Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6257 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:20:25.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46648 - http://www.securityfocus.com/bid/32322 - https://www.exploit-db.com/exploits/7137 - http://secunia.com/advisories/32750
CVE ID: CVE-2008-6258 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:27:34.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the (1) UserID and (2) Pwd parameters. NOTE: this might be related to CVE-2004-2108. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46649 - https://www.exploit-db.com/exploits/7141 - http://www.securityfocus.com/bid/32329 - http://secunia.com/advisories/32742
CVE ID: CVE-2008-6259 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:27:34.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the srkeys parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46650 - https://www.exploit-db.com/exploits/7141 - http://www.securityfocus.com/bid/32329 - http://secunia.com/advisories/32742
CVE ID: CVE-2008-6260 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:27:34.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary SQL commands via the serverid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46661 - http://secunia.com/advisories/32724 - http://www.securityfocus.com/bid/32340 - https://www.exploit-db.com/exploits/7148
CVE ID: CVE-2008-6261 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:27:34.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL commands via the group parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7138 - http://www.securityfocus.com/bid/32328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46643 - http://secunia.com/advisories/32747
CVE ID: CVE-2008-6262 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:27:34.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/url/meta_url.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the URL to the translate function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46651 - http://secunia.com/advisories/32726
CVE ID: CVE-2008-6263 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:27:34.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the username parameter to the _userLoggedIn function. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46651 - http://www.securityfocus.com/bid/32336 - https://www.exploit-db.com/exploits/7147 - http://secunia.com/advisories/32726 - https://exchange.xforce.ibmcloud.
336 - https://www.exploit-db.com/exploits/7147 - http://secunia.com/advisories/32726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48952
CVE ID: CVE-2008-6264 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:27:34.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46434 - https://www.exploit-db.com/exploits/7036 - http://packetstormsecurity.org/0811-exploits/slidepopups-sql.txt - http://www.vupen.com/english/advisories/2008/3049
CVE ID: CVE-2008-6265 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:27:34.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7065 - http://www.vupen.com/english/advisories/2008/3070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46490 - http://www.securityfocus.com/bid/32218
CVE ID: CVE-2008-6266 State: PUBLISHED Published: 2009-02-25T11:00:00 Last Updated: 2024-08-07T11:27:34.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46298 - http://www.securityfocus.com/archive/1/497960/100/0/threaded
CVE ID: CVE-2008-6267 State: PUBLISHED Published: 2009-02-25T11:00:00 Last Updated: 2024-08-07T11:27:34.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in detail.php in Multi Languages WebShop Online 1.02 allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46370 - http://www.securityfocus.com/bid/32092
CVE ID: CVE-2008-6268 State: PUBLISHED Published: 2009-02-25T11:00:00 Last Updated: 2024-08-07T11:27:34.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46369 - http://osvdb.org/49718 - http://secunia.com/advisories/32499 - http://www.securityfocus.com/bid/32092
CVE ID: CVE-2008-6269 State: PUBLISHED Published: 2009-02-25T11:00:00 Last Updated: 2024-08-07T11:27:34.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the (1) session_id, session_logged_in, and session_username cookies for user privileges; (2) session_admin_id, session_admin_username, and session_admin cookies for admin privileges; and (3) session_staff_id, session_staff_username, and session_staff cookies for staff users. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities
s. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46272 - http://secunia.com/advisories/32491 - https://www.exploit-db.com/exploits/6955 - http://www.securityfocus.com/bid/32058 - http://www.vupen.com/english/advisories/2008/2978
CVE ID: CVE-2008-6270 State: PUBLISHED Published: 2009-02-25T11:00:00 Last Updated: 2024-08-07T11:27:34.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46286 - http://www.securityfocus.com/bid/32079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48982 - https://www.exploit-db.com/exploits/6969
CVE ID: CVE-2008-6271 State: PUBLISHED Published: 2009-02-25T11:00:00 Last Updated: 2024-08-07T11:27:34.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in TBmnetCMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46314 - https://www.exploit-db.com/exploits/6973 - http://www.securityfocus.com/bid/32087 - http://secunia.com/advisories/32462
CVE ID: CVE-2008-6272 State: PUBLISHED Published: 2009-02-25T16:00:00 Last Updated: 2024-08-07T11:27:35.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the pass parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46286 - https://www.exploit-db.com/exploits/6969
CVE ID: CVE-2008-6273 State: PUBLISHED Published: 2009-02-25T16:00:00 Last Updated: 2024-08-07T11:27:35.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in configuration_script.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4895
Container: References: - http://secunia.com/advisories/32432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48957
CVE ID: CVE-2008-6274 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:34.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the logmbr parameter (aka login field) or (2) the mdpmbr parameter (aka pass or "Mot de passe" field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46929 - http://secunia.com/advisories/32900 - http://www.securityfocus.com/bid/32501 - http://osvdb.or
m/vulnerabilities/46929 - http://secunia.com/advisories/32900 - http://www.securityfocus.com/bid/32501 - http://osvdb.org/50314 - https://www.exploit-db.com/exploits/7248
CVE ID: CVE-2008-6275 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified messages. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/339553 - http://secunia.com/advisories/32904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46947 - http://osvdb.org/50208 - http://www.securityfocus.com/bid/32491
