Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
0627 - http://securityreason.com/securityalert/4349 - https://www.exploit-db.com/exploits/6231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44390
CVE ID: CVE-2008-4429 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlier allows remote attackers to cause a denial of service (memory consumption or application crash) via malformed compressed files. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44397 - http://sec.sourcenext.info/support/bulletin.ht
/bid/30650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44397 - http://sec.sourcenext.info/support/bulletin.html - http://www.vupen.com/english/advisories/2008/2335 - http://secunia.com/advisories/31452 - http://jvn.jp/en/jp/JVN66077895/
CVE ID: CVE-2008-4430 State: REJECTED Published: 2008-10-03T22:00:00 Last Updated: 2008-10-10T09:00:00 Description: No description available.
CVE ID: CVE-2008-4431 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers to execute arbitrary SQL commands via the skin parameter, probably related to an incorrect protection mechanism in the clean_string function in includes/functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44403 - http://forums.xaos-ia.com/?topic=765 - http://www.securityfocus.com/bid/30656
CVE ID: CVE-2008-4432 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44374 - http://lostmon.blogspot.com/2008/08/rmsoft-minishop-module-multiple.html - http://www.securityfocus.com/bid/30616
CVE ID: CVE-2008-4433 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45714 - http://lostmon.blogspot.com/2008/08/rmsoft-minishop-module-multiple.html
CVE ID: CVE-2008-4434 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Created By field in a .torrent file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020664 - http://secunia.com/advisories/31441 - http://lists.immunitysec.com/pipermail/dailydave/attachments/20080811/35d6194b/attachment-0001.pdf - http://www.vupen.c
http://lists.immunitysec.com/pipermail/dailydave/attachments/20080811/35d6194b/attachment-0001.pdf - http://www.vupen.com/english/advisories/2008/2341 - http://www.vupen.com/english/advisories/2008/2340 - http://forum.utorrent.com/viewtopic.php?id=44003 - http://secunia.com/advisories/31445 - http://www.securityfocus.com/bid/30653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44404 - http://seclists.org/dailydave/2008/q3/0155.html
CVE ID: CVE-2008-4435 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to search.php and the (2) id parameter to down.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44376 - http://lostmon.blogspot.com/2008/08/rmsoft-downloads-plus-two-scripts-two.html
CVE ID: CVE-2008-4436 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44406 - http://www.securityfocus.com/bid/30658 - https://www.exploit-db.com/exploits/6233
CVE ID: CVE-2008-4437 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows remote attackers to read arbitrary files via an XML file with a .. (dot dot) in the data element. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2344 - http://secunia.com/advisories/31444 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.com/archives/fedora-package-announce/200
/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - http://www.bugzilla.org/security/2.22.4/ - http://secunia.com/advisories/34361 - http://www.securitytracker.com/id?1020668 - https://bugzilla.mozilla.org/show_bug.cgi?id=437169 - http://www.securityfocus.com/bid/30661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44407
CVE ID: CVE-2008-4438 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31488 - http://www.securityfocus.com/bid/30660 - http://downloads.securityfocus.com/vulnerabilities/exploits/30660.html - http://blog.datafeedstudio.com/dataf
id/30660 - http://downloads.securityfocus.com/vulnerabilities/exploits/30660.html - http://blog.datafeedstudio.com/datafeed-studio-v163-released - https://exchange.xforce.ibmcloud.com/vulnerabilities/44417
CVE ID: CVE-2008-4439 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALL_FOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30659/exploit - http://blog.datafeedstudio.com/datafeed-studio-v163-released - https://exchange.xforce.ibmcloud.com/
bid/30659/exploit - http://blog.datafeedstudio.com/datafeed-studio-v163-released - https://exchange.xforce.ibmcloud.com/vulnerabilities/44420 - http://www.securityfocus.com/bid/30659
CVE ID: CVE-2008-4440 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: The to-upgrade plugin in feta 1.4.16 allows local users to overwrite arbitrary files via a symlink on the (1) /tmp/feta.install.$USER and (2) /tmp/feta.avail.$USER temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32155 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://dev.gentoo.org/~rbu/security/debiantemp/feta - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496397 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://www.debian.org/securit
an.org/cgi-bin/bugreport.cgi?bug=496397 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://www.debian.org/security/2008/dsa-1643 - http://www.securityfocus.com/bid/30899
