Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4403 State: PUBLISHED Published: 2008-10-03T15:00:00 Last Updated: 2024-08-07T10:17:09.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via crafted HTTP headers, related to the "error handling mechanism." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31531 - http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt - http://secunia.com/advisories/32
ndmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt - http://secunia.com/advisories/32097 - http://www.securitytracker.com/id?1020974 - http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2439_Readme.txt - http://www.vupen.com/english/advisories/2008/2712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45599
CVE ID: CVE-2008-4404 State: PUBLISHED Published: 2008-10-03T15:00:00Z Last Updated: 2024-09-17T01:45:44.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 Neighbor Discovery Protocol (NDP) implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-7H2RZ8 - http://www.kb.cert.org/vuls/id/472363
CVE ID: CVE-2008-4405 State: PUBLISHED Published: 2008-10-03T17:18:00 Last Updated: 2024-08-07T10:17:09.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid. NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen. Additional Analyst Notes: - CVE
libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2709 - https://bugzilla.redhat.com/show_bug.cgi?id=464817 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:016 - http://secunia.com/advisories/32064 - http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00992.html - http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html - http://openwall.com/lists/oss-security/2008/09/30/6 - http://www.redhat.com/support/errata/RHSA-2009-0003.html - http://xenbits.xensource.com/staging/xen-3.3-testing.hg?rev/e0e17216ba70
redhat.com/support/errata/RHSA-2009-0003.html - http://xenbits.xensource.com/staging/xen-3.3-testing.hg?rev/e0e17216ba70 - http://lists.xensource.com/archives/html/xen-devel/2008-09/msg00994.html - http://www.securityfocus.com/bid/31499 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10627 - http://www.securitytracker.com/id?1020955 - http://www.openwall.com/lists/oss-security/2008/10/04/3 - https://bugzilla.redhat.com/show_bug.cgi?id=464818
CVE ID: CVE-2008-4406 State: PUBLISHED Published: 2008-10-03T17:18:00 Last Updated: 2024-08-07T10:17:09.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48895 - http://bugs.debian.org/433996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45715 - http://openwall.com/lists/oss-security/2008/10/01/1 - http://www.securityfocus.com/bid/31512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45609
CVE ID: CVE-2008-4407 State: PUBLISHED Published: 2008-10-03T17:18:00 Last Updated: 2024-08-07T10:17:09.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: XRunSabre in sabre (aka xsabre) 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to cause a denial of service (application unavailability) by creating a /tmp/sabre.log file that cannot be overwritten. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/433996 - http://osvdb.org/48900
CVE ID: CVE-2008-4408 State: PUBLISHED Published: 2008-10-03T17:18:00 Last Updated: 2024-08-07T10:17:09.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions before 1.13.2 allows remote attackers to inject arbitrary web script or HTML via the useskin parameter to an unspecified component. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45632 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_2/phase3/RELEASE-NOTES - http://openwall.com/lists/oss-security/2008/10/02/3 - http://www.securityfocus.com/bid/31540 -
2/phase3/RELEASE-NOTES - http://openwall.com/lists/oss-security/2008/10/02/3 - http://www.securityfocus.com/bid/31540 - http://secunia.com/advisories/32128 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00220.html - http://www.vupen.com/english/advisories/2008/2737 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00179.html - http://secunia.com/advisories/32131 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-October/000078.html - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_1/phase3/RELEASE-NOTES
CVE ID: CVE-2008-4409 State: PUBLISHED Published: 2008-10-03T17:18:00 Last Updated: 2024-08-07T10:17:09.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by use of xmllint on a certain XML document, a different vulnerability than CVE-2003-1564 and CVE-2008-3281. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://lists.apple.com/archives/security-an
rt.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00125.html - http://www.vupen.com/english/advisories/2009/1522 - http://security.gentoo.org/glsa/glsa-200812-06.xml - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://openwall.com/lists/oss-security/2008/10/02/4 - http://secunia.com/advisories/32130 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:212 - http://secunia.com/advisories/35379 - http://www.securityfocus.com/bid/31555 - https://www.redhat.com/archives/fedora-package
//secunia.com/advisories/35379 - http://www.securityfocus.com/bid/31555 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00130.html - http://secunia.com/advisories/32974 - http://secunia.com/advisories/32175 - http://support.apple.com/kb/HT3613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45633 - http://bugzilla.gnome.org/show_bug.cgi?id=554660
