Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3164 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter. NOTE: it was later reported that 3.01a is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43939 - http://downloads.securityfocus.com/vulnerabilities/exploits/30121.pl - https://www.exploit-
.com/vulnerabilities/43939 - http://downloads.securityfocus.com/vulnerabilities/exploits/30121.pl - https://www.exploit-db.com/exploits/6016 - http://www.vupen.com/english/advisories/2008/2015/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43606 - http://secunia.com/advisories/30930
CVE ID: CVE-2008-3165 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43605 - http://securityreason.com/securityalert/3995 - https://www.exploi
//exchange.xforce.ibmcloud.com/vulnerabilities/43605 - http://securityreason.com/securityalert/3995 - https://www.exploit-db.com/exploits/6009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43606 - http://secunia.com/advisories/30930
CVE ID: CVE-2008-3166 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30999 - http://securityreason.com/securityalert/3994 - https://www.exploit-db.com/exploits/6028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43644 - http://www.vupen.com/english/advisories/2008/2033/refere
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43644 - http://www.vupen.com/english/advisories/2008/2033/references
CVE ID: CVE-2008-3167 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dir[plugins] parameter to (a) HTMLSax3.php and (b) safehtml.php in plugins/safehtml/ and the (2) sIncPath parameter to (c) ray/modules/global/inc/content.inc.php. NOTE: vector 1 might be a problem in SafeHTML instead of Dolphin. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30995 - https://www.expl
Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30995 - https://www.exploit-db.com/exploits/6024 - http://www.securityfocus.com/bid/30136 - http://secunia.com/advisories/30981 - http://securityreason.com/securityalert/3993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43647
CVE ID: CVE-2008-3168 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111 - http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745 - http://www.securityfocus.com/bid/30152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43653
CVE ID: CVE-2008-3169 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to a "coordinate normalization bug." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43655 - http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111 - http://freshmeat.net/projects/
s/43655 - http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111 - http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745 - http://secunia.com/advisories/30954 - http://www.securityfocus.com/bid/30152
CVE ID: CVE-2008-3170 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking," a related issue to CVE-2004-0746, CVE-2004-0866, and CVE-2004-0867. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.securityfocus.com/bid/30192 - http://s
ies/2008/3444 - http://www.us-cert.gov/cas/techalerts/TA08-350A.html - http://www.securityfocus.com/bid/30192 - http://secunia.com/advisories/31128 - http://support.apple.com/kb/HT3338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43839 - http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html - http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html - http://www.securitytracker.com/id?1020539
CVE ID: CVE-2008-3171 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43837 - http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html
CVE ID: CVE-2008-3172 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." Additional Analyst Notes: - CVE Program Container: References: - http://crisp.tweakblogs.net/blog/ie-and-2-letter-domain-names.html - http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html - http://o.bulport.com/index.php?item=55 - https://bugzilla.mozilla.org/show_bu
08/02/understanding-cookie-security.html - http://o.bulport.com/index.php?item=55 - https://bugzilla.mozilla.org/show_bug.cgi?id=252342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43951
CVE ID: CVE-2008-3173 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." NOTE: this issue may exist because of an insufficient fix for CVE-2004-0866. Additional Analyst Notes: - CVE Program Container: References: - http://crisp.tweakblogs.net/blog/ie-and-2-letter-domain-names.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/4395
/crisp.tweakblogs.net/blog/ie-and-2-letter-domain-names.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43950 - http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html
CVE ID: CVE-2008-3174 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:28:41.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2339 - http://www.securitytracker.com/id?1020662 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36560 - http://www.securitytracke
itytracker.com/id?1020662 - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36560 - http://www.securitytracker.com/id?1020661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44393 - http://www.securityfocus.com/archive/1/495397/100/0/threaded - http://secunia.com/advisories/31434 - http://www.securityfocus.com/bid/30651 - http://www.securitytracker.com/id?1020663
CVE ID: CVE-2008-3175 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T09:28:41.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31319 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063594.html - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181721 - http://ww
isclosure/2008-July/063594.html - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181721 - http://www.securityfocus.com/archive/1/495020/100/0/threaded - http://www.vupen.com/english/advisories/2008/2286 - http://www.securityfocus.com/bid/30472 - http://www.securitytracker.com/id?1020590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44137
CVE ID: CVE-2008-3177 State: PUBLISHED Published: 2008-07-15T18:03:00 Last Updated: 2024-08-07T09:28:41.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020462 - http://www.securityfocus.com/bid/30110 - http://www.vupen.com/english/advisories/2008/2053/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43703 - http
ww.vupen.com/english/advisories/2008/2053/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43703 - http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss - http://secunia.com/advisories/31037
CVE ID: CVE-2008-3178 State: PUBLISHED Published: 2008-07-15T18:03:00 Last Updated: 2024-08-07T09:28:41.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute arbitrary code by uploading a .php file with a jpeg content type, then accessing it via a direct request to the file in upload/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3991 - http://www.vupen.com/english/advisories/2008/2016/references - http://secunia.com/advisories/30948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43596 - http://w
