Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0958 State: PUBLISHED Published: 2012-12-26T22:00:00Z Last Updated: 2024-09-16T22:36:46.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1665-1 - https://bugs.launchpad.net/ubuntu/%2Bsource/unity-firefox-extension/%2Bbug/1069817 - http://www.securityfocus.com/bid/56930 - http://osvdb.org/88438 - http://bazaar.launchpad.net/~w
ension/%2Bbug/1069817 - http://www.securityfocus.com/bid/56930 - http://osvdb.org/88438 - http://bazaar.launchpad.net/~webapps/unity-firefox-extension/trunk/revision/331
CVE ID: CVE-2012-0959 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T18:45:27.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/remote-login-service/%2Bbug/1070896 - http://www.ubuntu.com/usn/USN-1624-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80278
CVE ID: CVE-2012-0960 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T18:45:26.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80319 - https://bugs.launchpad.net/unity-firefox-extension/%2Bbug/1076350 - http://www.ubuntu.com/usn/USN-1639-1
CVE ID: CVE-2012-0961 State: PUBLISHED Published: 2012-12-26T22:00:00Z Last Updated: 2024-09-16T17:28:35.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by reading the log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56917 - http://secunia.com/advisories/51568 - http://www.ubuntu.com/usn/USN-1662-1 - http://osvdb.org/88380
CVE ID: CVE-2012-0962 State: PUBLISHED Published: 2012-12-26T22:00:00Z Last Updated: 2024-09-17T02:58:01.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51627 - https://bugs.launchpad.net/software-center-agent/%2Bbug/1052789 - http://www.ubuntu.com/usn/USN-1666-1 - http://www.securitytracker.com/id?1027891 - http://www.securityfocus.com/bid/56959
CVE ID: CVE-2012-0963 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0964 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0965 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0966 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0967 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0968 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0969 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0970 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0971 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0972 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-0973 State: PUBLISHED Published: 2012-09-25T23:00:00Z Last Updated: 2024-09-16T22:25:17.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the sCategory parameter to index.php, which is not properly handled by the (1) osc_search_category_id function in oc-includes/osclass/helpers/hSearch.php and (2) findBySlug function oc-includes/osclass/model/Category.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osclass/OSClass/commit/ff7ef8a
tion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-73 - http://osclass.org/2012/01/16/osclass-2-3-5/ - http://www.securityfocus.com/bid/51662 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_osclass.html - http://secunia.com/advisories/47697 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0157.html
CVE ID: CVE-2012-0974 State: PUBLISHED Published: 2012-09-25T23:00:00Z Last Updated: 2024-09-16T16:43:48.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) sCity, (2) sPattern, (3) sPriceMax, and (4) sPriceMin parameters in a search action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-73 - http://osclass.org/2012/01/16/osclass-2-3-5/ - http://www.sec
/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-73 - http://osclass.org/2012/01/16/osclass-2-3-5/ - http://www.securityfocus.com/bid/51662 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_osclass.html - http://secunia.com/advisories/47697 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0157.html
CVE ID: CVE-2012-0975 State: PUBLISHED Published: 2012-02-02T17:00:00 Last Updated: 2024-08-06T18:45:26.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72823 - http://www.securityfocus.com/bid/51734 - http://secunia.com/advisories/47786 - http://osvdb.org/78660 - http://packetstormsecurity.org/files/view/109240/dpi10-xss.txt
CVE ID: CVE-2012-0976 State: PUBLISHED Published: 2012-02-02T17:00:00 Last Updated: 2024-08-06T18:45:26.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.7 - https://github.com/silverstripe/sapphire/commit/475e077 - http://osvdb.org/78677 - http://www.securityfocus.com/bid/517
https://github.com/silverstripe/sapphire/commit/475e077 - http://osvdb.org/78677 - http://www.securityfocus.com/bid/51761 - http://secunia.com/advisories/47812 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - https://github.com/silverstripe/sapphire/commit/5fe7091 - http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72820 - http://packetstormsecurity.org/files/view/109210/silverstripecmspage-xss.txt - https://github.com/silverstripe/sapphire/commit/252e187
