Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d/29192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42390 - http://www.securityfocus.com/bid/29189 - https://www.exploit-db.com/exploits/5608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42398 - http://secunia.com/advisories/30233
CVE ID: CVE-2008-2449 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) gallery parameter to (a) index.php and (b) image.php, and the (2) imgnum parameter to image.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42374 - http://secunia.com/advisories
gram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42374 - http://secunia.com/advisories/30524 - http://www.securityfocus.com/bid/29152
CVE ID: CVE-2008-2450 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42366 - http://typo3.org/teams/security/security-bulletins/typo3-20080513-4
CVE ID: CVE-2008-2451 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20080513-4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42368
CVE ID: CVE-2008-2452 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Questionaire (aka pbsurvey) extension 1.2.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42365 - http://typo3.org/teams/security/security-bulletins/typo3-20080513-2
CVE ID: CVE-2008-2453 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T09:05:29.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL commands via the fatherID parameter to (1) browse.php and (2) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29169 - http://secunia.com/advisories/30209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42380 - https://www.exploit-db.com/exploits/5599
CVE ID: CVE-2008-2454 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T09:05:28.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the xsstream-dm (com_xsstream-dm) component 0.01 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the movie parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29144 - https://www.exploit-db.com/exploits/5587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42323 - http://www.securityfocus.com/archive/1/491943/100/0/threaded
CVE ID: CVE-2008-2455 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T09:05:29.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30212 - https://www.exploit-db.com/exploits/5604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42386 - http://www.securityfocus.com/bid/29181
CVE ID: CVE-2008-2456 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T09:05:29.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the comic_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.comicshout.com/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/42547 - http://www.securityfocus.com/bid/29301 - https://www.exploit-db.com/exploits/5658 - http://www.vupen.com/english/advisories/2008/1594/references - http://secunia.com/advisories/30319
CVE ID: CVE-2008-2457 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T09:05:28.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5660 - http://www.securityfocus.com/bid/29308 - http://www.vupen.com/english/advisories/2008/1592/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42554 - http://secunia.com/advisories/30314
CVE ID: CVE-2008-2458 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T09:05:28.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42544 - http://www.securityfocus.com/bid/29295 - http://www.securityfocus.com/archive/1/492264/100/0/threaded - http://secunia.com/advisories/30321
CVE ID: CVE-2008-2459 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T09:05:28.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29306 - http://secunia.com/advisories/30311 - https://www.exploit-db.com/exploits/5655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42540
CVE ID: CVE-2008-2460 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T09:05:28.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42541 - http://www.securityfocus.com/bid/29293 - http://www.securityfocus.com/archive/1/492290/100/0/threaded
CVE ID: CVE-2008-2461 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T09:05:28.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Netious CMS 0.4 allows remote attackers to execute arbitrary SQL commands via the pageid parameter, a different vector than CVE-2006-4047. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42726 - http://www.vupen.com/english/advisories/2008/1591/references - https://www.exploit-db.com/exploits/5661 - http://www.securityfocus.com/bid/29319
CVE ID: CVE-2008-2462 State: PUBLISHED Published: 2008-06-30T22:00:00 Last Updated: 2024-08-07T09:05:29.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x before 3.1.4, allows remote attackers to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1930/references - http://www.kb.cert.org/vuls/id/305208 - http://www.securitytracker.com/id?1020372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43367 - http://www.securityfocus.com/bid/29948
