Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1733 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com_puarcade) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41726 - http://www.securityfocus.com/archive/1/490626/100/0/threaded - http://securityreason.com/securityalert/3807 - http://www.securityfocus.com/bid/28701 - http://www.osvdb.org/443
eaded - http://securityreason.com/securityalert/3807 - http://www.securityfocus.com/bid/28701 - http://www.osvdb.org/44391
CVE ID: CVE-2008-1734 State: PUBLISHED Published: 2008-04-18T15:00:00 Last Updated: 2024-08-07T08:32:01.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating a file with a one-letter lowercase alphabetic name, which triggers interpretation of a certain unquoted [a-z] argument as a matching shell glob for this name, rather than interpretation as the literal [a-z] regular-expression string, and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server. Additional Analyst Notes: - CV
and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41928 - http://bugs.gentoo.org/show_bug.cgi?id=209535 - http://security.gentoo.org/glsa/glsa-200804-19.xml
CVE ID: CVE-2008-1735 State: PUBLISHED Published: 2008-04-29T23:00:00 Last Updated: 2024-08-07T08:32:01.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an invalid pointer to the CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1384 - http://securityreason.com/securityalert/3838 - http://secunia.com/advisories/30005 - http://kb.bitdefender.com/KB419-en--Security-vulnerability-in-BitDefender-2008.htm
http://secunia.com/advisories/30005 - http://kb.bitdefender.com/KB419-en--Security-vulnerability-in-BitDefender-2008.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42081 - http://www.coresecurity.com/?action=item&id=2249 - http://www.securityfocus.com/archive/1/491405/100/0/threaded - http://www.securityfocus.com/bid/28741 - http://securitytracker.com/id?1019943
CVE ID: CVE-2008-1736 State: PUBLISHED Published: 2008-04-29T23:00:00 Last Updated: 2024-08-07T08:32:01.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions, which allows local users to cause a denial of service (system crash) via (1) a crafted OBJECT_ATTRIBUTES structure in a call to the NtDeleteFile function, which leads to improper validation of a ZwQueryObject result; and unspecified calls to the (2) NtCreateFile and (3) NtSetThreadContext functions, different vectors than CVE-2007-0709. Additional Analyst Notes: - CVE Program Container: Refer
tThreadContext functions, different vectors than CVE-2007-0709. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1383 - http://secunia.com/advisories/30006 - http://www.personalfirewall.comodo.com/release_notes.html - http://securityreason.com/securityalert/3838 - http://www.securityfocus.com/bid/28742 - http://www.coresecurity.com/?action=item&id=2249 - http://securitytracker.com/id?1019944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42082 - http://www.securityfocus.com/archive/1/491405/100/0/threaded
CVE ID: CVE-2008-1737 State: PUBLISHED Published: 2008-04-29T23:00:00 Last Updated: 2024-08-07T08:32:01.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service (reboot with the product disabled) and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateKey hooked System Service Descriptor Table (SSDT) function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29996 - http://www.securityfocus.com/bid/28743 - http://securityreason.com/secu
erences: - http://secunia.com/advisories/29996 - http://www.securityfocus.com/bid/28743 - http://securityreason.com/securityalert/3838 - http://www.vupen.com/english/advisories/2008/1381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42083 - http://www.coresecurity.com/?action=item&id=2249 - http://www.sophos.com/support/knowledgebase/article/37810.html - http://www.securityfocus.com/archive/1/491405/100/0/threaded - http://securitytracker.com/id?1019945
CVE ID: CVE-2008-1738 State: PUBLISHED Published: 2008-04-29T23:00:00 Last Updated: 2024-08-07T08:32:01.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service (system crash) via an invalid pointer to the _CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28744 - http://securityreason.com/securityalert/3838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42084 - http://www.coresecurity.com/?action=item&id=2249 - http://www.vupen.com/english
rce.ibmcloud.com/vulnerabilities/42084 - http://www.coresecurity.com/?action=item&id=2249 - http://www.vupen.com/english/advisories/2008/1382 - http://secunia.com/advisories/30007 - http://www.securityfocus.com/archive/1/491405/100/0/threaded - http://securitytracker.com/id?1019946
CVE ID: CVE-2008-1739 State: PUBLISHED Published: 2008-09-03T19:00:00 Last Updated: 2024-08-07T08:32:01.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT1241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45144
