Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4591 State: PUBLISHED Published: 2010-01-07T18:13:00 Last Updated: 2024-08-07T07:08:38.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37147 - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/docs/CHANGELOG?revision=1.359&view=markup - https://exchange.xforce.ibmcloud.com/vulnerabilities/53970 - http://base.secureideas.net/news.php - http://www.vupen.com/english/advisories/2009/305
loud.com/vulnerabilities/53970 - http://base.secureideas.net/news.php - http://www.vupen.com/english/advisories/2009/3054
CVE ID: CVE-2009-4592 State: PUBLISHED Published: 2010-01-07T18:13:00 Last Updated: 2024-08-07T07:08:38.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to include arbitrary local files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53969 - http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/docs/CHANGELOG?revision=1.359&view=markup - http://base.secureideas.net/news.php - http://www.vupen.com/english/ad
-php4/docs/CHANGELOG?revision=1.359&view=markup - http://base.secureideas.net/news.php - http://www.vupen.com/english/advisories/2009/3054
CVE ID: CVE-2009-4593 State: PUBLISHED Published: 2010-01-07T18:13:00Z Last Updated: 2024-09-17T03:44:09.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bftpdutmp_log function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string value of the ut.bu_host structure member, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36820 - http://secunia.com/advisories/37185 - http://bftpd.sourceforge.net/downloads/CHANGELOG -
.securityfocus.com/bid/36820 - http://secunia.com/advisories/37185 - http://bftpd.sourceforge.net/downloads/CHANGELOG - http://www.vupen.com/english/advisories/2009/3032 - http://bftpd.sourceforge.net/news.html#032130
CVE ID: CVE-2009-4594 State: PUBLISHED Published: 2010-01-09T18:00:00 Last Updated: 2024-08-07T07:08:38.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR SDOY7RHBNH. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55548 - http://www-01.ibm.com/support/docview.wss?uid=swg27015942 - http://www-01.ibm.com/support/docview.wss?uid=swg27016085 - http://www-01.ibm.com/support/docview.wss?uid=swg27017776
CVE ID: CVE-2009-4595 State: PUBLISHED Published: 2010-01-12T17:00:00Z Last Updated: 2024-09-16T20:58:22.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated users to execute arbitrary SQL commands via the sup_id parameter in a suppliers details action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37672
CVE ID: CVE-2009-4596 State: PUBLISHED Published: 2010-01-12T17:00:00 Last Updated: 2024-08-07T07:08:38.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary web script or HTML via the sup_id parameter in a suppliers details action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10370 - http://packetstormsecurity.org/0912-exploits/phpinventory-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54667
CVE ID: CVE-2009-4597 State: PUBLISHED Published: 2010-01-12T17:00:00 Last Updated: 2024-08-07T07:08:38.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the user_id parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the (2) user (username) and (3) pass (password) parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37672 - http://www.exploit-db.com/exploits/1
Notes: - CVE Program Container: References: - http://secunia.com/advisories/37672 - http://www.exploit-db.com/exploits/10370 - http://packetstormsecurity.org/0912-exploits/phpinventory-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54666
CVE ID: CVE-2009-4598 State: PUBLISHED Published: 2010-01-12T17:00:00 Last Updated: 2024-08-07T07:08:37.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/60864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54664 - http://www.securityfocus.com/bid/37279 - http://www.exploit-db.com/exploits/10367 - http://packetstormsecurity.org/0912-exploits/joomlajphoto-sql.txt - http://secunia.com/advisories/3767
/exploits/10367 - http://packetstormsecurity.org/0912-exploits/joomlajphoto-sql.txt - http://secunia.com/advisories/37676
CVE ID: CVE-2009-4599 State: PUBLISHED Published: 2010-01-12T17:00:00 Last Updated: 2024-08-07T07:08:37.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the md parameter in an employer view_company action to index.php or (2) the oi parameter in an employer view_job action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54663 - http://www.securityfocus.com/bid/37281 - http://packetstormsecurity
exchange.xforce.ibmcloud.com/vulnerabilities/54663 - http://www.securityfocus.com/bid/37281 - http://packetstormsecurity.org/0912-exploits/joomlajobs-sql.txt
CVE ID: CVE-2009-4600 State: PUBLISHED Published: 2010-01-12T17:00:00 Last Updated: 2024-08-07T07:08:38.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Email parameter (aka the username field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54647 - http://osvdb.org/60866 - http://www.exploit-db.com/exploits/10361 - http://secunia.com/
loud.com/vulnerabilities/54647 - http://osvdb.org/60866 - http://www.exploit-db.com/exploits/10361 - http://secunia.com/advisories/37633
