Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3066 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:21:35.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 allows remote attackers to execute arbitrary code by importing a file into a media library and then deleting this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/494778/100/0/threaded - http://www.vupen.com/english/advisories/2008/2194/references - http://www.kb.cert.org/vuls/id/461187 - http://serv
ded - http://www.vupen.com/english/advisories/2008/2194/references - http://www.kb.cert.org/vuls/id/461187 - http://service.real.com/realplayer/security/07252008_player/en/ - http://securitytracker.com/id?1020565 - http://www.securityfocus.com/bid/30379 - http://www.securityfocus.com/bid/30376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44013 - http://www.zerodayinitiative.com/advisories/ZDI-08-046/
CVE ID: CVE-2008-3067 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:21:35.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43618
CVE ID: CVE-2008-3068 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:21:34.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension. Additional Analyst Notes: - CVE Program Container: References: - https://www.c
ority Information Access (AIA) extension. Additional Analyst Notes: - CVE Program Container: References: - https://www.cynops.de/advisories/AKLINK-SA-2008-003.txt - http://securityreason.com/securityalert/3978 - http://www.securityfocus.com/archive/1/494101/100/0/threaded - http://www.securityfocus.com/bid/28548 - https://www.klink.name/security/aklink-sa-2008-004-office2007-signatures.txt - https://www.cynops.de/advisories/AKLINK-SA-2008-002.txt - https://www.cynops.de/advisories/AKLINK-SA-2008-004.txt - http://www.securitytracker.com/id?1019736 - http://www.securitytracker.com/id?1019738 - https://www.klink.name/security/aklink-sa-2008-003-live-mail-smime.txt - https://www.klink.name/secur
r.com/id?1019738 - https://www.klink.name/security/aklink-sa-2008-003-live-mail-smime.txt - https://www.klink.name/security/aklink-sa-2008-002-outlook-smime.txt - http://www.securitytracker.com/id?1019737 - https://www.cynops.de/techzone/http_over_x509.html - http://www.securityfocus.com/archive/1/493947/100/0/threaded
CVE ID: CVE-2008-3069 State: PUBLISHED Published: 2008-07-08T18:00:00 Last Updated: 2024-08-07T09:21:34.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) portal.php and (2) inc/functions_post.php. Additional Analyst Notes: - CVE Program Container: References: - http://community.mybboard.net/attachment.php?aid=9272 - http://secunia.com/advisories/31013 - http://community.mybboard.net/showthread.php?tid=31666
CVE ID: CVE-2008-3070 State: PUBLISHED Published: 2008-07-08T18:00:00 Last Updated: 2024-08-07T09:21:35.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in inc/datahandler/user.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $user['language'] variable, probably related to SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://community.mybboard.net/attachment.php?aid=9272 - http://secunia.com/advisories/31013 - http://community.mybboard.net/showthread.php?tid=31666
CVE ID: CVE-2008-3071 State: PUBLISHED Published: 2008-07-08T18:00:00 Last Updated: 2024-08-07T09:21:35.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/class_language.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $language variable. Additional Analyst Notes: - CVE Program Container: References: - http://community.mybboard.net/attachment.php?aid=9272 - http://secunia.com/advisories/31013 - http://community.mybboard.net/showthread.php?tid=31666
CVE ID: CVE-2008-3072 State: PUBLISHED Published: 2008-07-08T18:00:00 Last Updated: 2024-08-07T09:21:35.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30955 - http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0
CVE ID: CVE-2008-3073 State: PUBLISHED Published: 2008-07-08T18:00:00 Last Updated: 2024-08-07T09:21:35.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting (XSS), related to "use of the html-tag." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30955 - http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0 - http://www.securityfocus.com/bid/30108
CVE ID: CVE-2008-3074 State: PUBLISHED Published: 2009-02-21T22:00:00 Last Updated: 2024-08-07T09:21:35.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive, which is not properly handled by the VIM TAR plugin (tar.vim) v.10 through v.22, as demonstrated by the shellescape, tarplugin.v2, tarplugin, and tarplugin.updated test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008
arplugin, and tarplugin.updated test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3075. NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://www.rdancer.org/vulnerablevim.html - http://www.openwall.com/lists/oss-security/2008/07/15/4 - http://www.openwall.com/lists/oss-security/2008/10/20/2 - http://www.
