Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2108 State: PUBLISHED Published: 2010-05-28T18:00:00 Last Updated: 2024-08-07T02:25:05.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 5.0.375.55 allows remote attackers to bypass the whitelist-mode plugin blocker via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12126 - http://code.google.com/p/chromium/issues/detail?id=39740
CVE ID: CVE-2010-2109 State: PUBLISHED Published: 2010-05-28T18:00:00 Last Updated: 2024-08-07T02:25:06.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via vectors related to the "drag + drop" functionality. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12083 - http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=41
lechromereleases.blogspot.com/2010/05/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=41469
CVE ID: CVE-2010-2110 State: PUBLISHED Published: 2010-05-28T18:00:00 Last Updated: 2024-08-07T02:25:05.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 5.0.375.55 does not properly execute JavaScript code in the extension context, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12123 - http://code.google.com/p/chromium/issues/detail?id=42228
CVE ID: CVE-2010-2111 State: PUBLISHED Published: 2010-05-28T20:00:00 Last Updated: 2024-08-07T02:25:06.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in user/user-set.do in Pacific Timesheet 6.74 build 363 allows remote attackers to hijack the authentication of administrators for requests that create a new administrator via a new_admin action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39951 - http://osvdb.org/64924 - http://cross-site-scripting.blogspot.com/2010/05/pacific-timesheet-674-cross-site.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/58934
CVE ID: CVE-2010-2112 State: PUBLISHED Published: 2010-05-28T20:00:00Z Last Updated: 2024-09-17T04:20:32.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/64823 - http://secunia.com/advisories/39843
CVE ID: CVE-2010-2113 State: PUBLISHED Published: 2010-05-28T20:00:00 Last Updated: 2024-08-07T02:25:05.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php. Additional Analyst Notes: - CVE Program Container: References: - http://cross-site-scripting.blogspot.com/2010/05/uniform-server-565-xsrf.html - http://osvdb.org/64858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58844 - http://secunia.com/advisories/399
http://osvdb.org/64858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58844 - http://secunia.com/advisories/39913
CVE ID: CVE-2010-2114 State: PUBLISHED Published: 2010-05-28T20:00:00Z Last Updated: 2024-09-17T04:14:28.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.web.PbxUserEdit bean. Additional Analyst Notes: - CVE Program Container: References: - http://cross-site-scripting.blogspot.com/2010/05/brekeke-pbx-2448-cross-site-request.html - http://osvdb.org/64950 - http://secunia.com/advisories/39952
CVE ID: CVE-2010-2115 State: PUBLISHED Published: 2010-05-28T20:00:00 Last Updated: 2024-08-07T02:25:06.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024019 - http://www.exploit-db.com/exploits/12683 - http://secunia.com/advisories/39896 - http://osvdb.org/64845
CVE ID: CVE-2010-2116 State: PUBLISHED Published: 2010-05-28T20:00:00Z Last Updated: 2024-09-16T18:48:19.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39881 - http://www.securitytracker.com/id?1024018 - http://osvdb.org/64832 - http://www.vupen.com/english/advisories/2010/1239 - http://www.cybsec.com/vuln/cybsec_advisory_2010_0501_I
b.org/64832 - http://www.vupen.com/english/advisories/2010/1239 - http://www.cybsec.com/vuln/cybsec_advisory_2010_0501_Ironmail_Advisory_Web_Access_Broken.pdf
CVE ID: CVE-2010-2117 State: PUBLISHED Published: 2010-06-01T20:00:00 Last Updated: 2024-08-07T02:25:06.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11190 - http://websecurity.com.ua/4238/ - http://www.securityfocus.com/archive/1/511509/100/0/threaded
CVE ID: CVE-2010-2118 State: PUBLISHED Published: 2010-06-01T20:00:00 Last Updated: 2024-08-07T02:25:06.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0.2900.2180 and 8.0.7600.16385 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid news:// URIs. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/4238/ - http://www.securityfocus.com/archive/1/511509/100/0/threaded
CVE ID: CVE-2010-2119 State: PUBLISHED Published: 2010-06-01T20:00:00 Last Updated: 2024-08-07T02:25:06.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid nntp:// URIs. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/4238/ - http://www.securityfocus.com/archive/1/511509/100/0/threaded
CVE ID: CVE-2010-2120 State: PUBLISHED Published: 2010-06-01T20:00:00 Last Updated: 2024-08-07T02:25:06.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 1.0.154.48 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid news:// URIs. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/4238/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11966 - http://www.securityfocus.com/archive/1/511509/100/0/threaded
