Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6773 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T11:41:59.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary PHP code into user/internettoolbar/index.php via the (1) fav1_url, (2) fav1_name, (3) fav2_url, (4) fav2_name, (5) fav3_url, (6) fav3_name, (7) fav4_url, (8) fav4_name, (9) fav5_url, or (10) fav5_name parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32971 - https://www.exploit-db.com/exploits/7545 - http://secunia.
ainer: References: - http://www.securityfocus.com/bid/32971 - https://www.exploit-db.com/exploits/7545 - http://secunia.com/advisories/33272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47562
CVE ID: CVE-2008-6774 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T11:42:00.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote attackers to bypass intended restrictions and edit toolbar settings via an invalid username. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47566 - http://secunia.com/advisories/33272
CVE ID: CVE-2008-6775 State: PUBLISHED Published: 2009-05-01T16:00:00 Last Updated: 2024-08-07T11:42:00.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service (CPU consumption, SMS consumption, and connectivity loss) via a flood of vCards to UDP port 9204. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47497 - http://www.mseclab.com/index.php?page_id=110 - http://osvdb.org/52009 - http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0370.html - http://www.securityfocus.com/archive/1/499416/100/0/threaded
CVE ID: CVE-2008-6776 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T11:41:59.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49540 - http://secunia.com/advisories/32532 - https://www.exploit-db.com/exploits/6914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46278
CVE ID: CVE-2008-6777 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T11:42:00.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a confirm action, the (2) user parameter in a newconfirm action, and (3) reqpwd action to member.php; and the (4) quote parameter in a post action and (5) pid parameter in an edit action to post.php, different vectors than CVE-2005-0413.2 and CVE-2007-6667. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28280 - https://www.expl
Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28280 - https://www.exploit-db.com/exploits/6879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46238 - http://www.securityfocus.com/bid/31995
CVE ID: CVE-2008-6778 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T11:42:00.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46276 - https://www.exploit-db.com/exploits/6918 - http://www.securityfocus.com/bid/32036 - http://secunia.com/advisories/32528
CVE ID: CVE-2008-6779 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T11:41:59.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showcontent action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45992 - http://packetstormsecurity.org/0810-exploits/phpnukesarkilar-sql.txt - http://www.securityfocus.com/bid/31830
CVE ID: CVE-2008-6780 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T11:42:00.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6911 - http://secunia.com/advisories/32558 - http://osvdb.org/49554
CVE ID: CVE-2008-6781 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T11:42:00.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32021 - https://www.exploit-db.com/exploits/6894 - https://www.exploit-db.com/exploits/6906 - http://osvdb.org/49553 - http://secunia.com/advisories/32558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46250 - https://exchange.xforce.ib
//secunia.com/advisories/32558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46251
CVE ID: CVE-2008-6782 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T11:42:00.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6905 - http://www.securityfocus.com/bid/32021 - http://secunia.com/advisories/32558 - http://www.osvdb.org/49551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46251
CVE ID: CVE-2008-6783 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T11:42:00.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32021 - https://www.exploit-db.com/exploits/6907 - http://www.osvdb.org/49552 - http://secunia.com/advisories/32558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46251
