Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
le.com/technetwork/topics/security/cpujul2008-090335.html - http://www.vupen.com/english/advisories/2008/2115 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143 - http://www.securitytracker.com/id?1020497 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143 - http://www.vupen.com/english/advisories/2008/2109/references - http://secunia.com/advisories/31087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43822 - http://secunia.com/advisories/31113
CVE ID: CVE-2008-2622 State: PUBLISHED Published: 2008-07-15T23:00:00 Last Updated: 2024-08-07T09:05:30.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, and CVE-2008-2621. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html - http://www.vupen.com/english/advisories/2008/2115 - https://
le.com/technetwork/topics/security/cpujul2008-090335.html - http://www.vupen.com/english/advisories/2008/2115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43817 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143 - http://www.securitytracker.com/id?1020497 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143 - http://www.vupen.com/english/advisories/2008/2109/references - http://secunia.com/advisories/31087 - http://secunia.com/advisories/31113
CVE ID: CVE-2008-2623 State: PUBLISHED Published: 2009-01-14T02:00:00 Last Updated: 2024-08-07T09:05:30.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33525 - http://www.vupen.com/english/advisories/2009/0115 - http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securitytracker.com/id?1021572 - http://www.securityfocus.com/bid/33177
CVE ID: CVE-2008-2624 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T09:05:30.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45879 - http://secunia.com/advisories/32291 - http://www.securitytracker.com/id?1021050 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-2625 State: PUBLISHED Published: 2008-10-14T21:00:00 Last Updated: 2024-08-07T09:05:30.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue involves an authentication bypass by establishing a TNS connection and impersonating a user session via a crafted authentication message during proxy authentication mode. Additional
tion and impersonating a user session via a crafted authentication message during proxy authentication mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497539/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45880 - http://secunia.com/advisories/32291 - http://www.securitytracker.com/id?1021050 - http://www.vupen.com/english/advisories/2008/2825
CVE ID: CVE-2008-2626 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1737/references - http://www.securityfocus.com/bid/29507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42818 - https://www.exploit-db.com/exploits/5731 - http://secunia.com/advisories/30503 - http://www.davethewebguy.com/battleblog/article.asp?entry=24
CVE ID: CVE-2008-2627 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the IDoBlog (com_idoblog) component b24 and earlier and 1.0, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the userid parameter in a userblog action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42819 - https://www.exploit-db.com/exploits/5730 - http://secunia.com/advisories/30505
CVE ID: CVE-2008-2628 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the eQuotes (com_equotes) component 0.9.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42805 - https://www.exploit-db.com/exploits/5723
CVE ID: CVE-2008-2629 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitrary SQL commands via the albumId parameter in a ViewAlbum action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29495 - https://www.exploit-db.com/exploits/5724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42808
CVE ID: CVE-2008-2630 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter in a category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1736/references - https://www.exploit-db.com/exploits/5734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42838 - http://secunia.com/advisories/30443
CVE ID: CVE-2008-2631 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42809
CVE ID: CVE-2008-2632 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the usage parameter in a subscribe action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42794
CVE ID: CVE-2008-2633 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) show_radio or (2) show_video action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/501069/100/0/threaded - http://secunia.com/advisories/30513 - https://www.exploit-db.com/exploits/5729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42814 - http://packetstormsecur
/www.exploit-db.com/exploits/5729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42814 - http://packetstormsecurity.org/0806-exploits/joomlajoomradio-sql.txt - http://www.securityfocus.com/bid/29504
CVE ID: CVE-2008-2634 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers to execute arbitrary SQL commands via the item parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42786 - https://www.exploit-db.com/exploits/5717
CVE ID: CVE-2008-2635 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in BitKinex 2.9.3 allow remote FTP and WebDAV servers to create or overwrite arbitrary files via a .. (dot dot) in (1) a response to a LIST command from the BitKinex FTP client and (2) a response to a PROPFIND command from the BitKinex WebDAV client. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42842 - http://secunia.com/advisories/3
am Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42842 - http://secunia.com/advisories/30532 - http://vuln.sg/bitkinex293-en.html - http://www.vupen.com/english/advisories/2008/1738/references
CVE ID: CVE-2008-2636 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service (management interface outage) or possibly execute arbitrary code via a URI that begins with a "/./" sequence, contains many instances of a "front_page" sequence, and ends with a ".asp" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3929 - http://secunia.com/advisories/30562 - http://www.vupen.com/english/advisories/2008/1772/references - http
tyalert/3929 - http://secunia.com/advisories/30562 - http://www.vupen.com/english/advisories/2008/1772/references - http://www.securityfocus.com/archive/1/493129/100/0/threaded - http://www.securitytracker.com/id?1020237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42890
CVE ID: CVE-2008-2637 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via quotes in (1) the css_exceptions parameter in vdesk/admincon/webyfiers.php and (2) the sql_matchscope parameter in vdesk/admincon/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020205 - http://www.vupen.com/english/advisories/2008/1765/references - http://www.securityfocus.com/ar
ytracker.com/id?1020205 - http://www.vupen.com/english/advisories/2008/1765/references - http://www.securityfocus.com/archive/1/493149/100/0/threaded - http://secunia.com/advisories/30550 - http://securityreason.com/securityalert/3931 - http://www.securityfocus.com/bid/29574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42884
