Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4576 State: PUBLISHED Published: 2008-10-15T19:00:00 Last Updated: 2024-08-07T10:24:20.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init timer expires. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32998 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html - http://permalink.gmane.org/gmane.comp.security.oss.general/1039 -
rg/opensuse-security-announce/2008-10/msg00008.html - http://permalink.gmane.org/gmane.comp.security.oss.general/1039 - http://www.redhat.com/support/errata/RHSA-2009-0009.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html - http://www.securityfocus.com/bid/31634 - http://secunia.com/advisories/33586 - http://www.debian.org/security/2008/dsa-1687 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9822 - http://secunia.com/advisories/32918 - http://www.ubuntu.com/usn/usn-679-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45773 - ht
advisories/32918 - http://www.ubuntu.com/usn/usn-679-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45773 - http://secunia.com/advisories/32759 - http://secunia.com/advisories/33180 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.18 - http://www.gossamer-threads.com/lists/linux/kernel/981012?page=last - http://secunia.com/advisories/32370 - http://www.redhat.com/support/errata/RHSA-2008-1017.html - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.27-rc6-git6.log - http://secunia.com/advisories/32386 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.ht
a-package-announce/2008-October/msg00689.html - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://www.debian.org/security/2008/dsa-1681 - http://secunia.com/advisories/33182
CVE ID: CVE-2008-4577 State: PUBLISHED Published: 2008-10-15T20:00:00 Last Updated: 2024-08-07T10:24:20.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32164 - http://secunia.com/advisories/32471 - http://secunia.com/advisories/33149 - http://www.vupen.com/english/advisories/2008/2745 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00816.html - https://oval.cisecurity.org/repository/search
w.redhat.com/archives/fedora-package-announce/2008-October/msg00816.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10376 - http://www.securityfocus.com/bid/31587 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00844.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:232 - http://www.ubuntu.com/usn/USN-838-1 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://security.gentoo.org/glsa/glsa-200812-16.xml - http://bugs.gentoo.org/show_bug.cgi?id=240409 - http://www.redhat.com/support/errata/RHSA-2009-0205.html - http://secunia.com/advisories/33624 - http://www.dovecot.org/li
tp://www.redhat.com/support/errata/RHSA-2009-0205.html - http://secunia.com/advisories/33624 - http://www.dovecot.org/list/dovecot-news/2008-October/000085.html - http://secunia.com/advisories/36904
CVE ID: CVE-2008-4578 State: PUBLISHED Published: 2008-10-15T20:00:00 Last Updated: 2024-08-07T10:24:19.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45669 - http://secunia.com/advisories/33149 - http://www.vupen.com/english/advisories/2008/2745 - http://www.securityfocus.com/bid/31587 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:232
es/2008/2745 - http://www.securityfocus.com/bid/31587 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:232 - http://security.gentoo.org/glsa/glsa-200812-16.xml - http://bugs.gentoo.org/show_bug.cgi?id=240409 - http://www.dovecot.org/list/dovecot-news/2008-October/000085.html - http://www.securityfocus.com/archive/1/498498/100/0/threaded
CVE ID: CVE-2008-4579 State: PUBLISHED Published: 2008-10-15T20:00:00 Last Updated: 2024-08-07T10:24:19.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=240576 - http://www.redhat.com/support/errata/RHSA-2009-1341.html - http://secunia.com/advisories/32390 - http://secunia.com/advisories/32387 - https://oval.cisecurity.org/repository/search/def
//secunia.com/advisories/32390 - http://secunia.com/advisories/32387 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10799 - http://www.vupen.com/english/advisories/2011/0419 - http://www.ubuntu.com/usn/USN-875-1 - http://www.securityfocus.com/bid/31904 - http://www.openwall.com/lists/oss-security/2008/10/13/3 - https://bugzilla.redhat.com/show_bug.cgi?id=467386 - http://secunia.com/advisories/36530 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html - http://secunia.com/advisories/43362 - http://www.redhat.com/support/errata/RHSA-2011-0266.html
