Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2149 State: PUBLISHED Published: 2008-05-12T21:00:00 Last Updated: 2024-08-07T08:49:58.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option. NOTE: this issue probably does not cross privilege boundaries except in cases in which Wordnet is used as a back end. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30242 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:182 - https://bugs.gentoo.org/show_bug.cgi?id=211491 - http://secunia.c
mandriva.com/security/advisories?name=MDVSA-2008:182 - https://bugs.gentoo.org/show_bug.cgi?id=211491 - http://secunia.com/advisories/31654 - http://secunia.com/advisories/32184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42378 - http://www.debian.org/security/2008/dsa-1634 - http://www.gentoo.org/security/en/glsa/glsa-200810-01.xml - http://www.vupen.com/english/advisories/2008/1527/references - http://www.securityfocus.com/bid/29208
CVE ID: CVE-2008-2152 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T08:49:58.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30635 - http://www.redhat.com/support/errata/RHSA-2008-0537.html - http://secunia.com/advisories/30633 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237944-1 - https://www.redhat.com/arc
ia.com/advisories/30633 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237944-1 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00385.html - http://www.securitytracker.com/id?1020219 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00499.html - http://security.gentoo.org/glsa/glsa-200807-05.xml - http://www.vupen.com/english/advisories/2008/1804/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9787 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:138 - http://www.openoffice.org/security/cves/CVE-2008-2152.html - http://www.redhat.com/support/errata/RHSA-2008-0538.html - ht
tp://www.openoffice.org/security/cves/CVE-2008-2152.html - http://www.redhat.com/support/errata/RHSA-2008-0538.html - http://secunia.com/advisories/30634 - http://secunia.com/advisories/30599 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00473.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42957 - http://www.vupen.com/english/advisories/2008/1773 - http://www.securityfocus.com/bid/29622 - http://secunia.com/advisories/31029 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:137
CVE ID: CVE-2008-2154 State: PUBLISHED Published: 2009-06-03T20:35:00 Last Updated: 2024-08-07T08:49:58.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj.install_jar) procedure, which allows remote authenticated users to create or overwrite arbitrary files via unspecified calls. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51105 - http://www-01.ibm.com/support/docvie
.wss?uid=swg1IZ22143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51105 - http://www-01.ibm.com/support/docview.wss?uid=swg21318189 - http://www.securityfocus.com/bid/35409 - http://osvdb.org/48147 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22142 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ21983 - http://secunia.com/advisories/31787
CVE ID: CVE-2008-2157 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:49:58.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=703 - http://secunia.com/advisories/30410 - http://securitytracker.com/id?1020116 - http://www.vupen.com/english/advisories/2008/1670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42671
CVE ID: CVE-2008-2158 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:49:58.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=702 - http://securitytracker.com/id?1020115 - http://secunia.com/advisories/30410 - http://www.securityfocus.com/bid/29399 - http://www.vupen.com/english/advisories/2008/1670 -
nia.com/advisories/30410 - http://www.securityfocus.com/bid/29399 - http://www.vupen.com/english/advisories/2008/1670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42669
CVE ID: CVE-2008-2159 State: PUBLISHED Published: 2008-05-12T22:00:00 Last Updated: 2024-08-07T08:49:58.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 can save encrypted pages in the cache even when the DisableCachingOfSSLPages registry setting is enabled, which might allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42307 - http://www.securityfocus.com/bid/29120 - http://secunia.com/advisories/30145 - http://www.vupen.com/english/advisories/2008/1470/references - http://www.kb.cert.org/vuls/id/468843
CVE ID: CVE-2008-2160 State: PUBLISHED Published: 2008-05-12T22:00:00 Last Updated: 2024-08-07T08:49:58.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted (1) JPEG and (2) GIF images. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30197 - http://www.securityfocus.com/bid/29147 - http://support.microsoft.com/kb/948812 - http://www.securitytracker.com/id?1020007 - http://www.vupen.com/english/advisories/2008/1469/references - https://exchange.xforce.ibmcloud.com/vuln