CVE ID: CVE-2008-1740 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:32:01.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified "stress test," aka Bug ID CSCsh20972. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29220 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/42412 - http://www.vupen.com/english/advisories/2008/1534 - http:/
https://exchange.xforce.ibmcloud.com/vulnerabilities/42412 - http://www.vupen.com/english/advisories/2008/1534 - http://securitytracker.com/id?1020023 - http://secunia.com/advisories/30240
CVE ID: CVE-2008-1741 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:32:01.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of service (core dump and service interruption) via a TCP port scan, aka Bug ID CSCsj64533. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42413 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml - http://www.securityfocus.com/bid/29222 - http://secunia.com/advisories/30269 - http://www.vupen.com/english/advisori
l - http://www.securityfocus.com/bid/29222 - http://secunia.com/advisories/30269 - http://www.vupen.com/english/advisories/2008/1534 - http://securitytracker.com/id?1020023
CVE ID: CVE-2008-1742 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:32:01.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug ID CSCsj80609. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/42410 -
roducts/products_security_advisory09186a0080995688.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/42410 - http://www.vupen.com/english/advisories/2008/1533 - http://www.securityfocus.com/bid/29221 - http://secunia.com/advisories/30238 - http://securitytracker.com/id?1020022
CVE ID: CVE-2008-1743 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:32:01.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, aka Bug ID CSCsi98433. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.secu
s/products_security_advisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.securityfocus.com/bid/29221 - http://secunia.com/advisories/30238 - http://securitytracker.com/id?1020022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42414
CVE ID: CVE-2008-1744 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:32:01.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.securityfocus.com/bid/292
dvisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.securityfocus.com/bid/29221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42415 - http://secunia.com/advisories/30238 - http://securitytracker.com/id?1020022
CVE ID: CVE-2008-1745 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:32:01.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (service interruption) via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.securityfocus.com/bid/29221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/424
advisories/2008/1533 - http://www.securityfocus.com/bid/29221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42417 - http://secunia.com/advisories/30238 - http://securitytracker.com/id?1020022
CVE ID: CVE-2008-1746 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:32:01.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (core dump and service restart) via a series of malformed UDP packets, as demonstrated by the IP Stack Integrity Checker (ISIC), aka Bug ID CSCsj24113. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtm
CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.securityfocus.com/bid/29221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42420 - http://secunia.com/advisories/30238 - http://securitytracker.com/id?1020022
CVE ID: CVE-2008-1747 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:32:01.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (CCM service restart) via an unspecified SIP INVITE message, aka Bug ID CSCsk46944. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.securityfo
ucts_security_advisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.securityfocus.com/bid/29221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42418 - http://secunia.com/advisories/30238 - http://securitytracker.com/id?1020022
CVE ID: CVE-2008-1748 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:32:01.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.security
oducts_security_advisory09186a0080995688.shtml - http://www.vupen.com/english/advisories/2008/1533 - http://www.securityfocus.com/bid/29221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42419 - http://secunia.com/advisories/30238 - http://securitytracker.com/id?1020022
CVE ID: CVE-2008-1749 State: PUBLISHED Published: 2008-05-14T18:00:00 Last Updated: 2024-08-07T08:32:01.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco Content Switching Module (CSM) 4.2(3) up to 4.2(8) and Cisco Content Switching Module with SSL (CSM-S) 2.1(2) up to 2.1(7) allows remote attackers to cause a denial of service (memory consumption) via TCP segments with an unspecified combination of TCP flags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29216 - http://www.securitytracker.com/id?1020021 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995684.shtml - https://exchan
