Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0270 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:34.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sContext parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39645 - https://www.exploit-db.com/exploits/4899 - http://secunia.com/advisories/28448 - http://www.securityfocus.com/bid/27257
CVE ID: CVE-2008-0271 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:34.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The editor deletion form in BUEditor 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.1, a module for Drupal, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete custom editor interfaces. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28418 - http://www.vupen.com/english/advisories/2008/0128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39614 - http://drupal.org/node/208534
CVE ID: CVE-2008-0272 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:34.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0134 - http://www.vbdrupal.org/forum/showthread.php?p=6878 - http://www.securityfocus.com/bid/27238 - http://secunia.com/advisories/28422 - http://drupal.org/node/208562 - http://www.vupen.com/english/advisories/2008/0127 - htt
//secunia.com/advisories/28422 - http://drupal.org/node/208562 - http://www.vupen.com/english/advisories/2008/0127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39617 - http://www.vbdrupal.org/forum/showthread.php?t=1349 - http://secunia.com/advisories/28486
CVE ID: CVE-2008-0273 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:34.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6, when Internet Explorer 6 is used, allows remote attackers to conduct cross-site scripting (XSS) attacks via invalid UTF-8 byte sequences, which are not processed as UTF-8 by Drupal's HTML filtering, but are processed as UTF-8 by Internet Explorer, effectively removing characters from the document and defeating the HTML protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0134
ism. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0134 - http://www.vbdrupal.org/forum/showthread.php?p=6878 - http://www.securityfocus.com/bid/27238 - http://secunia.com/advisories/28422 - http://drupal.org/node/208564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39619 - http://www.vupen.com/english/advisories/2008/0127 - http://www.vbdrupal.org/forum/showthread.php?t=1349 - http://secunia.com/advisories/28486
CVE ID: CVE-2008-0274 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:35.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allows remote attackers to inject arbitrary web script or HTML via crafted links involving theme .tpl.php files. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0134 - http://www.vbdrupal.org/forum/showthread.php?p=6878 - http://www.securityfocus.com/bid/27238 - http://secunia.com/advisories/28422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
curityfocus.com/bid/27238 - http://secunia.com/advisories/28422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39605 - http://drupal.org/node/208565 - http://www.vupen.com/english/advisories/2008/0127 - http://www.vbdrupal.org/forum/showthread.php?t=1349 - http://secunia.com/advisories/28486
CVE ID: CVE-2008-0275 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:34.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1) titles, (2) teasers, and (3) bodies, which might allow remote attackers to gain access to syndicated content. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/208527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39607
CVE ID: CVE-2008-0276 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:35.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39606 - http://drupal.org/node/208524
CVE ID: CVE-2008-0277 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:34.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users with node-creation privileges to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39609 - http://drupal.org/node/208537
CVE ID: CVE-2008-0278 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:34.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a sm_window action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27277 - http://secunia.com/advisories/28503 - https://www.exploit-db.com/exploits/4907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39656
CVE ID: CVE-2008-0279 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:34.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitrary SQL commands via the topic parameter. NOTE: the categorie parameter might also be affected. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39654 - http://www.securityfocus.com/bid/27278 - https://www.exploit-db.com/exploits/4908
CVE ID: CVE-2008-0280 State: PUBLISHED Published: 2008-01-15T20:00:00 Last Updated: 2024-08-07T07:39:34.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the (1) a or (2) cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39597 - http://securityreason.com/securityalert/3544 - http://www.securityfocus.com/bid/27224 - https://www.exploit-db.com/exploits/4882 - http://www.securityfocus.com/archive/1/486090/100/0/threade
