Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5144 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32411 - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5145 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu.##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46715 - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5146 State: PUBLISHED Published: 2008-11-18T15:00:00Z Last Updated: 2024-09-17T04:10:08.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5147 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46713 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://www.securityfocus.com/bid/32418 - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5148 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32875 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00475.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00431.html - http://secunia.com/advisories/32806 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/repo
- http://secunia.com/advisories/32806 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5149 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://www.securityfocus.com/bid/32401 - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5150 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46711 - http://www.securityfocus.com/bid/32403 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5151 State: PUBLISHED Published: 2008-11-18T15:00:00Z Last Updated: 2024-09-17T01:10:42.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: test_parser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/err.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5152 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46709 - http://www.securityfocus.com/bid/32399 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5153 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, or (3) /tmp/spell-check-after temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32402 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt - http://secunia.com/advisories/33955 - http://www.debian.org/security/2009/dsa-1724 - https://exchange.xforce.ibmc
.txt - http://secunia.com/advisories/33955 - http://www.debian.org/security/2009/dsa-1724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46708
CVE ID: CVE-2008-5154 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32818 - http://www.securityfocus.com/bid/32373 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/46707
CVE ID: CVE-2008-5155 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/header.##### or (2) /tmp/body.##### temporary file, or append data to arbitrary files via a symlink attack on the (3) /tmp/sms.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt - http://www.securityfocus.com/bid/32405
CVE ID: CVE-2008-5156 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: si_mkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/*.inetd.conf or (2) /tmp/pxe.conf.*.tmp temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32370 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5157 State: PUBLISHED Published: 2008-11-18T15:00:00 Last Updated: 2024-08-07T10:40:17.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/makefile.tau.*.##### or (2) /tmp/makefile.tau*.##### temporary file, related to the (a) tau_cxx, (b) tau_f90, and (c) tau_cc scripts. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506348 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt - http://secunia.com/advisories/32821 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
http://uvw.ru/report.sid.txt - http://secunia.com/advisories/32821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46704 - http://www.securityfocus.com/bid/32404
CVE ID: CVE-2008-5158 State: PUBLISHED Published: 2008-11-18T21:00:00 Last Updated: 2024-08-07T10:40:17.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage." Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/adv/wincomalpd-adv.txt - http://www.securityfocus.com/archive/1/487507/100/200/threaded - http://www.vupen.com/english/advisories/2008/0410 - http://secunia.com/advisories/28763 - http://www.securityfocus.com/bid/27614 - http://securityreason.com/securit
/0410 - http://secunia.com/advisories/28763 - http://www.securityfocus.com/bid/27614 - http://securityreason.com/securityalert/4610 - http://aluigi.org/poc/wincomalpd.zip
CVE ID: CVE-2008-5159 State: PUBLISHED Published: 2008-11-18T21:00:00 Last Updated: 2024-08-07T10:40:17.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/adv/wincomalpd-adv.txt - http://www.securityfocus.com/archive/1/487507/100/200/threaded - http://www.vupen.com/english/advisories/2008/0410 - http://secunia.com/advisories/28763 - http://www.sec
/200/threaded - http://www.vupen.com/english/advisories/2008/0410 - http://secunia.com/advisories/28763 - http://www.securityfocus.com/bid/27614 - http://securityreason.com/securityalert/4610 - http://aluigi.org/poc/wincomalpd.zip
CVE ID: CVE-2008-5160 State: PUBLISHED Published: 2008-11-18T21:00:00 Last Updated: 2024-08-07T10:40:17.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a "204 No Content error." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5184 - http://www.securityfocus.com/bid/27981 - http://securityreason.com/securityalert/4609
CVE ID: CVE-2008-5161 State: PUBLISHED Published: 2008-11-19T17:00:00 Last Updated: 2024-08-07T10:40:17.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover
hen using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openssh.org/txt/cbc.adv - http://sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1 - http://www.securityfocus.com/bid/32319 - http://secunia.com/advisories/33121 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667 - http://osvdb.org/49872 - http://secunia.com/advisories/33308 - http://rhn.redhat.com/errata/RHSA-2009-1287.html - http://www.cpni.gov.uk/Docs/Vu
http://secunia.com/advisories/33308 - http://rhn.redhat.com/errata/RHSA-2009-1287.html - http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt - http://www.securitytracker.com/id?1021382 - https://kc.mcafee.com/corporate/index?page=content&id=SB10163 - http://osvdb.org/50036 - http://secunia.com/advisories/32833 - http://secunia.com/advisories/36558 - http://osvdb.org/50035 - http://www.ssh.com/company/news/article/953/ - http://www.securitytracker.com/id?1021235 - http://secunia.com/advisories/34857 - http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm - http://support.attachmate.com/techdocs/2398.html - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html - http://w
