Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0323 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T19:56:45.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0324 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T22:14:28.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Customer Reference List (ref_list) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ - http://typo3.org/extensions/repository/view/ref_list/1.0.2/
CVE ID: CVE-2010-0325 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T03:33:53.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SB Folderdownload (sb_folderdownload) extension 0.2.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/sb_folderdownload/0.2.3/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0326 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T03:03:18.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Developer log (devlog) extension 2.9.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/devlog/2.9.2/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ - http://secunia.com/advisories/38164
CVE ID: CVE-2010-0327 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T16:43:58.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the KJ: Imagelightbox (kj_imagelightbox2) extension 2.0.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-2490. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38165 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ - http://typo3.org/extensions/repository/view/kj_imagelightbox2/2.0.2/
CVE ID: CVE-2010-0328 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T01:11:22.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Unit Converter (cs2_unitconv) extension 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38166 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ - http://typo3.org/extensions/repository/view/cs2_unitconv/1.0.5/
CVE ID: CVE-2010-0329 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T22:03:28.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38167 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ - http://typo3.org/extensions/repository/view/powermail/1.5.2/info/changelog.txt/ - http://typo3.org/extensions/repository/view/powermail/
/extensions/repository/view/powermail/1.5.2/info/changelog.txt/ - http://typo3.org/extensions/repository/view/powermail/1.5.2/
CVE ID: CVE-2010-0330 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T00:16:02.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Googlemaps for tt_news (jf_easymaps) extension 1.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/jf_easymaps/1.0.3/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0331 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T00:07:04.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0332 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T21:07:45.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0333 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T20:41:53.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Helpdesk (mg_help) extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0334 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T19:24:30.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0335 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T01:35:42.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0336 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T04:03:49.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kiddog_mysqldumper (kiddog_mysqldumper) extension 0.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0337 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T23:51:46.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the tt_news Mail alert (dl3_tt_news_alerts) extension 0.2.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0338 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T23:06:16.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the TT_Products editor (ttpedit) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0339 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T18:29:05.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the User Links (vm19_userlinks) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0340 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T18:59:30.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the MJS Event Pro (mjseventpro) extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0341 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T18:39:33.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the BB Simple Jobs (bb_simplejobs) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0342 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T03:38:13.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Reports for Job (job_reports) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0343 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T18:12:58.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Clan Users List (pb_clanlist) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0344 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T02:37:24.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the zak_store_management extension 1.0.0 and earlier TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0345 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T01:07:07.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0346 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T00:31:10.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Tip many friends (mimi_tipfriends) extension 0.0.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0347 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T23:20:25.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the VD / Geomap (vd_geomap) extension 0.3.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0348 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-16T19:47:22.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://webcal.c-3.jp/zeijakusei.html - http://jvn.jp/en/jp/JVN22247093/index.html - http://secunia.com/advisories/38135 - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000003.html - http://osvdb.org/61630