CVE ID: CVE-2008-4441 State: PUBLISHED Published: 2008-10-14T15:00:00 Last Updated: 2024-08-07T10:17:09.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service (reboot or hang-up) via a malformed association request containing the WEP flag, as demonstrated by a request that is too short, a different vulnerability than CVE-2008-1144 and CVE-2008-1197. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.c
han CVE-2008-1144 and CVE-2008-1197. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2805 - http://securityreason.com/securityalert/4400 - http://www.securityfocus.com/archive/1/497285/100/0/threaded - http://secunia.com/advisories/32259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45841 - http://www.securityfocus.com/bid/31742
CVE ID: CVE-2008-4444 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T10:17:09.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a Realtime Transport Protocol (RTP) packet with malformed headers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47948 - http://securityreason.com/securityalert/4917 - http://www.securityfocus.com/bid/33264 - http://www.cisco.com/
es/47948 - http://securityreason.com/securityalert/4917 - http://www.securityfocus.com/bid/33264 - http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7960g_7940g/firmware/sip/8_10/english/release/notes/796040sip_810.html - http://www.securityfocus.com/archive/1/500059/100/0/threaded
CVE ID: CVE-2008-4445 State: PUBLISHED Published: 2008-10-06T18:00:00 Last Updated: 2024-08-07T10:17:09.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTP_AUTH_HMAC_ID_MAX, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function, a different vulnerability than CVE-2008-4113. Additional Analyst Notes: - CVE Program Conta
he sctp_getsockopt function, a different vulnerability than CVE-2008-4113. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32190 - http://www.debian.org/security/2008/dsa-1655 - http://secunia.com/advisories/32393 - http://www.securityfocus.com/bid/31121 - http://www.openwall.com/lists/oss-security/2008/09/29/4 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:223 - http://www.ubuntu.com/usn/usn-659-1 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=d97240552cd98c4b07322f30f66fd9c3ba4171de - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html - http://www.redhat.com/support/e
3ba4171de - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html - http://www.redhat.com/support/errata/RHSA-2008-0857.html - http://www.securitytracker.com/id?1021001 - http://marc.info/?l=linux-sctp&m=121986743009093&w=2 - http://www.openwall.com/lists/oss-security/2008/09/24/9 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4 - http://www.openwall.com/lists/oss-security/2008/09/27/1 - http://marc.info/?l=linux-sctp&m=121986743209110&w=2 - http://secunia.com/advisories/32315 - http://www.openwall.com/lists/oss-security/2008/09/26/6
CVE ID: CVE-2008-4446 State: PUBLISHED Published: 2008-10-06T18:00:00 Last Updated: 2024-08-07T10:17:09.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31590 - http://secunia.com/advisories/32123 - http://japan.nucleuscms.org/item/47 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45666 - http://japan.nucleuscms.org/bb/viewtopic.php?t=4131 - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000066.html - http:
ttp://japan.nucleuscms.org/bb/viewtopic.php?t=4131 - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000066.html - http://jvn.jp/en/jp/JVN92651529/index.html
CVE ID: CVE-2008-4447 State: PUBLISHED Published: 2008-10-06T19:00:00 Last Updated: 2024-08-07T10:17:09.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via (1) the fn parameter during a dload action, (2) the mask parameter during a search action, and (3) the tab parameter during a sysinfo action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0810-exploits/webshell431-xssxsrf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45613 - http://secunia.com/advis
exploits/webshell431-xssxsrf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45613 - http://secunia.com/advisories/32086 - http://www.securityfocus.com/bid/31524
CVE ID: CVE-2008-4448 State: PUBLISHED Published: 2008-10-06T19:00:00 Last Updated: 2024-08-07T10:17:09.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the (1) overkill, (2) futils, or (3) edit actions. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0810-exploits/webshell431-xssxsrf.txt - http://secunia.com/advisories/32086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45614
CVE ID: CVE-2008-4449 State: PUBLISHED Published: 2008-10-06T19:00:00 Last Updated: 2024-08-07T10:17:09.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45624 - https://www.exploit-db.com/exploits/6654 - http://secunia.com/advisories/32102 - https://www.exploit-db.com/exploits/6666 - http://securityreason.com/securityalert/4352 - http://www.vupen.com/english/advisories/2008/2736 - http://www.securityfocus.com/bid/31552
CVE ID: CVE-2008-4450 State: PUBLISHED Published: 2008-10-06T23:00:00 Last Updated: 2024-08-07T10:17:09.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the (1) dbserver, (2) host, (3) user, (4) password, (5) database, and (6) table parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45522 - http://secunia.com/advisories/32134 - http://www.se