CVE ID: CVE-2012-0977 State: PUBLISHED Published: 2012-02-02T17:00:00 Last Updated: 2024-08-06T18:45:25.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in jp2_x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72807 - http://osvdb.org/78661 - http://secunia.com/advisories/47350
CVE ID: CVE-2012-0978 State: PUBLISHED Published: 2012-02-02T17:00:00 Last Updated: 2024-08-06T18:45:25.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72806 - http://osvdb.org/78662 - http://secunia.com/advisories/47831
CVE ID: CVE-2012-0979 State: PUBLISHED Published: 2012-02-02T17:00:00 Last Updated: 2024-08-06T18:45:25.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field in a profile, involving (1) registration or (2) editing of the user. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47784 - http://st2tea.blogspot.com/2012/01/cross-site-scripting-twiki.html - http://www.securitytracker.com/id?1026604 - http://www.securityfocus.com/bid/51731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72821 - http:
id?1026604 - http://www.securityfocus.com/bid/51731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72821 - http://osvdb.org/78664 - http://packetstormsecurity.org/files/109246/twiki-xss.txt
CVE ID: CVE-2012-0980 State: PUBLISHED Published: 2012-02-02T17:00:00 Last Updated: 2024-08-06T18:45:26.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL commands via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51725 - http://www.exploit-db.com/exploits/18432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72826
CVE ID: CVE-2012-0981 State: PUBLISHED Published: 2012-02-02T17:00:00 Last Updated: 2024-08-06T18:45:26.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. (dot dot) in the r parameter to index.php. NOTE: Some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47802 - http://www.exploit-db.com/exploits/18435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72824
CVE ID: CVE-2012-0982 State: PUBLISHED Published: 2012-02-02T17:00:00 Last Updated: 2024-08-06T18:45:25.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the price_from parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18441 - http://www.securityfocus.com/bid/51773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72879
CVE ID: CVE-2012-0983 State: PUBLISHED Published: 2012-02-02T17:00:00 Last Updated: 2024-08-06T18:45:26.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72809 - http://www.exploit-db.com/exploits/18438 - http://www.securityfocus.com/bid/51781
CVE ID: CVE-2012-0984 State: PUBLISHED Published: 2014-09-11T14:00:00 Last Updated: 2024-08-06T18:45:26.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) to_userid parameter to modules/pm/pmlite.php or the (2) current_file, (3) imgcat_id, or (4) target parameter to class/xoopseditor/tinymce/tinymce/jscripts/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81212 - http://www.exploit-db.com/exploits/18753 - https://www.htbridge.com/advisory/mult
References: - http://osvdb.org/81212 - http://www.exploit-db.com/exploits/18753 - https://www.htbridge.com/advisory/multiple_vulnerabilities_in_xoops.html - http://packetstormsecurity.org/files/111958/XOOPS-2.5.4-Cross-Site-Scripting.html - http://xoops.org/modules/news/article.php?storyid=6284 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0128.html - http://secunia.com/advisories/48887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75024 - http://osvdb.org/81213 - http://www.securityfocus.com/bid/53143
CVE ID: CVE-2012-0985 State: PUBLISHED Published: 2012-06-07T19:00:00 Last Updated: 2024-08-06T18:45:25.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method. Additional Analyst Notes: - CVE P
in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-05/0147.html - http://www.exploit-db.com/exploits/18958 - http://secunia.com/advisories/49340 - http://osvdb.org/82401 - http://www.securityfocus.com/bid/53735 - http://esupport.sony.com/US/perl/support-info.pl?template_id=1&info_id=946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75978
CVE ID: CVE-2012-0986 State: PUBLISHED Published: 2012-10-06T21:00:00 Last Updated: 2024-08-06T18:45:25.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) notifications.php, (2) modules/system/admin/images/browser.php, and (3) modules/content/admin/content.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78140 - http://www.securityfocus.com/bid/51268 - https://www.htbridge.com/advisory/HTB23064 - http://community.impresscms.org/module
://www.securityfocus.com/bid/51268 - https://www.htbridge.com/advisory/HTB23064 - http://community.impresscms.org/modules/smartsection/item.php?itemid=579 - http://www.osvdb.org/78142 - http://secunia.com/advisories/47448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72145 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0022.html - http://www.osvdb.org/78141
