Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5309 State: PUBLISHED Published: 2008-12-02T11:00:00 Last Updated: 2024-08-07T10:49:12.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the ad_id parameter in the re_send_email module to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32445 - https://www.exploit-db.com/exploits/7208 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46808 - http://securityreason.com/securityalert/4675
CVE ID: CVE-2008-5310 State: PUBLISHED Published: 2008-12-02T11:00:00 Last Updated: 2024-08-07T10:49:12.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7198 - http://www.securityfocus.com/bid/32426 - http://www.vupen.com/english/advisories/2008/3241 - http://secunia.com/advisories/32844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46786 - http://securityreason.com/securityalert/4677
CVE ID: CVE-2008-5311 State: PUBLISHED Published: 2008-12-02T11:00:00 Last Updated: 2024-08-07T10:49:12.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in image.php in NetArt Media Blog System 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4679 - http://www.vupen.com/english/advisories/2008/3240 - http://www.securityfocus.com/bid/32441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46787 - https://www.exploit-db.com/exploits/7199
CVE ID: CVE-2008-5312 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T10:49:12.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) panda-autoupdate.new, (4) trend-autoupdate.new, and (5) rav-autoupdate.new scripts in /etc/MailScanner/autoupdate/, a different vulnerability than CVE-2008-5140. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44 - http://www.securityfocus.
Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44 - http://www.securityfocus.com/bid/32557 - http://www.openwall.com/lists/oss-security/2008/11/29/1 - http://secunia.com/advisories/33117 - http://www.mailscanner.info/ChangeLog
CVE ID: CVE-2008-5313 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T10:49:12.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) avast-autoupdate, and (4) f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/; the (5) bitdefender-wrapper, (6) kaspersky-wrapper, (7) clamav-wrapper, and (8) rav-wrapper scripts in /etc/MailScanner/wrapper/; the (9) Quarantine.pm, (10) TNEF.pm, (11) MessageBatch.pm, (12) WorkArea.pm, and (13) SA.pm scrip
/MailScanner/wrapper/; the (9) Quarantine.pm, (10) TNEF.pm, (11) MessageBatch.pm, (12) WorkArea.pm, and (13) SA.pm scripts in /usr/share/MailScanner/MailScanner/; (14) /usr/sbin/MailScanner; and (15) scripts that load the /etc/MailScanner/mailscanner.conf.with.mcp configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44 - http://www.securityfocus.com/bid/32557 - http://www.openwall.com/lists/oss-security/2008/11/29/1 - http://secunia.com/advisories/33117 - http://www.mailscanner.info/ChangeLog
CVE ID: CVE-2008-5314 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T10:49:12.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32936 - https://www.exploit-db.com/exploits/7330 - http://secunia.com/advisories/33195 - http://www.ubuntu.com/usn/usn-684-1 - http://secunia.com/advisories/33937
/7330 - http://secunia.com/advisories/33195 - http://www.ubuntu.com/usn/usn-684-1 - http://secunia.com/advisories/33937 - http://www.debian.org/security/2008/dsa-1680 - http://secunia.com/advisories/32926 - http://www.securitytracker.com/id?1021296 - http://www.vupen.com/english/advisories/2008/3311 - http://secunia.com/advisories/33016 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://lurker.clamav.net/message/20081126.150241.55b1e092.en.html - http://osvdb.org/50363 - http://security.gentoo.org/glsa/glsa-200812-21.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/46985 - http://www.vupen.com/english/advisories/
sa-200812-21.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/46985 - http://www.vupen.com/english/advisories/2009/0422 - http://www.openwall.com/lists/oss-security/2008/12/01/8 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:239 - http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=643134 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html - http://www.securityfocus.com/bid/32555 - http://secunia.com/advisories/33317 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1266
CVE ID: CVE-2008-5315 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T10:49:12.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065822.html - http://www.securityfocus.com/archive/1/498559/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46807 - http://secunia.com/advisories/32852 - http://securityreason.com/securityalert/4
rce.ibmcloud.com/vulnerabilities/46807 - http://secunia.com/advisories/32852 - http://securityreason.com/securityalert/4681 - http://archives.neohapsis.com/archives/bugtraq/2008-12/0061.html - http://www.securityfocus.com/bid/32412
