Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4717 State: PUBLISHED Published: 2008-10-23T18:00:00 Last Updated: 2024-08-07T10:24:21.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45508 - http://securityreason.com/securityalert/4479 - http://secunia.com/advisories/32020 - http://www.securityfocus.com/bid/31449
CVE ID: CVE-2008-4718 State: PUBLISHED Published: 2008-10-23T18:00:00 Last Updated: 2024-08-07T10:24:21.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the help_file parameter, a different vector than CVE-2006-2156. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45495 - https://www.exploit-db.com/exploits/6607 - http://securityreason.com/securityalert/4499
CVE ID: CVE-2008-4719 State: PUBLISHED Published: 2008-10-23T18:00:00 Last Updated: 2024-08-07T10:24:21.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter, a different vector than CVE-2008-4329. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31423 - https://www.exploit-db.com/exploits/6585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45482 - http://securityreason.com/securityalert/4478
CVE ID: CVE-2008-4720 State: PUBLISHED Published: 2008-10-23T18:00:00 Last Updated: 2024-08-07T10:24:21.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) page/forums/bottom.php and (2) page/forums/category.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31433 - http://secunia.com/advisories/32057 - http://securityreason.com/securityalert/4503 - https://www.exploit-db.com/exploits/6587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45481
CVE ID: CVE-2008-4721 State: PUBLISHED Published: 2008-10-23T18:00:00 Last Updated: 2024-08-07T10:24:21.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Jabbers Post Comment 3.0 allows remote attackers to bypass authentication and gain administrative access by setting the PostCommentsAdmin cookie to "logged." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27991 - https://www.exploit-db.com/exploits/6625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45503 - http://securityreason.com/securityalert/4502
CVE ID: CVE-2008-4722 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T10:24:20.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the service processor (SP) and cause a denial of service (shutdown or reboot), or (2) access the host operating system and have an unspecified impact, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46023 - http://www.securitytracker.com/id?10210
isories/2008/2890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46023 - http://www.securitytracker.com/id?1021094 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243486-1 - http://secunia.com/advisories/32298 - http://www.securityfocus.com/bid/31861
CVE ID: CVE-2008-4723 State: PUBLISHED Published: 2008-10-23T21:00:00Z Last Updated: 2024-09-16T20:57:31.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a (1) JPG, (2) PDF, or (3) TXT file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31855
CVE ID: CVE-2008-4724 State: PUBLISHED Published: 2008-10-23T21:00:00Z Last Updated: 2024-09-17T04:29:35.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a (1) JPG, (2) PDF, or (3) TXT file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31855
CVE ID: CVE-2008-4725 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T10:24:21.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696. NOTE: some of these issues were addressed before 9.60. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2873 - http://www.openwall.com/lists/oss-security/2008/10/21/6 - http://www.opera.com
.vupen.com/english/advisories/2008/2873 - http://www.openwall.com/lists/oss-security/2008/10/21/6 - http://www.opera.com/docs/changelogs/freebsd/961/ - http://secunia.com/advisories/32299 - http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf - http://www.openwall.com/lists/oss-security/2008/10/22/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46231 - http://www.securityfocus.com/bid/31869 - https://www.exploit-db.com/exploits/6801 - http://www.opera.com/docs/changelogs/mac/961/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/46003 - http://www.opera.com/docs/changelogs/solaris/961/ - http://www.opera.com/support/search/view/90
/vulnerabilities/46003 - http://www.opera.com/docs/changelogs/solaris/961/ - http://www.opera.com/support/search/view/903/ - http://www.opera.com/docs/changelogs/linux/961/ - http://securityreason.com/securityalert/4504 - http://www.securityfocus.com/archive/1/497646/100/0/threaded - http://www.opera.com/docs/changelogs/windows/961/
CVE ID: CVE-2008-4726 State: PUBLISHED Published: 2008-10-23T22:00:00 Last Updated: 2024-08-07T10:24:20.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a long string to the (1) open (aka SSH_FXP_OPEN), (2) unlink, (3) opendir, and other unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32375 - https://www.exploit-db.com/exploits/6804 - http://www.securityfocus.com/bid/31879 - http://www.vupen.com/english/advisories/2008/2895 - http://securityreason.com/securityalert/4498 - htt