CVE ID: CVE-2009-4601 State: PUBLISHED Published: 2010-01-12T17:00:00Z Last Updated: 2024-09-16T20:41:44.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to inject arbitrary web script or HTML via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0912-exploits/zeejob-xss.txt - http://secunia.com/advisories/37667 - http://www.securityfocus.com/bid/37290
CVE ID: CVE-2009-4602 State: PUBLISHED Published: 2010-01-12T17:00:00Z Last Updated: 2024-09-16T23:20:32.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Randomizer module 5.x through 5.x-1.0 and 6.x through 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37274 - http://www.vupen.com/english/advisories/2009/3476 - http://drupal.org/node/655668
CVE ID: CVE-2009-4603 State: PUBLISHED Published: 2010-01-12T17:00:00Z Last Updated: 2024-09-16T22:56:36.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in sapstartsrv.exe in the SAP Kernel 6.40, 7.00, 7.01, 7.10, 7.11, and 7.20, as used in SAP NetWeaver 7.x and SAP Web Application Server 6.x and 7.x, allows remote attackers to cause a denial of service (Management Console shutdown) via a crafted request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023319 - http://secunia.com/advisories/37684 - http://www.cybsec.com/vuln/CYBS
ces: - http://www.securitytracker.com/id?1023319 - http://secunia.com/advisories/37684 - http://www.cybsec.com/vuln/CYBSEC_SAP_sapstartsrv_DoS.pdf - https://service.sap.com/sap/support/notes/1302231 - http://www.securityfocus.com/bid/37286
CVE ID: CVE-2009-4604 State: PUBLISHED Published: 2010-01-12T17:00:00 Last Updated: 2024-08-07T07:08:37.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mamboleto.php in the Fernando Soares Mamboleto (com_mamboleto) component 2.0 RC3 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10369 - http://www.securityfocus.com/bid/37280 - http://packetstormsecurity.org/0912-exploits/joomlamamboleto-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54662
CVE ID: CVE-2009-4605 State: PUBLISHED Published: 2010-01-19T16:00:00 Last Updated: 2024-08-07T07:08:38.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the (1) configuration and (2) v[0] parameters, which might allow remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2010-3.php - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/scripts/setup.php?r1=13149&r2=1314
- http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/scripts/setup.php?r1=13149&r2=13148&pathrev=13149 - http://secunia.com/advisories/38211 - http://secunia.com/advisories/39503 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html - http://www.vupen.com/english/advisories/2010/0910 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=13149 - http://www.debian.org/security/2010/dsa-2034
CVE ID: CVE-2009-4606 State: PUBLISHED Published: 2010-01-13T11:00:00 Last Updated: 2024-08-07T07:08:37.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37083 - http://retrogod.altervista.org/9sg_south_river_priv.html - http://osvdb.org/59080 - http://www.v
.com/advisories/37083 - http://retrogod.altervista.org/9sg_south_river_priv.html - http://osvdb.org/59080 - http://www.vupen.com/english/advisories/2009/2994 - http://www.securityfocus.com/archive/1/507323/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/53885
CVE ID: CVE-2009-4607 State: PUBLISHED Published: 2010-01-13T11:00:00 Last Updated: 2024-08-07T07:08:37.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to access a privileged shell. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53881 - http://www.juniper.net/security/auto/vulnera
om/bid/36739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53881 - http://www.juniper.net/security/auto/vulnerabilities/vuln36739.html - http://www.securityfocus.com/archive/1/507318/100/0/threaded
CVE ID: CVE-2009-4608 State: PUBLISHED Published: 2010-01-13T11:00:00 Last Updated: 2024-08-07T07:08:37.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Canon IT Solutions Inc. ACCESSGUARDIAN 3.0.14 and earlier, and 3.5.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to authentication. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000066.html - http://canon-its.jp/guardian/topics/200910ag.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53822 - http://osvdb.org/59058 - http://www.vupen.com/englis
html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53822 - http://osvdb.org/59058 - http://www.vupen.com/english/advisories/2009/2973 - http://jvn.jp/en/jp/JVN33822756/index.html - http://secunia.com/advisories/37045
CVE ID: CVE-2009-4609 State: PUBLISHED Published: 2010-01-13T20:00:00Z Last Updated: 2024-09-16T19:56:14.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the value of the getPathTranslated variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt
CVE ID: CVE-2009-4610 State: PUBLISHED Published: 2010-01-13T20:00:00Z Last Updated: 2024-09-16T22:08:49.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt
CVE ID: CVE-2009-4611 State: PUBLISHED Published: 2010-01-13T20:00:00 Last Updated: 2024-08-07T07:08:38.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator, related to (1) a string value in the Age parameter to the default URI for the Cookie Dump Servlet in test-jetty-webapp/src/main/java/com/acme/CookieDump.java under cookie/, (2) an alphabetic value in the A parameter to jsp/e