CVE ID: CVE-2008-4580 State: PUBLISHED Published: 2008-10-15T20:00:00 Last Updated: 2024-08-07T10:24:18.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fence_manual.fifo temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/16/1 - http://bugs.gentoo.org/show_bug.cgi?id=240576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45953 - http://www.ubuntu.com/usn/USN-875-1 - http://www.openwall.com/lists/oss-security/2008/10/13/3
CVE ID: CVE-2008-4581 State: PUBLISHED Published: 2008-10-15T20:00:00 Last Updated: 2024-08-07T10:24:19.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45943 - http://www-1.ibm.com/support/docview.wss?uid=swg1HD71425 - http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1 - http://www.securityfocus.com/bid/31748 - http
D71425 - http://www-01.ibm.com/support/docview.wss?uid=swg27012567&aid=1 - http://www.securityfocus.com/bid/31748 - http://secunia.com/advisories/32105
CVE ID: CVE-2008-4582 State: PUBLISHED Published: 2008-10-15T20:00:00 Last Updated: 2024-08-07T10:24:19.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly identify the context of Windows .url shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via an HTML document that is directly accessible through a filesystem, as demonstrated by documents in (1) local folders, (2) Windows share folders, and (3) RAR archives, and as demonstrated by IFRAMEs referencing shortcuts that
cal folders, (2) Windows share folders, and (3) RAR archives, and as demonstrated by IFRAMEs referencing shortcuts that point to (a) about:cache?device=memory and (b) about:cache?device=disk, a variant of CVE-2008-2810. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45740 - http://www.debian.org/security/2009/dsa-1697 - http://www.securitytracker.com/id?1021190 - http://www.debian.org/security/2008/dsa-1671 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html - http://www.vupen.com/english/advisories/2009/0977 - https://bugzilla.mozilla.org/show_bug.cgi?id=455311 - http://secunia.com/advis
.vupen.com/english/advisories/2009/0977 - https://bugzilla.mozilla.org/show_bug.cgi?id=455311 - http://secunia.com/advisories/32192 - http://www.mozilla.org/security/announce/2008/mfsa2008-47.html - http://securitytracker.com/alerts/2008/Nov/1021212.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32778 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html - http://secunia.com/advisories/33433 - http://www.vupen.com/english/advisories/2008/2818 - http://www.securityfocus.com/archive/1/497091/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://securityreason.com/securityalert/4416 - http
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://securityreason.com/securityalert/4416 - http://secunia.com/advisories/32721 - http://www.us-cert.gov/cas/techalerts/TA08-319A.html - http://secunia.com/advisories/32853 - http://www.debian.org/security/2009/dsa-1696 - http://secunia.com/advisories/32693 - http://secunia.com/advisories/32845 - http://secunia.com/advisories/33434 - http://secunia.com/advisories/32684 - http://ubuntu.com/usn/usn-667-1 - http://www.securityfocus.com/bid/31747 - http://liudieyu0.blog124.fc2.com/blog-entry-6.html - http://secunia.com/advisories/32714 - http://www.securityfocus.com/bid/31611 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-4583 State: PUBLISHED Published: 2008-10-15T22:00:00 Last Updated: 2024-08-07T10:24:18.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4427 - https://www.exploit-db.com/exploits/5028 - http://www.securityfocus.com/bid/27540
CVE ID: CVE-2008-4584 State: PUBLISHED Published: 2008-10-15T22:00:00 Last Updated: 2024-08-07T10:24:19.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4424 - http://www.securityfocus.com/bid/27493 - https://www.exploit-db.com/exploits/5005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40041
CVE ID: CVE-2008-4585 State: PUBLISHED Published: 2008-10-15T22:00:00 Last Updated: 2024-08-07T10:24:19.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions via a direct request to admin/home.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4414 - http://www.securityfocus.com/archive/1/486803/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39842 - http://www.securityfocus.com/bid/27402
CVE ID: CVE-2008-4586 State: PUBLISHED Published: 2008-10-15T22:00:00 Last Updated: 2024-08-07T10:24:20.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4913 - http://securityreason.com/securityalert/4425 - http://www.vupen.com/english/advisories/2008/0145 - http://secunia.com/advisories/28496 - http://www.securityfocus.