s.com/bid/31879 - http://www.vupen.com/english/advisories/2008/2895 - http://securityreason.com/securityalert/4498 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46038 - http://www.securityfocus.com/archive/1/497745/100/0/threaded
CVE ID: CVE-2008-4727 State: PUBLISHED Published: 2008-10-23T22:00:00 Last Updated: 2024-08-07T10:24:20.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter. NOTE: this might be resultant from a CSRF vulnerability, but there are insufficient details to be sure. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41077 - http://securityreason.com/securityalert/4494 - http://downloads.securityfocus.com/vulnerabilities/exploits/27490.html
- http://securityreason.com/securityalert/4494 - http://downloads.securityfocus.com/vulnerabilities/exploits/27490.html - http://osvdb.org/41078 - http://www.securityfocus.com/bid/27490 - http://www.securityfocus.com/archive/1/487250/100/200/threaded
CVE ID: CVE-2008-4728 State: PUBLISHED Published: 2008-10-23T22:00:00 Last Updated: 2024-08-07T10:24:21.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders. Additional Analyst Notes: - CVE Program Container: R
execution by specifying executable file values to Startup folders. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6773 - http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html - https://www.exploit-db.com/exploits/6774 - http://www.securityfocus.com/bid/31799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45961 - https://www.exploit-db.com/exploits/6776 - http://www.vupen.com/english/advisories/2008/2857 - http://secunia.com/advisories/32337 - http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html - http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html
CVE ID: CVE-2008-4729 State: PUBLISHED Published: 2008-10-23T22:00:00 Last Updated: 2024-08-07T10:24:21.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32319 - http://securityreason.com/securityalert/4505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45941 - http://www.securityfocus.com/bid/31783
ecurityalert/4505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45941 - http://www.securityfocus.com/bid/31783 - https://www.exploit-db.com/exploits/6761
CVE ID: CVE-2008-4730 State: PUBLISHED Published: 2008-10-24T10:00:00 Last Updated: 2024-08-07T10:24:21.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openid_trust_root parameter and an inconsistent openid_return_to parameter, which is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4484 - http://www.securityfocus.com/archive/1/496930/100/0/threaded
CVE ID: CVE-2008-4731 State: PUBLISHED Published: 2008-10-24T10:00:00 Last Updated: 2024-08-07T10:24:21.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/yacy/?branch_id=51198&release_id=286006 - http://www.securityfocus.com/bid/31657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45769 - http://secunia.com/advisories/32159
CVE ID: CVE-2008-4732 State: PUBLISHED Published: 2008-10-24T10:00:00 Last Updated: 2024-08-07T10:24:21.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32253 - https://www.exploit-db.com/exploits/6747 - http://www.securityfocus.com/archive/1/497313/100/0/threaded - http://www.securityfocus.com/bid/31750 - http://securityreason.com/securityalert/4492 - http://chxsecurity.org/advisories/adv-3-full.txt
tyfocus.com/bid/31750 - http://securityreason.com/securityalert/4492 - http://chxsecurity.org/advisories/adv-3-full.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45860
CVE ID: CVE-2008-4733 State: PUBLISHED Published: 2008-10-24T10:00:00 Last Updated: 2024-08-07T10:24:21.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7) tagheadersep, (8) taglabel, and (9) tagheaderlabel parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32253 - http://www.securityfocus.com/archive/1/497313/100/0/threaded - http://www.securityfo
tp://secunia.com/advisories/32253 - http://www.securityfocus.com/archive/1/497313/100/0/threaded - http://www.securityfocus.com/bid/31750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45861 - http://securityreason.com/securityalert/4492 - http://chxsecurity.org/advisories/adv-3-full.txt
CVE ID: CVE-2008-4734 State: PUBLISHED Published: 2008-10-24T10:00:00 Last Updated: 2024-08-07T10:24:21.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a request that sets the wpcr_hidden_form_input parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32253 - http://www.securityfocus.com/archive/1/497313/100/0/threaded - http://securityreason.com/securityalert/4492 - http://chxsecurity.org/advisories/adv-3-full
ve/1/497313/100/0/threaded - http://securityreason.com/securityalert/4492 - http://chxsecurity.org/advisories/adv-3-full.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45862
CVE ID: CVE-2008-4735 State: PUBLISHED Published: 2008-10-24T10:00:00 Last Updated: 2024-08-07T10:24:21.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sections_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32050 - https://www.exploit-db.com/exploits/6598 - http://www.securityfocus.com/bid/31461
