Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5810 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt - http://bs2www.fujitsu-siemens
erences: - http://www.sec-consult.com/files/20081219-0_fujitsu-siemens_webta_cmdexec.txt - http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english - https://exchange.xforce.ibmcloud.com/vulnerabilities/47495 - http://www.securitytracker.com/id?1021475 - http://securityreason.com/securityalert/4856 - http://www.vupen.com/english/advisories/2008/3462 - http://www.securityfocus.com/bid/32927 - http://www.securityfocus.com/archive/1/499417/100/0/threaded - http://secunia.com/advisories/33168
CVE ID: CVE-2008-5811 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the PaxGallery (com_paxgallery) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter in a table action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51009 - http://securityreason.com/securityalert/4857 - http://secunia.com/advisories/33352 - https://www.exploit-db.com/exploits/7587 - http://www.securityfocus.com/bid/33035
CVE ID: CVE-2008-5812 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33307 - http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47695 - http://www.securityfocus.com/bid/33061
CVE ID: CVE-2008-5813 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47626 - http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2 - https://exchange.xforce.ibmcloud.com/vulnerabili
rabilities/47626 - http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47695 - http://www.securityfocus.com/bid/33021 - http://www.securityfocus.com/bid/33061
CVE ID: CVE-2008-5814 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN50327700/index.html - http://marc.info/?l=bugtraq&m=124277349419254&w=2 - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000084.html - http://h20000.www
.info/?l=bugtraq&m=124277349419254&w=2 - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000084.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/35007 - http://secunia.com/advisories/34933 - http://secunia.com/advisories/34830 - http://www.ubuntu.com/usn/USN-761-2 - http://secunia.com/advisories/35108 - http://www.redhat.com/support/errata/RHSA-2009-0350.html - http://secunia.com/advisories/35003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47496 - http://www.vupen.com/english/advisories/2009/1338 - http://marc.info/?l
ange.xforce.ibmcloud.com/vulnerabilities/47496 - http://www.vupen.com/english/advisories/2009/1338 - http://marc.info/?l=bugtraq&m=124277349419254&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - https://usn.ubuntu.com/761-1/ - http://www.debian.org/security/2009/dsa-1789
CVE ID: CVE-2008-5815 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33055 - http://securityreason.com/securityalert/4859 - https://www.exploit-db.com/exploits/7621
CVE ID: CVE-2008-5816 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ref_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33006 - http://securityreason.com/securityalert/4858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47615 - https://www.exploit-db.com/exploits/7570
CVE ID: CVE-2008-5817 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) password fields in a sign_in action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47629 - http://secunia.com/advisories/33337 - https://www.exploit-db.com/exploits/7602 - http://www.securityfocus.com/bid/33028
CVE ID: CVE-2008-5818 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lg parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4861 - http://www.securityfocus.com/bid/33026 - https://www.exploit-db.com/exploits/7604 - https://exchange.xforce.ibmcloud.com/vulner
www.securityfocus.com/bid/33026 - https://www.exploit-db.com/exploits/7604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47609 - http://secunia.com/advisories/33335
CVE ID: CVE-2008-5819 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lg parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33336 - https://www.exploit-db.com/exploits/7603 - http://securityreason.com/securityalert/4864 - http://www.securityfocus.com/bid/33027
CVE ID: CVE-2008-5820 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33336 - http://securityreason.com/securityalert/4863 - https://www.exploit-db.com/exploits/7619 - http://www.securityfocus.com/bid/33054
CVE ID: CVE-2008-5821 State: PUBLISHED Published: 2009-01-02T19:00:00 Last Updated: 2024-08-07T11:04:44.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (memory consumption and browser crash) via a long ALINK attribute in a BODY element in an HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47724 - http://www.securityfocus.com/bid/33080 - http://packetstormsecurity.org/0812-exploits/safari_webkit_ml.txt - http://jbrownsec.blogspot.com/2008/12/new-year-resea
http://packetstormsecurity.org/0812-exploits/safari_webkit_ml.txt - http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html