om/id?1020007 - http://www.vupen.com/english/advisories/2008/1469/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42334
CVE ID: CVE-2008-2161 State: PUBLISHED Published: 2008-05-12T22:00:00 Last Updated: 2024-08-07T08:49:58.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42298 - http://www.securityfocus.com/bid/29111 - http://www.vupen.com/english/advisories/2008/1468/references - https://www.exploit-db.com
.securityfocus.com/bid/29111 - http://www.vupen.com/english/advisories/2008/1468/references - https://www.exploit-db.com/exploits/5563
CVE ID: CVE-2008-2162 State: PUBLISHED Published: 2008-05-12T22:00:00 Last Updated: 2024-08-07T08:49:58.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42283 - http://www.securitytracker.com/id?1019999 - http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0226.html
CVE ID: CVE-2008-2163 State: PUBLISHED Published: 2008-05-13T17:00:00 Last Updated: 2024-08-07T08:49:58.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1502/references - http://www.securityfocus.com/bid/29175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42360 - http://secunia.com/advisories/30204 - http://www-1.ibm.c
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42360 - http://secunia.com/advisories/30204 - http://www-1.ibm.com/support/docview.wss?uid=swg24018711 - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2008-2165 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:49:58.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492043/100/0/threaded - http://www.securityfocus.com/archive/1/492093/100/0/threaded - http://www.securityfocus.com/bid/29191 - http://secunia.com/advisories/30222 - http://securityreason.com/securityalert/38
ttp://www.securityfocus.com/bid/29191 - http://secunia.com/advisories/30222 - http://securityreason.com/securityalert/3895 - http://www.vupen.com/english/advisories/2008/1535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42395 - http://securitytracker.com/id?1020018
CVE ID: CVE-2008-2166 State: PUBLISHED Published: 2008-05-13T20:14:00 Last Updated: 2024-08-07T08:49:58.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30133 - http://www.securityfocus.com/bid/29087 - http://www.vupen.com/english/advisories/2008/1455/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231467-1 - http://www.securitytracker
es/2008/1455/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231467-1 - http://www.securitytracker.com/id?1019987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42263
CVE ID: CVE-2008-2167 State: PUBLISHED Published: 2008-05-13T20:14:00 Last Updated: 2024-08-07T08:49:58.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29110 - http://www.vupen.com/english/advisories/2008/1501/references - http://www.securitytracker.com/id?1020000 - http://www.securityfocus.com/archive/1/491818/100/0/threaded - http://securityreason.com/securityalert/3869 - http://lis
http://www.securityfocus.com/archive/1/491818/100/0/threaded - http://securityreason.com/securityalert/3869 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062152.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42282 - http://secunia.com/advisories/30142
CVE ID: CVE-2008-2168 State: PUBLISHED Published: 2008-05-13T21:00:00 Last Updated: 2024-08-07T08:49:58.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42303 - http://secunia.com/advisories/34219 - http://www.securityfocus.com/archive/1/491967/100/0/threaded - https://oval.cisecurity.org
ecunia.com/advisories/34219 - http://www.securityfocus.com/archive/1/491967/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5143 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/31651 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://www.securityfocus.com/bid/29112 - http://www.ubuntu.com/usn/USN-731-1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 - http://www.securityfocus.com/archive/1/491901/100/0/threaded - http://www.securityfocus.com/archive/1/491862/100/0/threaded - http://www.securityfocus.com/ar
1/491901/100/0/threaded - http://www.securityfocus.com/archive/1/491862/100/0/threaded - http://www.securityfocus.com/archive/1/491930/100/0/threaded - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 - http://secunia.com/advisories/35650
CVE ID: CVE-2008-2169 State: PUBLISHED Published: 2008-05-13T22:00:00.000Z Last Updated: 2025-04-03T13:50:33.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/28999 - http://www.kb.cert.org/vuls/id/929656