r.com/id?1020021 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995684.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/42409 - http://secunia.com/advisories/30223 - http://www.vupen.com/english/advisories/2008/1532/references
CVE ID: CVE-2008-1750 State: PUBLISHED Published: 2008-04-11T20:28:00 Last Updated: 2024-08-07T08:32:01.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to the /category URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/44358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41750 - https://www.exploit-db.com/exploits/5422 - http://seclists.org/bugtraq/2008/May/0021.html - http://livecart.com/news/LiveCart-1-1-2-released.12 - http://secunia.com/advisories/29765 - http://www.securit
21.html - http://livecart.com/news/LiveCart-1-1-2-released.12 - http://secunia.com/advisories/29765 - http://www.securityfocus.com/bid/28723
CVE ID: CVE-2008-1751 State: PUBLISHED Published: 2008-04-11T20:28:00 Last Updated: 2024-08-07T08:32:01.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) language and (2) lang parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/44362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41749 - http://secunia.com/advisories/29776 - https://www.exploit-db.com/exploits/5423 - http://www.securityfocus.com/bid/28724
CVE ID: CVE-2008-1752 State: PUBLISHED Published: 2008-04-11T20:28:00 Last Updated: 2024-08-07T08:32:01.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for (1) config.ini or (2) database.ini. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41767 - http://sourceforge.net/forum/forum.php?forum_id=809832 - http://sourceforge.net/project/shownotes.php?release_id=591272&group_i
sourceforge.net/forum/forum.php?forum_id=809832 - http://sourceforge.net/project/shownotes.php?release_id=591272&group_id=221332 - http://www.osvdb.org/44399 - http://secunia.com/advisories/29769
CVE ID: CVE-2008-1753 State: PUBLISHED Published: 2008-04-11T20:28:00 Last Updated: 2024-08-07T08:32:01.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41675 - http://www.securityfocus.com/archive/1/490498/100/0/threaded - http://www.securityfocus.com/archive/1/490710/100/0/threaded - http://www.securityfocus.com/bi
1/490498/100/0/threaded - http://www.securityfocus.com/archive/1/490710/100/0/threaded - http://www.securityfocus.com/bid/28637 - http://securityreason.com/securityalert/3808
CVE ID: CVE-2008-1754 State: PUBLISHED Published: 2008-04-11T20:28:00 Last Updated: 2024-08-07T08:32:01.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41771 - http://www.securityfocus.com/bid/28707 - http://www.vupen.com/english/advisories/2008/1197/references - http://secunia.com/advisories/29771 - http://securityresponse.syma
w.vupen.com/english/advisories/2008/1197/references - http://secunia.com/advisories/29771 - http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html - http://www.securitytracker.com/id?1019825 - http://www.osvdb.org/44388
CVE ID: CVE-2008-1755 State: PUBLISHED Published: 2008-04-11T20:28:00 Last Updated: 2024-08-07T08:32:01.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41741 - http://www.osvdb.org/44387 - http://www.securityfocus.com/bid/28719 - https://www.exploit-db.com/exploits/5420
CVE ID: CVE-2008-1756 State: PUBLISHED Published: 2008-04-11T20:28:00 Last Updated: 2024-08-07T08:32:01.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service (daemon crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019830 - http://www.vupen.com/english/advisories/2008/1196/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-234822-1 - http://secunia.com/advisories/29753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41763 - http://www.osvdb.org/44363 - ht
unia.com/advisories/29753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41763 - http://www.osvdb.org/44363 - http://www.securityfocus.com/bid/28731
CVE ID: CVE-2008-1757 State: PUBLISHED Published: 2008-04-12T20:00:00 Last Updated: 2024-08-07T08:32:01.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3809 - http://www.securityfocus.com/bid/28612 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41814 - http://www.securityfocus.com/archive/1/490470/100/0/threaded
CVE ID: CVE-2008-1758 State: PUBLISHED Published: 2008-04-12T20:00:00 Last Updated: 2024-08-07T08:32:01.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41636 - http://secunia.com/advisories/29664 - http://www.securityfocus.com/bid/28738
CVE ID: CVE-2008-1759 State: PUBLISHED Published: 2008-04-12T20:00:00 Last Updated: 2024-08-07T08:32:01.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29625 - https://www.exploit-db.com/exploits/5352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41635 - http://koogar.alorys-hebergement.com/kwsphp/modules/maintenance/index.php - http://www.securityfocus.com/bid/28601