p://support.attachmate.com/techdocs/2398.html - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html - http://www.vupen.com/english/advisories/2008/3173 - http://www.securityfocus.com/archive/1/498579/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46620 - http://secunia.com/advisories/32740 - http://www.vupen.com/english/advisories/2009/1135 - http://secunia.com/advisories/32760 - http://www.vupen.com/english/advisories/2009/3184 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.securitytracker.com/id?1021236 - https://kc.mcafee.com/corporate/index?page=content&id=SB10106 - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - http:/
tps://kc.mcafee.com/corporate/index?page=content&id=SB10106 - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - http://isc.sans.org/diary.html?storyid=5366 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - http://www.vupen.com/english/advisories/2008/3409 - http://www.vupen.com/english/advisories/2008/3172 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11279 - http://www.securityfocus.com/archive/1/498558/100/0/threaded - http://support.apple.com/kb/HT3937 - http://www.kb.cert.org/vuls/id/958563
CVE ID: CVE-2008-5162 State: PUBLISHED Published: 2008-11-26T23:00:00 Last Updated: 2024-08-07T10:40:17.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function's return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32871 - http://security.freebsd.org/advisories/FreeBSD-SA-08:11.arc4random.as
eferences: - http://secunia.com/advisories/32871 - http://security.freebsd.org/advisories/FreeBSD-SA-08:11.arc4random.asc - http://securitytracker.com/id?1021276 - http://osvdb.org/50137 - http://www.securityfocus.com/bid/32447
CVE ID: CVE-2008-5163 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewarticle.php and (2) viewarticle2.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493684/100/0/threaded - http://www.securityfocus.com/bid/29959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43377 - http://securityreason.com/securityalert/4612
CVE ID: CVE-2008-5164 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) viewarticle.php and (b) viewarticle2.php and the (2) PATH_INFO to viewarticle.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43378 - http://www.securityfocus.com/archive/1/493684/100/0/threaded - http://www.securityfocus.com/bid/29959 - http://securityreason.com/securityalert/4612
CVE ID: CVE-2008-5165 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to (1) index.php, (2) open.php, (3) open_raw.php, and (4) newticket.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitrustgroup.com/advisories/web-application-security-eticket2.html - http://secunia.com/advisories/30877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43398 - http://www.eticketsupport.com/announcements/170_is_in_the_building-t91.0.html
orce.ibmcloud.com/vulnerabilities/43398 - http://www.eticketsupport.com/announcements/170_is_in_the_building-t91.0.html - http://www.securitytracker.com/id?1020379 - http://www.securityfocus.com/bid/29973
CVE ID: CVE-2008-5166 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL commands via the riddleid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5946 - http://securityreason.com/securityalert/4615 - http://secunia.com/advisories/30862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43399 - http://www.securityfocus.com/bid/29966
CVE ID: CVE-2008-5167 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gConf[dir][layouts] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6282 - http://www.securityfocus.com/bid/29974 - https://www.exploit-db.com/exploits/5955 - http://securityreason.com/securityalert/4616 - http://secunia.com/advisories/30855
CVE ID: CVE-2008-5168 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL commands via the tipid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30861 - http://www.securityfocus.com/bid/29967 - http://securityreason.com/securityalert/4614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43401 - https://www.exploit-db.com/exploits/5947
CVE ID: CVE-2008-5169 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arbitrary SQL commands via the drinkid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5949 - http://www.securityfocus.com/bid/29969 - http://secunia.com/advisories/30859 - http://securityreason.com/securityalert/4617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43397
CVE ID: CVE-2008-5170 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in item.php in Cheats Complete Website 1.1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29970 - http://secunia.com/advisories/30838 - https://www.exploit-db.com/exploits/5950 - http://securityreason.com/securityalert/4618
CVE ID: CVE-2008-5171 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) DB, (2) lang, and (3) skin parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5952 - http://www.securityfocus.com/bid/29983
CVE ID: CVE-2008-5172 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Yazd Forum Software 3.x allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to (a) search.jsp, and the (2) msg parameter to (b) error.jsp and (c) userAccount.jsp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29980 - http://secunia.com/advisories/30760 - https://exchange.xfor
iner: References: - http://www.securityfocus.com/bid/29980 - http://secunia.com/advisories/30760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46744
CVE ID: CVE-2008-5173 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in testMaker before 3.0p16 allows remote authenticated users to execute arbitrary PHP code via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43403 - http://sourceforge.net/project/shownotes.php?release_id=609679 - http://secunia.com/advisories/30870 - http://www.securityfocus.com/bid/29978
CVE ID: CVE-2008-5174 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in joke.php in Jokes Complete Website 2.1.3 allows remote attackers to execute arbitrary SQL commands via the jokeid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4613 - http://www.securityfocus.com/bid/29968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43425 - https://www.exploit-db.com/exploits/5948 - http://secunia.com/advisories/30860
CVE ID: CVE-2008-5175 State: PUBLISHED Published: 2008-11-19T18:00:00 Last Updated: 2024-08-07T10:40:17.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43400 - http://vuln.sg/aceftp3803-en.html - http://www.securityfocus.com/bid/29989 - http://www.vupen.com/english/advisories/2008/1954/references - http://secunia.
http://www.securityfocus.com/bid/29989 - http://www.vupen.com/english/advisories/2008/1954/references - http://secunia.com/advisories/30792