Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6707 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via (1) the certificate installation utility, (2) unspecified scripts in the objects folder, (3) an "unnecessary default application," (4) unspecified scripts in the states folder, (5) an unspecified "default application" that lists server config
cation," (4) unspecified scripts in the states folder, (5) an unspecified "default application" that lists server configuration, and (6) "full system help." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1943/references - http://secunia.com/advisories/30751 - http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm - http://www.voipshield.com/research-details.php?id=86 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43384 - http://osvdb.org/46598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43393 - http://www.voipshield.com/research-details.php?id=88 - http://www.voipshield.com/research-details.php?id=90 - ht
43393 - http://www.voipshield.com/research-details.php?id=88 - http://www.voipshield.com/research-details.php?id=90 - http://www.voipshield.com/research-details.php?id=87 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43381 - http://www.securityfocus.com/bid/29939 - http://osvdb.org/46599 - http://osvdb.org/46600 - http://www.voipshield.com/research-details.php?id=91 - http://www.voipshield.com/research-details.php?id=89 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43389
CVE ID: CVE-2008-6708 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or restoring parameters." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1943/references - http://secunia.com/advisories/30751 - http://support.avaya.com/elmodocs2/security/A
sh/advisories/2008/1943/references - http://secunia.com/advisories/30751 - http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/43390 - http://www.voipshield.com/research-details.php?id=77 - http://www.securityfocus.com/bid/29939 - http://osvdb.org/46604
CVE ID: CVE-2008-6709 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "local data viewing or restoring parameters." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1943/references - http://secunia.com/advisories/30751 - http://support.avaya.com/elmodocs2/security/ASA-20
visories/2008/1943/references - http://secunia.com/advisories/30751 - http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm - http://www.osvdb.org/46603 - http://www.voipshield.com/research-details.php?id=78 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43380 - http://www.securityfocus.com/bid/29939
CVE ID: CVE-2008-6710 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1944/references - http://secunia.com/advisories/30799 - http://www.voipshield.com/research-details.php?id=79 - http://support
references - http://secunia.com/advisories/30799 - http://www.voipshield.com/research-details.php?id=79 - http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/43386 - http://www.securityfocus.com/bid/29939 - http://www.osvdb.org/46582
CVE ID: CVE-2008-6711 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated users to execute arbitrary commands via unknown vectors related to "viewing system logs." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1944/references - http://secunia.com/advisories/30799 - http://www.voipshield.com/research-details.php?id=80 - https://exchange.xforce.ibmcloud.com/vulnerabil
dvisories/30799 - http://www.voipshield.com/research-details.php?id=80 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43391 - http://support.avaya.com/elmodocs2/security/ASA-2008-270.htm - http://www.securityfocus.com/bid/29939 - http://www.osvdb.org/46581
CVE ID: CVE-2008-6712 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493385/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2008-06/0211.html - http://osvdb.org/46261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43126 - http://www.securityfocus.com/bid/2975
p://osvdb.org/46261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43126 - http://www.securityfocus.com/bid/29759 - http://secunia.com/advisories/30675 - http://aluigi.org/poc/dontcrysis.txt
CVE ID: CVE-2008-6713 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: World in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service (access violation and crash) via a zero-byte data block to TCP port 48000, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43289 - http://www.securityfocus.com/bid/29888 - http://www.securityfocus.com/archive/1/493596/100/0/threaded - http://aluigi.altervista.org/adv/wicboom-adv.txt - http://osvdb.org/46533 - http://www.vu
hive/1/493596/100/0/threaded - http://aluigi.altervista.org/adv/wicboom-adv.txt - http://osvdb.org/46533 - http://www.vupen.com/english/advisories/2008/1901/references - http://secunia.com/advisories/30817