CVE ID: CVE-2008-6784 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T11:42:00.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/49550 - http://www.securityfocus.com/bid/32021 - https://www.exploit-db.com/exploits/6895 - http://secunia.com/advisories/32558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46251
CVE ID: CVE-2008-6785 State: PUBLISHED Published: 2009-05-01T18:00:00 Last Updated: 2024-08-07T11:42:00.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47460
CVE ID: CVE-2008-6786 State: PUBLISHED Published: 2009-05-01T18:00:00 Last Updated: 2024-08-07T11:41:59.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in geekigeeki.py in GeekiGeeki before 3.0 allow remote attackers to read arbitrary files via directory traversal sequences in a pagename argument in the (1) handle_edit and (2) handle_raw functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/50719 - http://www.codewiz.org/wikigit/geekigeeki.git/blobdiff/92e45c3ce9260c69b4201d877c0f2e431024a52e..5f99f96a7a102bb8f2c491dd1e11fe8686c7c0a0:/geekigeeki.py - https://exchange.xforce.ibmcloud.com/vu
01d877c0f2e431024a52e..5f99f96a7a102bb8f2c491dd1e11fe8686c7c0a0:/geekigeeki.py - https://exchange.xforce.ibmcloud.com/vulnerabilities/47375 - http://secunia.com/advisories/33162 - http://www.codewiz.org/wikigit/geekigeeki.git?a=commit%3Bh=5f99f96a7a102bb8f2c491dd1e11fe8686c7c0a0 - http://www.securityfocus.com/bid/32831
CVE ID: CVE-2008-6787 State: PUBLISHED Published: 2009-05-01T18:00:00 Last Updated: 2024-08-07T11:42:00.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47440 - https://www.exploit-db.com/exploits/7507
CVE ID: CVE-2008-6788 State: PUBLISHED Published: 2009-05-04T18:22:00 Last Updated: 2024-08-07T11:41:59.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46075 - http://www.securityfocus.com/bid/31893 - https://www.exploit-db.com/exploits/6819 - http://secunia.com/advisories/32358
CVE ID: CVE-2008-6789 State: PUBLISHED Published: 2009-05-04T18:22:00 Last Updated: 2024-08-07T11:42:00.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46075 - http://secunia.com/advisories/32358 - https://www.exploit-db.com/exploits/6820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50344
CVE ID: CVE-2008-6790 State: PUBLISHED Published: 2009-05-04T18:22:00 Last Updated: 2024-08-07T11:41:59.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46078 - https://www.exploit-db.com/exploits/6820 - http://www.securityfocus.com/bid/31897
CVE ID: CVE-2008-6791 State: PUBLISHED Published: 2009-05-04T18:22:00 Last Updated: 2024-08-07T11:42:00.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: PumpKIN TFTP Server 2.7.2.0 allows remote attackers to cause a denial of service via a write request with a long mode field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46122 - https://www.exploit-db.com/exploits/6838
CVE ID: CVE-2008-6792 State: PUBLISHED Published: 2009-05-07T17:00:00 Last Updated: 2024-08-07T11:42:00.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50037 - https://launchpad.net/bugs/287134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50435 - http://www.ubun
50037 - https://launchpad.net/bugs/287134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50435 - http://www.ubuntu.com/usn/usn-663-1 - http://secunia.com/advisories/32566
CVE ID: CVE-2008-6793 State: PUBLISHED Published: 2009-05-07T17:00:00 Last Updated: 2024-08-07T11:42:00.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image. Additional Analyst Notes: - CVE Program Container: References: - http://www.ikkisoft.com/stuff/LC-2008-07.txt - http://www.vupen.com/english/advisories/2008/3020 - http://osvdb.org/49574 - http://www.securityfocus.com/archive/1/498081/100/0/threaded - http://secunia.com/advisories/32553 - https://www.explo
- http://www.securityfocus.com/archive/1/498081/100/0/threaded - http://secunia.com/advisories/32553 - https://www.exploit-db.com/exploits/7001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46380 - http://www.securityfocus.com/bid/32128
CVE ID: CVE-2008-6794 State: PUBLISHED Published: 2009-05-07T17:00:00 Last Updated: 2024-08-07T11:41:59.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32524 - https://www.exploit-db.com/exploits/6923 - http://osvdb.org/49483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50473 - http://www.securityfocus.com/bid/35046
CVE ID: CVE-2008-6795 State: PUBLISHED Published: 2009-05-07T17:00:00 Last Updated: 2024-08-07T11:41:59.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46348 - https://www.exploit-db.com/exploits/6981