CVE ID: CVE-2008-6276 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to execute arbitrary SQL commands via (1) a content type or (2) a voting API value. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/339553 - http://secunia.com/advisories/32904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46946 - http://osvdb.org/50207 - http://www.securityfocus.com/bid/32491
CVE ID: CVE-2008-6277 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to execute arbitrary SQL commands via the subcategory_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46920 - http://www.osvdb.org/50313 - http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt - http://secunia.com/advisories/32897
CVE ID: CVE-2008-6278 State: PUBLISHED Published: 2009-02-25T23:00:00Z Last Updated: 2024-09-16T17:18:31.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allow remote attackers to inject arbitrary web script or HTML via the (1) category_id and (2) subcategory_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50326 - http://secunia.com/advisories/32950 - http://www.securityfocus.com/bid/32563 - http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt
CVE ID: CVE-2008-6279 State: PUBLISHED Published: 2009-02-25T23:00:00Z Last Updated: 2024-09-16T20:36:47.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50325 - http://secunia.com/advisories/32950 - http://www.securityfocus.com/bid/32563 - http://packetstormsecurity.com/0811-exploits/rakhi-sqlxssfpd.txt
CVE ID: CVE-2008-6280 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrary web script or HTML via the action parameter in a DHCP_Static operation. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0811-exploits/linksys-xss.txt - http://www.securityfocus.com/bid/32496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46980 - http://secunia.com/advisories/32877
CVE ID: CVE-2008-6281 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32932 - http://www.securityfocus.com/bid/32522 - https://www.exploit-db.com/exploits/7268
CVE ID: CVE-2008-6282 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in engine/users/users_edit_pub.inc in CMS Ortus 1.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the city parameter in a users_edit_pub action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46886 - http://www.vupen.com/english/advisories/2008/3272 - http://www.securityfocus.com/bid/32486 - http://secunia.com/advisories/32899 - http://ortus.nirn.ru/inde
ies/2008/3272 - http://www.securityfocus.com/bid/32486 - http://secunia.com/advisories/32899 - http://ortus.nirn.ru/index.php?ortupg=16 - https://www.exploit-db.com/exploits/7237
CVE ID: CVE-2008-6283 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Subtext 2.0 allows remote attackers to inject arbitrary web script or HTML via a comment, related to "the feature which converts URLs to anchor tags." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32914 - http://haacked.com/archive/2008/11/27/subtext-2.1-security-update.aspx - http://www.securityfocus.com/bid/32513 - http://osvdb.org/50235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46937 - http://sourceforge.net/project/sho
http://osvdb.org/50235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46937 - http://sourceforge.net/project/shownotes.php?release_id=643458&group_id=137896
CVE ID: CVE-2008-6284 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32556 - https://www.exploit-db.com/exploits/7311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46938
CVE ID: CVE-2008-6285 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHP TV Portal 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the mid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46926 - https://www.exploit-db.com/exploits/7284 - http://www.vupen.com/english/advisories/2008/3307 - http://secunia.com/advisories/32925
CVE ID: CVE-2008-6286 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp or (b) start.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32908 - https://www.exploit-db.com/exploits/7280 - https://exchange.xf
iner: References: - http://secunia.com/advisories/32908 - https://www.exploit-db.com/exploits/7280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46916
CVE ID: CVE-2008-6287 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1) MySQLController.php, (2) SQLController.php, (3) SetupController.php, (4) VideoController.php, and (5) ViewController.php in controllers/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32554 - http://www.vupen.com/english/advisories/2008/3289 - https://www.exploit-db.com/exploits/7310 - https://exchange.xforc
- http://www.vupen.com/english/advisories/2008/3289 - https://www.exploit-db.com/exploits/7310 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46939
CVE ID: CVE-2008-6288 State: PUBLISHED Published: 2009-02-25T23:00:00 Last Updated: 2024-08-07T11:27:35.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43983 - http://secunia.com/advisories/31210 - https://www.exploit-db.com/exploits/6126
CVE ID: CVE-2008-6289 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T11:27:35.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32503 - http://www.securityfocus.com/bid/32110 - https://www.exploit-db.com/exploits/6988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46337
CVE ID: CVE-2008-6290 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T11:27:35.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the page_file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6990 - http://secunia.com/advisories/32556 - http://www.securityfocus.com/bid/32111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46338
CVE ID: CVE-2008-6291 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T11:27:35.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acc PHP eMail 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the NEWSLETTERLOGIN cookie to "admin". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46289 - http://secunia.com/advisories/32507 - http://www.securityfocus.com/bid/32074 - https://www.exploit-db.com/exploits/6966
CVE ID: CVE-2008-6292 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T11:27:35.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) username_cookie to "admin," (2) right_cookie to "1," and (3) id_cookie to "1." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46287 - http://secunia.com/advisories/32517 - http://www.securityfocus.com/bid/32083
CVE ID: CVE-2008-6293 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T11:27:35.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie to "admin." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46290 - https://www.exploit-db.com/exploits/6964 - http://secunia.com/advisories/32517