Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
es/bugtraq/2009-01/0032.html - http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47795 - http://www.securityfocus.com/bid/33153
CVE ID: CVE-2009-0700 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt - http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html - http://archives.neohapsis.com/archives/
2008-04.txt - http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html - http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47794 - http://www.securityfocus.com/bid/33153
CVE ID: CVE-2009-0701 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in index.php in Cybershade CMS 0.2b, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) THEME_header and (2) THEME_footer parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47725 - http://www.securityfocus.com/bid/33101 - https://www.exploit-db.com/exploits/7668
CVE ID: CVE-2009-0702 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Phoca Documentation (com_phocadocumentation) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33114 - https://www.exploit-db.com/exploits/7670 - http://www.vupen.com/english/advisories/2009/0026
CVE ID: CVE-2009-0703 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7635 - http://www.securityfocus.com/bid/33084 - http://secunia.com/advisories/34099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47722
CVE ID: CVE-2009-0704 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands via the search parameter in an advanced action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7659 - http://www.securityfocus.com/bid/33097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47723
CVE ID: CVE-2009-0705 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47701 - http://www.securityfocus.com/bid/33081 - http://secunia.com/advisories/33363 - http://osvdb.org/51110 - https://www.exploit-db.com/exploits/7641
CVE ID: CVE-2009-0706 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Simple Review (com_simple_review) component 1.3.5 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0901-exploits/joomlasimplereview-sql.txt - http://www.securityfocus.com/bid/33102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47726
CVE ID: CVE-2009-0707 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL commands via the loginemail parameter (aka login field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47702 - https://www.exploit-db.com/exploits/7642 - http://www.securityfocus.com/bid/33083 - http://secunia.com/advisories/33362
CVE ID: CVE-2009-0708 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to (1) hijack the authentication of administrators via unknown vectors or (2) hijack the authentication of arbitrary users via vectors involving the profile page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33383 - http://sourceforge.net/project/shownotes.php?release_id=651587
CVE ID: CVE-2009-0709 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33367 - http://osvdb.org/51104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47720
CVE ID: CVE-2009-0710 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPFootball 1.6 allow remote attackers to inject arbitrary web script or HTML via (1) the user parameter to login.php or (2) the dbfield parameter to filter.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47719 - http://secunia.com/advisories/33367 - http://www.
g/51105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47719 - http://secunia.com/advisories/33367 - http://www.osvdb.org/51103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47721
CVE ID: CVE-2009-0711 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Accounts value for the dbtable parameter, in conjunction with a Password value for the dbfield parameter. NOTE: this has been reported as a SQL injection vulnerability by some sources, but the provenance of that information is unknown. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/51102 - http://secunia.com/advisories/33367 - https://www.exploit-db.com/exploits/7636
CVE ID: CVE-2009-0712 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:48:51.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=123688841217193&w=2 - http://osvdb.org/52592 - http://secunia.com/advisories/34243 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638 - http://www.securityfocus.com/bid/34078 - http://secunia.com/advisories/34276 - http://h20000.www2.hp.com/bizsupport/TechSupp
://www.securityfocus.com/bid/34078 - http://secunia.com/advisories/34276 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638 - http://www.securitytracker.com/id?1021835 - http://www.vupen.com/english/advisories/2009/0671
CVE ID: CVE-2009-0713 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:48:51.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=123688841217193&w=2 - http://www.securitytracker.com/id?1021836 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638 - http://www.securityfocus.com/bid/34078 - http://secunia.com/advisories/34276 - http://h20000.www2.hp.com/bizsupport/TechSuppo
//www.securityfocus.com/bid/34078 - http://secunia.com/advisories/34276 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01655638 - http://www.vupen.com/english/advisories/2009/0671 - http://osvdb.org/52591
CVE ID: CVE-2009-0714 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T04:48:51.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022220 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697
ttp://www.securitytracker.com/id?1022220 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543 - https://www.exploit-db.com/exploits/9007 - http://ivizsecurity.com/security-advisory-iviz-sr-09002.html - http://secunia.com/advisories/35084 - http://www.securityfocus.com/bid/34955 - http://www.vupen.com/english/advisories/2009/1309 - https://www.exploit-db.com/exploits/9006
CVE ID: CVE-2009-0715 State: PUBLISHED Published: 2009-04-21T15:00:00 Last Updated: 2024-08-07T04:48:51.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows remote authenticated users to obtain "access" or "extended privileges" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124025839111157&w=2 - http://www.vupen.com/english/advisories/2009/1109 - http://marc.info/?l=bugtraq&m=124025839111157&w=2 - http://www.securitytracker.com/id?1022084 - http://osvdb.org/53881 - http://secunia.com/advisories/34807
CVE ID: CVE-2009-0716 State: PUBLISHED Published: 2009-04-21T15:00:00 Last Updated: 2024-08-07T04:48:51.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service or obtain "access" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124025929213175&w=2 - http://marc.info/?l=bugtraq&m=124025929213175&w=2 - http://secunia.com/advisories/34808 - http://www.securitytracker.com/id?1022085 - http://www.vupen.com/english/advisories/2009/1108
CVE ID: CVE-2009-0717 State: PUBLISHED Published: 2009-04-21T15:00:00 Last Updated: 2024-08-07T04:48:51.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124025929213175&w=2 - http://marc.info/?l=bugtraq&m=124025929213175&w=2 - http://secunia.com/advisories/34808 - http://www.vupen.com/english/advisories/2009/1108 - http://www.securitytracker.com/id?1022086
