Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4765 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-17T02:15:58.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS) before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=4936 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2010-4766 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T23:27:10.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a standard e-mail client. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=4818 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2010-4767 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-17T02:36:10.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service (duplicate tickets and duplicate auto-responses) by sending a crafted message to a POP3 mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=3426 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2010-4768 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T23:11:25.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remove operations involving both hidden permissions and other permissions. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=3499 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revisi
ntainer: References: - http://bugs.otrs.org/show_bug.cgi?id=3499 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2010-4769 State: PUBLISHED Published: 2011-03-23T21:00:00Z Last Updated: 2024-09-16T20:16:45.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the task parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44992 - http://www.exploit-db.com/exploits/15585 - http://secunia.com/advisories/42324
CVE ID: CVE-2010-4770 State: PUBLISHED Published: 2011-03-23T21:00:00 Last Updated: 2024-08-07T03:55:35.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15578 - http://packetstormsecurity.org/files/view/96010/dvdrental-sql.txt - http://securityreason.com/securityalert/8159 - http://www.securityfocus.com/bid/44988 - http://secunia.com/advisories/42330
CVE ID: CVE-2010-4771 State: PUBLISHED Published: 2011-03-23T21:00:00Z Last Updated: 2024-09-17T03:17:40.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15588 - http://secunia.com/advisories/42323 - http://www.securityfocus.com/bid/44994
CVE ID: CVE-2010-4772 State: PUBLISHED Published: 2011-03-23T21:00:00Z Last Updated: 2024-09-16T23:26:01.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15588 - http://secunia.com/advisories/42323 - http://www.securityfocus.com/bid/44994
CVE ID: CVE-2010-4773 State: PUBLISHED Published: 2011-03-23T21:00:00 Last Updated: 2024-08-07T03:55:35.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (* 2) 2010.11.15; Hitachi EUR Form Service before 05-10 -/D 2010.11.15; and uCosminexus EUR Form Service before 07-60 -/D 2010.11.15 on Windows, before 05-10 -/D 2010.11.15 and 07-50 -/D 2010.11.15 on Linux, and before 07-50 -/C 2010.11.15 on AIX; allows remote attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabil
ectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63278 - http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-027/index.html - http://secunia.com/advisories/42207 - http://www.vupen.com/english/advisories/2010/2989 - http://osvdb.org/69363
CVE ID: CVE-2010-4774 State: PUBLISHED Published: 2011-03-23T21:00:00Z Last Updated: 2024-09-17T01:35:40.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15594
CVE ID: CVE-2010-4775 State: PUBLISHED Published: 2011-03-23T21:00:00 Last Updated: 2024-08-07T03:55:35.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted node titles and relationships. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/975094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63331 - http://osvdb.org/69368 - http://secunia.com/advisories/42228 - http://drupal.org/node/974668 - http://www.securityfocus.com/bid/44932 - http://drupal.org/node/974
m/advisories/42228 - http://drupal.org/node/974668 - http://www.securityfocus.com/bid/44932 - http://drupal.org/node/974672
CVE ID: CVE-2010-4776 State: PUBLISHED Published: 2011-03-23T21:00:00 Last Updated: 2024-08-07T03:55:35.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute arbitrary SQL commands via the tid2 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63246 - http://packetstormsecurity.org/files/view/95817/potgp-sql.txt - http://www.exploit-db.com/exploits/15526 - http://securityreason.com/securityalert/8158
CVE ID: CVE-2010-4777 State: PUBLISHED Published: 2014-02-10T17:00:00 Last Updated: 2024-08-07T03:55:35.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html -
