Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4967 State: PUBLISHED Published: 2011-10-21T10:00:00 Last Updated: 2024-08-07T04:02:30.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59343 - http://osvdb.org/65411 - http://www.securityfocus.com/bid/40764 - http://www.exploit-db.com/exploits/13815 - http://secunia.com/advisories/40152
CVE ID: CVE-2010-4968 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14128 - http://packetstormsecurity.org/1007-exploits/joomlawmtpic-sql.txt - http://securityreason.com/securityalert/8492 - http://www.securityfocus.com/bid/41253
CVE ID: CVE-2010-4969 State: PUBLISHED Published: 2011-11-01T22:00:00Z Last Updated: 2024-09-16T16:53:06.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14241
CVE ID: CVE-2010-4970 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1704 - http://www.securityfocus.com/bid/41344 - http://securityreason.com/securityalert/8491 - http://www.exploit-db.com/exploits/14217 - http://packetstormsecurity.org/1007-exploits/wikiwebhelp-sql.txt
CVE ID: CVE-2010-4971 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:02:30.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8500 - http://secunia.com/advisories/40193 - http://packetstormsecurity.org/1006-exploits/joomlavideowhisper-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59376 - http://www.securityfocus.com/bid/40832
CVE ID: CVE-2010-4972 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40378 - http://www.securityfocus.com/bid/41215 - http://packetstormsecurity.org/1006-exploits/ypnincjokescript-sql.txt - http://www.exploit-db.com/exploits/14107 - http://securityreason.com/securityalert/8490 - http://www.vupen.com/english/advisories/2010/1647 - https://exchange.xforce.i
://securityreason.com/securityalert/8490 - http://www.vupen.com/english/advisories/2010/1647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59893
CVE ID: CVE-2010-4973 State: PUBLISHED Published: 2011-11-01T22:00:00Z Last Updated: 2024-09-16T23:51:31.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the f_search_keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40589
CVE ID: CVE-2010-4974 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40391 - http://www.exploit-db.com/exploits/14239 - http://osvdb.org/66013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60061 - http://securityreason.com/securityalert/8489 - http://packetstormsecurity.org/1007-exploits/bsautodealer-sql.txt - http://www.sec
curityreason.com/securityalert/8489 - http://packetstormsecurity.org/1007-exploits/bsautodealer-sql.txt - http://www.securityfocus.com/bid/41384
CVE ID: CVE-2010-4975 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Techjoomla SocialAds For JomSocial (com_socialads) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60067 - http://www.securityfocus.com/bid/41354
CVE ID: CVE-2010-4976 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter (aka Search Box field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40402 - http://www.securityfocus.com/bid/41203 - http://www.packetstormsecurity.com/1006-exploits/metinfo-xss.txt - http://securityreason.com/securityalert/8488 - http://osv
://www.packetstormsecurity.com/1006-exploits/metinfo-xss.txt - http://securityreason.com/securityalert/8488 - http://osvdb.org/65839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59853
CVE ID: CVE-2010-4977 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8495 - http://www.salvatorefresta.net/files/adv/Canteen%20Joomla%20Component%201.0%20Multiple%20Remote%20Vulnerabilities-04072010.txt - http://osvdb.org/66031 - http://www.securityfocus.com/archive/1/512170/100/0/threaded - https://exc
ities-04072010.txt - http://osvdb.org/66031 - http://www.securityfocus.com/archive/1/512170/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/60103 - http://secunia.com/advisories/40503 - http://packetstormsecurity.org/1007-exploits/joomlacanteen-lfisql.txt - http://www.securityfocus.com/bid/41358
CVE ID: CVE-2010-4978 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web script or HTML via the image_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59943 - http://securityreason.com/securityalert/8493 - http://www.packetstormsecurity.com/1006-exploits/candid-sql.txt
CVE ID: CVE-2010-4979 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the image_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41216 - http://securityreason.com/securityalert/8493 - http://www.packetstormsecurity.com/1006-exploits/candid-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59944
CVE ID: CVE-2010-4980 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8487 - http://www.salvatorefresta.net/files/adv/iScripts%20ReserveLogic%201.0%20SQL%20Injection%20Vulnerability-01072010.txt - http://www.exploit-db.com/exploits/14163 - http://www.securityfocus.com/archive/1/512137/100/0/threaded - http://secunia.com/advisories/4043
b.com/exploits/14163 - http://www.securityfocus.com/archive/1/512137/100/0/threaded - http://secunia.com/advisories/40435 - http://packetstormsecurity.org/1007-exploits/reservelogic-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59985
CVE ID: CVE-2010-4981 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13929 - http://www.securityfocus.com/bid/40978 - http://www.osvdb.org/65642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59558 - http://secunia.com/advisories/40289
CVE ID: CVE-2010-4982 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:02:30.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60269 - http://www.vupen.com/english/advisories/2010/1785 - http://www.exploit-db.com/exploits/14326
CVE ID: CVE-2010-4983 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8486 - http://www.securityfocus.com/archive/1/512141/100/0/threaded - http://www.exploit-db.com/exploits/14164 - http://www.salvatorefresta.net/files/adv/iScripts%20CyberMatch%201.0%20Blind%20SQL%20Injection%20Vulnerability-02072010.txt - http://www.securityfocus.com/bid/41300
