Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6911 State: PUBLISHED Published: 2009-08-06T22:00:00 Last Updated: 2024-08-07T11:49:02.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the authenticateUser function in includes/authentication.inc.php in BrewBlogger (BB) 2.1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginUsername parameter to includes/logincheck.inc.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6023 - http://www.securityfocus.com/bid/30133 - http://osvdb.org/46863 - https
es: - https://www.exploit-db.com/exploits/6023 - http://www.securityfocus.com/bid/30133 - http://osvdb.org/46863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43649 - http://secunia.com/advisories/30983
CVE ID: CVE-2008-6912 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T11:49:02.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32222 - http://www.vupen.com/english/advisories/2008/3069 - http://osvdb.org/49746 - https://www.exploit-db.com/exploits/7066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46502
CVE ID: CVE-2008-6913 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T11:49:02.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile edit action, then accessing the file via a direct request to jobseekers/logos/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3072 - https://www.exploit-db.com/exploits/7062 - http://www.securityfocus.com/bid/32225 - https://exchange.xforce.ibmclo
072 - https://www.exploit-db.com/exploits/7062 - http://www.securityfocus.com/bid/32225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46505
CVE ID: CVE-2008-6914 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T11:49:02.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile modification, then accessing a related file via a direct request to the file in companylogo/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46503 - https://www.exploit-db.com/exploits/7058 - http://www.securityfocus.com/bid/32224
CVE ID: CVE-2008-6915 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T11:49:02.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web script or HTML via the propid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7058 - http://www.securityfocus.com/bid/32224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46504
CVE ID: CVE-2008-6916 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T11:49:02.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly involving a trailing dot in the hostname. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46508 - https://www.exploit-db.com/exploits/7055 - http://www.securityfocus.com/bid/32203 - http://secunia.com/advisories/32635 - http://osvdb.org/49870
CVE ID: CVE-2008-6917 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T11:49:02.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username (user parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3064 - http://secunia.com/advisories/27638 - https://www.exploit-db.com/exploits/7071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46493 - http://www.securityfocus.com/bid/32220
CVE ID: CVE-2008-6918 State: PUBLISHED Published: 2009-08-10T16:00:00 Last Updated: 2024-08-07T11:49:02.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in galeria/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33057 - http://osvdb.org/51143 - https://www.exploit-db.com/exploits/7620 - http://secunia.com/advisories/33321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47649
CVE ID: CVE-2008-6919 State: PUBLISHED Published: 2009-08-10T16:00:00 Last Updated: 2024-08-07T11:49:02.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "fook!admin." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25221 - http://www.securityfocus.com/bid/33030 - https://www.exploit-db.com/exploits/7605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47608
CVE ID: CVE-2008-6920 State: PUBLISHED Published: 2009-08-10T16:00:00 Last Updated: 2024-08-07T11:49:02.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension during a regnew action, then accessing it via a direct request to the file in photoes/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47592 - http://www.vupen.com/english/advisories/2008/3508 - http://secunia.com/advisories/33268 - http://www.securityfocus.com/bid/33000 - http://osvdb.org
h/advisories/2008/3508 - http://secunia.com/advisories/33268 - http://www.securityfocus.com/bid/33000 - http://osvdb.org/50981 - https://www.exploit-db.com/exploits/7563
CVE ID: CVE-2008-6921 State: PUBLISHED Published: 2009-08-10T16:00:00 Last Updated: 2024-08-07T11:49:02.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photoes/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47593 - https://www.exploit-db.com/exploits/7562 - http://www.securityfocus.com/bid/32998 - http://secunia.com/advisories/33300
