Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
n/oval%3Aorg.mitre.oval%3Adef%3A7328 - http://bugs.mysql.com/bug.php?id=50974 - http://support.apple.com/kb/HT4435 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html - http://lists.mysql.com/commits/106060 - http://securitytracker.com/id?1024032 - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:107 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-1850 State: PUBLISHED Published: 2010-06-07T20:00:00 Last Updated: 2024-08-07T01:35:53.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024033 - http://www.ubuntu.com/usn/USN-1397-1 - http://support.apple.com/kb/HT4435 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6693 - ht
10//Nov/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6693 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10846 - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html - http://www.redhat.com/support/errata/RHSA-2010-0442.html - http://bugs.mysql.com/bug.php?id=53237 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:107 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-1851 State: PUBLISHED Published: 2010-05-07T17:43:00 Last Updated: 2024-08-07T01:35:53.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnet.com/8301-31361_1-20004265-254.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11757
CVE ID: CVE-2010-1852 State: PUBLISHED Published: 2010-05-07T17:43:00Z Last Updated: 2024-09-17T02:41:30.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnet.com/8301-31361_1-20004265-254.html
CVE ID: CVE-2010-1853 State: PUBLISHED Published: 2010-05-07T20:00:00Z Last Updated: 2024-09-16T19:57:07.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted magnet URL with a large number of (1) tr or (2) ws links. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38814 - http://www.osvdb.org/63066 - http://trac.transmissionbt.com/wiki/Changes - http://www.vupen.com/english/advisories/2010/0655 - http://trac.t
/63066 - http://trac.transmissionbt.com/wiki/Changes - http://www.vupen.com/english/advisories/2010/0655 - http://trac.transmissionbt.com/ticket/2965 - http://secunia.com/advisories/39031 - http://trac.transmissionbt.com/changeset/10279
CVE ID: CVE-2010-1854 State: PUBLISHED Published: 2010-05-07T20:00:00Z Last Updated: 2024-09-16T23:01:03.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to inject arbitrary web script or HTML via the id_auk parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this might be resultant from CVE-2010-1855. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39059
CVE ID: CVE-2010-1855 State: PUBLISHED Published: 2010-05-07T20:00:00 Last Updated: 2024-08-07T01:35:53.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute arbitrary SQL commands via the id_auk parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0670 - http://secunia.com/advisories/39059 - http://packetstormsecurity.org/1003-exploits/ppwb-sql.txt - http://4004securityproject.wordpress.com/2010/03/20/pay-per-watch-bid-auktions-system-blind-sql-injection-auktion-php-id_auk/ - http://osvdb.org/63131
press.com/2010/03/20/pay-per-watch-bid-auktions-system-blind-sql-injection-auktion-php-id_auk/ - http://osvdb.org/63131 - http://www.securityfocus.com/bid/38878 - http://www.exploit-db.com/exploits/11816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57055
CVE ID: CVE-2010-1856 State: PUBLISHED Published: 2010-05-07T20:00:00Z Last Updated: 2024-09-17T00:52:22.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38907 - http://packetstormsecurity.org/1003-exploits/repairshop2-xss.txt - http://secunia.com/advisories/39043
CVE ID: CVE-2010-1857 State: PUBLISHED Published: 2010-05-07T20:00:00 Last Updated: 2024-08-07T01:35:53.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prod parameter in a products.details action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38907 - http://secunia.com/advisories/39043 - http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE ID: CVE-2010-1858 State: PUBLISHED Published: 2010-05-07T20:00:00 Last Updated: 2024-08-07T01:35:53.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/joomlasmestorage-lfi.txt - http://www.exploit-db.com/exploits/11853 - http://www.securityfocus.com/bid/38911 - http://secunia.com/advisories/39071 - https://exchange.xforce.ibmcloud.com/vulnerabil
/www.securityfocus.com/bid/38911 - http://secunia.com/advisories/39071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57108
CVE ID: CVE-2010-1859 State: PUBLISHED Published: 2010-05-07T22:00:00Z Last Updated: 2024-09-16T23:26:10.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39962 - http://php-security.org/2010/05/06/mops-2010-011-deluxebb-newthread-sql-injection-vulnerability/index.html