CVE ID: CVE-2008-6714 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43114 - https://www.exploit-db.com/exploits/5818
CVE ID: CVE-2008-6715 State: PUBLISHED Published: 2009-04-13T15:00:00 Last Updated: 2024-08-07T11:42:00.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) homeadmin/adminhome.php and (2) homeadmin/signinform.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46398 - http://www.securityfocus.com/bid/32151
CVE ID: CVE-2008-6716 State: PUBLISHED Published: 2009-04-13T15:00:00 Last Updated: 2024-08-07T11:42:00.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows remote attackers to have an unspecified impact via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46399 - http://www.securityfocus.com/bid/32151
CVE ID: CVE-2008-6717 State: PUBLISHED Published: 2009-04-13T15:00:00 Last Updated: 2024-08-07T11:41:59.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) adminstart.php, (2) admineventtype.php, (3) admineventdetails.php, (4) admineventlist.php, (5) adminuserslist.php, (6) adminleaderslist.php, (7) admindatabase.php, and possibly (8) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://signup.uochm.com/features.php - https://www.exploit-db.com/e
nalyst Notes: - CVE Program Container: References: - http://signup.uochm.com/features.php - https://www.exploit-db.com/exploits/7032 - http://www.securityfocus.com/bid/32166
CVE ID: CVE-2008-6718 State: PUBLISHED Published: 2009-04-13T15:00:00 Last Updated: 2024-08-07T11:42:00.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: U&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) user_manual.php, (2) user_config.php, (3) user_kundnamn.php, (4) user_kundlista.php, (5) user_aktiva_kunder.php, (6) database.php, and possibly (7) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32166 - https://www.exploit-db.com/exploits/7033
CVE ID: CVE-2008-6719 State: PUBLISHED Published: 2009-04-13T15:00:00 Last Updated: 2024-08-07T11:42:00.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) start.php, (2) aktivitet.php, (3) prop_aktivitet.php, (4) kategorier.php, (5) konfig.php, (6) security.php, (7) manual.php, and possibly (8) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32166 - https://www.exploit-db.com/exploits/7034 - https://
am Container: References: - http://www.securityfocus.com/bid/32166 - https://www.exploit-db.com/exploits/7034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46441
CVE ID: CVE-2008-6720 State: PUBLISHED Published: 2009-04-13T15:00:00 Last Updated: 2024-08-07T11:42:00.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/adm_login.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka the admin field). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50392 - https://www.exploit-db.com/exploits/7024
CVE ID: CVE-2008-6721 State: PUBLISHED Published: 2009-04-14T16:00:00 Last Updated: 2024-08-07T11:41:59.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AJ Square AJ Article allows remote attackers to execute arbitrary SQL commands via the txtName parameter (aka the username field). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46297 - http://www.securityfocus.com/bid/32054
CVE ID: CVE-2008-6722 State: PUBLISHED Published: 2009-04-14T16:00:00 Last Updated: 2024-08-07T11:42:00.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim's web-browser process that continues to send the original and valid SSL sessionID, related to inability of Apache Tomcat to clear entries from its SSL cache. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49737 - http://secunia.com/advisories/32554 - http://www.securityfocus.com/bid/32121 - http://www.novell.com/support/vi
/49737 - http://secunia.com/advisories/32554 - http://www.securityfocus.com/bid/32121 - http://www.novell.com/support/viewContent.do?externalId=7001788 - http://www.vupen.com/english/advisories/2008/3012
CVE ID: CVE-2008-6723 State: PUBLISHED Published: 2009-04-14T16:00:00 Last Updated: 2024-08-07T11:41:59.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to Administrator. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46422 - http://secunia.com/advisories/32535 - http://www.securityfocus.com/bid/32174 - http://osvdb.org/49749 - https://www.exploit-db.com/exploits/7028
CVE ID: CVE-2008-6724 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T11:42:00.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.pl in Perl Nopaste 1.0 allows remote attackers to inject arbitrary web script or HTML via the language parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51010 - http://sourceforge.net/project/shownotes.php?group_id=237095&release_id=649688 - http://secunia.com/advisories/33251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47627 - http://www.securityfocus.co
/secunia.com/advisories/33251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47627 - http://www.securityfocus.com/bid/33036