es: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - https://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055885.html - https://bugzilla.redhat.com/show_bug.cgi?id=694166 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628836 - http://forums.ocsinventory-ng.org/viewtopic.php?id=7215 - https://rt.perl.org/Public/Bug/Display.html?id=76538 - http://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html
CVE ID: CVE-2010-4778 State: PUBLISHED Published: 2011-04-01T21:00:00Z Last Updated: 2024-09-17T03:12:55.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka fmusername), (2) password (aka fmpassword), or (3) server (aka fmserver) field in a fetchmail_prefs_save action, related to the Fetchmail configuration, a different issue than CVE-2010-3695. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CV
han CVE-2010-3695. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://git.horde.org/diff.php/imp/fetchmailprefs.php?rt=horde&r1=1.39.4.10&r2=1.39.4.11 - http://www.vupen.com/english/advisories/2010/2513
CVE ID: CVE-2010-4779 State: PUBLISHED Published: 2011-04-07T14:00:00Z Last Updated: 2024-09-17T02:16:30.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wptouch_settings parameter to include/adsense-new.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/69538 - http://secunia.com/advisories/42438 - http://www.securityfocus.com/bid/45139 - http://www.htbridge.ch/advisory/xss_in_
- http://secunia.com/advisories/42438 - http://www.securityfocus.com/bid/45139 - http://www.htbridge.ch/advisory/xss_in_wptouch_wordpress_plugin.html
CVE ID: CVE-2010-4780 State: PUBLISHED Published: 2011-04-07T14:00:00 Last Updated: 2024-08-07T03:55:35.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15645 - http://secunia.com/advisories/42375 - http://enanocms.org/News:Article/2010/
http://www.exploit-db.com/exploits/15645 - http://secunia.com/advisories/42375 - http://enanocms.org/News:Article/2010/11/16/Enano_1.1.8.2c_1.0.6pl3.2c_and_1.1.7pl2_released - http://packetstormsecurity.org/files/view/96229/enanocms-sqldisclose.txt - http://www.htbridge.ch/advisory/sql_injection_in_enano_cms.html - http://osvdb.org/69537 - http://securityreason.com/securityalert/8183 - http://www.securityfocus.com/bid/45120
CVE ID: CVE-2010-4781 State: PUBLISHED Published: 2011-04-07T14:00:00 Last Updated: 2024-08-07T03:55:35.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15645 - http://enanocms.org/News:Article/2010/11/16/Enano_1.1.8.2c_1.0.6pl3.2c_and_1.1.7pl2_released - http://www.htbridge.ch/advisory/path_disclosure_in_enano_cms.html - http://packetstorm
0.6pl3.2c_and_1.1.7pl2_released - http://www.htbridge.ch/advisory/path_disclosure_in_enano_cms.html - http://packetstormsecurity.org/files/view/96229/enanocms-sqldisclose.txt - http://securityreason.com/securityalert/8183 - http://www.securityfocus.com/bid/45120
CVE ID: CVE-2010-4782 State: PUBLISHED Published: 2011-04-07T14:00:00 Last Updated: 2024-08-07T03:55:34.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) city, (2) state, (3) country, (4) minprice, (5) maxprice, (6) bed, and (7) bath parameters, different vectors than CVE-2006-6807. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23506 - http://www.exploit-db.com/exploits/15661 - http://packetstormsecurity.org/files/view/96305/anandarealestate-sql.tx
506 - http://www.exploit-db.com/exploits/15661 - http://packetstormsecurity.org/files/view/96305/anandarealestate-sql.txt - http://securityreason.com/securityalert/8185 - http://www.securityfocus.com/bid/45146
CVE ID: CVE-2010-4783 State: PUBLISHED Published: 2011-04-07T14:00:00 Last Updated: 2024-08-07T04:02:28.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) siteurl and (2) urlbanner parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/69510 - http://www.securityfocus.com/bid/45066 - http://secunia.com/advisories/42316 - http://evuln.com/vulns/148/summary.html - http://www.securityfocus.com/archive/1/514905/100/0/threa
m/advisories/42316 - http://evuln.com/vulns/148/summary.html - http://www.securityfocus.com/archive/1/514905/100/0/threaded - http://packetstormsecurity.org/files/view/96154/easybannerfree-xss.txt
CVE ID: CVE-2010-4784 State: PUBLISHED Published: 2011-04-07T14:00:00 Last Updated: 2024-08-07T04:02:29.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/147/summary.html - http://www.securityfocus.com/bid/45066 - http://www.securityfocus.com/archive/1/514908/100/0/threaded - http://secunia.com/advisories/42316 - http://packetstormsecurity.org/files/vie
cus.com/archive/1/514908/100/0/threaded - http://secunia.com/advisories/42316 - http://packetstormsecurity.org/files/view/96153/easybannerfree-sql.txt - http://www.osvdb.org/69511 - http://securityreason.com/securityalert/8184