CVE ID: CVE-2008-5316 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T10:49:12.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than CVE-2007-2741. Additional Analyst Notes: - CVE Program Container: References: - http://lcms.cvs.sourceforge.net/viewvc/lcms/lcms/src/cmsio1.c?r1=1.33&r2=1.34 - http://www.securityfocus.com/bid/32708 - http://secunia.com/advisories/33066 - h
cms/lcms/src/cmsio1.c?r1=1.33&r2=1.34 - http://www.securityfocus.com/bid/32708 - http://secunia.com/advisories/33066 - http://www.debian.org/security/2008/dsa-1684 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10531 - http://www.openwall.com/lists/oss-security/2008/11/28/3 - http://www.redhat.com/support/errata/RHSA-2009-0011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47119
CVE ID: CVE-2008-5317 State: PUBLISHED Published: 2008-12-03T17:00:00 Last Updated: 2024-08-07T10:49:12.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33219 - http://www.securityfocus.com/bid/32708 - http://secunia.com/advisories/33066 - https://oval.cisecurity.org/repository/sear
tp://www.securityfocus.com/bid/32708 - http://secunia.com/advisories/33066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10685 - http://www.debian.org/security/2008/dsa-1684 - http://lcms.cvs.sourceforge.net/viewvc/lcms/lcms/src/cmsgamma.c?view=diff&r1=1.16&r2=1.17 - http://www.openwall.com/lists/oss-security/2008/11/28/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47120 - http://www.redhat.com/support/errata/RHSA-2009-0011.html - https://usn.ubuntu.com/693-1/
CVE ID: CVE-2008-5318 State: PUBLISHED Published: 2008-12-03T18:00:00 Last Updated: 2024-08-07T10:49:12.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provided input," a different issue than CVE-2008-3653. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/50058 - http://www.securityfocus.com/bid/31857 - http://info.tikiwiki.org/tiki-read_article.php?articleId=41 - http://www.vupen.com/english/advisories/2008/2889 - http://secunia.com/advisories/32341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46029 - http://tikiwiki.s
9 - http://secunia.com/advisories/32341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46029 - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup
CVE ID: CVE-2008-5319 State: PUBLISHED Published: 2008-12-03T18:00:00 Last Updated: 2024-08-07T10:49:12.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to tiki-error.php, a different issue than CVE-2008-3653. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/50058 - http://www.securityfocus.com/bid/31857 - http://info.tikiwiki.org/tiki-read_article.php?articleId=41 - http://www.vupen.com/english/advisories/2008/2889 - http://secunia.com/advisories/32341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47106 - http://tikiwiki.svn.sourceforge.
nia.com/advisories/32341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47106 - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup
CVE ID: CVE-2008-5320 State: PUBLISHED Published: 2008-12-03T19:00:00 Last Updated: 2024-08-07T10:49:12.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4683 - http://www.securityfocus.com/bid/31821 - https://www.exploit-db.com/exploits/6791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45967 - http://secunia.com/advisories/32322 - http://www.vupen.com/english/advisories/2008/2860
CVE ID: CVE-2008-5321 State: PUBLISHED Published: 2008-12-03T19:00:00 Last Updated: 2024-08-07T10:49:12.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the no parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6778 - http://www.securityfocus.com/bid/31808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45976 - http://securityreason.com/securityalert/4682
CVE ID: CVE-2008-5322 State: PUBLISHED Published: 2008-12-03T19:00:00 Last Updated: 2024-08-07T10:49:12.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/47105 - http://secunia.com/advisories/31061 - https://www.exploit-db.com/exploits/6042
CVE ID: CVE-2008-5323 State: PUBLISHED Published: 2008-12-03T19:00:00 Last Updated: 2024-08-07T10:49:12.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31836 - http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45994 - http://secunia.com/advisories/31061 - https://www.exploit-db.com/exploits/6042
CVE ID: CVE-2008-5324 State: PUBLISHED Published: 2008-12-05T00:00:00Z Last Updated: 2024-09-17T01:31:14.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 2007 before 2007D and 2008 before 2008B allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316
CVE ID: CVE-2008-5325 State: PUBLISHED Published: 2008-12-05T00:00:00Z Last Updated: 2024-09-17T02:43:02.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32576 - http://secunia.com/advisories/32847 - http://www.osvdb.org/50369 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316
CVE ID: CVE-2008-5326 State: PUBLISHED Published: 2008-12-05T00:00:00 Last Updated: 2024-08-07T10:49:12.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46994 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938 - http://secunia.com/advisories/32847 - http://www.securityfocus.com/bid/32577