CVE ID: CVE-2008-6725 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T11:41:59.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) index.php in a mythings page (mythings.php) and (2) the users page in admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7625 - http://www.cmscout.co.za/index.php?page=news&id=30 - http://www.securityfocus.com/bid/33068 - http://secunia.com/advisories/33375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47659 -
ocus.com/bid/33068 - http://secunia.com/advisories/33375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47659 - http://osvdb.org/51118
CVE ID: CVE-2008-6726 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T11:41:59.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bit parameter to (1) admin.php and (2) index.php, different vectors than CVE-2008-3415. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47660 - http://www.cmscout.co.za/index.php?page=news&id=30 - http://osvdb.org/51120 - http://
mcloud.com/vulnerabilities/47660 - http://www.cmscout.co.za/index.php?page=news&id=30 - http://osvdb.org/51120 - http://www.securityfocus.com/bid/33068 - http://secunia.com/advisories/33375 - http://osvdb.org/51119
CVE ID: CVE-2008-6727 State: PUBLISHED Published: 2009-04-20T14:06:00 Last Updated: 2024-08-07T11:41:59.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33329 - https://www.exploit-db.com/exploits/7607 - http://osvdb.org/51011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47607 - http://www.securityfocus.com/bid/33029
CVE ID: CVE-2008-6728 State: PUBLISHED Published: 2009-04-20T14:06:00 Last Updated: 2024-08-07T11:41:59.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499656/100/0/threaded - http://osvdb.org/52033 - http://marc.info/?l=bugtraq&m=123073887531700&w=2
CVE ID: CVE-2008-6729 State: PUBLISHED Published: 2009-04-20T14:06:00 Last Updated: 2024-08-07T11:41:59.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the (1) password or (2) email_address parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33309 - http://osvdb.org/50999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47585 - https://www.exploit-db.com/exploits/7557
CVE ID: CVE-2008-6730 State: PUBLISHED Published: 2009-04-20T14:06:00 Last Updated: 2024-08-07T11:42:00.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the checkuser parameter (aka username field), or (2) the checkpass parameter (aka password field), to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47644 - https://www.exploit-db.com/exploits/7616 - http://www.osvdb.org/53188 - http://secunia.co
ud.com/vulnerabilities/47644 - https://www.exploit-db.com/exploits/7616 - http://www.osvdb.org/53188 - http://secunia.com/advisories/33343
CVE ID: CVE-2008-6731 State: PUBLISHED Published: 2009-04-20T14:06:00 Last Updated: 2024-08-07T11:41:59.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the renamed file in linkphoto/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47614 - https://www.exploit-db.com/exploits/7600 - http://secunia.com/advisories/33343 - http://www.osvdb.org/531
lities/47614 - https://www.exploit-db.com/exploits/7600 - http://secunia.com/advisories/33343 - http://www.osvdb.org/53187
CVE ID: CVE-2008-6732 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:42:00.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29686 - http://secunia.com/advisories/30617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43030 - http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno20/tabid/1167/Default.aspx - http://www.osvdb.org/46322
CVE ID: CVE-2008-6733 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:41:59.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno18/tabid/1165/Default.aspx - http://www.securityfocus.com/bid/29686 - http://www.osvdb.org/46323 - http://secunia.com/advisories/30617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43026
CVE ID: CVE-2008-6734 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:41:59.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43373 - https://www.exploit-db.com/exploits/5940 - http://www.securityfocus.com/bid/29971 - https://www.exploit-db.com/exploits/5956
CVE ID: CVE-2008-6735 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:42:00.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the sLanguage cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43143 - https://www.exploit-db.com/exploits/5841 - http://www.securityfocus.com/bid/29774
CVE ID: CVE-2008-6736 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:41:59.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43039 - http
References: - http://www.securityfocus.com/bid/29662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43039 - http://www.securityfocus.com/archive/1/493278/100/0/threaded - http://osvdb.org/51506