Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6444 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496322/100/0/threaded - http://www.securityfocus.com/bid/31162 - http://osvdb.org/51696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45117
CVE ID: CVE-2008-6445 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and the ability to upload arbitrary PHP code. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=611591&group_id=229069 - http://osvdb.org/46754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43601 - http://secunia.com/advisories/30956 - http://www
rg/46754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43601 - http://secunia.com/advisories/30956 - http://www.securityfocus.com/bid/30106
CVE ID: CVE-2008-6446 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7322 - http://www.securityfocus.com/bid/32588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47025
CVE ID: CVE-2008-6447 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to execute arbitrary code via a long first argument to the CreateStore method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47207 - http://www.securityfocus.com/bid/32722 - https://www.exploit-db.com/exploits/7402
CVE ID: CVE-2008-6448 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG Editor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34151 - http://jvn.jp/en/jp/JVN21312708/index.html - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000003.html - http://www.mtcms.jp/01/3886.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49226
CVE ID: CVE-2008-6449 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43949 - http://www.centurysys.co.jp/support/xr_common/JVN67573833.html - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2
es/43949 - http://www.centurysys.co.jp/support/xr_common/JVN67573833.html - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000042.html - http://secunia.com/advisories/31173 - http://jvn.jp/en/jp/JVN67573833/index.html
CVE ID: CVE-2008-6450 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Under Construction, Baby (UCB) PC2M 0.9.22.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.rcdtokyo.com/pc2m/note/archives/i000854.php - http://jvn.jp/en/jp/JVN38893575/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49227 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000008.html
CVE ID: CVE-2008-6451 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2004-2036 or CVE-2005-3509. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31274 - https://www.exploit-db.com/exploits/6505
CVE ID: CVE-2008-6452 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show_vote.php in Oceandir 2.9 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6504 - http://www.securityfocus.com/bid/31277
CVE ID: CVE-2008-6453 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6520 - http://www.securityfocus.com/bid/31299 - http://osvdb.org/48508 - http://secunia.com/advisories/31945
CVE ID: CVE-2008-6454 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31282 - http://osvdb.org/48509 - https://www.exploit-db.com/exploits/6511 - http://secunia.com/advisories/31945
CVE ID: CVE-2008-6455 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Edikon phpShop 0.8.1 allows remote attackers to hijack web sessions via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45244 - http://www.securityfocus.com/bid/31251 - http://secunia.com/advisories/31948 - http://osvdb.org/48231
CVE ID: CVE-2008-6456 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the HBook (h_book) extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45259 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/ - http://www.securityfocus.com/bid/31261 - http://osvdb.org/48276
CVE ID: CVE-2008-6457 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48273 - http://www.securityfocus.com/bid/31258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45256 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/
CVE ID: CVE-2008-6458 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the FE address edit for tt_address & direct mail (dmaddredit) extension 0.4.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48274 - http://www.securityfocus.com/bid/31259 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/45257
CVE ID: CVE-2008-6459 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45255 - http://osvdb.org/48272 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/ - http://www.securityfocus.com/bid/31239
CVE ID: CVE-2008-6460 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:27:35.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Simple Random Objects (mw_random_objects) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45261 - http://osvdb.org/48277 - http://www.securityfocus.com/bid/31254 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/
CVE ID: CVE-2008-6461 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:45.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31264 - http://osvdb.org/48280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45264 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/
CVE ID: CVE-2008-6462 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:45.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31257 - http://osvdb.org/48278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45262 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/
CVE ID: CVE-2008-6463 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:45.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension for TYPO3, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48279 - http://typo3.org/teams/security/security-bulletins/typo3-20080919-1/ - http://www.securityfocus.com/bid/31260
CVE ID: CVE-2008-6464 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:45.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48499 - http://www.vupen.com/english/advisories/2008/2648 - https://www.exploit-db.com/exploits/6508 - http://www.securityfocus.com/bid/31278 - http://secunia.com/advisories/31779
CVE ID: CVE-2008-6465 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:45.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3) login parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.xssing.com/index.php?x=3&y=65 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45252 - http://secunia.com/advisories/31830 - http://www.securityfocus.com/bid/31256 - https://exchange.xforce.ibmcloud.com/vulnera
