Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-5002 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8485 - http://packetstormsecurity.org/1007-exploits/exponentcms-xss.txt - http://www.securityfocus.com/bid/41447 - http://www.securityfocus.com/archive/1/512224/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/6016
http://www.securityfocus.com/archive/1/512224/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/60168 - http://secunia.com/advisories/36703
CVE ID: CVE-2010-5003 State: PUBLISHED Published: 2011-11-01T22:00:00 Last Updated: 2024-08-07T04:09:38.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/66036 - http://secunia.com/advisories/40449 - http://securityreason.com/securityalert/8501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60122 - http:
0449 - http://securityreason.com/securityalert/8501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60122 - http://packetstormsecurity.org/1007-exploits/joomlaautartimonial-sql.txt - http://www.securityfocus.com/bid/41400 - http://www.exploit-db.com/exploits/14249 - http://www.vupen.com/english/advisories/2010/1739
CVE ID: CVE-2010-5004 State: PUBLISHED Published: 2011-11-02T21:00:00Z Last Updated: 2024-09-16T17:49:08.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41172 - http://www.exploit-db.com/exploits/14074
CVE ID: CVE-2010-5005 State: PUBLISHED Published: 2011-11-02T21:00:00Z Last Updated: 2024-09-16T20:58:07.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in members/profileCommentsResponse.php in Rayzz Photoz allows remote attackers to inject arbitrary web script or HTML via the profileCommentTextArea parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40627 - http://secunia.com/advisories/40113
CVE ID: CVE-2010-5006 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40625 - http://packetstormsecurity.org/1006-exploits/emorealtymanager-sql.txt - http://www.vupen.com/english/advisories/2010/1404 - http://securityreason.com/securityalert/8505
CVE ID: CVE-2010-5007 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59401 - http://www.vupen.com/english/advisories/2010/1465 - http://www.exploit-db.com/exploits/13854 - http://www.securityfocus.com/bid/40836 - http://packetstormsecurity.org/1006-expl
://www.exploit-db.com/exploits/13854 - http://www.securityfocus.com/bid/40836 - http://packetstormsecurity.org/1006-exploits/utstats-sqlxss.txt
CVE ID: CVE-2010-5008 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13843/ - http://www.securityfocus.com/bid/40845 - http://packetstormsecurity.org/1006-exploits/brightsuite-sql.txt - http://securityreason.com/securityalert/8507 - http://www.vupen.com/english/advisories/2010/1459
CVE ID: CVE-2010-5009 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59402 - http://www.vupen.com/english/advisories/2010/1465 - http://www.exploit-db.com/exploits/13854 - http://www.securityfocus.com/bid/40836 - http://packetstormsecurity.org/1006-exploits/utstats
it-db.com/exploits/13854 - http://www.securityfocus.com/bid/40836 - http://packetstormsecurity.org/1006-exploits/utstats-sqlxss.txt
CVE ID: CVE-2010-5010 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary web script or HTML via the session parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65417 - http://packetstormsecurity.org/1006-exploits/schoolmation-sqlxss.txt - http://www.exploit-db.com/exploits/13812/ - http://secunia.com/advisories/40154 - http://www.securityfocus.com/bid/40737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59346 - ht
isories/40154 - http://www.securityfocus.com/bid/40737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59346 - http://securityreason.com/securityalert/8508
CVE ID: CVE-2010-5011 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands via the session parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1006-exploits/schoolmation-sqlxss.txt - http://www.exploit-db.com/exploits/13812/ - http://www.securityfocus.com/bid/40737 - http://securityreason.com/securityalert/8508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59347
CVE ID: CVE-2010-5012 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59390 - http://www.securityfocus.com/bid/40810 - http://securityreason.com/securityalert/8509 - http://packetstormsecurity.org/1006-exploits/dalogin-sqlxssdisclo
40810 - http://securityreason.com/securityalert/8509 - http://packetstormsecurity.org/1006-exploits/dalogin-sqlxssdisclose.txt - http://www.exploit-db.com/exploits/13830/ - http://osvdb.org/65471