CVE ID: CVE-2008-2638 State: PUBLISHED Published: 2008-06-10T00:00:00 Last Updated: 2024-08-07T09:05:30.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5736 - http://secunia.com/advisories/30146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42854 - http://www.vupen.com/english/advisories/2008/1735/references - http://1scripts.net/php-scripts/index.php?p=16
CVE ID: CVE-2008-2639 State: PUBLISHED Published: 2008-06-16T18:26:00 Last Updated: 2024-08-07T09:05:30.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to execute arbitrary code via a long string in the second application packet in a TCP session on port 20222. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1834/references - http://www.kb.cert.org/vuls/id/CTAR-7ENQNH - http://www.coresecurity.com/?action=item&id=2186 - http://isc.sans.org/diary.html?storyid=4556 - http://secunia.com/
H - http://www.coresecurity.com/?action=item&id=2186 - http://isc.sans.org/diary.html?storyid=4556 - http://secunia.com/advisories/30638 - http://securitytracker.com/id?1020241 - https://www.exploit-db.com/exploits/6387 - http://www.kb.cert.org/vuls/id/476345 - http://www.securityfocus.com/bid/29634 - http://www.securityfocus.com/archive/1/493272/100/0/threaded - http://securityreason.com/securityalert/3944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42992
CVE ID: CVE-2008-2640 State: PUBLISHED Published: 2008-06-18T19:29:00 Last Updated: 2024-08-07T09:05:30.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to (1) client-side-detection-with-history/history/historyFrame.html, (2) express-installation-with-history/history/historyFrame.html, or (3) no-player-detection-with-history/history/historyFrame.html in templates/html-templates/. NOTE: Firefox 2.0 and possibly other browsers pre
n-with-history/history/historyFrame.html in templates/html-templates/. NOTE: Firefox 2.0 and possibly other browsers prevent exploitation. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb08-14.html - http://securitytracker.com/id?1020301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43150 - http://secunia.com/advisories/30746 - http://www.vupen.com/english/advisories/2008/1862 - http://blog.watchfire.com/wfblog/2008/06/javascript-code.html - http://www.securityfocus.com/bid/29778
CVE ID: CVE-2008-2641 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:05:30.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to an "input validation issue in a JavaScript method." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2289 - http://www.vupen.com/english/advisories/2008/1906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43307 - http://www.sec
www.vupen.com/english/advisories/2008/1906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43307 - http://www.securitytracker.com/id?1020352 - http://isc.sans.org/diary.html?storyid=4616 - http://www.securityfocus.com/bid/29908 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html - http://www.kb.cert.org/vuls/id/788019 - http://secunia.com/advisories/30832 - http://secunia.com/advisories/31352 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240106-1 - http://www.adobe.com/support/security/bulletins/apsb08-15.html - http://www.gentoo.org/security/en/glsa/glsa-200808-10.xml - http://www.redhat.com/support/errata/RHSA-2008-0641.html - http://secunia.com
.org/security/en/glsa/glsa-200808-10.xml - http://www.redhat.com/support/errata/RHSA-2008-0641.html - http://secunia.com/advisories/31136 - http://secunia.com/advisories/31428 - http://secunia.com/advisories/31339
CVE ID: CVE-2008-2642 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in OtomiGenX 2.2 allows remote attackers to execute arbitrary SQL commands via the userAccount parameter (aka the User Name field) to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42795 - http://securityreason.com/securityalert/3932 - http://www.securityfocus.com/archive/1/492914/100/0/threaded - h
/42795 - http://securityreason.com/securityalert/3932 - http://www.securityfocus.com/archive/1/492914/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42817
CVE ID: CVE-2008-2643 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Bible Study (com_biblestudy) component before 6.0.7c for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a mediaplayer action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30492 - https://www.exploit-db.com/exploits/5710 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42788 - http://joomlacode.org/gf/project/biblestudy/news/?action=NewsThreadView&id=1454
CVE ID: CVE-2008-2644 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the (1) data parameter to catalog.php, the (2) keyword parameter to search.php, the (3) page parameter to bb.php, and the (4) new_s parameter to order.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5725 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42813 - http://secunia.com/advisories/30477 - http://www.securityfocus.co
//exchange.xforce.ibmcloud.com/vulnerabilities/42813 - http://secunia.com/advisories/30477 - http://www.securityfocus.com/archive/1/493130/100/0/threaded - http://www.securityfocus.com/bid/29496
CVE ID: CVE-2008-2645 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in (1) barrel/, (2) barry/, (3) mylook/, (4) oerdec/, (5) penguin/, (6) sidebar/, (7) slashdot/, and (8) text-only/ in templates/. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/adv
y traversal sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1718/references - https://www.exploit-db.com/exploits/5722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42784 - http://www.securityfocus.com/bid/29469
CVE ID: CVE-2008-2646 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web script or HTML via the (1) sql parameter to dbadd.inc.php, (2) InsertJournal parameter to add_journal_mask.inc.php, (3) InsertBibliography parameter to insert_mask.inc.php, and (4) LabelYear parameter to search_mask.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5716 - http://secunia.com/advisories/30488 - http://www.securityfocus.com/bid/29465 - htt
://www.exploit-db.com/exploits/5716 - http://secunia.com/advisories/30488 - http://www.securityfocus.com/bid/29465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42760
CVE ID: CVE-2008-2647 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/journal_change_mask.inc.php in meBiblio 0.4.7 allows remote attackers to execute arbitrary SQL commands via the JID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42759 - http://www.securityfocus.com/bid/29465
CVE ID: CVE-2008-2648 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the files/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42761 - http://www.securityfocus.com/bid/29465
CVE ID: CVE-2008-2649 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parameter to (1) don3_requiem.don3app/don3_requiem.php and (2) frontpage.don3app/frontpage.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42790
CVE ID: CVE-2008-2650 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sl parameter to index.php. NOTE: this can be leveraged for remote file execution by including adm.php and then invoking the upload action. NOTE: on 20080601, the vendor patched 3.1 without changing the version number. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30463 - http://osvd