CVE ID: CVE-2010-2121 State: PUBLISHED Published: 2010-06-01T20:00:00 Last Updated: 2024-08-07T02:25:06.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9.52 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/4238/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11622 - http://www.securityfocus.com/archive/1/511509/100/0/threaded
CVE ID: CVE-2010-2122 State: PUBLISHED Published: 2010-06-01T21:00:00 Last Updated: 2024-08-07T02:25:06.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/joomlasimpledownload-lfi.txt - http://www.osvdb.org/64743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58625 - http://secunia.com/advisories/39871 - http://www.exploit-db
https://exchange.xforce.ibmcloud.com/vulnerabilities/58625 - http://secunia.com/advisories/39871 - http://www.exploit-db.com/exploits/12618 - http://www.securityfocus.com/bid/40192 - http://extensions.joomla.org/extensions/directory-a-documentation/downloads/10717 - http://www.securityfocus.com/archive/1/511305/100/0/threaded
CVE ID: CVE-2010-2123 State: PUBLISHED Published: 2010-06-01T21:00:00 Last Updated: 2024-08-07T02:25:06.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain module privileges, to inject arbitrary web script or HTML via the (1) fullname, (2) address, (3) city, (4) provstate (aka state), (5) phone, or (6) taxid parameter in a stormorganization action to index.php; the (7) name parameter in a stormperson action to index.php; the (8) stepno (aka Step no.) or (9) title parameter in a stormtask action to index.php; the (10) title (
to index.php; the (8) stepno (aka Step no.) or (9) title parameter in a stormtask action to index.php; the (10) title (aka Project) parameter in a stormticket action to index.php; or (11) unspecified parameters in a stormproject action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/803770 - http://secunia.com/advisories/39732 - http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0160.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/58717 - http://www.securityfocus.com/bid/40288 - http://www.osvdb.org/64616
CVE ID: CVE-2010-2124 State: PUBLISHED Published: 2010-06-01T21:00:00 Last Updated: 2024-08-07T02:25:06.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in firma.php in Bartels Schone ConPresso 4.0.7 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12684 - http://www.securityfocus.com/bid/40335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58798 - http://packetstormsecurity.org/1005-exploits/conpresso407-sql.txt
CVE ID: CVE-2010-2125 State: PUBLISHED Published: 2010-06-01T21:00:00 Last Updated: 2024-08-07T02:25:06.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit any rotor item" privileges, to inject arbitrary web script or HTML via the (1) srs, (2) title, or (3) alt image attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64770 - http://secunia.com/advisories/39883 - http://drupal.org/node/803930 - https://exchange.xforce.ibmcloud.com/vulnerab
70 - http://secunia.com/advisories/39883 - http://drupal.org/node/803930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58719
CVE ID: CVE-2010-2126 State: PUBLISHED Published: 2010-06-01T21:00:00 Last Updated: 2024-08-07T02:25:07.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Snipe Gallery 3.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the cfg_admin_path parameter to (1) index.php, (2) view.php, (3) image.php, (4) search.php, (5) admin/index.php, (6) admin/gallery/index.php, (7) admin/gallery/view.php, (8) admin/gallery/gallery.php, (9) admin/gallery/image.php, and (10) admin/gallery/crop.php. Additional Analyst Notes: - CVE Program Container: References: - http://eidelweiss-advisories.blogspot.com/2010/04/snipegallery-3
l Analyst Notes: - CVE Program Container: References: - http://eidelweiss-advisories.blogspot.com/2010/04/snipegallery-315-multiple-remote-file.html - http://www.securityfocus.com/bid/40279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58806 - http://packetstormsecurity.org/1004-exploits/snipegallery-rfi.txt
CVE ID: CVE-2010-2127 State: PUBLISHED Published: 2010-06-01T21:00:00 Last Updated: 2024-08-07T02:25:06.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the lang_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58807 - http://www.exploit-db.com/exploits/12688 - http://packetstormsecurity.org/1005-exploits/jv2foldergallery-rfi.txt
CVE ID: CVE-2010-2128 State: PUBLISHED Published: 2010-06-01T21:00:00 Last Updated: 2024-08-07T02:25:07.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39832 - http://www.exploit-db.com/exploits/12607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58593 - http://www.osvdb.org/64706 - http://www.securityfocus.com/bid/40187
CVE ID: CVE-2010-2129 State: PUBLISHED Published: 2010-06-01T21:00:00 Last Updated: 2024-08-07T02:25:07.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39836 - http://www.exploit-db.com/exploits/12598 - http://www.xenuser.org/2010/05/14/joomla-component-je-ajax-event-calendar-local-file