CVE ID: CVE-2010-5013 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8510 - http://osvdb.org/65415 - http://www.securityfocus.com/bid/40687 - http://www.exploit-db.com/exploits/13789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59290 - http://packetstormsecurity.org/1006-exploits/virtualrealest
https://exchange.xforce.ibmcloud.com/vulnerabilities/59290 - http://packetstormsecurity.org/1006-exploits/virtualrealestate-sql.txt - http://secunia.com/advisories/40166
CVE ID: CVE-2010-5014 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQL commands via the ladder[id] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59577 - http://www.exploit-db.com/exploits/13936 - http://www.securityfocus.com/bid/40981
CVE ID: CVE-2010-5015 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59496 - http://securityreason.com/securityalert/8511 - http://www.securityfocus.com/bid/40913 - http://www.packetstormsecurity.com/1006-exploits/2daybiz-sqlxss.txt - http://secunia.com/advisories/40247
CVE ID: CVE-2010-5016 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the match parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39625 - http://secunia.com/advisories/36732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57763 - http://www.exploit-db.com/exploits/12158
CVE ID: CVE-2010-5017 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL commands via the account parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0012 - http://secunia.com/advisories/36732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55335 - http://www.securityfocus.com/bid/40163 - http://www.exploit-db.com/exploits/10978
CVE ID: CVE-2010-5018 State: PUBLISHED Published: 2011-11-02T21:00:00Z Last Updated: 2024-09-17T04:25:41.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers to inject arbitrary web script or HTML via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40890 - http://packetstormsecurity.org/1006-exploits/2daybizocs-sqlxss.txt - http://www.exploit-db.com/exploits/13894 - http://secunia.com/advisories/40213
CVE ID: CVE-2010-5019 State: PUBLISHED Published: 2011-11-02T21:00:00Z Last Updated: 2024-09-17T03:08:01.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands via the alb parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40890 - http://packetstormsecurity.org/1006-exploits/2daybizocs-sqlxss.txt - http://www.exploit-db.com/exploits/13894 - http://secunia.com/advisories/40213
CVE ID: CVE-2010-5020 State: PUBLISHED Published: 2011-11-02T21:00:00Z Last Updated: 2024-09-16T18:03:45.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41014 - http://www.exploit-db.com/exploits/13945 - http://secunia.com/advisories/31871
CVE ID: CVE-2010-5021 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1461 - http://securityreason.com/securityalert/8512 - http://packetstormsecurity.org/1006-exploits/digitalinterchangelibrary-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59397 - http://secunia.com/advisories/40160 - http://w
ry-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59397 - http://secunia.com/advisories/40160 - http://www.exploit-db.com/exploits/13859 - http://www.securityfocus.com/bid/40819
CVE ID: CVE-2010-5022 State: PUBLISHED Published: 2011-11-02T21:00:00Z Last Updated: 2024-09-17T01:35:34.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41171 - http://www.exploit-db.com/exploits/14054
CVE ID: CVE-2010-5023 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13860 - http://www.vupen.com/english/advisories/2010/1464 - http://securityreason.com/securityalert/8513 - http://www.securityfocus.com/bid/40829 - http://packetstormsecurity.org/1006-exploits/digitalinterchange-sql.txt - https://exchange.xforce.ibmcloud.com/vul
829 - http://packetstormsecurity.org/1006-exploits/digitalinterchange-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59425
CVE ID: CVE-2010-5024 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the user_id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40612 - http://www.securityfocus.com/archive/1/511669/100/0/threaded - http://packetstormsecurity.org/1006-exploits/cutesitecms-sql.txt - http://securityreason.co
ve/1/511669/100/0/threaded - http://packetstormsecurity.org/1006-exploits/cutesitecms-sql.txt - http://securityreason.com/securityalert/8515 - http://secunia.com/advisories/39864 - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_cutesite_cms.html