s.com/bid/27224 - https://www.exploit-db.com/exploits/4882 - http://www.securityfocus.com/archive/1/486090/100/0/threaded
CVE ID: CVE-2008-0281 State: PUBLISHED Published: 2008-01-15T20:00:00 Last Updated: 2024-08-07T07:39:34.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idFamille parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39594 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059533.html - http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059538.html - http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059537.html - http://www.se
e/2008-January/059538.html - http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059537.html - http://www.securityfocus.com/bid/27220
CVE ID: CVE-2008-0282 State: PUBLISHED Published: 2008-01-15T20:00:00 Last Updated: 2024-08-07T07:39:34.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28393 - https://www.exploit-db.com/exploits/4880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39593 - http://www.securityfocus.com/bid/27212
CVE ID: CVE-2008-0283 State: PUBLISHED Published: 2008-01-15T20:00:00 Last Updated: 2024-08-07T07:39:34.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4883 - http://www.securityfocus.com/bid/27226
CVE ID: CVE-2008-0284 State: PUBLISHED Published: 2008-01-15T20:00:00 Last Updated: 2024-08-07T07:39:34.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39585 - http://securityreason.com/securityalert/3540 - http://www.securityfocus.com/archive/1/486074/100/0/threaded
CVE ID: CVE-2008-0285 State: PUBLISHED Published: 2008-01-15T23:00:00 Last Updated: 2024-08-07T07:39:35.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference. Additional Analyst Notes: - CVE Program Container: References: - http://ngircd.barton.de/doc/ChangeLog - http://secunia.com/advisories/28673 - http://secunia.com/advisories/28425 - http://arthur.barton.de/cgi-bin/viewcvs.cgi/ngircd/ngircd/src/ngircd/irc-channel.c?r1=1.40&r2=1.41&diff_format=h - http://bugs.gentoo.org/show_bug.cgi?id=204834 -
/ngircd/ngircd/src/ngircd/irc-channel.c?r1=1.40&r2=1.41&diff_format=h - http://bugs.gentoo.org/show_bug.cgi?id=204834 - http://www.securityfocus.com/bid/27318 - http://security.gentoo.org/glsa/glsa-200801-13.xml
CVE ID: CVE-2008-0286 State: PUBLISHED Published: 2008-01-16T00:00:00 Last Updated: 2024-08-07T07:39:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486323/100/0/threaded - http://www.securityfocus.com/archive/1/486646/100/0/threaded - http://www.securityfocus.com/bid/27286 - http://securityreason.com/securityalert/3546 - http://secunia.com/advisories/28495 - https://exchange.xforce.ibmcloud.com/vulnerabili
tyreason.com/securityalert/3546 - http://secunia.com/advisories/28495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39657
CVE ID: CVE-2008-0287 State: PUBLISHED Published: 2008-01-16T01:00:00 Last Updated: 2024-08-07T07:39:35.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php and (2) checkout.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27231 - https://www.exploit-db.com/exploits/4889 - http://secunia.com/advisories/28424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39616
CVE ID: CVE-2008-0288 State: PUBLISHED Published: 2008-01-16T01:00:00 Last Updated: 2024-08-07T07:39:34.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands via the id, which is not properly handled in (1) classes/IADomain.php, (2) classes/IACollection.php, and (3) classes/IAUser.php, as demonstrated via the id parameter in a collection.imageview action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3548 - http://www.securityfocus.com/archive/1/486162/100/0/threaded - http://www.securityfocus.com/bid/27240
urityalert/3548 - http://www.securityfocus.com/archive/1/486162/100/0/threaded - http://www.securityfocus.com/bid/27240 - https://www.exploit-db.com/exploits/4895
CVE ID: CVE-2008-0289 State: PUBLISHED Published: 2008-01-16T01:00:00 Last Updated: 2024-08-07T07:39:35.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter. NOTE: a second vector might exist via the l parameter. NOTE: as of 20080118, the vendor has disputed the set of affected versions, stating that the issue "is already fixed, for almost a year." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3547 - http://www.securityfocus.com/archi
- CVE Program Container: References: - http://securityreason.com/securityalert/3547 - http://www.securityfocus.com/archive/1/486618/100/0/threaded - http://www.securityfocus.com/archive/1/486172/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39611 - http://www.securityfocus.com/bid/27244
CVE ID: CVE-2008-0290 State: PUBLISHED Published: 2008-01-16T01:00:00 Last Updated: 2024-08-07T07:39:34.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39602 - https://www.exploit-db.com
ww.securityfocus.com/bid/27232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39602 - https://www.exploit-db.com/exploits/4887