25 - http://www.vupen.com/english/advisories/2008/0145 - http://secunia.com/advisories/28496 - http://www.securityfocus.com/bid/27279
CVE ID: CVE-2008-4587 State: PUBLISHED Published: 2008-10-15T22:00:00 Last Updated: 2024-08-07T10:24:19.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this could be leveraged for code execution by uploading executable files to Startup folders. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0145 - http://secunia.com/advisories
- CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0145 - http://secunia.com/advisories/28496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39653 - http://www.securityfocus.com/bid/27279 - https://www.exploit-db.com/exploits/4909 - http://securityreason.com/securityalert/4428
CVE ID: CVE-2008-4588 State: PUBLISHED Published: 2008-10-15T22:00:00 Last Updated: 2024-08-07T10:24:20.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to the ABOR command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31753 - http://www.zeroscience.org/codes/eserv_bof.txt - http://securityreason.com/securityalert/4415 - https://www.exploit-db.com/exploits/6752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45864
CVE ID: CVE-2008-4589 State: PUBLISHED Published: 2008-10-15T22:00:00 Last Updated: 2024-08-07T10:24:19.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497277/100/0/threaded - http://secunia.com/advisories/32252 - http://securityreason.com/securityalert/4421 - http://www-307.ibm.com/pc/support/site.wss/MIGR-70699.html - http://www.isecpartners.com/advisories/2008-02-lenovornr.txt
ttp://www-307.ibm.com/pc/support/site.wss/MIGR-70699.html - http://www.isecpartners.com/advisories/2008-02-lenovornr.txt - http://www-307.ibm.com/pc/support/site.wss/MIGR-4Q2QAK.html - http://www.vupen.com/english/advisories/2008/2806 - http://www.securitytracker.com/id?1021041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45839 - http://www.securityfocus.com/bid/31737
CVE ID: CVE-2008-4590 State: PUBLISHED Published: 2008-10-16T17:00:00 Last Updated: 2024-08-07T10:24:19.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to admin/login.php and (2) the post parameter to admin/news.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45799 - http://www.securityfocus.com/bid/31687 - https://www.exploit-db.com/exploits/6714
CVE ID: CVE-2008-4591 State: PUBLISHED Published: 2008-10-16T17:00:00 Last Updated: 2024-08-07T10:24:18.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[access_forbiden] and (2) lang[ident_title] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4419 - https://www.exploit-db.com/exploits/6425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45061
CVE ID: CVE-2008-4592 State: PUBLISHED Published: 2008-10-16T17:00:00 Last Updated: 2024-08-07T10:24:20.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45062 - http://www.vupen.com/english/advisories/2008/2550 - http://securityreason.com/securityalert/4423
CVE ID: CVE-2008-4593 State: PUBLISHED Published: 2008-10-17T20:00:00 Last Updated: 2024-08-07T10:24:19.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen, aka Apple bug number 6267416. Additional Analyst Notes: - CVE Program Container: References: - http://www.karlkraft.com/index.php/2008/10/03/yet-another-iphone-emergency-call-security-bug/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/46062 - http://securitytr
her-iphone-emergency-call-security-bug/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/46062 - http://securitytracker.com/id?1021021
CVE ID: CVE-2008-4594 State: PUBLISHED Published: 2008-10-17T20:00:00 Last Updated: 2024-08-07T10:24:19.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8361P-BEM1 chipset has unknown impact and attack vectors, probably remote. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45842 - http://www.vupen.com/english/advisories/2008/2805 - http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=application%2Fmsword&b
blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=application%2Fmsword&blobheadervalue2=inline%3B+filename - http://secunia.com/advisories/32259
CVE ID: CVE-2008-4595 State: PUBLISHED Published: 2008-10-17T21:00:00 Last Updated: 2024-08-07T10:24:18.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Slaytanic Scripts Content Plus 2.1.1 have unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45947 - http://www.securityfocus.com/bid/31798 - http://secunia.com/advisories/32245 - http://sourceforge.net/project/shownotes.php?release_id=632842
CVE ID: CVE-2008-4596 State: PUBLISHED Published: 2008-10-17T21:00:00 Last Updated: 2024-08-07T10:24:19.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in generated pages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45925 - http://drupal.org/node/321758
CVE ID: CVE-2008-4597 State: PUBLISHED Published: 2008-10-17T21:00:00 Last Updated: 2024-08-07T10:24:19.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32285 - http://drupal.org/node/321758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46069
CVE ID: CVE-2008-4598 State: PUBLISHED Published: 2008-10-17T21:00:00 Last Updated: 2024-08-07T10:24:20.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to "numerous flaws" that are not related to XSS or access control, a different vulnerability than CVE-2008-4596 and CVE-2008-4597. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46070 - http://secunia.com/advisories/32285 - http://drupal.org/node/321758
CVE ID: CVE-2008-4599 State: PUBLISHED Published: 2008-10-17T22:00:00 Last Updated: 2024-08-07T10:24:20.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45926 - https://www.exploit-db.com/exploits/6763 - http://securityreason.com/securityalert/4430 - http://www.securityfocus.com/bid/31782 - http://secunia.com/advisories/32309
CVE ID: CVE-2008-4600 State: PUBLISHED Published: 2008-10-17T22:00:00 Last Updated: 2024-08-07T10:24:19.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45931 - https://www.exploit-db.com/exploits/6766 - http://securityreason.com/securityalert/4431 - http://www.securityfocus.com/bid/31784
CVE ID: CVE-2008-4601 State: PUBLISHED Published: 2008-10-17T22:00:00 Last Updated: 2024-08-07T10:24:20.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habari_username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31794 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45951 - http://packetstorm.linuxsecurity.com/0810-exploits/habaricms-xss.txt - http://secunia.com/advisories/32311
CVE ID: CVE-2008-4602 State: PUBLISHED Published: 2008-10-17T22:00:00 Last Updated: 2024-08-07T10:24:20.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4432 - https://www.exploit-db.com/exploits/6772 - http://www.securityfocus.com/bid/31796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46060