CVE ID: CVE-2010-5025 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to inject arbitrary web script or HTML via the fld_path parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1006-exploits/cutesitecms-xss.txt - http://www.htbridge.ch/advisory/xss_vulnerability_in_cutesite_cms.html - http://www.securityfocus.com/archive/1/511673/100/0/threaded - http://www
isory/xss_vulnerability_in_cutesite_cms.html - http://www.securityfocus.com/archive/1/511673/100/0/threaded - http://www.securityfocus.com/bid/40612 - http://securityreason.com/securityalert/8514 - http://secunia.com/advisories/39864
CVE ID: CVE-2010-5026 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1428 - http://secunia.com/advisories/40170 - http://www.exploit-db.com/exploits/13801 - http://securityreason.com/securityalert/8516 - https://exchange.xforce.ibmcloud.com/vulne
xploit-db.com/exploits/13801 - http://securityreason.com/securityalert/8516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59282 - http://www.securityfocus.com/bid/40743 - http://packetstormsecurity.org/1006-exploits/fairinabox-sqlxss.txt - http://www.osvdb.org/65420
CVE ID: CVE-2010-5027 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40170 - http://www.osvdb.org/65419 - http://www.exploit-db.com/exploits/13801 - http://securityreason.com/securityalert/8516 - https://exchange.xforce.ibmcloud.com/vulnerabil
t-db.com/exploits/13801 - http://securityreason.com/securityalert/8516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59283 - http://www.securityfocus.com/bid/40743 - http://packetstormsecurity.org/1006-exploits/fairinabox-sqlxss.txt
CVE ID: CVE-2010-5028 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1269 - http://www.securityfocus.com/bid/40193 - http://secunia.com/advisories/39837 - http://www.exploit-db.com/exploits/12782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58599 - http://www.osvdb.org/64708
CVE ID: CVE-2010-5029 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1006-exploits/ecomatcms-sql.txt - http://secunia.com/advisories/40013 - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_ecomat_cms.html - http://securityreason.com/securityalert/8518 - http://www.securityfocus.com/bid/40491 - http://www.securityfocus.com/archive/1
/securityreason.com/securityalert/8518 - http://www.securityfocus.com/bid/40491 - http://www.securityfocus.com/archive/1/511586/100/0/threaded
CVE ID: CVE-2010-5030 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the lang parameter in a web action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8517 - http://secunia.com/advisories/40013 - http://packetstormsecurity.org/1006-exploits/ecomatcms-xss.txt - http://www.securityfocus.com/bid/40491 - http://www.htbridge.ch/advisory/xss_vulnerability_in_ecomat_cms.html - http://www.securityfocus.com/a
us.com/bid/40491 - http://www.htbridge.ch/advisory/xss_vulnerability_in_ecomat_cms.html - http://www.securityfocus.com/archive/1/511587/100/0/threaded
CVE ID: CVE-2010-5031 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter (aka the Search Box). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40624 - http://secunia.com/advisories/40077 - http://packetstormsecurity.org/1006-exploits/filenicescript-xss.txt - http://securityreason.com/securityalert/8519
CVE ID: CVE-2010-5032 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://xenuser.org/documents/security/joomla_com_bfquiz_sqli.txt - http://secunia.com/advisories/39960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58979 - http://packetstormsecurity.org/1005-exploits/joomla_com_bfquiz_sploit.py.txt - http:/
mcloud.com/vulnerabilities/58979 - http://packetstormsecurity.org/1005-exploits/joomla_com_bfquiz_sploit.py.txt - http://www.packetstormsecurity.org/1005-exploits/joomlabfquiz-sql.txt - http://www.tamlyncreative.com.au/software/forum/index.php?topic=729.0 - http://www.vupen.com/english/advisories/2010/1272 - http://osvdb.org/65001 - http://www.securityfocus.com/bid/40435
CVE ID: CVE-2010-5033 State: PUBLISHED Published: 2011-11-02T21:00:00 Last Updated: 2024-08-07T04:09:38.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/fusebox-sql.txt - http://securityreason.com/securityalert/8520 - http://www.exploit-db.com/exploits/12786 - http://www.securityfocus.com/bid/40439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59003