CVE ID: CVE-2008-4410 State: PUBLISHED Published: 2008-10-03T17:18:00 Last Updated: 2024-08-07T10:17:09.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c in the Virtual Machine Interface (VMI) in the Linux kernel 2.6.26.5 invokes write_idt_entry where write_ldt_entry was intended, which allows local users to cause a denial of service (persistent application failure) via crafted function calls, related to the Java Runtime Environment (JRE) experiencing improper LDT selector state, a different vulnerability than CVE-2008-3247. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcl
ility than CVE-2008-3247. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45687 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=de59985e3a623d4d5d6207f1777398ca0606ab1c - http://www.openwall.com/lists/oss-security/2008/10/03/3 - http://secunia.com/advisories/32386 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html - http://www.securityfocus.com/bid/31565 - http://osvdb.org/48743 - http://secuni
ge-announce/2008-October/msg00689.html - http://www.securityfocus.com/bid/31565 - http://osvdb.org/48743 - http://secunia.com/advisories/32124
CVE ID: CVE-2008-4411 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T10:17:09.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.15.210 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-1663. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31663 - http://securitytracker.com/id?1021015 - http://marc.info/?l=bugtraq&m=122356588429626&w=2 - http://marc.info/?l=bugtraq&m=122356588429626&w=2 - http://secunia.com/advisories
nfo/?l=bugtraq&m=122356588429626&w=2 - http://marc.info/?l=bugtraq&m=122356588429626&w=2 - http://secunia.com/advisories/32199 - http://securityreason.com/securityalert/4398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45754 - http://www.vupen.com/english/advisories/2008/2778
CVE ID: CVE-2008-4412 State: PUBLISHED Published: 2008-10-17T20:00:00 Last Updated: 2024-08-07T10:17:09.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 5.2 Update 2 (C.05.02.02.00) allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021064 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01571962 - http://secunia.com/advisories/32287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45916 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?
ps://exchange.xforce.ibmcloud.com/vulnerabilities/45916 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01571962 - http://www.vupen.com/english/advisories/2008/2836 - http://www.securityfocus.com/bid/31777
CVE ID: CVE-2008-4413 State: PUBLISHED Published: 2008-11-04T18:00:00 Last Updated: 2024-08-07T10:17:09.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP System Management Homepage (SMH) 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users to gain "unauthorized access" via unknown vectors, possibly related to temporary file permissions. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122581539223159&w=2 - http://osvdb.org/49521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46313 - http://www.vupen.com/english/adv
- http://osvdb.org/49521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46313 - http://www.vupen.com/english/advisories/2008/2999 - http://secunia.com/advisories/32544 - http://marc.info/?l=bugtraq&m=122581539223159&w=2 - http://www.securitytracker.com/id?1021133 - http://securityreason.com/securityalert/4545
CVE ID: CVE-2008-4414 State: PUBLISHED Published: 2008-11-07T18:00:00 Last Updated: 2024-08-07T10:17:09.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3050 - http://securitytracker.com/alerts/2008/Nov/1021152.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46414 - http://securityreason.com/securityalert/4567 - http://secunia.com/advisories/32621 - http://marc.info/?l=bugtraq&m=122600765224240&w=2 - http:
com/securityalert/4567 - http://secunia.com/advisories/32621 - http://marc.info/?l=bugtraq&m=122600765224240&w=2 - http://www.securityfocus.com/bid/32160 - http://marc.info/?l=bugtraq&m=122600765224240&w=2
CVE ID: CVE-2008-4415 State: PUBLISHED Published: 2008-11-17T23:00:00 Last Updated: 2024-08-07T10:17:09.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122652356130271&w=2 - http://www.securityfocus.com/bid/32272 - http://secunia.com/advisories/32712 - http://marc.info/?l=bugtraq&m=122652356130271&w=2 - http://www.securitytracker.com/id?1021171 - http://securityreason.com/securityalert/4601 - http://osvdb.org/49831
CVE ID: CVE-2008-4416 State: PUBLISHED Published: 2008-12-05T00:00:00 Last Updated: 2024-08-07T10:17:09.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32601 - http://securityreason.com/securityalert/4686 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6077 - http://marc.info/?l=bugtraq&m=122832651727633&w=2 - http://securitytracker.com/id?1021297 - http://marc.info/?l=bugtraq&m=122832651727633&w=2 - https://exch
651727633&w=2 - http://securitytracker.com/id?1021297 - http://marc.info/?l=bugtraq&m=122832651727633&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47012 - http://www.vupen.com/english/advisories/2008/3331 - http://secunia.com/advisories/32969 - http://osvdb.org/50409
