Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3751 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genres_parent parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51679 - http://secunia.com/advisories/35677 - http://www.securityfocus.com/bid/35641 - http://www.exploit-db.com/exploits/9122
CVE ID: CVE-2009-3752 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genres_parent parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51678 - http://www.securityfocus.com/bid/35641 - http://www.exploit-db.com/exploits/9122
CVE ID: CVE-2009-3753 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension as a User Image, then accessing it via a request to the file in userimages, related to register.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51677 - http://secunia.com/advisories/35677 - http://www.securityfocus.com/bid/35641 - http://www.exploit-db.com/exploits/9122
CVE ID: CVE-2009-3754 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to modules/bms/invoices_discount_ajax.php, (2) f parameter to dbgraphic.php, and (3) tid parameter in a show action to advancedsearch.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51650 - http://www.exploit-db.com/exploits/9101
CVE ID: CVE-2009-3755 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php and (2) modules\base\myaccount.php; and the PATH_INFO to (3) modules_view.php, (4) tabledefs_options.php, and (5) adminsettings.php in phpbms\modules\base\. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51651 - http://www.exploit-db.com/exploits/9101
CVE ID: CVE-2009-3756 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51652 - http://www.exploit-db.com/exploits/9101
CVE ID: CVE-2009-3757 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to config/edituser.php; (2) location, (3) sessionid, and (4) vmname parameters to console.php; (5) vmrefid and (6) vmname parameters to forcerestart.php; and (7) vmname and (8) vmrefid parameters to forcesd.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Prog
forcesd.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504764 - http://www.vupen.com/english/advisories/2009/1814 - http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt - http://securitytracker.com/id?1022520 - http://www.securityfocus.com/bid/35592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51575 - http://www.exploit-db.com/exploits/9106
CVE ID: CVE-2009-3758 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504764 - http://www.vupen.com/english/advisories/2009/1814 - http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt - https://exchange.xforce.ibmcloud.c
sories/2009/1814 - http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/51574 - http://securitytracker.com/id?1022520 - http://www.securityfocus.com/bid/35592 - http://www.exploit-db.com/exploits/9106
CVE ID: CVE-2009-3759 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to hijack the authentication of administrators for (1) requests that change the password via the username parameter to config/changepw.php or (2) stop a virtual machine via the stop_vmname parameter to hardstopvm.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
m third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504764 - http://www.vupen.com/english/advisories/2009/1814 - http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/51576 - http://securitytracker.com/id?1022520 - http://www.securityfocus.com/bid/35592 - http://www.exploit-db.com/exploits/9106
CVE ID: CVE-2009-3760 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to inject arbitrary PHP code into include/config.ini.php via the pool1 parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504764 - http://www.vupen.com/english/advisories/2009/1814 - http://securenetwork.it/ricerca/advisory/download/SN-200
/1/504764 - http://www.vupen.com/english/advisories/2009/1814 - http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt - http://securitytracker.com/id?1022520 - http://www.securityfocus.com/bid/35592 - http://www.exploit-db.com/exploits/9106
CVE ID: CVE-2009-3762 State: PUBLISHED Published: 2010-07-13T22:07:00 Last Updated: 2024-08-07T06:38:30.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE ID: CVE-2009-3763 State: PUBLISHED Published: 2010-07-13T21:00:00 Last Updated: 2024-08-07T06:38:30.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Access Manager / OpenSSO component in Oracle OpenSSO Enterprise 7.1, 7, 2005Q4, and 8.0 allows remote attackers to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE ID: CVE-2009-3764 State: PUBLISHED Published: 2010-07-13T21:00:00 Last Updated: 2024-08-07T06:38:30.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the OpenSSO component in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
CVE ID: CVE-2009-3765 State: PUBLISHED Published: 2009-10-23T19:00:00Z Last Updated: 2024-09-16T20:22:26.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=125369675820512&w=2 - http://dev.mutt.org/trac/changeset/6016:dc098
er: References: - http://marc.info/?l=oss-security&m=125369675820512&w=2 - http://dev.mutt.org/trac/changeset/6016:dc09812e63a3/mutt_ssl.c - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://marc.info/?l=oss-security&m=125198917018936&w=2
CVE ID: CVE-2009-3766 State: PUBLISHED Published: 2009-10-23T19:00:00 Last Updated: 2024-08-07T06:38:30.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/10/26/1 - http://dev.mutt.org/trac/ticket/3087 - http://marc.info/?l=oss-security&m=125198917018936&w=2
CVE ID: CVE-2009-3767 State: PUBLISHED Published: 2009-10-23T19:00:00 Last Updated: 2024-08-07T06:38:30.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/201
onal Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036138.html - http://marc.info/?l=oss-security&m=125369675820512&w=2 - http://security.gentoo.org/glsa/glsa-201406-36.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11178 - http://www.vupen.com/english/advisories/2010/1858 - http://secunia.com/advisories/40677 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7274 - http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h - http://www.vupen.com/english/advisories/2009/3056 - http://www.redhat.com/su
s/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h - http://www.vupen.com/english/advisories/2009/3056 - http://www.redhat.com/support/errata/RHSA-2010-0543.html - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://secunia.com/advisories/38769 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937 - http://marc.info/?l=oss-security&m=125198917018936&w=2
CVE ID: CVE-2009-3768 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:57.232Z Description: No description available.
CVE ID: CVE-2009-3769 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:57.593Z Description: No description available.
CVE ID: CVE-2009-3770 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:57.980Z Description: No description available.
