Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2182 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42188 - http://typo3.org/teams/security/security-bulletins/typo3-20080505-2/ - http://www.securityfocus.com/bid/29040
CVE ID: CVE-2008-2183 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30057 - http://www.securityfocus.com/bid/29033 - https://www.exploit-db.com/exploits/5535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42190
CVE ID: CVE-2008-2184 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) mois, (2) an, (3) jour, and (4) id parameters to index.php, and the (5) login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30057 - https://exchange.xforce.ibmc
Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42245 - http://www.securityfocus.com/bid/29043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42190
CVE ID: CVE-2008-2185 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to include arbitrary local files via directory traversal sequences in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42192 - http://www.securityfocus.com/bid/29043
CVE ID: CVE-2008-2186 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/44809 - http://www.securityfocus.com/archive/1/499458/100/0/threaded - http://marc.info/?l=bugtraq&m=120975560407192&w=2 - http://www.securityfocus.com/archive/1/499459/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42156 - http
ww.securityfocus.com/archive/1/499459/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42156 - https://www.exploit-db.com/exploits/7532 - http://www.bugreport.ir/index_59.htm - http://www.securityfocus.com/bid/29025 - http://secunia.com/advisories/30080
CVE ID: CVE-2008-2187 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbitrary web script or HTML via the level parameter in a redirect action, possibly involving interface/redirect.htm.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.mdsjack.bo.it/public/phpBB3/viewtopic.php?t=2049 - http://www.securityfocus.com/archive/1/492384/100/0/threaded - http://securityreason.com/securityalert/3872 - http://www.securityfocus.com/archive/1/491523/100/0/thread
0/0/threaded - http://securityreason.com/securityalert/3872 - http://www.securityfocus.com/archive/1/491523/100/0/threaded - http://www.securityfocus.com/bid/29002 - http://secunia.com/advisories/30049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42129
CVE ID: CVE-2008-2188 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) bookCopyright and (2) ver parameters to (a) footer.php, and the (3) bookName, (4) bookMetaTags, and (5) estiloCSS parameters to (b) header.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42147 - http://www.securityfocus.com/archive/1/491549/100/0/threaded - http://securityreason.com/securityalert/3873 - http:
47 - http://www.securityfocus.com/archive/1/491549/100/0/threaded - http://securityreason.com/securityalert/3873 - http://www.securityfocus.com/bid/29015
CVE ID: CVE-2008-2189 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42214 - http://www.securityfocus.com/archive/1/491608/100/0/threaded - http://secunia.com/advisories/30089 - http://securityreason.com/securityalert/3874 - http://advisories.echo.or.id/adv/adv92-K-159-2008.txt - http://www.securityfocus.com/bid/29053 - https://www.exp
/3874 - http://advisories.echo.or.id/adv/adv92-K-159-2008.txt - http://www.securityfocus.com/bid/29053 - https://www.exploit-db.com/exploits/5543
CVE ID: CVE-2008-2190 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8711 - http://secunia.com/advisories/30090 - http://www.securityfocus.com/bid/29052 - http://secunia.com/advisories/35147 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
w.securityfocus.com/bid/29052 - http://secunia.com/advisories/35147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42191 - http://www.vupen.com/english/advisories/2009/1366 - http://www.securityfocus.com/archive/1/491816/100/0/threaded - http://www.securityfocus.com/bid/35005 - https://www.exploit-db.com/exploits/5542 - http://www.securityfocus.com/archive/1/491607/100/0/threaded - http://advisories.echo.or.id/adv/adv91-K-159-2008.txt - http://securityreason.com/securityalert/3875
CVE ID: CVE-2008-2191 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a display_term action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42185 - http://www.securityfocus.com/archive/1/491606/100/0/threaded - http://securityreason.com/securityalert/3876 - http://www.securityfocus.com/bid/29046 - https://www.exploit-db.com/exploits/5541
CVE ID: CVE-2008-2192 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5532 - http://secunia.com/advisories/30059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42172 - http://www.securityfocus.com/bid/29028
CVE ID: CVE-2008-2193 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:59.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the site parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42517 - http://www.securityfocus.com/bid/29041 - https://www.exploit-db.com/exploits/5539 - http://www.vupen.com/english/advisories/2008/1430/references
CVE ID: CVE-2008-2194 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30084 - http://www.securityfocus.com/bid/29062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42224 - https://www.exploit-db.com/exploits/5550
CVE ID: CVE-2008-2195 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrary PHP code into logs/cp.php via the URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30084 - http://www.securityfocus.com/bid/29062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42225 - https://www.exploit-db.com/exploits/5550
CVE ID: CVE-2008-2196 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlogUserName parameter in an addBlogUser action, a different vector than CVE-2008-2178. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42228 - http://www.securityfocus.com/archive/1/491600/100/0/threaded - http://www.securityfocus.com/bid/29050 - http://securityreason.com/secu
urityfocus.com/archive/1/491600/100/0/threaded - http://www.securityfocus.com/bid/29050 - http://securityreason.com/securityalert/3879
CVE ID: CVE-2008-2197 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42220 - http://secunia.com/advisories/30085 - http://www.securityfocus.com/bid/29061 - https://www.exploit-db.com/exploits/5548
CVE ID: CVE-2008-2198 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29042 - http://www.securityfocus.com/archive/1/491616/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42186 - https://www.exploit-db.com/exploits/5544 - http://advisories.echo.or.i