CVE ID: CVE-2008-4417 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-4418 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T10:17:09.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1021377 - http://www.vupen.com/english/advisories/2008/3411 - http://securityreason.com/securityalert/4705 - http://marc.info/?l=bugtraq&m=122893704624601&w=2 - http://osvdb.org/50679 - http://marc.info/?l=bugtraq&m=122893704624601&w=2 - http://www.securityfocus.com/bid/32754
CVE ID: CVE-2008-4419 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T10:17:09.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color LaserJet 4730mfp before firmware 46.200.9; LaserJet 2410, LaserJet 2420, and LaserJet 2430 before firmware 20080819 SPCL112A; LaserJet 4250 and LaserJet 4350 before firmware 20080819 SPCL015A; and LaserJet 9040 and LaserJet 9050 before f
PCL112A; LaserJet 4250 and LaserJet 4350 before firmware 20080819 SPCL015A; and LaserJet 9040 and LaserJet 9050 before firmware 20080819 SPCL110A allows remote attackers to read arbitrary files via directory traversal sequences in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33779 - http://www.securityfocus.com/bid/33611 - http://www.securityfocus.com/archive/1/500657/100/0/threaded - http://www.securitytracker.com/id?1021687 - http://www.vupen.com/english/advisories/2009/0341 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01
TechSupport/Document.jsp?objectID=c01623905 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01623905
CVE ID: CVE-2008-4420 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T10:17:09.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to execute arbitrary code via a long filename in a ZIP archive during a (1) Fix (aka Repair), (2) Add, (3) Update, or (4) Freshen action, a related issue to CVE-2006-3985. Additional Analyst Notes: - CVE Program Container: References: - htt
) Freshen action, a related issue to CVE-2006-3985. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022021 - http://innermedia.com/upgrades.html - http://www.securityfocus.com/archive/1/441083 - http://www.securityfocus.com/bid/19143 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011 - http://osvdb.org/53478 - http://vuln.sg/dynazip5007-en.html - http://www.securityfocus.com/archive/1/441084 - http://secunia.com/advisories/21180 - http://vuln.sg/turbozip6-en.html - http://www.vupen.com/english/advisories/2006/2957 - http://secunia.com/advisories/34659 - http://h20000.www2.hp.com/bizsupport/TechSupport/Documen
sh/advisories/2006/2957 - http://secunia.com/advisories/34659 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011 - http://www.vupen.com/english/advisories/2009/0980
CVE ID: CVE-2008-4421 State: PUBLISHED Published: 2008-10-07T18:27:00 Last Updated: 2024-08-07T10:17:09.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in MetaGauge 1.0.0.17, and probably other versions before 1.0.3.38, allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45697 - http://www.securityfocus.com/archive/1/497039/100/0/threaded - http://www.vupen.com/english/advisories/2008/2747 - http://secunia.com/advisories/32094 - http://securityreason.com/securityalert/4360 - https://www.
advisories/2008/2747 - http://secunia.com/advisories/32094 - http://securityreason.com/securityalert/4360 - https://www.exploit-db.com/exploits/6686 - http://www.securityfocus.com/bid/31596
CVE ID: CVE-2008-4422 State: REJECTED Published: 2008-10-07T19:00:00Z Last Updated: 2024-09-16T16:22:47.591Z Description: No description available.
CVE ID: CVE-2008-4423 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item parameter in a contact modify action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6232 - http://secunia.com/advisories/31425 - http://www.securityfocus.com/bid/30645 - http://www.securityfocus.com/archive/1/495313/100/0/threaded - http://www.securitytracker.com/id?1020650 - http://securityreason.com/securityalert/4350 - https://exchange.xforc
aded - http://www.securitytracker.com/id?1020650 - http://securityreason.com/securityalert/4350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44380
CVE ID: CVE-2008-4424 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to inject arbitrary web script or HTML via the s parameter in a comments action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44398 - http://downloads.securityfocus.com/vulnerabilities/exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/44398 - http://downloads.securityfocus.com/vulnerabilities/exploits/30635.html - http://www.securityfocus.com/bid/30635
CVE ID: CVE-2008-4425 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4348 - http://secunia.com/advisories/31424 - http://www.securityfocus.com/bid/30627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44386 - https://www.exploit-db.com/exploits/6215
CVE ID: CVE-2008-4426 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44388 - http://secunia.com/advisories/31424 - http://www.securityfocus.com/bid/30627 - https://www.exploit-db.com/exploits/6215
CVE ID: CVE-2008-4427 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31424 - http://www.securityfocus.com/bid/30627 - http://securityreason.com/securityalert/4349 - https://www.exploit-db.com/exploits/6231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44389
CVE ID: CVE-2008-4428 State: PUBLISHED Published: 2008-10-03T22:00:00 Last Updated: 2024-08-07T10:17:09.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31424 - http://www.securityfocus.com/bid/30627 - http://securityreason.com/securityalert/4349 - https://www.exploit-db.com/exploits/6231 - https://exchange.xforce