CVE ID: CVE-2008-5822 State: PUBLISHED Published: 2009-01-02T19:00:00 Last Updated: 2024-08-07T11:04:44.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote attackers to cause a denial of service (memory consumption and browser hang) via a long CLASS attribute in an HR element in an HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47758 - http://www.packetstormsecurity.org/0812-exploits/mzff_libxul_ml.txt - http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html
CVE ID: CVE-2008-5823 State: PUBLISHED Published: 2009-01-02T19:00:00 Last Updated: 2024-08-07T11:04:44.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access violation and application crash) via a zero value for the Startup property. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47756 - http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html
CVE ID: CVE-2008-5824 State: PUBLISHED Published: 2009-01-02T19:00:00 Last Updated: 2024-08-07T11:04:44.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33273 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://www.vupen.com/english/advisories/2009/0005 - http://musicpd.org/mantis/view.php?id=1915 - http://bugs.debian.org/cgi-bin/bugrep
en.com/english/advisories/2009/0005 - http://musicpd.org/mantis/view.php?id=1915 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510205 - http://www.securityfocus.com/bid/33066 - http://www.ubuntu.com/usn/USN-912-1 - http://openwall.com/lists/oss-security/2008/12/30/1
CVE ID: CVE-2008-5825 State: PUBLISHED Published: 2009-01-02T19:00:00 Last Updated: 2024-08-07T11:04:44.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR (aka \r), and . (dot) characters, which allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag, as demonstrated by (1) an http: URI for a malicious web site, (2) a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone. Additional An
a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone. Additional Analyst Notes: - CVE Program Container: References: - http://www.mulliner.org/nfc/feed/collin_mulliner_eusecwest08_attacking_nfc_phones.pdf - http://www.securityfocus.com/bid/30716 - http://www.mulliner.org/security/advisories/nokia6131nfc_uri_spoofing_and_dos_advisory.txt - http://events.ccc.de/congress/2008/Fahrplan/attachments/1109_collin_mulliner_eusecwest08_attacking_nfc_phones_slim.pdf - http://events.ccc.de/congress/2008/Fahrplan/events/2639.en.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44527 - http://archives.neohapsis.com/archives/bugtraq/2008-08/018
https://exchange.xforce.ibmcloud.com/vulnerabilities/44527 - http://archives.neohapsis.com/archives/bugtraq/2008-08/0186.html - http://www.mulliner.org/nfc/feed/collin_mulliner_25c3_attacking_nfc_phones.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2008-08/0344.html
CVE ID: CVE-2008-5826 State: PUBLISHED Published: 2009-01-02T19:00:00 Last Updated: 2024-08-07T11:04:44.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware allows remote attackers to cause a denial of service (device crash) via (1) a large value in the payload length field in an NDEF record, or a certain length for a (2) tel: or (3) sms: NDEF URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.mulliner.org/nfc/feed/collin_mulliner_eusecwest08_attacking_nfc_phones.pdf - http://www.securityfocus.com/bid/30716 - http://www.mulliner.org/security/advisories/nokia6131nfc_uri_spoofing_an
.pdf - http://www.securityfocus.com/bid/30716 - http://www.mulliner.org/security/advisories/nokia6131nfc_uri_spoofing_and_dos_advisory.txt - http://events.ccc.de/congress/2008/Fahrplan/attachments/1109_collin_mulliner_eusecwest08_attacking_nfc_phones_slim.pdf - http://events.ccc.de/congress/2008/Fahrplan/events/2639.en.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44529 - http://archives.neohapsis.com/archives/bugtraq/2008-08/0186.html - http://www.mulliner.org/nfc/feed/collin_mulliner_25c3_attacking_nfc_phones.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2008-08/0344.html
CVE ID: CVE-2008-5827 State: PUBLISHED Published: 2009-01-02T19:00:00 Last Updated: 2024-08-07T11:04:44.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, which makes it easier for remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.mulliner.org/nfc/feed/collin_mulliner_eusecwest08_attacking_nfc_phones.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/44528 - http://events.ccc.de/congress/2008/Fahrplan/attachments/1109
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/44528 - http://events.ccc.de/congress/2008/Fahrplan/attachments/1109_collin_mulliner_eusecwest08_attacking_nfc_phones_slim.pdf - http://events.ccc.de/congress/2008/Fahrplan/events/2639.en.html - http://www.mulliner.org/nfc/feed/collin_mulliner_25c3_attacking_nfc_phones.pdf
CVE ID: CVE-2008-5828 State: PUBLISHED Published: 2009-01-02T19:00:00 Last Updated: 2024-08-07T11:04:44.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4862 - http://www.securityfocus.com/archive/1/499624/100/0/threaded
