Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ions. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://cvs.php.net/viewvc.cgi/php-src/ext/mbstring/libmbfl/filters/mbfilter_htmlent.c?r1=1.7&r2=1.8 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html - http://www.securityfocus.com/archive/1/501376/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0477.html - http://wiki.rpath.com/Advisories:rPSA-2009-0035 - http://secunia.com/advisories/34642 - http://securitytracker.com/id?1021482 - http://secunia.com/advisories/35074 - ht
- http://secunia.com/advisories/34642 - http://securitytracker.com/id?1021482 - http://secunia.com/advisories/35074 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html - http://www.redhat.com/support/errata/RHSA-2009-0350.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html - http://secunia.com/advisories/35003 - http://www.php.net/ChangeLog-5.php#5.2.7
package-announce/2009-May/msg01465.html - http://secunia.com/advisories/35003 - http://www.php.net/ChangeLog-5.php#5.2.7 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47525 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:045 - http://www.vupen.com/english/advisories/2009/1297 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://bugs.php.net/bug.php?id=45722 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10286 - http://secunia.com/advisories/35306 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/35650
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/35650 - http://www.securityfocus.com/bid/32948 - http://www.debian.org/security/2009/dsa-1789
CVE ID: CVE-2008-5558 State: PUBLISHED Published: 2008-12-17T17:00:00 Last Updated: 2024-08-07T10:56:47.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32773 - http://security.gentoo.org/glsa/glsa-200905-01.xml - http://secunia.com/advisories/32956 - http://osvdb.org/50675 - http://securityreason.c
too.org/glsa/glsa-200905-01.xml - http://secunia.com/advisories/32956 - http://osvdb.org/50675 - http://securityreason.com/securityalert/4769 - http://www.securityfocus.com/archive/1/499117/100/0/threaded - http://downloads.digium.com/pub/security/AST-2008-012.html - http://www.vupen.com/english/advisories/2008/3403 - http://secunia.com/advisories/34982 - http://www.securitytracker.com/id?1021378
CVE ID: CVE-2008-5559 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47194 - http://www.securityfocus.com/bid/32719 - http://securityreason.com/securityalert/4725 - https://www.exploit-db.com/exploits/7398 - http://secunia.com/advisories/33067
CVE ID: CVE-2008-5560 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:46.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50629 - http://securityreason.com/securityalert/4725 - https://www.exploit-db.com/exploits/7398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47195 - http://secunia.com/advisories/33067
CVE ID: CVE-2008-5561 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) fiche_product.php and (2) presentation.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32725 - https://www.exploit-db.com/exploits/7396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47191 - http://securityreason.com/securityalert/4726
CVE ID: CVE-2008-5562 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7361 - http://securityreason.com/securityalert/4727
CVE ID: CVE-2008-5563 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service (device crash) via a malformed Extensible Authentication Protocol (EAP) frame. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4728 - http://www.securityfocus.com/bid/32694 - http://www.arubanetworks.com/support/alerts/aid-12808.asc - http://www.securitytracker.com/id?1021362 - http://secunia.com/advisories/33057 - http://www.securityfocu
id-12808.asc - http://www.securitytracker.com/id?1021362 - http://secunia.com/advisories/33057 - http://www.securityfocus.com/archive/1/499014/100/0/threaded
CVE ID: CVE-2008-5564 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the media server in Orb Networks Orb before 2.01.0025 allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47083 - http://secunia.com/advisories/33017 - http://www.securityfocus.com/bid/32628 - http://www.securityfocus.com/archive/1/498904/100/0/threaded - http://securityreason.com/securityalert/4729
CVE ID: CVE-2008-5565 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4730 - http://secunia.com/advisories/33038 - https://www.exploit-db.com/exploits/7365
CVE ID: CVE-2008-5566 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47198 - http://securityreason.com/securityalert/4751 - http://osvdb.org/50659 - http://www.securityfocus.com/bid/32727 - https://www.exploit-db.com/exploits/7400
CVE ID: CVE-2008-5567 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/ad_settings.php in Bonza Cart 1.10 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the NewAdmin, NewPass1, and NewPass2 parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7366 - http://securityreason.com/securityalert/4731 - http://secunia.com/advisories/33037
CVE ID: CVE-2008-5568 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the admin_id, newpass_1, and newpass_2 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4735 - http://secunia.com/advisories/33039 - https://www.exploit-db.com/exploits/7364
CVE ID: CVE-2008-5569 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php or (2) shop/kontakt.php, or (3) shop_kunden_mgmt.php or (4) SHOP_KONFIGURATION.php in shop/Admin/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47157 - http://secunia.com/advisories/33069 - http://securityreason.com/securityalert/4745 - http://osvdb.org/50568 - htt
7157 - http://secunia.com/advisories/33069 - http://securityreason.com/securityalert/4745 - http://osvdb.org/50568 - http://osvdb.org/50569 - http://www.securityfocus.com/archive/1/498998/100/0/threaded - http://osvdb.org/50570 - http://www.securityfocus.com/bid/32690
CVE ID: CVE-2008-5570 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32726 - http://secunia.com/advisories/33065 - http://securityreason.com/securityalert/4751 - https://www.exploit-db.com/exploits/7400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47197 - http://osvd
51 - https://www.exploit-db.com/exploits/7400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47197 - http://osvdb.org/50660
