Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4858 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the showlang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8417 - http://www.securityfocus.com/bid/43708 - http://www.exploit-db.com/exploits/15204 - http://packetstormsecurity.org/1010-exploits/dnetlivestats-lfi.txt
CVE ID: CVE-2010-4859 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/webasyst-sql.txt - http://securityreason.com/securityalert/8416 - http://www.securityfocus.com/bid/40349
CVE ID: CVE-2010-4860 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15154 - http://packetstormsecurity.org/1009-exploits/myphpauction-sql.txt - http://securityreason.com/securityalert/8418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62144
CVE ID: CVE-2010-4861 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:30.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43579 - http://securityreason.com/securityalert/8419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62130 - http://www.webspell.org/index.php?site=files&cat=21 - http://www.exploit-db.com/exploits/15151 - http://packetstormsecurity.org/1009-exploits/webspell421-sql.txt
CVE ID: CVE-2010-4862 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41681 - http://www.exploit-db.com/exploits/15163 - http://www.securityfocus.com/bid/43630 - http://osvdb.org/68308 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62191
CVE ID: CVE-2010-4863 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43593 - http://securityreason.com/securityalert/8420 - http://packetstormsecurity.org/1009-exploits/getsimplecms201-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62177 - http://www.securityfocus.com/archive/1/514043/100/0/threaded - http
exchange.xforce.ibmcloud.com/vulnerabilities/62177 - http://www.securityfocus.com/archive/1/514043/100/0/threaded - http://www.htbridge.ch/advisory/xss_vulnerability_in_getsimple_cms_1.html
CVE ID: CVE-2010-4864 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:30.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cm_id parameter in an equip presenta action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1010-exploits/joomlaclubmanager-sql.txt - http://www.securityfocus.com/bid/43821 - http://securityreason.com/securityalert/8421
CVE ID: CVE-2010-4865 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://adv.salvatorefresta.net/JE_Guestbook_1.0_Joomla_Component_Multiple_Remote_Vulnerabilities-30092010.txt - http://secunia.com/advisories/41651 - http://osvdb.org/68283 - http://www.securityfocus.com/bid/43605 - https://exchange.xforce.ibmcloud.co
advisories/41651 - http://osvdb.org/68283 - http://www.securityfocus.com/bid/43605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62151 - http://www.securityfocus.com/archive/1/514064/100/0/threaded - http://securityreason.com/securityalert/8422 - http://www.exploit-db.com/exploits/15157
CVE ID: CVE-2010-4866 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43648 - http://securityreason.com/securityalert/8423 - http://packetstormsecurity.org/1010-exploits/chipmunkboard13-sql.txt - http://www.exploit-db.com/exploits/15175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62221
CVE ID: CVE-2010-4867 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8426 - http://www.securityfocus.com/archive/1/514420/100/0/threaded - http://www.securityfocus.com/bid/44370
CVE ID: CVE-2010-4868 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:29.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1010-exploits/wagora-lfixss.txt - http://securityreason.com/securityalert/8426 - http://www.securityfocus.com/archive/1/514420/100/0/threaded - http://www.securityfocus.com/bid/44370
CVE ID: CVE-2010-4869 State: PUBLISHED Published: 2011-10-05T10:00:00 Last Updated: 2024-08-07T04:02:30.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44378 - http://www.exploit-db.com/exploits/15309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62752
CVE ID: CVE-2010-4870 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:29.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514479/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/62810 - http://www.exploit-db.com/exploits/15328 - http://securityreason.com/securityalert/8427 - http://packetstormsecurity.org/1010-exploits/bloofoxcms-sql.txt - http://www.securityfocus.com/bid/44464 -
yalert/8427 - http://packetstormsecurity.org/1010-exploits/bloofoxcms-sql.txt - http://www.securityfocus.com/bid/44464 - http://www.htbridge.ch/advisory/sql_injection_in_bloofoxcms_registration_plugin.html
CVE ID: CVE-2010-4871 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:30.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SmartFTP before 4.0 Build 1142 allows attackers to have an unknown impact via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42060 - http://smartftp.com/forums/index.php?/topic/16425-smartftp-client-4-0-change-log - https://exchange.xforce.ibmcloud.com/vulnerabilities/63113 - http://osvdb.org/69136
CVE ID: CVE-2010-4872 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:29.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63217 - http://securityreason.com/securityalert/8428 - http://packetstormsecurity.org/files/view/95777/aspilotpilotcart-sql.txt - http://www.exploit-db.com/exploits/15497
CVE ID: CVE-2010-4873 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:29.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8429 - http://packetstormsecurity.org/1011-exploits/webid085p1-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/63152 - http://secunia.com/advisories/42171 - http://www.johnleitch.net/Vulnerabilities/WeBid.0.8.5P1.Reflected.Cross-site.Scripting/62 - http
.com/advisories/42171 - http://www.johnleitch.net/Vulnerabilities/WeBid.0.8.5P1.Reflected.Cross-site.Scripting/62 - http://osvdb.org/69103 - http://www.securityfocus.com/bid/44765
CVE ID: CVE-2010-4874 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:30.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) msn, or (4) aim parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44462 - http://packetstormsecurity.org/1010-exploits/ninkobb-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62815 - http://www.htbridge.ch/advisory/xss_in_ninkobb.html - http://www.securityfocus.com/arc
cloud.com/vulnerabilities/62815 - http://www.htbridge.ch/advisory/xss_in_ninkobb.html - http://www.securityfocus.com/archive/1/514527/100/0/threaded - http://secunia.com/advisories/41933 - http://www.exploit-db.com/exploits/15330 - http://securityreason.com/securityalert/8430 - http://www.osvdb.org/68897
