Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
gi?id=482914 - http://www.vupen.com/exploits/Novell_GroupWise_GWIA_SMTP_Command_Remote_Buffer_Overflow_PoC_Exploit_1393140.php - http://secunia.com/advisories/35177 - http://www.securityfocus.com/bid/35064 - http://osvdb.org/54644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50693 - http://www.securitytracker.com/id?1022276 - https://bugzilla.novell.com/show_bug.cgi?id=478892 - http://www.vupen.com/exploits/Novell_GroupWise_GWIA_Email_Address_Remote_Buffer_Overflow_Exploit_1393141.php - http://www.securityfocus.com/bid/35065 - http://www.securityfocus.com/archive/1/503724/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50692 - http://osvdb.org/54645 - http://w
1/503724/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50692 - http://osvdb.org/54645 - http://www.novell.com/support/viewContent.do?externalId=7003272&sliceId=1 - http://www.novell.com/support/viewContent.do?externalId=7003273&sliceId=1
CVE ID: CVE-2009-1637 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:34.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54280 - http://www.securityfocus.com/bid/34872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50379 - https://www.exploit-db.com/exploits/8638 - http://secunia.com/advisories/35030
CVE ID: CVE-2009-1638 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:35.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54278 - http://secunia.com/advisories/34996 - http://www.securityfocus.com/bid/34865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50370 - https://www.exploit-db.com/exploits/8627
CVE ID: CVE-2009-1639 State: PUBLISHED Published: 2009-05-15T15:00:00Z Last Updated: 2024-09-17T00:21:00.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file. Additional Analyst Notes: - CVE Program Container: References: - http://www.insight-tech.org/xploits/KernelrecoveryforNovell%28Traditionalvolumes%29v.4.03CodeExecutionandDoS.py - http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Novell-Traditional-volumes-v-4-03-Code-Execution-and-DoS - http://www.securityfocus.com/bid/34846 - http://secunia.com/advis
ll-Traditional-volumes-v-4-03-Code-Execution-and-DoS - http://www.securityfocus.com/bid/34846 - http://secunia.com/advisories/34798
CVE ID: CVE-2009-1640 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:35.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34846 - http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Macintosh-v-4-04-Buffer-Overflow - http://www.insight-tech.org/xploits/KernelrecoveryforMacintoshv.4.04BufferOverflow.py - http://osvdb.org/54224 - https://exchange.xforce.ibmcloud.com/vulnerabil
elrecoveryforMacintoshv.4.04BufferOverflow.py - http://osvdb.org/54224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50345 - http://secunia.com/advisories/34860
CVE ID: CVE-2009-1641 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:35.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34864 - http://www.securityfocus.com/bid/34860 - https://www.exploit-db.com/exploits/8632 - https://www.exploit-db.com/exploits/8631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50375
CVE ID: CVE-2009-1642 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:35.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. NOTE: the latter was also subsequently reported in "prior to 3.1.3.7." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34864 - https://www.exploit-db.com/exploits/8630 - http://www.securityfocus.com/bid/34860 - https://exchange.xforce.
bid/34864 - https://www.exploit-db.com/exploits/8630 - http://www.securityfocus.com/bid/34860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50374 - https://packetstormsecurity.com/files/144558/ASX-To-MP3-Converter-Stack-Overflow.html - https://www.exploit-db.com/exploits/8629
CVE ID: CVE-2009-1643 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:35.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a crafted .m3u file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50398 - http://www.securityfocus.com/bid/34863
CVE ID: CVE-2009-1644 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:35.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via a crafted .pla file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8640 - http://www.securityfocus.com/bid/34861 - https://www.exploit-db.com/exploits/8625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50369
CVE ID: CVE-2009-1645 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:35.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a long rtsp URL in a .ram file and (2) a long string in the HREF attribute of a REF element in a .asx file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34864 - http://www.securityfocus.com/bid/34860 - https://www.exploit-db.com/exploits/8633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50376 - https://www.exploit-db.com/exploi
it-db.com/exploits/8633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50376 - https://www.exploit-db.com/exploits/8634
CVE ID: CVE-2009-1646 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:35.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a .ram file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34860 - https://www.exploit-db.com/exploits/8628
CVE ID: CVE-2009-1647 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T05:20:35.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application crash) via a long string in a +OK response. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1170 - http://www.securityfocus.com/bid/34699 - https://www.exploit-db.com/exploits/8526
CVE ID: CVE-2009-1648 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:20:35.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
CVE ID: CVE-2009-1649 State: PUBLISHED Published: 2009-05-16T18:00:00 Last Updated: 2024-08-07T05:20:35.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the arch parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34968 - https://www.exploit-db.com/exploits/8680 - http://secunia.com/advisories/35059
CVE ID: CVE-2009-1650 State: PUBLISHED Published: 2009-05-16T18:00:00 Last Updated: 2024-08-07T05:20:35.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35049 - http://www.securityfocus.com/archive/1/503493 - http://www.securityfocus.com/bid/34967 - https://www.exploit-db.com/exploits/8679
CVE ID: CVE-2009-1651 State: PUBLISHED Published: 2009-05-16T18:00:00 Last Updated: 2024-08-07T05:20:35.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35071 - https://www.exploit-db.com/exploits/8689 - http://osvdb.org/54494 - http://www.securityfocus.com/bid/34976