CVE ID: CVE-2009-0718 State: PUBLISHED Published: 2009-04-21T15:00:00 Last Updated: 2024-08-07T04:48:51.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124025929213175&w=2 - http://www.securitytracker.com/id?1022087 - http://marc.info/?l=bugtraq&m=124025929213175&w=2 - http://secunia.com/advisories/34808 - http://www.vupen.com/english/advisories/2009/1108
CVE ID: CVE-2009-0719 State: PUBLISHED Published: 2009-04-29T15:00:00 Last Updated: 2024-08-07T04:48:51.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue than CVE-2008-1660. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503038 - http://www.securityfocus.com/archive/1/503038 - http://www.securityfocus.com/bid/34748 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5791
CVE ID: CVE-2009-0720 State: PUBLISHED Published: 2009-05-05T17:00:00 Last Updated: 2024-08-07T04:48:51.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34942 - http://marc.info/?l=bugtraq&m=124146030732511&w=2 - http://marc.info/?l=bugtraq&m=124146030732511&w=2 - http://osvdb.org/54222 - http://www.securitytracker.com/id?1022163 - http://www.vupen.com/english/advisories/2009/1250
CVE ID: CVE-2009-0721 State: PUBLISHED Published: 2009-05-18T18:00:00Z Last Updated: 2024-09-17T01:45:55.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software (RGS) 4.0.0 through 5.2.4 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01731970 - http://www.securityfocus.com/bid/34980 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01731970 - http://secunia.com/advisories/35089 - http://secunia.com/advisories/35087 - http://www.v
lay.do?docId=emr_na-c01731970 - http://secunia.com/advisories/35089 - http://secunia.com/advisories/35087 - http://www.vupen.com/english/advisories/2009/1323 - http://securitytracker.com/id?1022221
CVE ID: CVE-2009-0722 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T04:48:51.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the user cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33729 - https://www.exploit-db.com/exploits/8032
CVE ID: CVE-2009-0723 State: PUBLISHED Published: 2009-03-23T14:00:00 Last Updated: 2024-08-07T04:48:51.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html - http://www.mandriva.com/security/advisories?name=MDVSA-20
om/archives/fedora-package-announce/2009-March/msg00851.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://secunia.com/advisories/34450 - http://www.securitytracker.com/id?1021869 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://www.ubuntu.com/usn/USN-744-1 - http://www.debian.org/security/2009/dsa-1745 - http://secunia.com/advisories/34675 - http://secunia.com/advisories/34454 - http://secunia.com/advisories/34442 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html - https://w
unia.com/advisories/34442 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html - http://scary.beasts.org/security/CESA-2009-003.html - http://secunia.com/advisories/34382 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49326 - https://bugzilla.redhat.com/show_bug.cgi?id=487508 - http://secunia.com/advisories/34418 - http://www.securityfocus.com/archive/1/502031/100/0/threaded - https://rhn.redha
- http://secunia.com/advisories/34418 - http://www.securityfocus.com/archive/1/502031/100/0/threaded - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://www.ocert.org/advisories/ocert-2009-003.html - http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html - http://secunia.com/advisories/34782 - http://secunia.com/advisories/34367 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 - http://www.redhat.com/support/errata/RHSA-2009-0339.html - http://www.vupen.com/english/advisories/2009/0775 - http://secunia.com/advisories/34463 - http://secunia.com/advisories/34408 - http://www.debian.org/security/2009/dsa-1769 - http://secunia.com/advisories/34400
http://secunia.com/advisories/34408 - http://www.debian.org/security/2009/dsa-1769 - http://secunia.com/advisories/34400 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11780 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:121 - http://www.securityfocus.com/archive/1/502018/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html - http://www.securityfocus.com/bid/34185 - http://security.gentoo.org/glsa/glsa-200904-19.xml - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html
CVE ID: CVE-2009-0726 State: PUBLISHED Published: 2009-02-24T23:00:00 Last Updated: 2024-08-07T04:48:51.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcal_gigs_id parameter in a details action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7746 - http://www.securityfocus.com/bid/33241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47919
CVE ID: CVE-2009-0727 State: PUBLISHED Published: 2009-02-24T23:00:00 Last Updated: 2024-08-07T04:48:51.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jobdetails.php in taifajobs 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the jobid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://e-rdc.org/v1/news.php?readmore=126 - http://osvdb.org/52256 - http://www.securityfocus.com/archive/1/501183/100/0/threaded - https://www.exploit-db.com/exploits/8098 - http://www.securityfocus.com/bid/33864
CVE ID: CVE-2009-0728 State: PUBLISHED Published: 2009-02-24T23:00:00 Last Updated: 2024-08-07T04:48:51.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33871 - https://www.exploit-db.com/exploits/8100
CVE ID: CVE-2009-0729 State: PUBLISHED Published: 2009-02-24T23:00:00 Last Updated: 2024-08-07T04:48:51.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) modules/login_include.php, and (3) modules/statistics_include.php and (4) configuration.inc.php in includes/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: Ref
wn; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52178 - http://osvdb.org/52177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48856 - http://osvdb.org/52175 - http://osvdb.org/52176 - http://www.securityfocus.com/bid/33860 - http://secunia.com/advisories/33983
CVE ID: CVE-2009-0730 State: PUBLISHED Published: 2009-02-24T23:00:00 Last Updated: 2024-08-07T04:48:51.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the gigcal _venues_id parameter in a details action to index.php, which is not properly handled by venuedetails.php, and (2) the gigcal_bands_id parameter in a details action to index.php, which is not properly handled by banddetails.php, different vectors than CVE-2009-0726. Additional Analyst Notes: - CVE Program Contain
operly handled by banddetails.php, different vectors than CVE-2009-0726. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/501175/100/0/threaded - http://www.securityfocus.com/bid/33859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48865 - http://www.securityfocus.com/archive/1/501176/100/0/threaded - http://www.securityfocus.com/archive/1/501174/100/0/threaded - http://www.securityfocus.com/bid/33863