nces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45522 - http://secunia.com/advisories/32134 - http://www.securityfocus.com/bid/31472
CVE ID: CVE-2008-4451 State: PUBLISHED Published: 2008-10-06T23:00:00 Last Updated: 2024-08-07T10:17:09.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHOD_NEITHER IOCTL request to \Device\esiasdrv that overwrites a pointer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45619 - http://www.ntinternals.org/ - http://securityreason.com/securityalert/4353 - http://www.securityfocus.com/bid/31521 - https://www.exploit-db.com/exploits/6647
CVE ID: CVE-2008-4452 State: PUBLISHED Published: 2008-10-06T23:00:00 Last Updated: 2024-08-07T10:17:09.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cambridge Computer Corporation vxFtpSrv 2.0.3 allows remote attackers to cause a denial of service (crash and hang) and possibly execute arbitrary code via a long CWD request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45620 - https://www.exploit-db.com/exploits/6651 - http://securityreason.com/securityalert/4356
CVE ID: CVE-2008-4453 State: PUBLISHED Published: 2008-10-06T23:00:00 Last Updated: 2024-08-07T10:17:09.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro Imaging SDK 5.7.1 GdPicturePro5S.Imaging ActiveX control (gdpicturepro5s.ocx) 5.7.0.1 allows remote attackers to create, overwrite, and modify arbitrary files via the SaveAsPDF method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs. NOTE: some of these details are obt
his can be leveraged for remote code execution by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2708 - http://secunia.com/advisories/31966 - http://www.securityfocus.com/bid/31504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45536 - http://secunia.com/advisories/31898 - http://securityreason.com/securityalert/4355 - https://www.exploit-db.com/exploits/6638
CVE ID: CVE-2008-4454 State: PUBLISHED Published: 2008-10-06T23:00:00Z Last Updated: 2024-09-17T00:31:44.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the lang parameter to actions.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31820
CVE ID: CVE-2008-4455 State: PUBLISHED Published: 2008-10-06T23:00:00 Last Updated: 2024-08-07T10:17:09.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the language cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31820 - http://www.securityfocus.com/bid/31517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45606 - https://www.exploit-db.com/exploits/6641
CVE ID: CVE-2008-4456 State: PUBLISHED Published: 2008-10-06T23:00:00 Last Updated: 2024-08-07T10:17:09.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the --html option is enabled, allows attackers to inject arbitrary web script or HTML by placing it in a database cell, which might be accessed by this client when composing an HTML document. NOTE: as of 20081031, the issue has not been fixed in MySQL 5.0.67. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497885
L 5.0.67. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497885/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 - http://www.ubuntu.com/usn/USN-1397-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45590 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11456 - http://www.securityfocus.com/archive/1/497158/100/0/threaded - http://secunia.com/advisories/38517 - http://www.debian.org/security/2009/dsa-1783 - http://bugs.mysql.com/bug.php?id=27884 - http://ubuntu.com/usn/usn-897-1 - http://www.redhat.com/support/errata/RHSA-2009-1289.html - http://secunia.com/
27884 - http://ubuntu.com/usn/usn-897-1 - http://www.redhat.com/support/errata/RHSA-2009-1289.html - http://secunia.com/advisories/32072 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.securityfocus.com/archive/1/496842/100/0/threaded - http://support.apple.com/kb/HT4077 - http://www.redhat.com/support/errata/RHSA-2010-0110.html - http://www.henlich.de/it-security/mysql-command-line-client-html-injection-vulnerability - http://seclists.org/bugtraq/2008/Oct/0026.html - http://securityreason.com/securityalert/4357 - http://secunia.com/advisories/34907 - http://www.securityfocus.com/archive/1/496877/100/0/threaded - http://secunia.com/advisories/36566 -
advisories/34907 - http://www.securityfocus.com/archive/1/496877/100/0/threaded - http://secunia.com/advisories/36566 - http://www.securityfocus.com/bid/31486
CVE ID: CVE-2008-4457 State: PUBLISHED Published: 2008-10-07T00:00:00 Last Updated: 2024-08-07T10:17:09.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/inc_statistics.php in MemHT Portal 3.9.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a stats_res cookie to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44930 - http://secunia.com/advisories/31751 - http://www.securityfocus.com/bid/31045 - http://www.vupen.com/english/advisories/2008/2510 - https://www.exploit-db.com/exploits/6393 - http://securi
bid/31045 - http://www.vupen.com/english/advisories/2008/2510 - https://www.exploit-db.com/exploits/6393 - http://securityreason.com/securityalert/4288 - http://www.memht.com/news_95_Important-fix-for-all-MemHT-Versions.html