CVE ID: CVE-2008-5838 State: PUBLISHED Published: 2009-01-05T16:00:00 Last Updated: 2024-08-07T11:04:44.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_results.php in E-Php Scripts E-Shop (aka E-Php Shopping Cart) Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6398 - http://secunia.com/advisories/31506 - http://www.securityfocus.com/bid/31319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44472 - http://www.securityfocus.com/bid/30692 - http://www.vupen.com/english/advisories/2
.ibmcloud.com/vulnerabilities/44472 - http://www.securityfocus.com/bid/30692 - http://www.vupen.com/english/advisories/2008/2507
CVE ID: CVE-2008-5839 State: PUBLISHED Published: 2009-01-05T16:00:00 Last Updated: 2024-08-07T11:04:44.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element. Additional Analyst Notes: - CVE Program Container: References: - http://www.sebug.net/exploit/4681/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/45343 - http://www.securityfocus.com/bid/31294
CVE ID: CVE-2008-5840 State: PUBLISHED Published: 2009-01-05T16:00:00 Last Updated: 2024-08-07T11:04:44.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies to 1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6526 - http://securityreason.com/securityalert/4865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45338 - http://www.securityfocus.com/bid/31320
CVE ID: CVE-2008-5841 State: PUBLISHED Published: 2009-01-05T16:00:00 Last Updated: 2024-08-07T11:04:44.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to (1) previews.php and (2) reviews.php, and the (3) id parameter to index.php in a viewarticle action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45366 - https://www.exploit-db.com/exploits/6540 - http://www.securityfocus.com/bid/31340 - http://securityreason.com/securityalert/4867
CVE ID: CVE-2008-5842 State: PUBLISHED Published: 2009-01-05T20:00:00Z Last Updated: 2024-09-16T20:06:49.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via vectors associated with (1) a demo application shipped with WebTransactions and possibly (2) an unspecified "dynamic application." Additional Analyst Notes: - CVE Program Container: References: - http://bs2www.fujitsu-siemens.de/update/securitypatch.htm#english
CVE ID: CVE-2008-5843 State: PUBLISHED Published: 2009-01-05T20:00:00 Last Updated: 2024-08-07T11:04:44.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse program in (1) the current working directory or (2) /var/tmp, related to the (a) pdf90, (b) pdfjoin, and (c) pdfnup scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00488.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00484.html - https://bugs.gentoo.org/show_bug.cgi?id=252734 - http://secunia
hives/fedora-package-announce/2009-March/msg00484.html - https://bugs.gentoo.org/show_bug.cgi?id=252734 - http://secunia.com/advisories/34312 - http://openwall.com/lists/oss-security/2008/12/28/3
CVE ID: CVE-2008-5844 State: PUBLISHED Published: 2009-01-05T20:00:00 Last Updated: 2024-08-07T11:04:44.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quotes_gpc regardless of the actual magic_quotes_gpc setting, which might make it easier for context-dependent attackers to conduct SQL injection attacks and unspecified other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/archive/2008.php#id2008-12-08-1 - http://www.php.net/archive/2008.php#id2008-12-07-1 - http://www.securitytracker.com/id?1021393 - http://www.securit
-1 - http://www.php.net/archive/2008.php#id2008-12-07-1 - http://www.securitytracker.com/id?1021393 - http://www.securityfocus.com/bid/32673 - http://www.php.net/ChangeLog-5.php#5.2.8 - http://bugs.php.net/bug.php?id=46759 - http://bugs.php.net/bug.php?id=42718
CVE ID: CVE-2008-5845 State: PUBLISHED Published: 2009-01-05T20:00:00 Last Updated: 2024-08-07T11:04:44.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23 allow remote attackers to inject arbitrary web script or HTML via a (1) MTEntryAuthorUsername, (2) MTAuthorDisplayName, (3) MTEntryAuthorDisplayName, or (4) MTCommenterName field in a Profile View template; a (5) listing screen or (6) edit screen in the CMS app; (7) a TrackBack title, related to the HTML sanitization library; or (8) a user archive name (aka archive title) on a published Community Blog template. Additional Analyst Not
n library; or (8) a user archive name (aka archive title) on a published Community Blog template. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN45658190/index.html - http://www.movabletype.org/mt_423_change_log.html - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000031.html
CVE ID: CVE-2008-5846 State: PUBLISHED Published: 2009-01-05T20:00:00 Last Updated: 2024-08-07T11:04:44.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen." Additional Analyst Notes: - CVE Program Container: References: - http://www.movabletype.org/mt_423_change_log.html - http://www.securityfocus.com/bid/33133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47759
CVE ID: CVE-2008-5847 State: PUBLISHED Published: 2009-01-05T20:00:00 Last Updated: 2024-08-07T11:04:44.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4868 - https://www.exploit-db.com/exploits/7529