p://secunia.com/advisories/31830 - http://www.securityfocus.com/bid/31256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45254 - http://osvdb.org/48232
CVE ID: CVE-2008-6466 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:45.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34384 - http://www.securityfocus.com/bid/31286 - https://www.exploit-db.com/exploits/6516
CVE ID: CVE-2008-6467 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:45.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the job_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6512 - http://www.securityfocus.com/bid/31284
CVE ID: CVE-2008-6468 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:46.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31276 - https://www.exploit-db.com/exploits/6502
CVE ID: CVE-2008-6469 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:46.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48436 - http://secunia.com/advisories/31952 - https://www.exploit-db.com/exploits/6503 - http://www.securityfocus.com/bid/31275
CVE ID: CVE-2008-6470 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:45.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the (1) mods/messages/getusers.php and (2) mods/abcode/listimg.php files. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31293 - http://www.clansphere.net/index/news/view/id/289 - https://exchange.xfo
nces: - http://www.securityfocus.com/bid/31293 - http://www.clansphere.net/index/news/view/id/289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45269 - http://osvdb.org/48451 - http://secunia.com/advisories/31965 - http://www.clansphere.net/index/news/view/id/306 - http://sourceforge.net/project/shownotes.php?release_id=627530
CVE ID: CVE-2008-6471 State: PUBLISHED Published: 2009-03-13T10:00:00 Last Updated: 2024-08-07T11:34:46.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31957 - http://osvdb.org/48395 - https://www.exploit-db.com/exploits/6494
CVE ID: CVE-2008-6472 State: PUBLISHED Published: 2009-03-14T18:00:00 Last Updated: 2024-08-07T11:34:46.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:242 - http://secunia.com/advisories/34144 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6223 - http://secunia.com/advisories/32840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47292 - http://www.redhat.com/
ttp://secunia.com/advisories/32840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47292 - http://www.redhat.com/support/errata/RHSA-2009-0313.html - http://www.wireshark.org/security/wnpa-sec-2008-07.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9629
CVE ID: CVE-2008-6473 State: PUBLISHED Published: 2009-03-16T16:00:00 Last Updated: 2024-08-07T11:34:46.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: _blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5370 - http://www.securityfocus.com/archive/1/490501/100/0/threaded - http://osvdb.org/51227
CVE ID: CVE-2008-6474 State: PUBLISHED Published: 2009-03-16T16:00:00 Last Updated: 2024-08-07T11:34:45.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to inject arbitrary Perl code via unspecified configuration settings related to Perl EP3 with templates, probably triggering static code injection. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51116 - http://www.securityfocus.com/bid/28639 - http://www.securityfocus.com/archive/1/490496/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/49308
CVE ID: CVE-2008-6475 State: PUBLISHED Published: 2009-03-16T16:00:00 Last Updated: 2024-08-07T11:34:46.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote attackers to execute arbitrary SQL commands via the Via HTTP header (HTTP_VIA) to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41677 - http://www.securityfocus.com/bid/28656
CVE ID: CVE-2008-6476 State: PUBLISHED Published: 2009-03-16T16:00:00 Last Updated: 2024-08-07T11:34:46.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49307 - http://osvdb.org/ref/44/blogengine-search-xss.txt - http://osvdb.org/44290
CVE ID: CVE-2008-6477 State: PUBLISHED Published: 2009-03-16T16:00:00 Last Updated: 2024-08-07T11:34:46.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28763 - http://www.vupen.com/english/advisories/2008/1211/references - https://www.exploit-db.com/exploits/5440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49303
CVE ID: CVE-2008-6478 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T11:34:46.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft (build 4.0.0-365.6.swsoft) and 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag to (1) create-file and (2) list-control in vz/cp/vzdir/infrman/envs/files/; or modify system configuration via the path parameter to vz/cp/vzdir/infrman/envs/files/index. Additional Analyst Notes: - CVE Program Container: Refere
ia the path parameter to vz/cp/vzdir/infrman/envs/files/index. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44395 - http://www.securityfocus.com/archive/1/490409/100/0/threaded - http://px.dynalias.org/files/virtuozzo_overwrite.html.txt - http://secunia.com/advisories/29675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41640 - http://www.securityfocus.com/bid/28589
CVE ID: CVE-2008-6479 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T11:34:46.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels Virtuozzo 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to modify the password via a link or IMG tag to vz/cp/pwd. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490409/100/0/threaded - http://www.securityfocus.com/bid/28593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41638 - http://secunia.com/advisories/29675 - http://px.dy
/28593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41638 - http://secunia.com/advisories/29675 - http://px.dynalias.org/files/virtuozzo_pwd.html.txt - http://osvdb.org/44394
CVE ID: CVE-2008-6480 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T11:34:46.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use a modified image parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41598 - http://www.securityfocus.com/archive/1/490372/100/0/threaded - http://osvdb.org/51107