CVE ID: CVE-2008-2170 State: PUBLISHED Published: 2008-05-13T22:00:00.000Z Last Updated: 2025-04-03T13:48:57.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/28999 - http://www.kb.cert.org/vuls/id/929656
CVE ID: CVE-2008-2171 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in AlaxalA AX routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1407/references - http://www.kb.cert.org/vuls/id/MIMG-79UV2A - http://www.securityfocus.com/bid/28999 - http://secunia.com/advisories/30054 - http://www.kb.cert.org/vuls/id/929656
CVE ID: CVE-2008-2172 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:59.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1405 - http://www.kb.cert.org/vuls/id/MIMG-79UV2A - http://secunia.com/advisories/30028 - http://www.securityfocus.com/bid/28999 - http://www.kb.cert.org/vuls/id/929656
CVE ID: CVE-2008-2173 State: PUBLISHED Published: 2008-05-13T22:00:00.000Z Last Updated: 2025-04-03T13:45:55.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/28999 - http://www.kb.cert.org/vuls/id/929656
CVE ID: CVE-2008-2174 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 have unknown impact and attack vectors, related to "various areas where security was missing." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42139 - http://secunia.com/advisories/30041 - http://sourceforge.net/project/shownotes.php?group_id=82533&release_id=596220 - http://sourceforge.net/forum/forum.php?forum_id=818214 - http://www.securityfocus.com/bid/2
id=82533&release_id=596220 - http://sourceforge.net/forum/forum.php?forum_id=818214 - http://www.securityfocus.com/bid/29022
CVE ID: CVE-2008-2175 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29030 - http://secunia.com/advisories/30058 - https://www.exploit-db.com/exploits/5533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42193
CVE ID: CVE-2008-2176 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42146 - http://www.securityfocus.com/bid/29021 - http://securityreason.com/securityalert/3870 - http://secunia.com/advisories/30062 - http://www.securityfocus.com/archive/1/491553/100/0/threaded
CVE ID: CVE-2008-2177 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to show.php and the (2) login parameter to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1432/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42213 - https://www.exploit-db.com/exploits/5537 - http://secunia.com/advisories/30056 - http://www.securityfo
abilities/42213 - https://www.exploit-db.com/exploits/5537 - http://secunia.com/advisories/30056 - http://www.securityfocus.com/bid/29039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42212
CVE ID: CVE-2008-2178 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the searchTerms parameter in an editArticleCategories operation (aka an admin category search). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42151 - http://wiki.lifetype.net/index.php/Release_notes_Lifetype_1.2.8 - http://www.securityfocus.com/bid/29017 - http://lifetype.net/post/2008/05/04/lifetype-1.2.8-released - ht
fetype_1.2.8 - http://www.securityfocus.com/bid/29017 - http://lifetype.net/post/2008/05/04/lifetype-1.2.8-released - http://secunia.com/advisories/30075 - http://securityreason.com/securityalert/3871 - http://www.securityfocus.com/archive/1/491550/100/0/threaded - http://www.securityfocus.com/archive/1/491597/100/0/threaded
CVE ID: CVE-2008-2179 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SystemList.jsp in SysAid 5.1.08 allows remote attackers to inject arbitrary web script or HTML via the searchField parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42243 - http://secunia.com/advisories/30074
CVE ID: CVE-2008-2180 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) admin_username parameter (aka the username field) to admin/index.php and the (2) search_text and (3) search_category parameters to search.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42170 - https://www.exploit-db.com/explo
m Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42170 - https://www.exploit-db.com/exploits/5538 - http://secunia.com/advisories/30024 - http://www.securityfocus.com/bid/29035 - http://www.vupen.com/english/advisories/2008/1431/references
CVE ID: CVE-2008-2181 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:49:58.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the (1) search_text and (2) search_category parameters. NOTE: the XSS reportedly occurs in a forced SQL error message. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5538 - http://secunia.com/advisories/30024 - http://www.securityfocus.com/bid/29035 - https:/
ww.exploit-db.com/exploits/5538 - http://secunia.com/advisories/30024 - http://www.securityfocus.com/bid/29035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42171 - http://www.vupen.com/english/advisories/2008/1431/references