CVE ID: CVE-2009-3771 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:58.371Z Description: No description available.
CVE ID: CVE-2009-3772 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:58.735Z Description: No description available.
CVE ID: CVE-2009-3773 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:59.115Z Description: No description available.
CVE ID: CVE-2009-3774 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:59.500Z Description: No description available.
CVE ID: CVE-2009-3775 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:59.872Z Description: No description available.
CVE ID: CVE-2009-3776 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:00.306Z Description: No description available.
CVE ID: CVE-2009-3777 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:00.681Z Description: No description available.
CVE ID: CVE-2009-3778 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Moodle Course List 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53895 - http://drupal.org/node/610986 - http://secunia.com/advisories/37126 - http://osvdb.org/59100 - http://www.vupen.com/english/advisories/2009/3001 - http://www.securityfocus.com/bid/36787
CVE ID: CVE-2009-3779 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the addition of the theme_vcard function to a theme and the use of default content. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3002 - http://www.securityfocus.com/bid/36789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53903 - http://secunia.c
- http://www.securityfocus.com/bid/36789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53903 - http://secunia.com/advisories/37127 - http://drupal.org/node/610996 - http://drupal.org/node/610416 - http://drupal.org/node/610420
CVE ID: CVE-2009-3780 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Abuse 5.x before 5.x-2.1 and 6.x before 6.x-1.1-alpha1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/610784 - http://drupal.org/node/611078 - http://secunia.com/advisories/37129 - http://www.securityfocus.com/bid/36791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53898 - http://drupal.org/node/610900
CVE ID: CVE-2009-3781 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access permissions for Drupal core private files, which allows remote attackers to access unauthorized files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/516104 - http://www.securityfocus.com/bid/36792 - http://drupal.org/node/611128 - http://drupal.org/node/609874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53897 - http://drupal.org/files/is
http://drupal.org/node/609874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53897 - http://drupal.org/files/issues/filefield-node-access-fix-516104-3.patch - http://secunia.com/advisories/37130
CVE ID: CVE-2009-3782 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with "View own userpoints" permissions to read the userpoint data of arbitrary users via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53896 - http://www.securityfocus.com/bid/36786 - http://drupal.org/node/610828 - http://osvdb.org/59124 - http://www.vupen.com/english/advisories/20
ocus.com/bid/36786 - http://drupal.org/node/610828 - http://osvdb.org/59124 - http://www.vupen.com/english/advisories/2009/2998 - http://drupal.org/node/610818
CVE ID: CVE-2009-3783 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vector. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37128 - http://drupal.org/node/611002 - http://drupal.org/node/590098 - http://www.securityfocus.com/bid/36790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53905
CVE ID: CVE-2009-3784 State: PUBLISHED Published: 2009-10-26T17:00:00Z Last Updated: 2024-09-16T21:09:03.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37128 - http://drupal.org/node/611002 - http://drupal.org/node/590098 - http://www.securityfocus.com/bid/36790
CVE ID: CVE-2009-3785 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allow remote attackers to hijack the authentication of arbitrary users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37128 - http://drupal.org/node/611002 - http://drupal.org/node/590098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53906 - http://www.securityfocus.com/bid/36790
CVE ID: CVE-2009-3786 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the group title. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/605094 - http://drupal.org/node/610948 - http://osvdb.org/59129 - http://drupal.org/node/623674 - http://drupal.org/node/621960 - http://secunia.com/advisories/37125 - http://secunia.com/advisories/37290 - https://exchang
p://drupal.org/node/621960 - http://secunia.com/advisories/37125 - http://secunia.com/advisories/37290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54150 - http://www.securityfocus.com/bid/36784 - http://www.securityfocus.com/bid/36929 - http://osvdb.org/59673 - http://www.vupen.com/english/advisories/2009/3000
CVE ID: CVE-2009-3787 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in between two . (dot) characters, which is filtered into a "../" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507358/100/0/threaded - http://secunia.com/advisories/37117 - http://www.securityfocus.com/bid/36783 - http://www.waraxe.us/advisory-75.html
CVE ID: CVE-2009-3788 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka Username) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/59301 - http://www.securityfocus.com/bid/36777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53886 - http://secunia.com/advisories/30750 - http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt
CVE ID: CVE-2009-3789 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the last_message parameter to (1) add.php, (2) toBePublished.php, (3) index.php, and (4) admin.php; the PATH_INFO to the default URI to (5) category.php, (6) department.php, (7) profile.php, (8) rejects.php, (9) search.php, (10) toBePublished.php, (11) user.php, and (12) view_file.php; and (13) the caller parameter in a Modify User action to user.php. Additional Analyst Notes: - CVE Program
ew_file.php; and (13) the caller parameter in a Modify User action to user.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/59302 - http://osvdb.org/59307 - http://www.securityfocus.com/bid/36777 - http://osvdb.org/59309 - http://osvdb.org/59304 - http://osvdb.org/59311 - http://osvdb.org/59310 - http://osvdb.org/59308 - http://secunia.com/advisories/30750 - http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt - http://osvdb.org/59303 - http://osvdb.org/59305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53887 - http://osvdb.org/59306 - http://osvdb.org/59312
CVE ID: CVE-2009-3790 State: PUBLISHED Published: 2009-10-26T17:00:00 Last Updated: 2024-08-07T06:38:30.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in FormMax (formerly AcroForm) evaluation 3.5 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FormMax import (.aim) file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/59079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53890 - http://secunia.com/advisories/36943