ker.com/id?1020372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43367 - http://www.securityfocus.com/bid/29948 - http://secunia.com/advisories/30845 - http://www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007
CVE ID: CVE-2008-2463 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:05:28.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: Re
an be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-189A.html - http://www.exploit-db.com/exploits/6124 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.vupen.com/english/advisories/2008/2012/references - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.microsoft.com/technet/security/advisory/955179.mspx - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.kb.cert.org/vuls/id/837785 - http://secunia.com/advisories/30883 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6120 - https://exch
ories/30883 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43613 - http://www.securityfocus.com/bid/30114 - http://www.securitytracker.com/id?1020433
CVE ID: CVE-2008-2464 State: PUBLISHED Published: 2008-09-10T15:00:00Z Last Updated: 2024-09-16T22:02:39.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31026 - http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c - http://cert.fi/haavoittuvuudet/2008/advisory-netbsd
1026 - http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c - http://cert.fi/haavoittuvuudet/2008/advisory-netbsd.html - http://www.kb.cert.org/vuls/id/817940 - http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.c - http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.46&r2=1.47&f=h - http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.34%3Br2=1.35%3Bf=h - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-011.txt.asc - http://securitytracker.com/id?1020822
CVE ID: CVE-2008-2468 State: PUBLISHED Published: 2008-09-17T18:06:00 Last Updated: 2024-08-07T09:05:30.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/538011 - http://dvlabs.tippingpoint.com/advisory/TPTI-08-06 - http://www.vupen.com/english/advisories/2008/2588 - https://exchange.xforce.ibmcloud.com/vulne
com/advisory/TPTI-08-06 - http://www.vupen.com/english/advisories/2008/2588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45154 - http://securityreason.com/securityalert/4269 - http://community.landesk.com/support/docs/DOC-3276 - http://www.securityfocus.com/bid/31193 - http://www.securitytracker.com/id?1020888 - http://secunia.com/advisories/31888 - http://www.securityfocus.com/archive/1/496369/100/0/threaded
CVE ID: CVE-2008-2469 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T09:05:29.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32720 - https://www.exploit-db.com/exploits/6805 - http://secunia.com/advisories/32396 - http://www.securityfocus.com/bid/31881 - http://securityreason.com/securityalert/4487 - https://exchange.xforce.ibmcloud.com/vulnerab
curityfocus.com/bid/31881 - http://securityreason.com/securityalert/4487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46055 - https://answers.launchpad.net/ubuntu/gutsy/+source/libspf2/1.2.5.dfsg-4ubuntu0.7.10.1 - http://up2date.astaro.com/2008/11/up2date_7305_released.html - http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=242254 - http://www.debian.org/security/2008/dsa-1659 - http://www.vupen.com/english/advisories/2008/2896 - https://bugs.launchpad.net/ubuntu/feisty/+source/libspf2/+bug/271025 - http://www.doxpara.com/?page_id=1256 - http://www.doxpara.com/?p=1263 - http://security.gentoo.org/glsa/glsa-200810-03.xml - http://www.kb.cert.org/vuls/id/183657 - http://secunia
om/?p=1263 - http://security.gentoo.org/glsa/glsa-200810-03.xml - http://www.kb.cert.org/vuls/id/183657 - http://secunia.com/advisories/32496 - http://secunia.com/advisories/32450
CVE ID: CVE-2008-2470 State: PUBLISHED Published: 2008-09-18T18:00:00 Last Updated: 2024-08-07T09:05:28.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/630017 - http://support.installshield.com/kb/view.asp?articleid=Q113020 - http://www.vupen.com/english/advisories/2008/2625 - http://www.securityfocus.com/bid/312
kb/view.asp?articleid=Q113020 - http://www.vupen.com/english/advisories/2008/2625 - http://www.securityfocus.com/bid/31235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45248
CVE ID: CVE-2008-2474 State: PUBLISHED Published: 2008-09-29T17:00:00 Last Updated: 2024-08-07T09:05:30.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496739/100/0/threaded - http://securityreason.com/securityalert/4320 - http://www.kb.cert.org/vuls/id/CTAR-7JTNRX - http://www.securityfocus.com/bid/31391 - h
yreason.com/securityalert/4320 - http://www.kb.cert.org/vuls/id/CTAR-7JTNRX - http://www.securityfocus.com/bid/31391 - http://secunia.com/advisories/32047 - http://www.kb.cert.org/vuls/id/343971
CVE ID: CVE-2008-2475 State: PUBLISHED Published: 2009-06-09T20:00:00 Last Updated: 2024-08-07T09:05:30.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54968 - http://secunia.com/advisories/35412 - http://pages.ebay.com/securitycenter/activex/index.html - http://www.securityfocus.com/bid/35248 - http://www.kb.cert.org/vuls/id/983731