CVE ID: CVE-2008-4736 State: PUBLISHED Published: 2008-10-24T10:00:00 Last Updated: 2024-08-07T10:24:21.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in RPG.Board 0.8 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the showtopic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4483 - http://marc.info/?l=bugtraq&m=122244414700901&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45444 - http://www.securityfocus.com/bid/31417 - https://www.exploit-db.com/exploits/6589
CVE ID: CVE-2008-4737 State: PUBLISHED Published: 2008-10-24T10:00:00Z Last Updated: 2024-09-17T03:02:40.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wholite.cgi in WhoDomLite 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the dom parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32085 - http://www.osvdb.org/48630 - http://yee7.com/forums/showthread.php?p=8021 - http://www.tryag.com/cc/showthread.php?t=27577 - http://www.securityfocus.com/bid/31436
CVE ID: CVE-2008-4738 State: PUBLISHED Published: 2008-10-24T10:00:00 Last Updated: 2024-08-07T10:24:21.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32039 - http://www.securityfocus.com/bid/31447 - http://securityreason.com/securityalert/4476 - https://www.exploit-db.com/exploits/6603
CVE ID: CVE-2008-4739 State: PUBLISHED Published: 2008-10-24T10:00:00 Last Updated: 2024-08-07T10:24:21.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the navi parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4475 - http://www.securityfocus.com/bid/31457 - https://www.exploit-db.com/exploits/6602 - http://secunia.com/advisories/32033
CVE ID: CVE-2008-4740 State: PUBLISHED Published: 2008-10-27T17:00:00 Last Updated: 2024-08-07T10:24:21.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the config[template] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://1scripts.net/php-scripts/index.php?p=6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44596 - http://secunia.com/advisories/31569 - http://www.securityfocus.com/bid/3
nge.xforce.ibmcloud.com/vulnerabilities/44596 - http://secunia.com/advisories/31569 - http://www.securityfocus.com/bid/30785 - https://www.exploit-db.com/exploits/6287 - http://securityreason.com/securityalert/4506
CVE ID: CVE-2008-4741 State: PUBLISHED Published: 2008-10-27T17:00:00 Last Updated: 2024-08-07T10:24:21.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30781 - http://marc.info/?l=bugtraq&m=121933211712734&w=2 - http://www.securityfocus.com/archive/1/495672/100/0/threaded - http://secunia.com/advisories/31563 - http://securityreason.com/securityalert/4507 - https://exchange.xforce.ibmcloud.com/vul
//secunia.com/advisories/31563 - http://securityreason.com/securityalert/4507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44606
CVE ID: CVE-2008-4742 State: PUBLISHED Published: 2008-10-27T17:00:00 Last Updated: 2024-08-07T10:24:21.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) password and (2) user_name parameters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2008-08/0224.html - http://www.securityfocus.com/archive/1/495643/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44601 - http://www.hackerscenter.com/index.php?/HSC-Research-Group/Advisories
change.xforce.ibmcloud.com/vulnerabilities/44601 - http://www.hackerscenter.com/index.php?/HSC-Research-Group/Advisories/HSC-TimeTrex-Time-and-Attendance-Cookie-Theft.html - http://www.securityfocus.com/archive/1/495660/100/0/threaded - http://www.securityfocus.com/bid/30789
CVE ID: CVE-2008-4743 State: PUBLISHED Published: 2008-10-27T17:00:00 Last Updated: 2024-08-07T10:24:21.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30775 - http://www.packetstormsecurity.org/0808-exploits/faqman-sql.txt - http://secunia.com/advisories/32052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44583
CVE ID: CVE-2008-4744 State: PUBLISHED Published: 2008-10-27T17:00:00 Last Updated: 2024-08-07T10:24:21.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_detail.php in DXShopCart 4.30mc allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30772 - http://www.packetstormsecurity.org/0808-exploits/dxshopcart-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44582
CVE ID: CVE-2008-4745 State: PUBLISHED Published: 2008-10-27T17:00:00 Last Updated: 2024-08-07T10:24:21.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44610 - http://secunia.com/advisories/31545 - http://www.uniwin.com/eCart_revisions.asp
CVE ID: CVE-2008-4746 State: PUBLISHED Published: 2008-10-27T17:00:00 Last Updated: 2024-08-07T10:24:21.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) search.asp and (2) cartUtil.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44609 - http://www.uniwin.com/eCart_revisions.asp
CVE ID: CVE-2008-4747 State: PUBLISHED Published: 2008-10-27T19:00:00 Last Updated: 2024-08-07T10:24:21.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2916 - http://www.securityfocus.com/bid/31905 - http://secunia.com/advisories/32327 - http://www.securitytracker.com/id?1021103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46074 - http://sunsolve.
ttp://www.securitytracker.com/id?1021103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46074 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-242246-1