Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3156 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with "use date tools" or "administer content types" privileges, to inject arbitrary web script or HTML via a "Content type label" field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52143 - http://secunia.com/advisories/36006 - http://drupal.org/node/53
s://exchange.xforce.ibmcloud.com/vulnerabilities/52143 - http://secunia.com/advisories/36006 - http://drupal.org/node/534332 - http://www.osvdb.org/56608 - http://www.securityfocus.com/bid/35790 - http://lampsecurity.org/drupal-date-xss-vulnerability - http://drupal.org/node/534636 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01312.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01339.html
CVE ID: CVE-2009-3157 State: PUBLISHED Published: 2009-09-10T18:00:00Z Last Updated: 2024-09-17T01:36:05.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inject arbitrary web script or HTML via the title of a content type. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35790 - http://lampsecurity.org/drupal-date-xss-vulnerability - http://www.osvdb.org/56611 - http://drupal.org/node/534336 - http://drupal.org/node/534652 - http://secunia.com/advisories/3
://www.osvdb.org/56611 - http://drupal.org/node/534336 - http://drupal.org/node/534652 - http://secunia.com/advisories/36012
CVE ID: CVE-2009-3158 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecified administrative actions via unknown vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52215 - http://www.exploit-db.com/exploits/9337 - http://www.vupen.com/english/advisories/2009/2129
CVE ID: CVE-2009-3159 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the rriDecompress function in IBM WebSphere MQ 7.0.0.0, 7.0.0.1, and 7.0.0.2 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1IC62450 - http://www.vupen.com/english/advisories/2009/2578 - http://www-01.ibm.com/support/docview.wss?uid=swg24024153 - http://www.securityfocus.com/bid/36310 - http://secunia.com/advisories/36647
CVE ID: CVE-2009-3160 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2578 - http://www-01.ibm.com/support/docview.wss?uid=swg24024153 - http://www.securityfocus.com/bid/36310 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259 - http:/
swg24024153 - http://www.securityfocus.com/bid/36310 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259 - http://secunia.com/advisories/36647
CVE ID: CVE-2009-3161 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM WebSphere MQ 7.0.0.1, 7.0.0.2, and 7.0.1.0 allows attackers to cause a denial of service (trap) or possibly have unspecified other impact via malformed data. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2578 - http://www-01.ibm.com/support/docview.wss?uid=swg24024153 - http://www.securityfocus.com/bid/36310 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC62164 - http://secunia.com/advisories/36647
CVE ID: CVE-2009-3162 State: PUBLISHED Published: 2009-09-10T18:00:00Z Last Updated: 2024-09-17T03:37:54.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0908-exploits/multiwebsite-xss.txt - http://secunia.com/advisories/36107
CVE ID: CVE-2009-3163 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T06:14:56.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to (1) silc_client_command_topic, (2) silc_client_command_kick, (3) silc_client_command_leave, and (4) silc_client_command_users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36193 - http://www.openwall.co
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36193 - http://www.openwall.com/lists/oss-security/2009/08/31/5 - http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10 - http://secunia.com/advisories/36614 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:235 - http://www.openwall.com/lists/oss-security/2009/09/03/5 - http://www.debian.org/security/2009/dsa-1879 - http://silcnet.org/general/news/news_toolkit.php - http://www.mandriva.com/security/advisories?name=MDVSA-2009:234