https://www.exploit-db.com/exploits/7562 - http://www.securityfocus.com/bid/32998 - http://secunia.com/advisories/33300 - http://osvdb.org/50996
CVE ID: CVE-2008-6922 State: PUBLISHED Published: 2009-08-10T18:00:00 Last Updated: 2024-08-07T11:49:02.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary code via a long argument to the (1) CreateUserPath, (2) Logout, (3) DeleteMailByUID, (4) MoveToInbox, (5) MoveToFolder, (6) DeleteMailEx, (7) GetMailDataEx, (8) SetReplySign, (9) SetForwardSign, and (10) SetReadSign methods, which are not properly handled by (a) the POP3 Class ActiveX control (CMailCom.POP3); or a long argument to the (11) AddAttach, (12) SetSubject, (13) SetBcc, (14) SetBody, (15) SetCc, (16)
(CMailCom.POP3); or a long argument to the (11) AddAttach, (12) SetSubject, (13) SetBcc, (14) SetBody, (15) SetCc, (16) SetFrom, (17) SetTo, and (18) SetFromUID methods, which are not properly handled by the Class ActiveX control (CMailCOM.SMTP), as demonstrated via the indexOfMail parameter to mwmail.asp. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6012 - http://osvdb.org/46750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43594 - http://www.securityfocus.com/bid/30098 - http://secunia.com/advisories/30940
CVE ID: CVE-2008-6923 State: PUBLISHED Published: 2009-08-10T18:00:00 Last Updated: 2024-08-07T11:49:02.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the content component (com_content) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52455 - https://www.exploit-db.com/exploits/6025
CVE ID: CVE-2008-6924 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T11:49:02.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email, (3) password, (4) password2, (5) security_code, and (6) register parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0807-exploits/esyndicat-xss.txt - http://www.osvdb.org/46908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43715 - http://secunia.com/advisories/31041 - h
w.osvdb.org/46908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43715 - http://secunia.com/advisories/31041 - http://www.securityfocus.com/bid/30178
CVE ID: CVE-2008-6925 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T11:49:02.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the "request logging" feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43864
CVE ID: CVE-2008-6926 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T11:49:02.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpath_show parameter in a GoAhead action. NOTE: this issue only crosses privilege boundaries when security settings such as disable_functions and safe_mode are active, since exploitation requires uploading of executable code to a home directory. Additional Analyst Notes: - CVE Program Container: Re
itation requires uploading of executable code to a home directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32016 - http://www.securityfocus.com/archive/1/498526 - http://www.securityfocus.com/archive/1/498529/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46252 - https://www.exploit-db.com/exploits/6897 - http://www.securityfocus.com/archive/1/498519 - http://www.netenberg.com/forum/index.php?topic=6832 - http://www.securityfocus.com/archive/1/498529 - http://www.securityfocus.com/archive/1/497964/100/0/threaded
CVE ID: CVE-2008-6927 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T11:49:02.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allow remote attackers to inject arbitrary web script or HTML via the (1) localapp, (2) updatedir, (3) scriptpath_show, (4) domain_show, (5) thispage, (6) thisapp, and (7) currentversion parameters in an Upgrade action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498526 - https://www.exploit-db.com/exploits/6897 - http://www.osvdb.org
ences: - http://www.securityfocus.com/archive/1/498526 - https://www.exploit-db.com/exploits/6897 - http://www.osvdb.org/49518 - http://www.securityfocus.com/archive/1/498519 - http://secunia.com/advisories/32423 - http://www.netenberg.com/forum/index.php?topic=6832 - http://www.securityfocus.com/archive/1/497964/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46253
CVE ID: CVE-2008-6928 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in classifieds1/yellow_images/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50294 - http://secunia.com/advisories/32626 - https://www.exploit-db.com/exploits/7084 - http://www.vupen.com/english/advisories/2008/3100
CVE ID: CVE-2008-6929 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in cars/cars_images/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50292 - http://secunia.com/advisories/32626 - https://www.exploit-db.com/exploits/7082 - http://www.vupen.com/english/advisories/2008/3098 - https://exchange.xforce.ibmcloud.com/vulnerabili
