Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0741 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T00:59:38.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO). Additional Analyst Notes: - CVE Program Container:
includes an improper implementation of TCP Segment Offloading (TSO). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023798 - https://rhn.redhat.com/errata/RHSA-2010-0476.html - https://bugs.edge.launchpad.net/ubuntu/+source/qemu-kvm/+bug/458521 - http://www.vupen.com/english/advisories/2010/0760 - http://lists.gnu.org/archive/html/qemu-devel/2009-10/msg02480.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11143 - https://patchwork.kernel.org/patch/56479/ - http://lists.gnu.org/archive/html/qemu-devel/2009-10/msg02495.html - http://www.redhat.com/support/errata/RHSA-2010-0271.html - http://git.kern
chive/html/qemu-devel/2009-10/msg02495.html - http://www.redhat.com/support/errata/RHSA-2010-0271.html - http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commit%3Bh=184bd0484533b725194fa517ddc271ffd74da7c9 - http://openwall.com/lists/oss-security/2010/03/29/4 - https://bugzilla.redhat.com/show_bug.cgi?id=577218
CVE ID: CVE-2010-0742 State: PUBLISHED Published: 2010-06-03T14:00:00 Last Updated: 2024-08-07T00:59:38.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rt.openssl.org/Ticket/Display.html?id=2211&user=guest&pass=guest - http://www.vupen.com/english/adv
References: - http://rt.openssl.org/Ticket/Display.html?id=2211&user=guest&pass=guest - http://www.vupen.com/english/advisories/2010/1313 - http://secunia.com/advisories/40024 - http://secunia.com/advisories/42724 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12395 - http://www.securityfocus.com/bid/40502 - http://marc.info/?l=bugtraq&m=129138643405740&w=2 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://www.vupen.com/english/advisories/2010/3105 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html - http://cvs.openssl.org/filediff?f=openssl/crypto/cms/cms_asn1.c&v1=1.8&v2=1.8.6.1 - http://secunia.co
uary/000101.html - http://cvs.openssl.org/filediff?f=openssl/crypto/cms/cms_asn1.c&v1=1.8&v2=1.8.6.1 - http://secunia.com/advisories/57353 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html - https://bugzilla.redhat.com/show_bug.cgi?id=598738 - http://marc.info/?l=bugtraq&m=129138643405740&w=2 - http://secunia.com/advisories/40000 - https://kb.bluecoat.com/index?page=content&id=SA50 - http://secunia.com/advisories/42733 - http://secunia.com/advisories/42457 - http://cvs.openssl.org/chngview?cn=19693 - http://www.openssl.org/news/secadv_20100601.txt
CVE ID: CVE-2010-0743 State: PUBLISHED Published: 2010-04-08T17:00:00 Last Updated: 2024-08-07T00:59:38.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI Enterprise Target (aka iscsitarget) 0.4.16 allow remote attackers to cause a denial of service (tgtd daemon crash) or possibly have unspecified other impact via vectors that involve the isns_attr_query and qry_rsp_handle functions, and are related to (a) client appearance and (b) client disappearance messages. Additional Analyst Notes: - CVE Program Container: References: -
ient appearance and (b) client disappearance messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57496 - https://bugzilla.redhat.com/show_bug.cgi?id=576359 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:131 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=574935 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11248 - http://secunia.com/advisories/39142 - http://marc.info/?l=oss-security&m=127005132403189&w=2 - http://www.securityfocus.com/bid/39127 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://git.kernel.org/?p=linux/ker
/39127 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://git.kernel.org/?p=linux/kernel/git/tomo/tgt.git%3Ba=commit%3Bh=107d922706cd36f3bb79bcca9bc4678c32f22e59 - http://www.debian.org/security/2010/dsa-2042 - http://www.vupen.com/english/advisories/2010/1786 - http://secunia.com/advisories/39726
CVE ID: CVE-2010-0744 State: PUBLISHED Published: 2010-04-20T15:00:00 Last Updated: 2024-08-07T00:59:38.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041046.html - http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log