www.openwall.com/lists/oss-security/2008/07/15/4 - http://www.openwall.com/lists/oss-security/2008/10/20/2 - http://www.securityfocus.com/bid/32462 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10754 - http://www.openwall.com/lists/oss-security/2008/07/13/1 - http://www.redhat.com/support/errata/RHSA-2008-0580.html - http://secunia.com/advisories/34418 - http://www.openwall.com/lists/oss-security/2008/07/07/1 - http://www.openwall.com/lists/oss-security/2008/08/01/1 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324 - http://marc.info/?l=bugtraq&m=121494431426308&w=2 - http://www.openwall.com/lists/oss-security/2008/07/08/12 - http://bugs.debian
rc.info/?l=bugtraq&m=121494431426308&w=2 - http://www.openwall.com/lists/oss-security/2008/07/08/12 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919 - http://www.openwall.com/lists/oss-security/2008/07/10/7 - http://www.openwall.com/lists/oss-security/2008/07/07/4 - http://www.rdancer.org/vulnerablevim-shellescape.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:236 - https://bugzilla.redhat.com/show_bug.cgi?id=467428 - http://www.openwall.com/lists/oss-security/2008/10/15/1
CVE ID: CVE-2008-3075 State: PUBLISHED Published: 2009-02-21T22:00:00 Last Updated: 2024-08-07T09:21:35.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a ZIP archive and possibly (2) the filename of the first file in a ZIP archive, which is not properly handled by zip.vim in the VIM ZIP plugin (zipPlugin.vim) v.11 through v.21, as demonstrated by the zipplugin and zipplugin.v2 test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: thi
nd zipplugin.v2 test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3074. NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://www.rdancer.org/vulnerablevim.html - http://www.openwall.com/lists/oss-security/2008/07/15/4 - http://www.openwall.com/lists/oss-security/2008/10/20/2 - https://oval.cisecurity.org
/lists/oss-security/2008/07/15/4 - http://www.openwall.com/lists/oss-security/2008/10/20/2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10246 - http://www.openwall.com/lists/oss-security/2008/07/13/1 - http://www.redhat.com/support/errata/RHSA-2008-0580.html - http://secunia.com/advisories/34418 - http://www.openwall.com/lists/oss-security/2008/07/07/1 - http://www.openwall.com/lists/oss-security/2008/08/01/1 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324 - http://marc.info/?l=bugtraq&m=121494431426308&w=2 - http://www.openwall.com/lists/oss-security/2008/07/08/12 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919 - http://www.openwa
nwall.com/lists/oss-security/2008/07/08/12 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919 - http://www.openwall.com/lists/oss-security/2008/07/10/7 - http://www.openwall.com/lists/oss-security/2008/07/07/4 - https://bugzilla.redhat.com/show_bug.cgi?id=467432 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:236 - http://www.securityfocus.com/bid/32463 - http://www.openwall.com/lists/oss-security/2008/10/15/1
CVE ID: CVE-2008-3076 State: PUBLISHED Published: 2009-02-21T22:00:00 Last Updated: 2024-08-07T09:21:35.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system functions within the (1) mz and (2) mc commands, as demonstrated by the netrw.v2 and netrw.v3 test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://marc.info/?l=oss-se
r: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://marc.info/?l=oss-security&m=122416184431388&w=2 - http://www.openwall.com/lists/oss-security/2008/10/20/2 - http://www.rdancer.org/vulnerablevim-netrw.html - http://www.redhat.com/support/errata/RHSA-2008-0580.html - http://secunia.com/advisories/34418 - http://www.openwall.com/lists/oss-security/2008/07/07/1 - http://www.securityfocus.com/bid/30115 - http://www.rdancer.org/vulnerablevim-netrw.v2.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324 - http://marc.info/?l=bugtraq&m=121494431426308&w=2 - http://www.openwall.com/lists/oss-security/2008/07/08/12 - http://bugs.debian.org/cgi
?l=bugtraq&m=121494431426308&w=2 - http://www.openwall.com/lists/oss-security/2008/07/08/12 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43624 - http://www.openwall.com/lists/oss-security/2008/07/07/4 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:236
CVE ID: CVE-2008-3077 State: PUBLISHED Published: 2008-07-09T00:00:00 Last Updated: 2024-08-07T09:21:35.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86_64 platform leaks task_struct references into the sys32_ptrace function, which allows local users to cause a denial of service (system crash) or have unspecified other impact via unknown vectors, possibly a use-after-free vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2063/references - http://www.openwall.com/lists/oss-security/2008/07/03/2 - http://secunia.com/advisories/31048
es/2008/2063/references - http://www.openwall.com/lists/oss-security/2008/07/03/2 - http://secunia.com/advisories/31048 - http://www.securityfocus.com/bid/30077 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=1e9a615bfce7996ea4d815d45d364b47ac6a74e8 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10
CVE ID: CVE-2008-3078 State: PUBLISHED Published: 2008-07-09T00:00:00 Last Updated: 2024-08-07T09:21:35.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/951/ - http://www.opera.com/docs/changelogs/windows/951/ - http://www.opera.com/docs/changelogs/freebsd/951/ - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html - http://www.opera.com/docs/ch
freebsd/951/ - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html - http://www.opera.com/docs/changelogs/linux/951/ - http://www.opera.com/docs/changelogs/solaris/951/ - http://secunia.com/advisories/30935 - http://www.securityfocus.com/bid/30068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43575 - http://www.vupen.com/english/advisories/2008/1997/references - http://www.opera.com/support/search/view/887/ - http://secunia.com/advisories/31339