CVE ID: CVE-2009-3164 State: PUBLISHED Published: 2009-09-10T22:00:00 Last Updated: 2024-08-07T06:14:56.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_122, when a Cassini GigaSwift Ethernet Adapter (aka CE) interface is used, allows remote attackers to cause a denial of service (panic) via vectors involving jumbo frames. NOTE: this issue exists because of an incomplete fix for CVE-2009-2136. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020829.1-1 - http://www.vupen
Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020829.1-1 - http://www.vupen.com/english/advisories/2009/2556 - http://secunia.com/advisories/36616 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-265608-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-10-1
CVE ID: CVE-2009-3165 State: PUBLISHED Published: 2009-09-15T22:00:00Z Last Updated: 2024-09-16T17:43:12.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugzilla.org/security/3.0.8/ - http://www.securityfocus.com/bid/36373 - https://bugzilla.mozilla.org/show_bug.cgi?id=515191 - http://secunia.com/advisories/36718
CVE ID: CVE-2009-3166 State: PUBLISHED Published: 2009-09-15T22:00:00 Last Updated: 2024-08-07T06:14:56.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: token.cgi in Bugzilla 3.4rc1 through 3.4.1 places a password in a URL at the beginning of a login session that occurs immediately after a password reset, which allows context-dependent attackers to discover passwords by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugzilla.org/security/3.0.8/ - http://www.securitytracker.com/id?1022902 - https://bugzilla.mozilla.org/show_bug.cgi?id=508189 - http://www.sec
.0.8/ - http://www.securitytracker.com/id?1022902 - https://bugzilla.mozilla.org/show_bug.cgi?id=508189 - http://www.securityfocus.com/bid/36372 - http://secunia.com/advisories/36718
CVE ID: CVE-2009-3167 State: PUBLISHED Published: 2009-09-11T18:00:00 Last Updated: 2024-08-07T06:14:56.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9425 - http://secunia.com/advisories/33686 - http://www.securityfocus.com/bid/33483 - http://www.exploit-db.com/exploits/7895
CVE ID: CVE-2009-3168 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2025-01-21T16:10:57.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to (1) admin/reset.php and (2) admin/user_add.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/36198 - http://www.osvdb.org/57595 - http://secunia.com/advisories/36525 - http://www.exploit-db.com/exploits/9558 - http://www.vupen.com/english/advisories/200
p://secunia.com/advisories/36525 - http://www.exploit-db.com/exploits/9558 - http://www.vupen.com/english/advisories/2009/2497
CVE ID: CVE-2009-3169 State: PUBLISHED Published: 2009-09-11T20:00:00Z Last Updated: 2024-09-16T16:23:44.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2575 - http://secunia.com/advisories/36645 - http://www.securityfocus.com/bid/36307 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-015/index.html
CVE ID: CVE-2009-3170 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2024-08-07T06:14:56.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a (1) .pls or (2) .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35295 - http://www.vupen.com/english/advisories/2009/2530 - http://www.exploit-db.com/exploits/9561
CVE ID: CVE-2009-3171 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2024-08-07T06:14:56.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0909-exploits/gazellecms-xss.txt - http://www.exploit-db.com/exploits/9425 - http://www.vupen.com/english/advisories/2009/2541 - http://secunia.com/advisories/33686 - https://exchange.xforce.ibmcloud.co
//www.vupen.com/english/advisories/2009/2541 - http://secunia.com/advisories/33686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52415
CVE ID: CVE-2009-3172 State: PUBLISHED Published: 2009-09-11T20:00:00Z Last Updated: 2024-09-16T19:55:52.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A, Groupmax Server Set 03-00 through 06-52, Groupware Server Set 03-00 through 06-52, and Scheduler Server Set 03-00 through 06-52 has unknown impact and attack vectors related to invalid access rights. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36527 - http://www.securityfocus.com/bid/36184 - http://www.osvdb.org/57565 - http://www.vupen.com/english/advisories/2009/2480 - http://www.hitachi.