references - http://secunia.com/advisories/30948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43596 - http://www.securityfocus.com/bid/30117 - https://www.exploit-db.com/exploits/6015
CVE ID: CVE-2008-3179 State: PUBLISHED Published: 2008-07-15T18:03:00 Last Updated: 2024-08-07T09:28:41.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in website.php in Web 2 Business (W2B) phpDatingClub (aka Dating Club) 3.7 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43710 - http://securityreason.com/securityalert/3992 - http://www.vupen.com/english/advisories/2008/2060/references - http://www.securityfocus.com/bid/30176
curityalert/3992 - http://www.vupen.com/english/advisories/2008/2060/references - http://www.securityfocus.com/bid/30176 - https://www.exploit-db.com/exploits/6037
CVE ID: CVE-2008-3180 State: PUBLISHED Published: 2008-07-15T18:03:00 Last Updated: 2024-08-07T09:28:41.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) pageid parameter or (2) PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43610 - https://www.exploit-db.com/exploits/6011 - http://www.securityfocus.com/bid/30102 - http://securityreason.com/securityalert/3990 - http://secunia.com/advisories/30888
CVE ID: CVE-2008-3181 State: PUBLISHED Published: 2008-07-15T18:03:00 Last Updated: 2024-08-07T09:28:41.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43609 - http://www.securityfocus.com/bid/30102 - http://secunia.com/advisories/30888
CVE ID: CVE-2008-3182 State: PUBLISHED Published: 2008-07-15T18:03:00 Last Updated: 2024-08-07T09:28:41.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allows user-assisted remote attackers to execute arbitrary code via an M3U (.m3u) file containing a long MP3 URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30997 - http://securityreason.com/securityalert/3997 - http://www.securityfocus.com/bid/30138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43674 - https://www.exploit-db.com/exploits/6030 - https://
30138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43674 - https://www.exploit-db.com/exploits/6030 - https://www.exploit-db.com/exploits/6039 - http://www.vupen.com/english/advisories/2008/2027/references
CVE ID: CVE-2008-3183 State: PUBLISHED Published: 2008-07-15T18:03:00 Last Updated: 2024-08-07T09:28:41.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirDepth parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43712 - http://www.securityfocus.com/bid/30173 - http://www.vupen.com/english/advisories/2008/2059/references - http://www.securityfocus.com/archive/1/494138/100/0/threaded - http://se
n.com/english/advisories/2008/2059/references - http://www.securityfocus.com/archive/1/494138/100/0/threaded - http://securityreason.com/securityalert/3998
CVE ID: CVE-2008-3184 State: PUBLISHED Published: 2008-07-15T18:03:00 Last Updated: 2024-08-07T09:28:41.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO (PHP_SELF) or (2) the do parameter, as demonstrated by requests to upload/admincp/faq.php. NOTE: this issue can be leveraged to execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/494049/100/0/threaded - http://secunia.com/advisories/30991 -
iner: References: - http://www.securityfocus.com/archive/1/494049/100/0/threaded - http://secunia.com/advisories/30991 - http://www.vbulletin.com/forum/showthread.php?t=277945 - http://securityreason.com/securityalert/4000 - http://www.securityfocus.com/bid/30134
CVE ID: CVE-2008-3185 State: PUBLISHED Published: 2008-07-15T22:00:00 Last Updated: 2024-08-07T09:28:41.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43316 - http://www.securityfocus.com/archive/1/493663/100/0/threaded - http://www.vupen.com/english/advisories/2008/1926/references - https://www.exploit-db.com/exploits/5924 - http://securityreason.com/securityalert
ish/advisories/2008/1926/references - https://www.exploit-db.com/exploits/5924 - http://securityreason.com/securityalert/4002 - http://www.securityfocus.com/bid/29915 - http://e-rdc.org/v1/news.php?readmore=101
CVE ID: CVE-2008-3186 State: PUBLISHED Published: 2008-07-15T22:00:00 Last Updated: 2024-08-07T09:28:41.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrary web script or HTML via the membername parameter to (1) members.php, (2) comments.php, (3) photos.php, (4) archive.php, or (5) cat.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43319 - http://www.securityfocus.com/bid/2
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43319 - http://www.securityfocus.com/bid/29883
CVE ID: CVE-2008-3187 State: PUBLISHED Published: 2008-07-21T16:00:00 Last Updated: 2024-08-07T09:28:41.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: zypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before accepting repository keys, which allows remote repositories to cause a denial of service (package data corruption) via a spoofed key. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43922 - http://www.securityfocus.com/bid/30293 - http://secunia.com/advisories/31167
CVE ID: CVE-2008-3188 State: PUBLISHED Published: 2008-07-22T16:00:00 Last Updated: 2024-08-07T09:28:41.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43927 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html - http://www.securityfocus.com/bid/30301 - http://secu
sts.opensuse.org/opensuse-security-announce/2008-08/msg00001.html - http://www.securityfocus.com/bid/30301 - http://secunia.com/advisories/31096 - http://secunia.com/advisories/31339
CVE ID: CVE-2008-3189 State: PUBLISHED Published: 2008-07-16T18:00:00 Last Updated: 2024-08-07T09:28:41.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30170 - http://secunia.com/advisories/31032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43707 - https://www.exploit-db.com/exploits/6035 - http://www.vupen.com/english/advisories/2008/2058/references
CVE ID: CVE-2008-3190 State: PUBLISHED Published: 2008-07-16T18:00:00 Last Updated: 2024-08-07T09:28:41.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30227 - http://www.vupen.com/english/advisories/2008/2105/references - http://securityreason.com/securityalert/4001 - https://www.exploit-db.com/exploits/6071 - http://secunia.com/advisories/31053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ploit-db.com/exploits/6071 - http://secunia.com/advisories/31053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43761
CVE ID: CVE-2008-3191 State: PUBLISHED Published: 2008-07-16T18:00:00 Last Updated: 2024-08-07T09:28:41.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) City, (2) Interest, (3) Email, (4) Icq, (5) msn, or (6) Yahoo Messenger field in an edit_profile action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43757 - https://www.exploit-db.com/exploits/6068 - http://securityreason.com/securityalert/4003
CVE ID: CVE-2008-3192 State: PUBLISHED Published: 2008-07-16T18:00:00 Last Updated: 2024-08-07T09:28:41.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31049 - https://www.exploit-db.com/exploits/6057 - http://securityreason.com/securityalert/3999 - http://www.securityfocus.com/bid/30206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43746