CVE ID: CVE-2010-0349 State: PUBLISHED Published: 2010-01-15T20:00:00Z Last Updated: 2024-09-16T19:09:27.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61629 - http://webcal.c-3.jp/zeijakusei.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000002.html - http://secunia.com/advisories/38135 - http
ijakusei.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000002.html - http://secunia.com/advisories/38135 - http://jvn.jp/en/jp/JVN33977065/index.html
CVE ID: CVE-2010-0350 State: PUBLISHED Published: 2010-01-15T20:00:00Z Last Updated: 2024-09-17T00:06:56.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE ID: CVE-2010-0356 State: PUBLISHED Published: 2010-01-18T19:00:00 Last Updated: 2024-08-07T00:45:12.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method. Additional Analyst Notes: - CVE Program Container: References: - http://www.shinnai.net/exploits/X6hU4E0E7P5H3qH5yXrn.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55536 - http://www.vupen.com/english/advisories/2010/0093 - http://secunia.com/advisorie
ce.ibmcloud.com/vulnerabilities/55536 - http://www.vupen.com/english/advisories/2010/0093 - http://secunia.com/advisories/38156
CVE ID: CVE-2010-0357 State: PUBLISHED Published: 2010-01-20T16:00:00 Last Updated: 2024-08-07T00:45:12.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Login page in IBM Lotus Web Content Management (WCM) 6.0.1.4, 6.0.1.5, and 6.0.1.6 before iFix 32; and 6.1.0.1 and 6.1.0.2 before iFix 24; for WebSphere Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55663 - http://www.vupen.com/english/advisories/2010/0149 - http://securitytr
change.xforce.ibmcloud.com/vulnerabilities/55663 - http://www.vupen.com/english/advisories/2010/0149 - http://securitytracker.com/id?1023463 - http://www.osvdb.org/61711 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM04647 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM03233 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM02704 - http://www.securityfocus.com/bid/37825
CVE ID: CVE-2010-0358 State: PUBLISHED Published: 2010-01-20T16:00:00Z Last Updated: 2024-09-16T22:30:27.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port, a different vulnerability than CVE-2009-3087. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023456 - http://intevydis.blogspot.com/2010/01/lotus-domino-7-probably-8-ldap-heap.html - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2010-0359 State: PUBLISHED Published: 2010-01-20T16:00:00Z Last Updated: 2024-09-16T22:56:40.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long string in an invalid Client Hello message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0147 - http://www.osvdb.org/61699 - http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released - http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES - http://securitytracker.com/id?10234
1/13/zws_4_3r5_released - http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES - http://securitytracker.com/id?1023465 - http://intevydis.com/vd-list.shtml - http://www.securityfocus.com/bid/37829 - http://secunia.com/advisories/38056 - http://intevydis.blogspot.com/2010/01/zeus-web-server-ssl2clienthello.html
CVE ID: CVE-2010-0360 State: PUBLISHED Published: 2010-01-20T16:00:00Z Last Updated: 2024-09-16T23:16:20.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273. Additional Analyst Notes: - CVE Program Container: References: - http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-trace.html - http://intevydis.com/vd-list.shtml
CVE ID: CVE-2010-0361 State: PUBLISHED Published: 2010-01-20T16:00:00Z Last Updated: 2024-09-17T02:01:34.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request. Additional Analyst Notes: - CVE Program Container: References: - http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-webdav.html
CVE ID: CVE-2010-0362 State: PUBLISHED Published: 2010-01-20T16:00:00Z Last Updated: 2024-09-16T22:15:44.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses. Additional Analyst Notes: - CVE Program Container: References: - http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
CVE ID: CVE-2010-0363 State: PUBLISHED Published: 2010-01-20T16:00:00Z Last Updated: 2024-09-17T04:09:35.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2002-1785. Additional Analyst Notes: - CVE Program Container: References: - http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
CVE ID: CVE-2010-0364 State: PUBLISHED Published: 2010-01-21T20:00:00 Last Updated: 2024-08-07T00:45:12.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55717 - http://www.securityfocus.com/bid/37832 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14342 - http://www.exploit-db.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14342 - http://www.exploit-db.com/exploits/11174
CVE ID: CVE-2010-0365 State: PUBLISHED Published: 2010-01-21T20:00:00 Last Updated: 2024-08-07T00:45:12.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55739 - http://secunia.com/advisories/38252 - http://osvdb.org/61827 - http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt
CVE ID: CVE-2010-0366 State: PUBLISHED Published: 2010-01-21T20:00:00 Last Updated: 2024-08-07T00:45:12.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55738 - http://secunia.com/advisories/38252 - http://osvdb.org/61826 - http://www.packet
ce.ibmcloud.com/vulnerabilities/55738 - http://secunia.com/advisories/38252 - http://osvdb.org/61826 - http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt
CVE ID: CVE-2010-0367 State: PUBLISHED Published: 2010-01-21T20:00:00 Last Updated: 2024-08-07T00:45:12.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, allow remote attackers to execute arbitrary PHP code via a URL in the rowptem[template] parameter to (1) showcasesearch.php and (2) showcase2search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55740