com/exploits/7082 - http://www.vupen.com/english/advisories/2008/3098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52445
CVE ID: CVE-2008-6930 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in realty/re_images/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52446 - http://www.vupen.com/english/advisories/2008/3101 - http://secunia.com/advisories/32626 - https://www.exploit-db.com/exploits
//www.vupen.com/english/advisories/2008/3101 - http://secunia.com/advisories/32626 - https://www.exploit-db.com/exploits/7085
CVE ID: CVE-2008-6931 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseeker_profile_images. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52447 - http://www.vupen.com/english/advisories/2008/3099 - http://secunia.com/advisories/32626 - https://www.exploi
ies/52447 - http://www.vupen.com/english/advisories/2008/3099 - http://secunia.com/advisories/32626 - https://www.exploit-db.com/exploits/7083 - http://osvdb.org/50295
CVE ID: CVE-2008-6932 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49844 - http://www.securityfocus.com/bid/32277 - http://www.vupen.com/english/advisories/2008/3139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46593 - https://www.exploit-db.com/exploits/71
visories/2008/3139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46593 - https://www.exploit-db.com/exploits/7101 - http://secunia.com/advisories/32666
CVE ID: CVE-2008-6933 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. (dot dot) in the list parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46635 - http://www.securityfocus.com/bid/32312 - https://www.exploit-db.com/exploits/7130
CVE ID: CVE-2008-6934 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is accessed. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32643 - http://www.vupen.com/english/advisories/2008/3095 -
ogram Container: References: - http://secunia.com/advisories/32643 - http://www.vupen.com/english/advisories/2008/3095 - http://www.sanusart.com/news.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/46526 - http://osvdb.org/49703 - https://www.exploit-db.com/exploits/7079 - http://www.securityfocus.com/bid/32240
CVE ID: CVE-2008-6935 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498389/100/0/threaded - http://secunia.com/advisories/32729 - https://www.exploit-db.com/exploits/7167 - https://www.exploit-db.com/exploits/7145 - http://osvdb.org/49888 - http://www.vupen.com/english/advisories/2008/3
167 - https://www.exploit-db.com/exploits/7145 - http://osvdb.org/49888 - http://www.vupen.com/english/advisories/2008/3191 - http://retrogod.altervista.org/exodus_uri.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46663 - http://www.securityfocus.com/bid/32330
CVE ID: CVE-2008-6936 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in a pres:// URI, a different vector than CVE-2008-6935. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32729 - https://www.exploit-db.com/exploits/7167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52630
CVE ID: CVE-2008-6937 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32729 - https://exchange.xforce.ibmcloud.com/vulnerabi
VE Program Container: References: - http://secunia.com/advisories/32729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52631
CVE ID: CVE-2008-6938 State: PUBLISHED Published: 2009-08-11T20:25:00 Last Updated: 2024-08-07T11:49:02.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi3, allows remote attackers to cause a denial of service (crash or hang) and obtain the full pathname of the server via a request to a file in the ISAPI directory that is not an executable DLL, which triggers the crash when the DLL load fails, as demonstrated using Isapi\users.txt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498771 - http://www.osvdb.
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498771 - http://www.osvdb.org/49999 - http://www.securityfocus.com/bid/32287 - http://www.securityfocus.com/archive/1/498575 - http://www.securityfocus.com/archive/1/498770 - http://www.securityfocus.com/archive/1/498602 - http://archives.neohapsis.com/archives/bugtraq/2008-11/0171.html - http://secunia.com/advisories/32696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46600 - http://www.osvdb.org/49998 - http://www.securityfocus.com/archive/1/498865 - https://www.exploit-db.com/exploits/7109
CVE ID: CVE-2008-6939 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T11:49:02.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32644 - http://www.securityfocus.com/bid/32283 - https://www.exploit-db.com/exploits/7107 - http://www.vupen.com/english/advisories/2008/3143 - https://exchange.xforce.ibmcloud.com/vulnerabil
.com/exploits/7107 - http://www.vupen.com/english/advisories/2008/3143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46586 - http://osvdb.org/49838