CVE ID: CVE-2012-0987 State: PUBLISHED Published: 2012-10-06T21:00:00 Last Updated: 2024-08-06T18:45:25.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the icmsConfigPlugins[sanitizer_plugins][] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72146 - http://www.securityfocus.com/bid/51268 - https://www.htbridge.com/advisory/HTB23064 - http://community.impresscms.org/modules/smartse
curityfocus.com/bid/51268 - https://www.htbridge.com/advisory/HTB23064 - http://community.impresscms.org/modules/smartsection/item.php?itemid=579 - http://www.osvdb.org/78143 - http://secunia.com/advisories/47448 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0022.html
CVE ID: CVE-2012-0988 State: PUBLISHED Published: 2012-09-20T00:00:00 Last Updated: 2024-08-06T18:45:26.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) login.php, (2) admin.php, or (3) preferences.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51373 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0070.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72308 - http://secunia.com/advisories/47531 -
q/2012-01/0070.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72308 - http://secunia.com/advisories/47531 - http://www.knowledgetree.org/Security_advisory:_URL_Manipulation - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_knowledgetree_community_edition.html
CVE ID: CVE-2012-0989 State: PUBLISHED Published: 2012-10-01T22:00:00 Last Updated: 2024-08-06T18:45:26.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/xss_in_oneorzero_aims.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72456 - http://www.securityfocus.com/bid/51549 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0117.html
CVE ID: CVE-2012-0990 State: PUBLISHED Published: 2012-02-07T21:00:00 Last Updated: 2024-08-06T18:45:26.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify account settings such as the administrator password or email via certain Settings[] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/dclassifieds/files/csrf_fix_120105.rar/download - http://secunia.com/advisories/47691 - https://www.htbridge.ch/advisory/HTB23067 - http://www.o
fix_120105.rar/download - http://secunia.com/advisories/47691 - https://www.htbridge.ch/advisory/HTB23067 - http://www.osvdb.org/78557 - http://www.securityfocus.com/bid/51671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72733 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0158.html
CVE ID: CVE-2012-0991 State: PUBLISHED Published: 2012-02-07T21:00:00 Last Updated: 2024-08-06T18:45:26.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/HTB23069 - http://osvdb.org/78727 - http://www.securityfocus.com/bid/51788 - http://archives.neohapsis.com/archives/bugtraq/2012-02/00
p://osvdb.org/78727 - http://www.securityfocus.com/bid/51788 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html - http://secunia.com/advisories/47781 - http://osvdb.org/78729 - http://osvdb.org/78728 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72914 - http://osvdb.org/78730 - http://www.open-emr.org/wiki/index.php/OpenEMR_Patches
CVE ID: CVE-2012-0992 State: PUBLISHED Published: 2012-02-07T21:00:00 Last Updated: 2024-08-06T18:45:26.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.ch/advisory/HTB23069 - http://osvdb.org/78731 - http://www.securityfocus.com/bid/51788 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html - http://secunia.com/advisories/47781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72915 - http://www.open-emr.org/wiki/in
unia.com/advisories/47781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72915 - http://www.open-emr.org/wiki/index.php/OpenEMR_Patches
CVE ID: CVE-2012-0993 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:45:26.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_image plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewer_size_image_saved cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.zenphoto.org/trac/changeset/8995 - http://www.zenphoto.org/trac/changeset/8994 - http://www.securityfocus.com/bid/51916 - http://secunia.com/advisories/47875 - https://www.htbridge.ch/advisory/HTB23070 - https://exchange.
ocus.com/bid/51916 - http://secunia.com/advisories/47875 - https://www.htbridge.ch/advisory/HTB23070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73081 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html - http://www.zenphoto.org/news/zenphoto-1.4.2.1
CVE ID: CVE-2012-0994 State: PUBLISHED Published: 2012-02-21T00:00:00 Last Updated: 2024-08-06T18:45:25.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.zenphoto.org/trac/changeset/8995 - http://www.zenphoto.org/trac/changeset/8994 - http://www.securityfocus.com/bid/51916 - http://secunia.com/advisories/47875 - https://www.htbridge.ch/advisory/HTB23070 - https://exchange.xforce.ibmcloud.com/vulnerabi
ecunia.com/advisories/47875 - https://www.htbridge.ch/advisory/HTB23070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73082 - http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html - http://www.zenphoto.org/news/zenphoto-1.4.2.1