ripts%20CyberMatch%201.0%20Blind%20SQL%20Injection%20Vulnerability-02072010.txt - http://www.securityfocus.com/bid/41300 - http://secunia.com/advisories/40434 - http://packetstormsecurity.org/1007-exploits/cybermatch-sql.txt
CVE ID: CVE-2010-4984 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60254 - http://www.securityfocus.com/bid/41542 - http://packetstormsecurity.org/1007-exploits/mykazaamnms-sqlxss.txt - http://securityreason.com/securityalert/8494 - http://www.exploit-db.com/exploits/14325
CVE ID: CVE-2010-4985 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:37.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41542 - http://packetstormsecurity.org/1007-exploits/mykazaamnms-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60253 - http://securityreason.com/securityalert/8494 - http://www.exploit-db.com/e
e.xforce.ibmcloud.com/vulnerabilities/60253 - http://securityreason.com/securityalert/8494 - http://www.exploit-db.com/exploits/14325
CVE ID: CVE-2010-4986 State: PUBLISHED Published: 2011-11-01T22:00:00Z Last Updated: 2024-09-17T03:27:49.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute arbitrary SQL commands via the doc_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14262 - http://www.securityfocus.com/bid/41431
CVE ID: CVE-2010-4987 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60198 - http://www.securityfocus.com/bid/41491 - http://www.exploit-db.com/exploits/14281
CVE ID: CVE-2010-4988 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:37.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPL[path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1687 - http://www.exploit-db.com/exploits/14186 - http://www.securityfocus.com/bid/41346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60057
CVE ID: CVE-2010-4989 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60065 - http://www.exploit-db.com/exploits/14192 - http://www.vupen.com/english/advisories/2010/1688
CVE ID: CVE-2010-4990 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:37.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60092 - http://www.vupen.com/english/advisories/2010/1702 - http://www.securityfocus.com/bid/41353
CVE ID: CVE-2010-4991 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60094 - http://www.securityfocus.com/bid/41345
CVE ID: CVE-2010-4992 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the type parameter to add.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41458 - http://securityreason.com/securityalert/8497 - http://packetstormsecurity.org/1007-exploits/joomlapaymentsplus-sql.txt - http://www.exploit-db.com/exploits/14265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60166
CVE ID: CVE-2010-4993 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8496 - http://packetstormsecurity.org/1007-exploits/joomlaeventcal-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60060 - http://www.securityfocus.com/bid/41369 - http://www.exploit-db.com/exploits/14187
CVE ID: CVE-2010-4994 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the detailed_results parameter to search_jobs.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14246 - http://www.securityfocus.com/bid/41403 - http://securityreason.com/securityalert/8498 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60121 - http://packetstormsecurity.org/1007-exploits/joomlajobspro-sql.txt
CVE ID: CVE-2010-4995 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offer_view action to index.php, a different vector than CVE-2007-4506. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1738 - http://www.exploit-db.com/exploits/14250 - http://securityreason.com/securityalert/8499 - http://www.securityfocus.com/bid/41408 - http://packetstormsecurity.org/10
ttp://securityreason.com/securityalert/8499 - http://www.securityfocus.com/bid/41408 - http://packetstormsecurity.org/1007-exploits/joomlaneorecruit-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60125
CVE ID: CVE-2010-4996 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41363 - http://www.vupen.com/english/advisories/2010/1697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60037 - http://www.exploit-db.com/exploits/14204
CVE ID: CVE-2010-4997 State: PUBLISHED Published: 2011-11-02T21:00:00Z Last Updated: 2024-09-16T20:41:34.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40360 - http://www.exploit-db.com/exploits/14084
CVE ID: CVE-2010-4998 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1444 - http://securityreason.com/securityalert/8503 - http://packetstormsecurity.org/1006-exploits/ardeacore-rfi.txt - http://www.securityfocus.c
son.com/securityalert/8503 - http://packetstormsecurity.org/1006-exploits/ardeacore-rfi.txt - http://www.securityfocus.com/bid/40811 - http://www.exploit-db.com/exploits/13832/ - http://secunia.com/advisories/40207
CVE ID: CVE-2010-4999 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60040 - http://www.securityfocus.com/bid/41370 - http://www.exploit-db.com/exploits/14205 - http://www.vupen.com/english/advisories/2010/1698
CVE ID: CVE-2010-5000 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter (aka Username field) in a do_login action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1006-exploits/mcloginsystem-sql.txt - http://securityreason.com/securityalert/8504 - http://www.securityfocus.com/bid/40633 - http://www.exploit-db.com/
txt - http://securityreason.com/securityalert/8504 - http://www.securityfocus.com/bid/40633 - http://www.exploit-db.com/exploits/13766/ - http://secunia.com/advisories/40122
CVE ID: CVE-2010-5001 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60043 - http://www.vupen.com/english/advisories/2010/1700 - http://www.exploit-db.com/exploits/14206