CVE ID: CVE-2010-4875 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:30.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery Plugin 3.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63057 - http://www.johnleitch.net/Vulnerabilities/WordPress.Vodpod.Video.Gallery.3.1.5.Reflected.Cross-site.Scripting/58 - http://securityreason
eitch.net/Vulnerabilities/WordPress.Vodpod.Video.Gallery.3.1.5.Reflected.Cross-site.Scripting/58 - http://securityreason.com/securityalert/8431 - http://packetstormsecurity.org/1011-exploits/wpvodpod-xss.txt - http://osvdb.org/69084
CVE ID: CVE-2010-4876 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-17T01:00:33.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2265 - http://www.exploit-db.com/exploits/14849
CVE ID: CVE-2010-4877 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:29.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8432 - http://www.securityfocus.com/bid/42949 - http://packetstormsecurity.org/1009-exploits/onecms-xss.txt
CVE ID: CVE-2010-4878 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-16T21:02:35.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in formmailer.php in Kontakt Formular 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14809
CVE ID: CVE-2010-4879 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-17T00:51:48.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14851
CVE ID: CVE-2010-4880 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:29.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to inject arbitrary web script or HTML via the (1) category_name, (2) category_description, (3) event_name, or (4) event_description parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513445/100/0/threaded - http://packetstormsecurity.org/1008-advisories/apphp-xssxsrf.txt - http://securityreason.com/securityalert/8433
CVE ID: CVE-2010-4881 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:30.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to hijack the authentication of unspecified victims for requests that use the (1) category_name, (2) category_description, (3) event_name, or (4) event_description parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513445/100/0/threaded - http://packetstormsecurity.org/1008-advisories/apphp-xssxsrf.txt - http://securityreason.com/se
/513445/100/0/threaded - http://packetstormsecurity.org/1008-advisories/apphp-xssxsrf.txt - http://securityreason.com/securityalert/8433
CVE ID: CVE-2010-4882 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:29.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513361/100/0/threaded - http://securityreason.com/securityalert/8434 - http://www.htbridge.ch/advisory/xss_vulnerability_in_auto_cms.html
CVE ID: CVE-2010-4883 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:29.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62070 - http://www.osvdb.org/68264 - http://modxcms.com/forums/index.php/topic%2C55105.0.html - http://modxcms.com/forums/index.php/topic%2C55104.0.html - http://www.securityfocus.com/bid/43577 - http://secunia.com/advisories/41638 -
/forums/index.php/topic%2C55104.0.html - http://www.securityfocus.com/bid/43577 - http://secunia.com/advisories/41638 - http://packetstormsecurity.org/1009-exploits/modx202pl-xss.txt - http://securityreason.com/securityalert/8435
CVE ID: CVE-2010-4884 State: PUBLISHED Published: 2011-10-07T10:00:00 Last Updated: 2024-08-07T04:02:30.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1008-exploits/hinnendahlgb-rfi.txt - http://www.exploit-db.com/exploits/14810 - http://securityreason.com/securityalert/8436
CVE ID: CVE-2010-4885 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-16T22:30:29.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the XING Button (xing) extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42937 - http://typo3.org/extensions/repository/view/xing/1.0.2/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-018/ - http://secunia.com/advisories/41269
CVE ID: CVE-2010-4886 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-17T04:09:58.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "official twitter tweet button for your page" (tweetbutton) extension before 1.0.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42941 - http://secunia.com/advisories/41268 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-018/ - http://typo3.org/extensions/repository/view/tweetbutton/1.0.5/
CVE ID: CVE-2010-4887 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-16T19:51:09.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Commenting system Backend Module (commentsbe) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-018/
CVE ID: CVE-2010-4888 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-16T20:26:39.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-018/
CVE ID: CVE-2010-4889 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-17T02:31:43.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-018/
CVE ID: CVE-2010-4890 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-16T23:16:18.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42945 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-018/ - http://typo3.org/extensions/repository/view/ke_yac/1.1.2/
CVE ID: CVE-2010-4891 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-17T03:22:47.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42945 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-018/ - http://typo3.org/extensions/repository/view/ke_yac/1.1.2/
CVE ID: CVE-2010-4892 State: PUBLISHED Published: 2011-10-07T10:00:00Z Last Updated: 2024-09-16T19:56:19.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-021 - http://typo3.org/extensions/repository/view/powermail/1.5.5 - http://secunia.com/advisories/41962
CVE ID: CVE-2010-4893 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary web script or HTML via the category parameter in a details action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61691 - http://secunia.com/advisories/41327 - http://www.exploit-db.com/exploits/14948
CVE ID: CVE-2010-4894 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:29.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/index_73.htm - http://osvdb.org/67836 - http://www.exploit-db.com/exploits/14897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61606 - http://securityreason.com/securityalert/8437 - http://packetstormsecurity.org/
orce.ibmcloud.com/vulnerabilities/61606 - http://securityreason.com/securityalert/8437 - http://packetstormsecurity.org/1009-exploits/chillycms-sqlxss.txt - http://www.vupen.com/english/advisories/2010/2298 - http://www.securityfocus.com/bid/42991 - http://secunia.com/advisories/41313