CVE ID: CVE-2008-2476 State: PUBLISHED Published: 2008-10-03T15:00:00 Last Updated: 2024-08-07T09:05:29.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB). Additional Analyst Notes: - CVE Program Container: References:
message that modifies the Forward Information Base (FIB). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45601 - http://support.apple.com/kb/HT3467 - http://www.openbsd.org/errata42.html#015_ndp - http://www.vupen.com/english/advisories/2008/2751 - http://www.securitytracker.com/id?1021109 - http://securitytracker.com/id?1020968 - http://secunia.com/advisories/32133 - http://www.kb.cert.org/vuls/id/472363 - http://www.kb.cert.org/vuls/id/MAPG-7H2RY7 - http://secunia.com/advisories/32116 - http://www.securitytracker.com/id?1021132 - https://www.juniper.net/alerts/viewalert.jsp?actionBt
com/advisories/32116 - http://www.securitytracker.com/id?1021132 - https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view - http://www.vupen.com/english/advisories/2008/2750 - http://www.vupen.com/english/advisories/2008/2752 - http://www.securityfocus.com/bid/31529 - http://www.kb.cert.org/vuls/id/MAPG-7H2S68 - http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc - http://www.openbsd.org/errata43.html#006_ndp - http://secunia.com/advisories/32112 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670 - http://se
08-013.txt.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670 - http://secunia.com/advisories/32117 - http://www.vupen.com/english/advisories/2009/0633
CVE ID: CVE-2008-2477 State: PUBLISHED Published: 2008-05-28T15:00:00 Last Updated: 2024-08-07T09:05:28.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5659 - http://www.vupen.com/english/advisories/2008/1593/references - http://www.securityfocus.com/bid/29307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42551 - http://secunia.com/advisories/30318
CVE ID: CVE-2008-2478 State: PUBLISHED Published: 2008-05-28T15:00:00 Last Updated: 2024-08-07T09:05:30.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users with reseller privileges to execute arbitrary code via shell metacharacters in the Email address field (aka Email text box). NOTE: the vendor disputes this, stating "I'm unable to reproduce such an issue on multiple servers running different versions of cPanel. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492223/100/0/threaded - http://www.securityfocu
Program Container: References: - http://www.securityfocus.com/archive/1/492223/100/0/threaded - http://www.securityfocus.com/archive/1/492259/100/0/threaded - http://www.securitytracker.com/id?1020042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42529 - http://www.securityfocus.com/bid/29277
CVE ID: CVE-2008-2479 State: PUBLISHED Published: 2008-05-28T15:00:00 Last Updated: 2024-08-07T09:05:28.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) kind parameter to fix/browse.php and the (2) account parameter to auth/00_pass.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42636 - http://www.securityfocus.com/archive/1/492582/100/0/threaded - http://secunia.com/advisories/30397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42637 - http://www.securityfocus.com/bid/29371
CVE ID: CVE-2008-2480 State: PUBLISHED Published: 2008-05-28T15:00:00 Last Updated: 2024-08-07T09:05:29.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the _pages_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42623 - https://www.exploit-db.com/exploits/5672 - http://secunia.com/advisories/30373 - http://www.vupen.com/english/advisories/2008/1645/references
CVE ID: CVE-2008-2481 State: PUBLISHED Published: 2008-05-28T15:00:00 Last Updated: 2024-08-07T09:05:29.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in phpRaider 1.0.7 and 1.0.7a, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pConfig_auth[phpbb_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forums.phpraider.com/showthread.php?t=1087#v1_0_7b_-_May_29__2008 - https://www.exploit-db.com/exploits/5671 - http://www.vupen.com/english/advisories/2008/1646/references - http://secunia.com/advisorie
ploit-db.com/exploits/5671 - http://www.vupen.com/english/advisories/2008/1646/references - http://secunia.com/advisories/30375 - http://www.securityfocus.com/bid/29356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42622
CVE ID: CVE-2008-2482 State: PUBLISHED Published: 2008-05-28T15:00:00 Last Updated: 2024-08-07T09:05:30.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter in a go action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29374 - http://www.securityfocus.com/archive/1/492513/100/0/threaded - https://www.exploit-db.com/exploits/5669 - http://secunia.com/advisories/30378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42600 - http://www.vup
5669 - http://secunia.com/advisories/30378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42600 - http://www.vupen.com/english/advisories/2008/1648/references