CVE ID: CVE-2010-1860 State: PUBLISHED Published: 2010-05-07T22:00:00 Last Updated: 2024-08-07T01:35:53.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal call, related to the call time pass by reference feature. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://php-security.org/2010/05/06/mops-2010-010-php-html_entity_decode-interruption-information-leak-vulnerabil
7&w=2 - http://php-security.org/2010/05/06/mops-2010-010-php-html_entity_decode-interruption-information-leak-vulnerability/index.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-1861 State: PUBLISHED Published: 2010-05-07T22:00:00Z Last Updated: 2024-09-16T22:16:07.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's __sleep function to interrupt an internal call to the shm_put_var function, which triggers access of a freed resource. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/05/mops-2010-009-php-shm_put_var-already-freed-resource-access-vulnerability/index.html
CVE ID: CVE-2010-1862 State: PUBLISHED Published: 2010-05-07T22:00:00 Last Updated: 2024-08-07T01:35:53.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://php-security.org/2010/05/04/mops-2010-008-php-chunk_split-interruption-information-leak-vulnerability/index.html - http://marc.info/?l=bu
2010/05/04/mops-2010-008-php-chunk_split-interruption-information-leak-vulnerability/index.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-1863 State: PUBLISHED Published: 2010-05-07T22:00:00Z Last Updated: 2024-09-16T20:58:32.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the shoutbox module (modules/shoutbox.php) in ClanTiger 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the s_email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/04/mops-2010-007-clantiger-shoutbox-module-s_email-sql-injection-vulnerability/index.html
CVE ID: CVE-2010-1864 State: PUBLISHED Published: 2010-05-07T22:00:00 Last Updated: 2024-08-07T01:35:53.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://php-secu
raq&m=133469208622507&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://php-security.org/2010/05/03/mops-2010-006-php-addcslashes-interruption-information-leak-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-1865 State: PUBLISHED Published: 2010-05-07T22:00:00 Last Updated: 2024-08-07T01:35:53.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the IP address to the cs_getip function in generate.php in the Captcha module, or (2) the s_email parameter to the cs_sql_select function in the MySQL database driver (mysql.php). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39685 - http://php-security.org/2010/05/03/mops-2010-005-clansphere-mysql-driver-generic-sql-injection-vulnerability/i
s/39685 - http://php-security.org/2010/05/03/mops-2010-005-clansphere-mysql-driver-generic-sql-injection-vulnerability/index.html - http://www.vupen.com/english/advisories/2010/1066 - http://trac.clansphere.de/csp/changeset/3803/ - http://www.securityfocus.com/bid/39896 - http://osvdb.org/64320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58311 - http://trac.clansphere.de/csp/changeset/3808/ - http://osvdb.org/64321 - http://www.csphere.eu/index/news/view/id/487/start/0 - http://php-security.org/2010/05/03/mops-2010-004-clansphere-captcha-generator-blind-sql-injection-vulnerability/index.html
CVE ID: CVE-2010-1866 State: PUBLISHED Published: 2010-05-07T22:00:00 Last Updated: 2024-08-07T01:35:53.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/02/mops-2010-003-php-dechunk-filter-signed-comparison-vulnerability/index.html - http://lists.opensuse.org/open
/2010/05/02/mops-2010-003-php-dechunk-filter-signed-comparison-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
CVE ID: CVE-2010-1867 State: PUBLISHED Published: 2010-05-07T22:00:00 Last Updated: 2024-08-07T01:35:53.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/64215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58285 - http://secunia.com/advisories/39580 - http://www.campware.org/en/camp/campsite_news/832/ - http://php-secur
ties/58285 - http://secunia.com/advisories/39580 - http://www.campware.org/en/camp/campsite_news/832/ - http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html - http://www.securityfocus.com/bid/39862
CVE ID: CVE-2010-1868 State: PUBLISHED Published: 2010-05-07T22:00:00Z Last Updated: 2024-09-16T20:42:46.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/07/mops-2010-012-php-sqlite_single_query-uninitialized-memory-usage-vulnerability/index.html - http://php-security.org/2010/05/07/mops-subm