roject.org/pipermail/package-announce/2010-May/041046.html - http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/?view=log&pathrev=11991 - http://www.openwall.com/lists/oss-security/2010/03/10/4 - http://secunia.com/advisories/39796 - http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/sip.tcl?r1=11953&r2=11991&pathrev=11991 - http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/proxy.tcl?r1=11886&r2=11991&pathrev=11991 - http://www.securityfocus.com/bid/35507 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572818 - http://www.openwall.com/lists/oss-security/2010/04/01/4 - http://seclists.org/bugtraq/2009/Jun/239 - http://www.opensource-archive.org/showthread.php?p=183821 - http://amsn
1/4 - http://seclists.org/bugtraq/2009/Jun/239 - http://www.opensource-archive.org/showthread.php?p=183821 - http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/soap.tcl?r1=11891&r2=11991&pathrev=11991 - http://secunia.com/advisories/35621 - http://www.vupen.com/english/advisories/2010/1109 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041079.html
CVE ID: CVE-2010-0745 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T00:59:39.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU consumption) via long headers in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://security-tracker.debian.org/tracker/CVE-2010-0745 - http://www.vupen.com/english/advisories/2010/1107 - http://dovecot.org/pipermail/dovecot/2010-February/047190.html - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.mandriva.com/security/advisories?nam
://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:104 - https://bugzilla.redhat.com/show_bug.cgi?id=572268 - http://www.vupen.com/english/advisories/2010/1226 - http://www.openwall.com/lists/oss-security/2010/03/10/6 - http://dovecot.org/list/dovecot-news/2010-March/000152.html - http://marc.info/?l=oss-security&m=127013715227551&w=2
CVE ID: CVE-2010-0746 State: PUBLISHED Published: 2014-01-13T21:00:00 Last Updated: 2024-08-07T00:59:38.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12 and possibly other operating systems, allows local users to gain privileges via .. (dot dot) sequences in the label for a pluggable storage device. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=23235 - http://stealth.openwall.net/xSports/devshit.pl - http://seclists.org/oss-sec/2010/q2/5 - https://bugzilla.redhat.com/show_bug.cgi?id=523178 - http://xorl.wordpress.com/201
tp://seclists.org/oss-sec/2010/q2/5 - https://bugzilla.redhat.com/show_bug.cgi?id=523178 - http://xorl.wordpress.com/2010/04/06/cve-2010-0746-devicekit-local-privilege-escalation/
CVE ID: CVE-2010-0747 State: PUBLISHED Published: 2019-10-30T22:27:45 Last Updated: 2024-08-07T00:59:39.027Z Vendors: drbd8 Products: drbd8 Problem Types: Other Description: drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-0747 - https://www.debian.org/security/2010/dsa-2015
CVE ID: CVE-2010-0748 State: PUBLISHED Published: 2019-10-30T22:34:40 Last Updated: 2024-08-07T00:59:38.897Z Vendors: transmission Products: transmission Problem Types: Buffer Overflow Description: Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-0748 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0748 - https://trac.transmissionbt.com/ticket/2965 - https://github.com/transmission/transmission/wiki/Release-Notes#transmission-192-20100314 - htt
sionbt.com/ticket/2965 - https://github.com/transmission/transmission/wiki/Release-Notes#transmission-192-20100314 - https://www.openwall.com/lists/oss-security/2010/04/01/9
CVE ID: CVE-2010-0749 State: PUBLISHED Published: 2019-10-30T22:45:13 Last Updated: 2024-08-07T00:59:38.814Z Vendors: transmission Products: transmission Problem Types: Denial of Service - Malformed Input Description: Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-0749 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0749 - https://github.com/transmission/transmission/wiki/Release-Notes#transmission-192-20100314 - https://www.openwall.com/lists/oss-security/2010/04/01/9 - https://trac.transmissionbt.com/tick
nsmission-192-20100314 - https://www.openwall.com/lists/oss-security/2010/04/01/9 - https://trac.transmissionbt.com/ticket/1242