CVE ID: CVE-2009-1652 State: PUBLISHED Published: 2009-05-16T18:00:00 Last Updated: 2024-08-07T05:20:35.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35071 - https://www.exploit-db.com/exploits/8689 - http://osvdb.org/54493 - http://www.securityfocus.com/bid/34976
CVE ID: CVE-2009-1653 State: PUBLISHED Published: 2009-05-16T18:00:00 Last Updated: 2024-08-07T05:20:35.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the script parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50506 - http://www.vupen.com/english/advisories/2009/1304 - https://www.exploit-db.com/exploits/8667
CVE ID: CVE-2009-1654 State: PUBLISHED Published: 2009-05-16T18:00:00 Last Updated: 2024-08-07T05:20:35.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote attackers to inject arbitrary web script or HTML via the questionid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34975 - https://www.exploit-db.com/exploits/8690 - http://osvdb.org/54501 - http://secunia.com/advisories/35067
CVE ID: CVE-2009-1655 State: PUBLISHED Published: 2009-05-16T18:00:00 Last Updated: 2024-08-07T05:20:35.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the (1) user name (userid parameter) and (2) password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34975 - https://www.exploit-db.com/exploits/8690 - http://secunia.com/advisories/35067 - http://osvdb.org/54502
CVE ID: CVE-2009-1656 State: PUBLISHED Published: 2009-05-16T18:00:00 Last Updated: 2024-08-07T05:20:35.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdf - http://www.vupen.com/english/advisories/2009/1328 - http://www.securitytracker.com/id?1022238 - http://osvdb.org/54457 - https://exchange
com/english/advisories/2009/1328 - http://www.securitytracker.com/id?1022238 - http://osvdb.org/54457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50558 - http://secunia.com/advisories/35101 - http://www.securityfocus.com/bid/34984
CVE ID: CVE-2009-1657 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T05:20:35.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50417 - http://sourceforge.net/project/shownotes.php?release_id=681352&group_id=160495 - http://osvdb.org/54369 - http://secunia.com/advisories/35053 - http://www.securityfocus.com/bid/34899
CVE ID: CVE-2009-1658 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T05:20:35.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user (username) and (2) password parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34886 - http://osvdb.org/54372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50399 - https://www.exploit-db.com/exploits/8643 - htt
.org/54372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50399 - https://www.exploit-db.com/exploits/8643 - http://secunia.com/advisories/35033
CVE ID: CVE-2009-1659 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T05:20:35.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50305 - http://www.vupen.com/english/advisories/2009/1248 - https://www.exploit-
nge.xforce.ibmcloud.com/vulnerabilities/50305 - http://www.vupen.com/english/advisories/2009/1248 - https://www.exploit-db.com/exploits/8603
CVE ID: CVE-2009-1660 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T05:20:35.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file entry in a .vpl file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50403 - https://www.exploit-db.com/exploits/8644 - http://www.securityfocus.com/bid/34877
CVE ID: CVE-2009-1661 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T05:20:35.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=261386&release_id=680474 - http://www.securityfocus.com/archive/1/503422/100/0/threaded - http://secunia.com/advisories/35051 - http://www.securityfocus.com/bid/34907 - https://www.exploit-db.com/exploits/8655 - http:/
ecunia.com/advisories/35051 - http://www.securityfocus.com/bid/34907 - https://www.exploit-db.com/exploits/8655 - http://www.vupen.com/english/advisories/2009/1288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50428
CVE ID: CVE-2009-1662 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T05:20:35.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) Password fields, as reachable from admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8642 - http://www.securityfocus.com/bid/34885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50407
CVE ID: CVE-2009-1663 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T05:20:35.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/[username] directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8690
CVE ID: CVE-2009-1664 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T05:20:35.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8690
CVE ID: CVE-2009-1665 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T05:20:35.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50627 - http://osvdb.org/54586
CVE ID: CVE-2009-1666 State: PUBLISHED Published: 2009-05-18T18:00:00Z Last Updated: 2024-09-17T02:41:11.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary code via the ReturnConnection method in (1) CM_ADOConnection.dll, (2) CM_AddressInfoDBC.dll, and (3) CM_RecordingLocationDBC.dll, related to improper dereferencing. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35046 - http://www.securityfocus.com/
nalyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35046 - http://www.securityfocus.com/bid/34912
CVE ID: CVE-2009-1667 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u file, a different vector than CVE-2009-5137. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8661 - http://www.exploit-db.com/exploits/8660 - http://www.exploit-db.com/exploits/8662
CVE ID: CVE-2009-1668 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abort) command without an active file transfer. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8650 - http://www.securityfocus.com/bid/34901 - http://www.securitytracker.com/id?1022202
CVE ID: CVE-2009-1669 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the equation attribute of the math function. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50457 - http://secunia.com/advisories/35072 - http://www.ubuntu.com/usn/usn-791-3 - http://osvdb.org/54380 - https://www
50457 - http://secunia.com/advisories/35072 - http://www.ubuntu.com/usn/usn-791-3 - http://osvdb.org/54380 - https://www.exploit-db.com/exploits/8659 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01287.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01283.html - http://secunia.com/advisories/35219 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01274.html - http://www.securityfocus.com/bid/34918
CVE ID: CVE-2009-1670 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34866 - https://www.exploit-db.com/exploits/8626 - http://secunia.com/advisories/34966 - http://osvdb.org/54282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50371