t-jetty-webapp/src/main/java/com/acme/CookieDump.java under cookie/, (2) an alphabetic value in the A parameter to jsp/expr.jsp, or (3) an alphabetic value in the Content-Length HTTP header to an arbitrary application. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt - http://www.ush.it/team/ush/hack_httpd_escape/adv.txt - http://www.securityfocus.com/archive/1/508830/100/0/threaded
CVE ID: CVE-2009-4612 State: PUBLISHED Published: 2010-01-13T20:00:00Z Last Updated: 2024-09-16T19:10:33.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) jspsnoop/, (2) jspsnoop/ERROR/, and (3) jspsnoop/IOException/, and possibly the PATH_INFO to (4) snoop.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt
CVE ID: CVE-2009-4613 State: PUBLISHED Published: 2010-01-14T19:00:00Z Last Updated: 2024-09-17T01:55:37.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/60866 - http://secunia.com/advisories/37633
CVE ID: CVE-2009-4614 State: PUBLISHED Published: 2010-01-18T20:00:00 Last Updated: 2024-08-07T07:08:38.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the MOA_PATH parameter to (1) _error_funcs.php, (2) _integrity_funcs.php, (3) _template_component_admin.php, (4) _template_component_gallery.php, (5) _template_parser.php, (6) mod_gallery_funcs.php, (7) mod_image_funcs.php, (8) mod_tag_funcs.php, (9) mod_tag_view.php, (10) mod_upgrade_funcs.php, (11) mod_user_funcs.php, (12) page_admin.php, (13) page_gallery_add.php, (14) page_ga
w.php, (10) mod_upgrade_funcs.php, (11) mod_user_funcs.php, (12) page_admin.php, (13) page_gallery_add.php, (14) page_gallery_view.php, (15) page_image_add.php, (16) page_image_view_full.php, (17) page_login.php, and (18) page_sitemap.php in sources/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9522 - http://www.vupen.com/english/advisories/2009/2430
CVE ID: CVE-2009-4615 State: PUBLISHED Published: 2010-01-18T20:00:00 Last Updated: 2024-08-07T07:08:38.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in review.php in MYRE Holiday Rental Manager allows remote attackers to execute arbitrary SQL commands via the link_id parameter in a show_review action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9630 - http://secunia.com/advisories/36655
CVE ID: CVE-2009-4616 State: PUBLISHED Published: 2010-01-18T20:00:00 Last Updated: 2024-08-07T07:08:38.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in MYRE Holiday Rental Manager allows remote attackers to inject arbitrary web script or HTML via the cat_id1 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9630 - http://secunia.com/advisories/36655
CVE ID: CVE-2009-4617 State: PUBLISHED Published: 2010-01-18T20:00:00 Last Updated: 2024-08-07T07:08:38.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attackers to execute arbitrary SQL commands via the hotel_id parameter to (1) hotel.php, (2) details.php, (3) roomtypes.php, (4) photos.php, (5) map.php, (6) weather.php, (7) reviews.php, and (8) book.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53138 - http://secunia.com/advisories/36661 - http://www.exploit-db.com/exploits/9632
CVE ID: CVE-2009-4618 State: PUBLISHED Published: 2010-01-18T20:00:00 Last Updated: 2024-08-07T07:08:37.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Tourism Script Bus Script allow remote attackers to execute arbitrary SQL commands via the sitetext_id parameter to (1) aboutus.php and (2) faq.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36664 - http://www.exploit-db.com/exploits/9633
CVE ID: CVE-2009-4619 State: PUBLISHED Published: 2010-01-18T20:00:00 Last Updated: 2024-08-07T07:08:38.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Lucy Games (com_lucygames) component 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a game action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53117 - http://www.exploit-db.com/exploits/9614 - http://www.securityfocus.com/bid/36334
CVE ID: CVE-2009-4620 State: PUBLISHED Published: 2010-01-18T20:00:00 Last Updated: 2024-08-07T07:08:38.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Joomloc (com_joomloc) component 1.0 for Joomla allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36322 - http://secunia.com/advisories/36654 - http://osvdb.org/57885 - http://www.vupen.com/english/advisories/2009/2612 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53110 - http://www.exploit-db.com/exploits/9604
CVE ID: CVE-2009-4621 State: PUBLISHED Published: 2010-01-18T20:00:00 Last Updated: 2024-08-07T07:08:38.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52984 - http://www.exploit-db.com/exploits/9576 - http://www.vupen.com/english/advisories/2009/2525
CVE ID: CVE-2009-4622 State: PUBLISHED Published: 2010-01-18T20:00:00 Last Updated: 2024-08-07T07:08:37.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/admin_news_bot.php in Drunken:Golem Gaming Portal 0.5.1 alpha 2 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, a different vector than CVE-2007-0572. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53136 - http://www.exploit-db.com/exploits/9635