CVE ID: CVE-2010-4785 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-16T19:35:00.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended operation that triggers certain comparisons involving the NULL operation OID. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO11814 - http://www.ibm.com/support/docview.wss?uid=swg24029672
CVE ID: CVE-2010-4786 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-17T01:20:59.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon crash or hang) via a paged search, as demonstrated by a certain idsldapsearch command, related to an improper ibm-slapdIdleTimeOut configuration setting. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg24029672 - http://www.ibm.com/support/docview.wss?uid=swg1IO12316
CVE ID: CVE-2010-4787 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-16T19:51:04.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon hang) via a paged search that triggers improper mutex processing. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO12476 - http://www.ibm.com/support/docview.wss?uid=swg24029672
CVE ID: CVE-2010-4788 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-16T17:42:45.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service (daemon crash) via a paged search. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg24029672 - http://www.ibm.com/support/docview.wss?uid=swg1IO11943
CVE ID: CVE-2010-4789 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-16T23:45:57.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg24029659 - http://www.ibm.com/support/docview.wss?uid=swg1IO13364 - ht
: - http://www.ibm.com/support/docview.wss?uid=swg24029659 - http://www.ibm.com/support/docview.wss?uid=swg1IO13364 - http://www.ibm.com/support/docview.wss?uid=swg24029672 - http://www.ibm.com/support/docview.wss?uid=swg1IO13451
CVE ID: CVE-2010-4790 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FilterFTP 2.0.3, 2.0.5, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1010-exploits/filterftp-traversal.txt - http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_filterftp.html - http://secunia.com/advisories/41737 - http://www.
idge.ch/advisory/directory_traversal_vulnerability_in_filterftp.html - http://secunia.com/advisories/41737 - http://www.securityfocus.com/archive/1/514182/100/0/threaded - http://securityreason.com/securityalert/8218
CVE ID: CVE-2010-4791 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user_fotoalbum_panel) module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the album_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41752 - http://securityreason.com/securityalert/8219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62382 - http://www.securityfocus.com/bid/43901 - http://www.exploit-db.com/ex
change.xforce.ibmcloud.com/vulnerabilities/62382 - http://www.securityfocus.com/bid/43901 - http://www.exploit-db.com/exploits/15227 - http://packetstormsecurity.org/1010-exploits/phpfusionmguser-sql.txt
CVE ID: CVE-2010-4792 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:28.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter. Additional Analyst Notes: - CVE Program Container: References: - http://anatoliasecurity.com/adv/as-adv-2010-002.txt - http://securityreason.com/securityalert/8220 - http://www.securityfocus.com/bid/43872 - http://secunia.com/advisories/41771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62361 - http://packetstormsecurity.org/1010-exploits/overlook-xss.tx
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/62361 - http://packetstormsecurity.org/1010-exploits/overlook-xss.txt
CVE ID: CVE-2010-4793 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62387 - http://www.exploit-db.com/exploits/15230 - http://www.securityfocus.com/bid/43900 - http://secunia.com/advisories/41750 - http://packetstormsecurity.org/1010-exploits/autoemanager-sql.txt - http://securityreason.com/securityalert/8221
CVE ID: CVE-2010-4794 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in a jscalendar action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43902 - http://securityreason.com/securityalert/8223 - http://adv.salvatorefresta.n
: - http://www.securityfocus.com/bid/43902 - http://securityreason.com/securityalert/8223 - http://adv.salvatorefresta.net/JS_Calendar_1.5.1_Joomla_Component_Multiple_Remote_Vulnerabilities-09102010.txt - http://secunia.com/advisories/41766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62378 - http://www.exploit-db.com/exploits/15224
CVE ID: CVE-2010-4795 State: PUBLISHED Published: 2011-04-27T00:00:00 Last Updated: 2024-08-07T04:02:29.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62379 - http://securityreason.com/securityalert/8223 - http://adv.salvatorefresta.ne