p-sqlite_single_query-uninitialized-memory-usage-vulnerability/index.html - http://php-security.org/2010/05/07/mops-submission-03-sqlite_single_query-sqlite_array_query-uninitialized-memory-usage/index.html - http://php-security.org/2010/05/07/mops-2010-013-php-sqlite_array_query-uninitialized-memory-usage-vulnerability/index.html
CVE ID: CVE-2010-1869 State: PUBLISHED Published: 2010-05-12T00:00:00 Last Updated: 2024-08-07T01:35:54.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1195 - http://secunia.com/advisories/39753 - http://www.vupen.com/english/advisories/2010/1138 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:102 - http://www.ubuntu.com/usn/USN-961-1 - http://www.securityfocus.com/bid/40103 - http://w
advisories?name=MDVSA-2010:102 - http://www.ubuntu.com/usn/USN-961-1 - http://www.securityfocus.com/bid/40103 - http://www.securitytracker.com/id?1024003 - http://secunia.com/advisories/40580 - http://www.checkpoint.com/defense/advisories/public/2010/cpai-10-May.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.securityfocus.com/archive/1/511243/100/0/threaded
CVE ID: CVE-2010-1870 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T01:35:53.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "#" protection mechanism in ParameterInterceptors via the (1) #context, (2) #_memberAccess, (3) #root, (4) #this, (5) #_typeResolver, (6) #_classResolver, (7) #_traceEvaluations, (8) #_lastEvaluation, (9) #_keepLastEvaluation, and possibly other OGNL contex
#_classResolver, (7) #_traceEvaluations, (8) #_lastEvaluation, (9) #_keepLastEvaluation, and possibly other OGNL context variables, a different vulnerability than CVE-2008-6504. Additional Analyst Notes: - CVE Program Container: References: - http://confluence.atlassian.com/display/FISHEYE/FishEye+Security+Advisory+2010-06-16 - http://www.exploit-db.com/exploits/14360 - http://www.securityfocus.com/bid/41592 - http://www.osvdb.org/66280 - http://struts.apache.org/2.2.1/docs/s2-005.html - http://secunia.com/advisories/59110 - http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140709-struts2 - htt
xwork-remote.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140709-struts2 - http://seclists.org/fulldisclosure/2010/Jul/183 - http://securityreason.com/securityalert/8345 - http://seclists.org/fulldisclosure/2020/Oct/23 - http://packetstormsecurity.com/files/159643/LISTSERV-Maestro-9.0-8-Remote-Code-Execution.html
CVE ID: CVE-2010-1871 State: PUBLISHED Published: 2010-08-04T19:00:00.000Z Last Updated: 2025-10-22T00:05:51.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/41994 - http://archives.neohapsis.com/archives/bugt
ISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/41994 - http://archives.neohapsis.com/archives/bugtraq/2013-05/0117.html - http://www.securitytracker.com/id?1024253 - http://www.vupen.com/english/advisories/2010/1929 - https://bugzilla.redhat.com/show_bug.cgi?id=615956 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60794 - http://www.redhat.com/support/errata/RHSA-2010-0564.html - https://security.netapp.com/advisory/ntap-20161017-0001/
CVE ID: CVE-2010-1872 State: PUBLISHED Published: 2010-05-11T20:00:00Z Last Updated: 2024-09-16T22:25:29.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39648 - http://www.xenuser.org/documents/security/flashcard_xss.txt - http://packetstormsecurity.org/1004-exploits/flashcard-xss.txt - http://secunia.com/advisories/39484
CVE ID: CVE-2010-1873 State: PUBLISHED Published: 2010-05-11T20:00:00 Last Updated: 2024-08-07T01:35:53.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlajvehicles-sql.txt - http://www.securityfocus.com/bid/39409 - http://secunia.com/advisories/39401 - http://indonesiancoder
vehicles-sql.txt - http://www.securityfocus.com/bid/39409 - http://secunia.com/advisories/39401 - http://indonesiancoder.org/joomla-component-jvehicles-aid-sql-injection-vulnerability - http://www.exploit-db.com/exploits/12190 - http://www.osvdb.org/63669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57774
CVE ID: CVE-2010-1874 State: PUBLISHED Published: 2010-05-11T20:00:00 Last Updated: 2024-08-07T01:35:53.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57765 - http://secunia.com/advisories/39074 - http://www.exploit-db.com/exploits/12136 - http://www.securityfocus.com/
s/57765 - http://secunia.com/advisories/39074 - http://www.exploit-db.com/exploits/12136 - http://www.securityfocus.com/bid/39374
CVE ID: CVE-2010-1875 State: PUBLISHED Published: 2010-05-11T20:00:00 Last Updated: 2024-08-07T01:35:53.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57110 - http://secunia.com/advisories
ploit-db.com/exploits/11851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57110 - http://secunia.com/advisories/39074 - http://www.securityfocus.com/bid/38912 - http://www.osvdb.org/63143