 allow remote attackers to inject arbitrary web script or HTML via the (a) tid parameter in a main.taskeditor edit action, and the (b) completed parameter in a main.default action, to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42868 - http://secunia.com/advisories/30557 - http://www.davidso
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42868 - http://secunia.com/advisories/30557 - http://www.davidsopas.com/soapbox/samtodo.txt - http://www.securityfocus.com/bid/29569
CVE ID: CVE-2008-2564 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42840 - https://www.exploit-db.com/exploits/5737 - http://secunia.com/advisories/30541
CVE ID: CVE-2008-2565 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php. NOTE: it was later reported that 4.0.x is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35511 - http://secunia.com/advisories/35590 - http://secunia.com/advisories/30540 - https://www.exploit-db.com/exploits/5739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42855 -
isories/30540 - https://www.exploit-db.com/exploits/5739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99622 - https://www.exploit-db.com/exploits/9023 - http://www.securityfocus.com/archive/1/504595/100/0/threaded - http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2008-2566 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42856 - https://www.exploit-db.com/exploits/5739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99624 - http://packetstormsecurity.com/files/129789/PHP
oits/5739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99624 - http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2008-2567 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search, a different vulnerability than CVE-2007-6002. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN25448394/index.html - http://www.securityfocus.com/bid/29555 - http://secunia.com/advisories/30487 -
http://jvn.jp/jp/JVN25448394/index.html - http://www.securityfocus.com/bid/29555 - http://secunia.com/advisories/30487 - http://www.fenrir.co.jp/sleipnir/note.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42827
CVE ID: CVE-2008-2568 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30461 - http://www.securityfocus.com/bid/29565 - https://www.exploit-db.com/exploits/5743 - https://www.exploit-db.com/exploits/5833 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42871
CVE ID: CVE-2008-2569 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the EasyBook (com_easybook) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a deleteentry action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42853 - http://secunia.com/advisories/30539
CVE ID: CVE-2008-2570 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in LimeSurvey (formerly PHPSurveyor) before 1.71 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42806 - http://www.securityfocus.com/bid/29506 - http://secunia.com/advisories/30495 - http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922 - http://www.limesurvey.org/content/view/102/1/lang%2Cen/
CVE ID: CVE-2008-2571 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:29.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29506 - http://secunia.com/advisories/30495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42807 - http://sourceforge.net/project/shownotes.php?group_id=74605&release_id=603922 - http://www.limesurvey.org/content/view/102/1/lang%2C
eforge.net/project/shownotes.php?group_id=74605&release_id=603922 - http://www.limesurvey.org/content/view/102/1/lang%2Cen/
CVE ID: CVE-2008-2572 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in php/leer_comentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL commands via the articulo_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43040 - http://www.securityfocus.com/archive/1/492748/100/0/threaded - https://www.exploit-db.com/exploits/5685 - http://securityreason.com/securityalert/3927
CVE ID: CVE-2008-2573 State: PUBLISHED Published: 2008-06-06T18:00:00 Last Updated: 2024-08-07T09:05:30.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a long directory name in an SSH_FXP_OPENDIR (aka opendir) command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493180/100/0/threaded - http://www.vupen.com/english/advisories/2008/1711/references - http://www.securitytracker.com/id?1020212 - https://www.exploit-db.com/exploits/5751 - https://www.exploit-db.com/exploits/5709 - http://secunia.com/advisor
20212 - https://www.exploit-db.com/exploits/5751 - https://www.exploit-db.com/exploits/5709 - http://secunia.com/advisories/30498 - http://www.securityfocus.com/bid/29453
CVE ID: CVE-2008-2574 State: PUBLISHED Published: 2008-06-06T22:00:00 Last Updated: 2024-08-07T09:05:30.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42820 - https://www.exploit-db.com/exploits/5728 - http://www.flashblog.org - http://www.dumenci.net/web-action/flashblog-beta0.31-remote-file-upload-vulnerability.html - http:/
/www.flashblog.org - http://www.dumenci.net/web-action/flashblog-beta0.31-remote-file-upload-vulnerability.html - http://securityreason.com/securityalert/3928 - http://www.securityfocus.com/archive/1/492738/100/0/threaded