CVE ID: CVE-2008-6796 State: PUBLISHED Published: 2009-05-07T17:00:00 Last Updated: 2024-08-07T11:42:00.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46394 - http://www.vupen.com/english/advisories/2008/3026 - https://www.exploit-db.com/exploits/7008 - http://www.securityfocus.com/bid/32134
CVE ID: CVE-2008-6797 State: PUBLISHED Published: 2009-05-07T18:00:00Z Last Updated: 2024-09-16T21:57:01.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34847 - http://www.mitel.com/resources/NuPoint_and_Exchange.pdf - http://www.kb.cert.org/vuls/id/576996
CVE ID: CVE-2008-6798 State: PUBLISHED Published: 2009-05-07T18:00:00 Last Updated: 2024-08-07T11:42:00.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7094 - http://www.vupen.com/english/advisories/2008/3121 - http://www.securityfocus.com/bid/32134
CVE ID: CVE-2008-6799 State: PUBLISHED Published: 2009-05-07T23:00:00 Last Updated: 2024-08-07T11:42:00.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45974 - http://www.osvdb.org/49337 - http://www.securityfocus.com/bid/31800 - http://secunia.com/advisories/32350 - http://marc.info/?l=bugtraq&m=122425865430237&w=2 - http://packetstorm.linuxsecurity.com/0810-exploits/flashchat-bypass.txt
CVE ID: CVE-2008-6800 State: REJECTED Published: 2009-05-07T23:00:00 Last Updated: 2018-10-19T14:57:01 Description: No description available.
CVE ID: CVE-2008-6801 State: PUBLISHED Published: 2009-05-07T23:00:00 Last Updated: 2024-08-07T11:42:00.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Vivvo CMS before 4.0.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45971 - http://www.vivvo.net/changelog.php - http://secunia.com/advisories/32324 - http://www.osvdb.org/49172
CVE ID: CVE-2008-6802 State: PUBLISHED Published: 2009-05-07T23:00:00Z Last Updated: 2024-09-16T16:13:13.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in phPhotoGallery 0.92 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31850/exploit - http://www.securityfocus.com/bid/31850
CVE ID: CVE-2008-6803 State: PUBLISHED Published: 2009-05-11T20:00:00 Last Updated: 2024-08-07T11:42:00.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46310 - http://www.securityfocus.com/bid/31849
CVE ID: CVE-2008-6804 State: PUBLISHED Published: 2009-05-11T20:00:00 Last Updated: 2024-08-07T11:42:00.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. NOTE: a third party reports that the vendor disputes the existence of this issue Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6886 - http://www.securityfocus.com/bid/32001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46237
CVE ID: CVE-2008-6805 State: PUBLISHED Published: 2009-05-11T20:00:00 Last Updated: 2024-08-07T11:42:00.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to category.php, the (2) user parameter to login.php, and the (3) site parameter to register.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/49188 - http://www.securityfocus.com/bid/31787 - http://www.osvdb.org/49187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45932 - https://www.exploit-db.com/exploi
p://www.osvdb.org/49187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45932 - https://www.exploit-db.com/exploits/6764 - http://secunia.com/advisories/32310 - http://www.osvdb.org/49186
CVE ID: CVE-2008-6806 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T11:42:00.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/artikel/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31978 - https://www.exploit-db.com/exploits/6866 - http://www.vupen.com/english/advisories/2008/2965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46184
CVE ID: CVE-2008-6807 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T11:42:00.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0a4.1 allows remote attackers to execute arbitrary PHP code via a URL in the xml_dir parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: the lib_dir vector is already covered by CVE-2006-6630. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46066
CVE ID: CVE-2008-6808 State: PUBLISHED Published: 2009-05-12T16:00:00 Last Updated: 2024-08-07T11:42:00.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6908 - http://osvdb.org/49549 - http://www.securityfocus.com/bid/32034
CVE ID: CVE-2008-6809 State: PUBLISHED Published: 2009-05-17T16:00:00 Last Updated: 2024-08-07T11:41:59.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46913 - https://www.exploit-db.com/exploits/7253 - http://secunia.com/advisories/32430 - http://www.securityfocus.com/bid/32512