CVE ID: CVE-2010-0750 State: PUBLISHED Published: 2010-04-06T16:00:00 Last Updated: 2024-08-07T00:59:38.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57543 - http://marc.info/?l=oss-security&m=127014095301235&w=2 - http://cgit.freedesktop.org/PolicyKit/commit/?id=14bdfd816512a82b1ad258fa143ae5faa945df8a - http://secunia.com/advisories/39149 - http://bugs.freedesktop.org/show_bug.cgi?id=26982 - https://launchpad.net/bugs/532852
://secunia.com/advisories/39149 - http://bugs.freedesktop.org/show_bug.cgi?id=26982 - https://launchpad.net/bugs/532852 - http://security.gentoo.org/glsa/glsa-201204-06.xml - http://secunia.com/advisories/48817 - http://marc.info/?l=oss-security&m=127014999113790&w=2
CVE ID: CVE-2010-0751 State: PUBLISHED Published: 2010-04-06T16:00:00 Last Updated: 2024-08-07T00:59:38.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via crafted fragmented packets. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038410.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038375.html - http://secunia.com/advisories/39225 - http://www.vupen.com/english/
/pipermail/package-announce/2010-April/038375.html - http://secunia.com/advisories/39225 - http://www.vupen.com/english/advisories/2010/0791 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038388.html - http://www.securityfocus.com/bid/39142 - http://www.vupen.com/english/advisories/2010/0777 - http://freefr.dl.sourceforge.net/project/libnids/libnids/1.24/libnids-1.24.releasenotes.txt - http://xorl.wordpress.com/2010/04/04/libnids-ip-fragmentation-remote-null-pointer-dereference/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/57428 - http://secunia.com/advisories/39249
CVE ID: CVE-2010-0752 State: PUBLISHED Published: 2010-02-27T00:00:00 Last Updated: 2024-08-07T00:59:38.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: The week_post_page function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access restrictions when constructing SQL queries, which allows remote attackers to read restricted node listings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56504 - http://drupal.org/node/723776 - http://drupal.org/node/724286 - http://secunia.com/advisories/38717 - http://osvdb.org/62565 - http://
org/node/723776 - http://drupal.org/node/724286 - http://secunia.com/advisories/38717 - http://osvdb.org/62565 - http://www.securityfocus.com/bid/38397
CVE ID: CVE-2010-0753 State: PUBLISHED Published: 2010-02-27T00:00:00 Last Updated: 2024-08-07T00:59:39.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SQL Reports (com_sqlreport) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter to ajax/print.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56476 - http://www.securityfocus.com/bid/38361 - http://secunia.com/advisories/38678 - http://osvdb.org/62534 - http://www.packetstormsecurity.com/1002
s.com/bid/38361 - http://secunia.com/advisories/38678 - http://osvdb.org/62534 - http://www.packetstormsecurity.com/1002-exploits/joomlasqlreport-sql.txt - http://www.exploit-db.com/exploits/11549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56541
CVE ID: CVE-2010-0754 State: PUBLISHED Published: 2010-02-27T00:00:00 Last Updated: 2024-08-07T00:59:39.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the which parameter in a copy action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0468 - http://www.securityfocus.com/bid/38386 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0067.html - http://osvdb.org/62558 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-006.txt - htt
ugtraq/2012-03/0067.html - http://osvdb.org/62558 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-006.txt - http://secunia.com/advisories/38699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56518 - http://www.exploit-db.com/exploits/11560 - http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt
CVE ID: CVE-2010-0755 State: PUBLISHED Published: 2010-02-27T00:00:00 Last Updated: 2024-08-07T00:59:38.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute arbitrary PHP code via a URL in the langFile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56519 - http://osvdb.org/62647 - http://www.exploit-db.com/exploits/11560 - http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt
CVE ID: CVE-2010-0756 State: PUBLISHED Published: 2010-02-27T00:00:00 Last Updated: 2024-08-07T00:59:39.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to (1) index.php/Comment/Main, (2) index.php/Comment/Main/Home_Wiky, or (3) index.php/Edit/Main. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56594 - http://www.securityfocus.com/bid/38386 - http://www.exploit-db.com/exploits/11560 - http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt
CVE ID: CVE-2010-0757 State: PUBLISHED Published: 2010-02-27T00:00:00 Last Updated: 2024-08-07T00:59:38.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension using the uploadform action, then accessing it via a direct request to the file in userfiles/[username]/uploaded/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56517 - http://osvdb.org/62648 - http://www.exploit-db.com/exploits/1
tps://exchange.xforce.ibmcloud.com/vulnerabilities/56517 - http://osvdb.org/62648 - http://www.exploit-db.com/exploits/11560 - http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt
CVE ID: CVE-2010-0758 State: PUBLISHED Published: 2010-02-27T00:00:00 Last Updated: 2024-08-07T00:59:39.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news_desc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/softbizjobs-sql.txt - http://www.exploit-db.com/exploits/11518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56453 - http://www.securityfocus.com/bid/38344
CVE ID: CVE-2010-0759 State: PUBLISHED Published: 2010-02-27T00:00:00 Last Updated: 2024-08-07T00:59:39.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files[] parameter, a different vector than CVE-2010-0760. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38637 - http://www.osvdb.org/62486 - http://packetstormsecurity.org/1002-exploits/joomlascrip
p://secunia.com/advisories/38637 - http://www.osvdb.org/62486 - http://packetstormsecurity.org/1002-exploits/joomlascriptegrator-lfi.txt - http://www.exploit-db.com/exploits/11498 - http://www.securityfocus.com/bid/38296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56380
CVE ID: CVE-2010-0760 State: PUBLISHED Published: 2010-02-27T00:00:00Z Last Updated: 2024-09-17T01:41:29.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) file parameter to libraries/jquery/js/ui/jsloader.php and the (2) files[] parameter to libraries/jquery/js/jsloader.php, a different vector than CVE-2010-0759. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program
ation is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38637 - http://www.osvdb.org/62484 - http://www.osvdb.org/62485
CVE ID: CVE-2010-0761 State: PUBLISHED Published: 2010-03-02T18:00:00 Last Updated: 2024-08-07T00:59:39.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a gamecatalog action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38520 - http://www.securityfocus.com/bid/38189 - http://packetstormsecurity.org/1002-exploits/ebooksrental-sql.txt - http://www.indonesiancoder.org/booksebooks-rental-software-sql-injection-vulnerability - http://www.exploit-db.com/exploits
p://www.indonesiancoder.org/booksebooks-rental-software-sql-injection-vulnerability - http://www.exploit-db.com/exploits/11402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56210 - http://osvdb.org/62277
CVE ID: CVE-2010-0762 State: PUBLISHED Published: 2010-03-02T18:00:00 Last Updated: 2024-08-07T00:59:39.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11401 - http://www.indonesiancoder.org/cd-rentals-script-sql-injection-vulnerability - http://packetstormsecurity.org/1002-exploits/cdrentals-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56209 - http://www.osvdb.org/62278 - http:/
its/cdrentals-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56209 - http://www.osvdb.org/62278 - http://www.securityfocus.com/bid/38184 - http://secunia.com/advisories/38519
CVE ID: CVE-2010-0763 State: PUBLISHED Published: 2010-03-02T18:00:00 Last Updated: 2024-08-07T00:59:39.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rental_id parameter in a CalendarView action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11410 - http://www.securityfocus.com/bid/38208 - http://secunia.com/advisories/38552
CVE ID: CVE-2010-0764 State: PUBLISHED Published: 2010-03-02T18:00:00 Last Updated: 2024-08-07T00:59:39.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62272 - http://www.exploit-db.com/exploits/11382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56206 - http://secunia.com/advisories/38548 - http://packetstormsecurity.org/1002-exploits/esmile-sql.txt