cus.com/bid/36184 - http://www.osvdb.org/57565 - http://www.vupen.com/english/advisories/2009/2480 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-012/index.html - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001930.html
CVE ID: CVE-2009-3173 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2024-08-07T06:14:56.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/add_album.php in The Rat CMS Alpha 2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53087 - http://www.securityfocus.com/bid/36295
CVE ID: CVE-2009-3174 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2024-08-07T06:14:56.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin_lib parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9600
CVE ID: CVE-2009-3175 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2024-08-07T06:14:56.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allow remote attackers to execute arbitrary SQL commands via the user_id parameter to (1) view.php, (2) photos.php, and (3) motm.php; and the (4) id parameter to forum_message.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9603
CVE ID: CVE-2009-3176 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2024-08-07T06:14:56.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ActiveX control in Novell iPrint Client 4.38 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.1, "Novell iPrint Client 4.38 ActiveX exploit." NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analy
ck author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36579 - http://www.osvdb.org/57922 - http://www.securityfocus.com/bid/36231 - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2009-3177 State: PUBLISHED Published: 2009-09-11T20:00:00Z Last Updated: 2024-09-16T16:43:59.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, (1) "Kaspersky Online Antivirus Scanner 7.0 exploit (Linux)" and (2) "Kaspersky Online Antivirus Scanner 7.0 exploit (Windows)." NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: -
s a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36570 - http://www.securitytracker.com/id?1022831 - http://intevydis.com/vd-list.shtml - http://www.securityfocus.com/bid/36243
CVE ID: CVE-2009-3178 State: PUBLISHED Published: 2009-09-11T20:00:00Z Last Updated: 2024-09-17T00:21:38.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a denial of service via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.18, "Symantec Altiris Deployment Solution 6.9 DoS." NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Con
earcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36587 - http://intevydis.com/vd-list.shtml - http://www.securityfocus.com/bid/36247
CVE ID: CVE-2009-3179 State: PUBLISHED Published: 2009-09-11T20:00:00Z Last Updated: 2024-09-16T18:14:28.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execute arbitrary code via unknown client-side attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.17, as identified by (1) "Symantec Altiris Deployment Solution 6.9 exploit, (2) "Symantec Altiris Deployment Solution 6.9 exploit (II)," and (3) "Symantec Altiris Deployment Solution 6.9 exploit (III)." NOTE: as of 20090909, this disclosure has no actionable information. However, becau
loyment Solution 6.9 exploit (III)." NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36587 - http://intevydis.com/vd-list.shtml - http://www.securityfocus.com/bid/36247
CVE ID: CVE-2009-3180 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2024-08-07T06:14:56.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9425 - http://secunia.com/advisories/33686
CVE ID: CVE-2009-3181 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2024-08-07T06:14:56.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the customizetemplate parameter in a direct request to admin/settemplate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9425 - http://secunia.com/advisories/33686
CVE ID: CVE-2009-3182 State: PUBLISHED Published: 2009-09-11T20:00:00 Last Updated: 2024-08-07T06:14:56.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in user/File/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9433 - http://secunia.com/advisories/33686
CVE ID: CVE-2009-3183 State: PUBLISHED Published: 2009-09-14T16:00:00 Last Updated: 2024-08-07T06:14:56.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv_124, allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-113718-04-1 - http://unsecurityresearch.blogspot.com/2009/02/advisories-published.html - http://osvdb.org/58110 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266348-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53188
CVE ID: CVE-2009-3184 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-17T04:29:15.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold Game Series allow remote attackers to execute arbitrary SQL commands via the (1) x and (2) y parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36488 - http://www.vupen.com/english/advisories/2009/2442 - http://packetstormsecurity.org/0908-exploits/egoldgame-sql.txt
CVE ID: CVE-2009-3185 State: PUBLISHED Published: 2009-09-15T21:00:00 Last Updated: 2024-08-07T06:14:56.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2432 - http://www.exploit-db.com/exploits/9529
CVE ID: CVE-2009-3186 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-17T00:50:34.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the (1) t parameter to forum.php, (2) profile_name parameter to profile.php, and (3) p parameter to view.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36168 - http://www.vupen.com/english/advisories/2009/2437 - http://secunia.com/advisories/36480 - http://packetstormsecurity.org/0908-exploits/videogirls-xss.txt
CVE ID: CVE-2009-3187 State: PUBLISHED Published: 2009-09-15T21:00:00Z Last Updated: 2024-09-16T19:41:36.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2438 - http://secunia.com/advisories/36481 - http://packetstormsecurity.org/0908-exploits/saa-xss.txt
CVE ID: CVE-2009-3188 State: PUBLISHED Published: 2009-09-15T21:00:00 Last Updated: 2024-08-07T06:14:56.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the file_save parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9533 - http://www.vupen.com/english/advisories/2009/2436 - http://secunia.com/advisories/36476