CVE ID: CVE-2008-5571 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter (aka user field) or the (2) psw parameter (aka passwd field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32706 - http://securityreason.com/securityalert/4749 - https://www.exploit-db.com/exploits/7390 - http://secunia.com/advisories/3
ttp://securityreason.com/securityalert/4749 - https://www.exploit-db.com/exploits/7390 - http://secunia.com/advisories/33030 - http://osvdb.org/50548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47170
CVE ID: CVE-2008-5572 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50547 - http://securityreason.com/securityalert/4748 - https://www.exploit-db.com/exploits/7371 - http://secunia.com/advisories/33030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47148
CVE ID: CVE-2008-5573 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) Password and (2) username parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50576 - http://securityreason.com/securityalert/4741 - https://www.exploit-db.com/exploits/7391 - http://www.securityfocus.com/bid/32707 - http://secunia.com/advisories/33044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47169
CVE ID: CVE-2008-5574 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL commands via the u parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33096 - http://securityreason.com/securityalert/4747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47210 - https://www.exploit-db.com/exploits/7407 - http://osvdb.org/50655 - http://www.securityfocus.com/bid/32756
CVE ID: CVE-2008-5575 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32606 - http://www.securityfocus.com/archive/1/498864/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47036 - http://securityreason.com/securityalert/4752
CVE ID: CVE-2008-5576 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain administrative access via a large value of the current_user[users_level] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5149 - http://securityreason.com/securityalert/4739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47456
CVE ID: CVE-2008-5577 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the inc_function parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5149 - http://securityreason.com/securityalert/4739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47457
CVE ID: CVE-2008-5578 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat parameter, or (4) a combination of scb_uid and scb_ident cookie values. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5149 - http://www.securityfocus.com/bid/27866 - http://securityreason.com/securityalert/4739
CVE ID: CVE-2008-5579 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487695/100/200/threaded - http://www.securityfocus.com/bid/27671 - https://www.exploit-db.com/exploits/6733 - http://securityreason.com/securityalert/4733
CVE ID: CVE-2008-5580 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487695/100/200/threaded - http://www.securityfocus.com/bid/27671 - https://www.exploit-db.com/exploits/6733 - http://securityreason.com/securityalert/4733 - http://www.securityfocus.com/bid/31734
CVE ID: CVE-2008-5581 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487695/100/200/threaded - http://www.securityfocus.com/bid/27671 - https://www.exploit-db.com/exploits/6733 - http://securityreason.com/securityalert/4733
CVE ID: CVE-2008-5582 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5192 - http://www.securityfocus.com/bid/28009 - http://securityreason.com/securityalert/4732
CVE ID: CVE-2008-5583 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index.php in ProjectPier 0.8 and earlier allows remote attackers to perform actions as an administrator via the query string, as demonstrated by a delete project action. Additional Analyst Notes: - CVE Program Container: References: - http://www.projectpier.org/node/679 - http://www.securityfocus.com/bid/27857 - http://secunia.com/advisories/29016 - http://www.securityfocus.com/archive/1/488294/100/200/threaded - http://securityreason.com/securityalert/4734
CVE ID: CVE-2008-5584 State: PUBLISHED Published: 2008-12-15T17:45:00 Last Updated: 2024-08-07T10:56:47.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a message, (2) a milestone, or (3) a display name in a profile, or the (4) a or (5) c parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.projectpier.org/node/679 - http://www.securityfocus.com/bid/27857 - http://secunia.com/advisories/29016 - http://www.securityfocus.com/archive/1/488294/100/200/threaded - http://securityreason.
//secunia.com/advisories/29016 - http://www.securityfocus.com/archive/1/488294/100/200/threaded - http://securityreason.com/securityalert/4734
CVE ID: CVE-2008-5585 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) portal/includes/portal_block.php and (2) includes/acp/acp_lcxbbportal.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4738 - http://packetstormsecurity.org/0812-exploits/icxbbportal-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/47092 - http://www.securityfocus.com/bid/326
/icxbbportal-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/47092 - http://www.securityfocus.com/bid/32647 - https://www.exploit-db.com/exploits/7341
CVE ID: CVE-2008-5586 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7328 - http://secunia.com/advisories/32958 - http://securityreason.com/securityalert/4736 - http://www.securityfocus.com/bid/32590
CVE ID: CVE-2008-5587 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47140 - https://www.exploit-db.com/exploits/7363 - http://secunia.com/advisories/33014 - http://www.securityfocus
lities/47140 - https://www.exploit-db.com/exploits/7363 - http://secunia.com/advisories/33014 - http://www.securityfocus.com/bid/32670 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://securityreason.com/securityalert/4737 - http://secunia.com/advisories/33263 - http://www.debian.org/security/2008/dsa-1693
CVE ID: CVE-2008-5588 State: PUBLISHED Published: 2008-12-16T18:00:00 Last Updated: 2024-08-07T10:56:47.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4740 - https://www.exploit-db.com/exploits/7349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47113 - http://www.securityfocus.com/bid/32659