hange.xforce.ibmcloud.com/vulnerabilities/42186 - https://www.exploit-db.com/exploits/5544 - http://advisories.echo.or.id/adv/adv93-K-159-2008.txt - http://securityreason.com/securityalert/3877
CVE ID: CVE-2008-2199 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29044 - http://secunia.com/advisories/30087 - http://securityreason.com/securityalert/3878 - http://www.securityfocus.com/archive/1/491609/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities
78 - http://www.securityfocus.com/archive/1/491609/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42187 - http://advisories.echo.or.id/adv/adv94-K-159-2008.txt - https://www.exploit-db.com/exploits/5545
CVE ID: CVE-2008-2200 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to admin/index.php in a blogs search action, the (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, and the (4) keywords parameter to index.php in a search action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42207 - http://secunia.com/advisories/30060 - http://www.securit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42207 - http://secunia.com/advisories/30060 - http://www.securityfocus.com/bid/29032 - http://securityreason.com/securityalert/3880 - http://www.securityfocus.com/archive/1/491588/100/0/threaded
CVE ID: CVE-2008-2201 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8, and (9) header9 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29032 - http://www.securityfocus.com/archive/1/491589/100/0/threaded - http://securityreason.com/securityalert/3881 - https://exchange.xf
w.securityfocus.com/archive/1/491589/100/0/threaded - http://securityreason.com/securityalert/3881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42206 - http://secunia.com/advisories/30067
CVE ID: CVE-2008-2202 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to upload/admin/index.php in a search action, the (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, and the (4) keywords parameter to index.php in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491599/100/0/threaded - http://secunia.com/advisories/30096 - http://securi
es: - http://www.securityfocus.com/archive/1/491599/100/0/threaded - http://secunia.com/advisories/30096 - http://securityreason.com/securityalert/3882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42203 - http://www.securityfocus.com/bid/29051
CVE ID: CVE-2008-2203 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42196 - http://www.securityfocus.com/archive/1/491586/100/0/threaded - http://securityreason.com/securityalert/3883
CVE ID: CVE-2008-2204 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:59.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Search 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) header7, (8) header8, and (9) header9 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29032 - http://www.securityfocus.com/archive/1/491586/100/0/threaded - http://securityreason.com/securityalert/3883
CVE ID: CVE-2008-2205 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album parameter in an album action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29032 - http://securityreason.com/securityalert/3884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42209 - http://secunia.com/advisories/30066 - http://www.securityfocus.com/archive/1/491590/100/0/threaded
CVE ID: CVE-2008-2206 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter in a search action to index.php, and the (2) msg_script parameter to admin/inc/footer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42210 - http://securityreason.com/securityalert/3884 - http://secunia.com/advisories/30066 - http://www.securityfocus.
s/42210 - http://securityreason.com/securityalert/3884 - http://secunia.com/advisories/30066 - http://www.securityfocus.com/archive/1/491590/100/0/threaded
CVE ID: CVE-2008-2207 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/index.php in Maian Gallery 2.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491583/100/0/threaded - http://securityreason.com/securityalert/3885 - http://www.securityfocus.com/bid/29032 - http://secunia.com/advisories/30070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42195
CVE ID: CVE-2008-2208 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42199 - http://www.securityfocus.com/bid/29032 - http://www.securityfocus.com/archive/1/491582/100/0/threaded - http://securityreason.com/securityalert/3887
CVE ID: CVE-2008-2209 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Greeting 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script and (2) msg_script2 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30069 - http://www.securityfocus.com/bid/29032 - http://www.securityfocus.com/archive/1/491582/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42200 - http://securityreason.com/securityalert/3887
CVE ID: CVE-2008-2210 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:58.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script, (2) msg_script2, and (3) msg_script3 parameters to admin/inc/footer.php; and the (4) msg_script2 parameter to admin/inc/header.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3888 - http://www.securityfocus.com/bid/29032 - http://secunia.com/advisories/30068 - http://www.securityfocus.com/archive/1/491587/100/
w.securityfocus.com/bid/29032 - http://secunia.com/advisories/30068 - http://www.securityfocus.com/archive/1/491587/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42205
CVE ID: CVE-2008-2211 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:59.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script2 and (2) msg_script3 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29032 - http://secunia.com/advisories/30071 - http://www.securityfocus.com/archive/1/491584/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42198 - http://securityreason.com/securityalert/3890
CVE ID: CVE-2008-2212 State: PUBLISHED Published: 2008-05-14T17:00:00 Last Updated: 2024-08-07T08:49:59.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminheader4, and unspecified other parameters to admin/inc/header.php; the (5) msg_script3 and unspecified other parameters to admin/inc/footer.php; and the (6) keywords parameter to index.php in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/4
search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491581/100/0/threaded - http://www.securityfocus.com/bid/29032 - http://securityreason.com/securityalert/3891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42194