CVE ID: CVE-2008-5327 State: PUBLISHED Published: 2008-12-05T00:00:00 Last Updated: 2024-08-07T10:49:12.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908 - http://secunia.com/advisories/32847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46995
CVE ID: CVE-2008-5328 State: PUBLISHED Published: 2008-12-05T00:00:00 Last Updated: 2024-08-07T10:49:12.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908 - http://secunia.com/advisories/32847 - https://exchange.xforce.ibmcloud.com/vulne
m/support/docview.wss?uid=swg1PK65908 - http://secunia.com/advisories/32847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46995
CVE ID: CVE-2008-5329 State: PUBLISHED Published: 2008-12-05T00:00:00 Last Updated: 2024-08-07T10:49:12.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46993 - http://secunia.com/advisories/32847 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK38745
CVE ID: CVE-2008-5330 State: PUBLISHED Published: 2008-12-05T00:00:00 Last Updated: 2024-08-07T10:49:12.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO of a URI associated with a VOB page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3330 - http://secunia.com/advisories/32957 - http://www-01.ibm.com/support/docview
www.vupen.com/english/advisories/2008/3330 - http://secunia.com/advisories/32957 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK70972 - http://securitytracker.com/id?1021295 - http://www.securityfocus.com/bid/32574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46983
CVE ID: CVE-2008-5331 State: PUBLISHED Published: 2008-12-05T00:00:00Z Last Updated: 2024-09-17T00:42:12.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.elcomsoft.com/PR/apdfpr_081126_en.pdf - http://www.securityfocus.com/bid/32610 - http://blogs.adobe.com/security/2008/12/acrobat_9_and_password_encrypt.html
CVE ID: CVE-2008-5332 State: PUBLISHED Published: 2008-12-05T01:00:00 Last Updated: 2024-08-07T10:49:12.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lib parameter to files in lib/action/ including (a) alias.php, (b) cancel.php, (c) context.php, (d) deadlinks.php, (e) delete.php, and others; and the (2) GLOBALS[pie][library_path] parameter to files in lib/share/ including (f) diff.php, (g) file.php, (h) locale.php, (i) mapfile.php, (j) page.php, and others. Additional Analyst Notes: - CVE Program Container: References: - http://securityre
apfile.php, (j) page.php, and others. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46819 - https://www.exploit-db.com/exploits/7221 - http://www.securityfocus.com/bid/32455
CVE ID: CVE-2008-5333 State: PUBLISHED Published: 2008-12-05T01:00:00 Last Updated: 2024-08-07T10:49:12.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7218 - http://securityreason.com/securityalert/4691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46822 - http://www.securityfocus.com/bid/32458
CVE ID: CVE-2008-5334 State: PUBLISHED Published: 2008-12-05T01:00:00 Last Updated: 2024-08-07T10:49:12.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary PHP code via a URL in the root parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7218 - http://securityreason.com/securityalert/4691
CVE ID: CVE-2008-5335 State: PUBLISHED Published: 2008-12-05T01:00:00 Last Updated: 2024-08-07T10:49:12.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msg_send parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and CVE-2006-2459. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46760 - http://secunia.com/advisories/32781 - http://www.php-fusion.co.uk/news.php?readmore=435 - h
.com/vulnerabilities/46760 - http://secunia.com/advisories/32781 - http://www.php-fusion.co.uk/news.php?readmore=435 - http://www.securityfocus.com/bid/32388 - http://www.php-fusion.co.uk/downloads.php?cat_id=19 - http://www.vupen.com/english/advisories/2008/3248 - http://securityreason.com/securityalert/4688 - http://osvdb.org/50065 - http://www.php-fusion.co.uk/news.php?readmore=436 - https://www.exploit-db.com/exploits/7173
CVE ID: CVE-2008-5336 State: PUBLISHED Published: 2008-12-05T01:00:00 Last Updated: 2024-08-07T10:49:12.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3273 - https://www.exploit-db.com/exploits/7236 - http://securityreason.com/securityalert/4690 - http://www.securityfocus.com/bid/32449 - http://www.securityfocus.com/archive/1/498597/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46818 - https://www.exploi
us.com/archive/1/498597/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46818 - https://www.exploit-db.com/exploits/7216
CVE ID: CVE-2008-5337 State: PUBLISHED Published: 2008-12-05T01:00:00 Last Updated: 2024-08-07T10:49:12.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46816 - http://securityreason.com/securityalert/4689 - http://www.securityfocus.com/bid/32453 - http://z0rlu.blogspot.com/2008/11/bandwebsite-15-sqlxss-multiple-remote.html - https://www.exploit-db.com/exploits/7215