www.exploit-db.com/exploits/12598 - http://www.xenuser.org/2010/05/14/joomla-component-je-ajax-event-calendar-local-file-inclusion-vulnerability/ - http://www.securityfocus.com/bid/40179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58602 - http://packetstormsecurity.org/1005-exploits/joomlaajaxec-lfi.txt - http://www.osvdb.org/64704
CVE ID: CVE-2010-2130 State: PUBLISHED Published: 2010-06-02T18:14:00 Last Updated: 2024-08-07T02:25:06.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38793 - http://packetstormsecurity.org/1002-exploits/arisg5-xss.txt - http://osvdb.org/62665 - http://www.securityfocus.com/archive/1/509758/100/0/threaded - http://www.securityfocus.com/bid/38441 - http://www.securityfocus.com/archive/1/509770/100/0/threaded
CVE ID: CVE-2010-2131 State: PUBLISHED Published: 2010-06-02T18:14:00Z Last Updated: 2024-09-16T16:43:17.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Calendar Base (cal) extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/cal/1.3.2/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-005/ - http://secunia.com/advisories/38745 - http://osvdb.org/62668 - http://www.securityfocus.com/bid/38493
CVE ID: CVE-2010-2132 State: PUBLISHED Published: 2010-06-02T18:14:00 Last Updated: 2024-08-07T02:25:07.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1 beta allow remote attackers to execute arbitrary PHP code via a URL in the CONF_INCLUDE_PATH parameter to (1) forum/admin.php and (2) plotgraph/index.php in admin/modules/modules/, and (3) admin_user/mod_admuser.php and (4) ogroup/mod_group.php in admin/modules/user_account/, different vectors than CVE-2007-1446. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.com/1002-exploits/oes-rfi.txt - htt
Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.com/1002-exploits/oes-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56590 - http://www.securityfocus.com/bid/38449
CVE ID: CVE-2010-2133 State: PUBLISHED Published: 2010-06-02T18:14:00 Last Updated: 2024-08-07T02:25:06.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56618 - http://www.securityfocus.com/bid/38485 - http://www.exploit-db.com/exploits/11616 - http://packetstormsecurity.org/1003-exploits/mlf-sql.txt
CVE ID: CVE-2010-2134 State: PUBLISHED Published: 2010-06-02T18:14:00 Last Updated: 2024-08-07T02:25:06.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in Project Man 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56580
CVE ID: CVE-2010-2135 State: PUBLISHED Published: 2010-06-02T18:14:00 Last Updated: 2024-08-07T02:25:06.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56587 - http://packetstormsecurity.org/1002-exploits/hazelpresslite-sql.txt
CVE ID: CVE-2010-2136 State: PUBLISHED Published: 2010-06-02T18:14:00 Last Updated: 2024-08-07T02:25:06.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/index.php in Article Friendly, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38715 - http://www.securityfocus.com/bid/38461 - http://osvdb.org/62624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56598 - http://www.packetstormsecurity.com/1002-exploits/articlefriendly-lfi.txt
CVE ID: CVE-2010-2137 State: PUBLISHED Published: 2010-06-02T18:14:00 Last Updated: 2024-08-07T02:25:06.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in _center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56575 - http://www.exploit-db.com/exploits/11587 - http://packetstormsecurity.org/1002-exploits/proman-rfilfi.txt
CVE ID: CVE-2010-2138 State: PUBLISHED Published: 2010-06-02T18:14:00 Last Updated: 2024-08-07T02:25:06.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SESSION[userLang] parameter to (1) elisttasks.php, (2) managepmanagers.php, (3) manageusers.php, (4) helpfunc.php, (5) managegroups.php, (6) manageprocess.php, and (7) manageusersgroups.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11587 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
m Container: References: - http://www.exploit-db.com/exploits/11587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56577 - http://packetstormsecurity.org/1002-exploits/proman-rfilfi.txt
CVE ID: CVE-2010-2139 State: PUBLISHED Published: 2010-06-02T19:00:00Z Last Updated: 2024-09-16T16:32:56.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39958
CVE ID: CVE-2010-2140 State: PUBLISHED Published: 2010-06-02T19:00:00Z Last Updated: 2024-09-16T20:16:14.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in itemdetail.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39958
CVE ID: CVE-2010-2141 State: PUBLISHED Published: 2010-06-02T19:00:00 Last Updated: 2024-08-07T02:25:06.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40350 - http://www.exploit-db.com/exploits/12735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58877 - http://packetstormsecurity.org/1005-exploits/nitro-sql.txt