CVE ID: CVE-2008-0291 State: PUBLISHED Published: 2008-01-16T21:00:00 Last Updated: 2024-08-07T07:39:34.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4910 - http://www.securityfocus.com/archive/1/486402/100/0/threaded - http://secunia.com/advisories/28449 - http://www.securityfocus.com/bid/27281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39668 - http://www.securityfocus.com/bid/27310
CVE ID: CVE-2008-0292 State: PUBLISHED Published: 2008-01-16T21:00:00 Last Updated: 2024-08-07T07:39:34.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39664
CVE ID: CVE-2008-0293 State: PUBLISHED Published: 2008-01-16T21:00:00 Last Updated: 2024-08-07T07:39:34.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the show_foot function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28459 - http://sourceforge.net/project/shownotes.php?group_id=160239&release_id=568374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39648
CVE ID: CVE-2008-0294 State: PUBLISHED Published: 2008-01-16T21:00:00 Last Updated: 2024-08-07T07:39:34.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat more than once via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28459 - http://www.securityfocus.com/bid/27270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39647 - http://sourceforge.net/project/shownotes.php?release_id=568374&group_id=160239
CVE ID: CVE-2008-0295 State: PUBLISHED Published: 2008-01-16T21:00:00 Last Updated: 2024-08-07T07:39:34.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0105 - http://secunia.com/advisories/29284 - http://www.debian.org/security/2008/dsa-1543 - http://www.securityfocus.com/bid/272
ttp://secunia.com/advisories/29284 - http://www.debian.org/security/2008/dsa-1543 - http://www.securityfocus.com/bid/27221 - http://secunia.com/advisories/28383 - http://aluigi.altervista.org/adv/vlcxhof-adv.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14776 - http://secunia.com/advisories/29766 - http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml
CVE ID: CVE-2008-0296 State: PUBLISHED Published: 2008-01-16T21:00:00 Last Updated: 2024-08-07T07:39:34.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary code via a long string. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0105 - http://secunia.com/advisories/29284 - http://www.debian.org/security/2008/dsa-1543 - http://aluigi.altervista.org/adv/vlcxhof-adv.txt - https://oval.cisecurity.org/reposi
ebian.org/security/2008/dsa-1543 - http://aluigi.altervista.org/adv/vlcxhof-adv.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14597 - http://secunia.com/advisories/29766 - http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml
CVE ID: CVE-2008-0297 State: PUBLISHED Published: 2008-01-16T22:00:00 Last Updated: 2024-08-07T07:39:34.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which includes the credentials in its output. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39652 - https://www.exploit-db.com/exploits/4897
CVE ID: CVE-2008-0298 State: PUBLISHED Published: 2008-01-16T22:00:00 Last Updated: 2024-08-07T07:39:35.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a crafted web page, possibly involving a STYLE attribute of a DIV element. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39635 - http://www.securityfocus.com/archive/1/486202/100/0/threaded - http://www.s21sec.com/avisos/s21sec-039-en.txt - http://securityreason.com/securityalert/3549 - http://www.securityfocus.com/bid/27261
CVE ID: CVE-2008-0299 State: PUBLISHED Published: 2008-01-16T22:00:00 Last Updated: 2024-08-07T07:39:34.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=428727 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00529.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39749 - http://people.debian.org/~nion/nmu-dif
uary/msg00529.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39749 - http://people.debian.org/~nion/nmu-diff/paramiko-1.6.4-1_1.6.4-1.1.patch - http://www.lag.net/pipermail/paramiko/2008-January/000599.html - http://security.gentoo.org/glsa/glsa-200803-07.xml - http://secunia.com/advisories/28510 - http://secunia.com/advisories/29168 - http://secunia.com/advisories/28488 - http://www.securityfocus.com/bid/27307 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00594.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460706
CVE ID: CVE-2008-0300 State: PUBLISHED Published: 2008-03-11T23:00:00 Last Updated: 2024-08-07T07:39:34.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php - https://www.exploit-db.com/exploits/5232 - http://www.securityfocus.com/bid/28195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41131 - http://secunia.com/advisorie
.securityfocus.com/bid/28195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41131 - http://secunia.com/advisories/29329
CVE ID: CVE-2008-0301 State: PUBLISHED Published: 2008-03-11T23:00:00 Last Updated: 2024-08-07T07:39:34.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via the gaz parameter to mod_gazetteer_edit.php and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5233 - http://www.securityfocus.com/bid/28193 - http://securityreason.com/securityalert/3728 - http://www.redteam-pentesting.de/advisories/rt-sa-2008-002.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/41139 - http://marc.info