CVE ID: CVE-2008-3079 State: PUBLISHED Published: 2008-07-09T00:00:00 Last Updated: 2024-08-07T09:21:35.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/951/ - http://secunia.com/advisories/30937 - http://www.vupen.com/english/advisories/2008/1998/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43576
CVE ID: CVE-2008-3080 State: PUBLISHED Published: 2008-07-09T00:00:00 Last Updated: 2024-08-07T09:21:35.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as administrators. NOTE: this can be leveraged to execute SQL commands by also exploiting CVE-2007-1899. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5975 - http://www.netvigilance.com/advisory0040
CVE ID: CVE-2008-3081 State: PUBLISHED Published: 2008-07-09T00:00:00 Last Updated: 2024-08-07T09:21:35.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified "input validation" vulnerabilities in the Web management interface (aka Messaging Administration interface) in Avaya Message Storage Server (MSS) 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user vexvm via vectors related to (1) SFTP Remote Store configuration; (2) remote FTP storage settings; (3) name server lookup; (4) pinging another host; (5) TCP/IP Networking parameter configuration; (6) the external hosts configurati
rver lookup; (4) pinging another host; (5) TCP/IP Networking parameter configuration; (6) the external hosts configuration main page; (7) adding and changing external hosts; (8) Windows domain parameter configuration; (9) date, time, and NTP server configuration; (10) alarm settings; (11) the command line history form; (12) the maintenance form; and (13) the server events form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29938 - http://www.voipshield.com/research-details.php?id=92 - http://www.voipshield.com/research-details.php?id=104 - http://www.voipshield.com/research-details.php?id=98 - https://exchange.xforce.ibmcloud.com/vulnerabil
ails.php?id=104 - http://www.voipshield.com/research-details.php?id=98 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43424 - http://www.vupen.com/english/advisories/2008/1945/references - http://www.voipshield.com/research-details.php?id=94 - http://www.voipshield.com/research-details.php?id=93 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43422 - http://www.voipshield.com/research-details.php?id=100 - http://www.voipshield.com/research-details.php?id=97 - http://www.voipshield.com/research-details.php?id=102 - http://support.avaya.com/elmodocs2/security/ASA-2008-269.htm - http://osvdb.org/46587 - http://secunia.com/advisories/30777 - http://www.voipshield.com/research-deta
SA-2008-269.htm - http://osvdb.org/46587 - http://secunia.com/advisories/30777 - http://www.voipshield.com/research-details.php?id=101 - http://www.voipshield.com/research-details.php?id=99 - http://www.voipshield.com/research-details.php?id=95 - http://www.voipshield.com/research-details.php?id=103 - http://www.voipshield.com/research-details.php?id=96 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43423
CVE ID: CVE-2008-3082 State: PUBLISHED Published: 2008-07-09T00:00:00 Last Updated: 2024-08-07T09:21:35.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30876 - http://www.securityfocus.com/bid/29957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43442 - http://blog.commtouch.com/cafe/email-security-news/vulnerability-in-commtouch-gateway-not-anymore/ - http://lists.gr
2 - http://blog.commtouch.com/cafe/email-security-news/vulnerability-in-commtouch-gateway-not-anymore/ - http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062955.html
CVE ID: CVE-2008-3083 State: PUBLISHED Published: 2008-07-09T00:00:00 Last Updated: 2024-08-07T09:28:41.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30060 - http://secunia.com/advisories/30922 - https://www.exploit-db.com/exploits/5993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43535
CVE ID: CVE-2008-3084 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3085 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3086 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3087 State: PUBLISHED Published: 2008-07-09T19:00:00 Last Updated: 2024-08-07T09:28:41.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to index.php, possibly related to the phpManual module. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30946 - https://www.exploit-db.com/exploits/6007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43600
CVE ID: CVE-2008-3088 State: PUBLISHED Published: 2008-07-09T19:00:00 Last Updated: 2024-08-07T09:28:40.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a Category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43604 - http://www.securityfocus.com/bid/30095 - https://www.exploit-db.com/exploits/6007
CVE ID: CVE-2008-3089 State: PUBLISHED Published: 2008-07-09T19:00:00 Last Updated: 2024-08-07T09:28:40.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute arbitrary SQL commands via the uid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43607 - http://secunia.com/advisories/30926 - http://www.securityfocus.com/bid/30101 - https://www.exploit-db.com/exploits/6010
CVE ID: CVE-2008-3090 State: PUBLISHED Published: 2008-07-09T19:00:00 Last Updated: 2024-08-07T09:28:40.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow remote attackers to execute arbitrary SQL commands via the (1) p, (2) e, (3) d, and (4) m parameters, a different vulnerability than CVE-2008-2819. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43592 - http://secunia.com/advisories/30959 - http://www.securityfocus.com/bid/30104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43593
/advisories/30959 - http://www.securityfocus.com/bid/30104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43593 - http://vuln.sg/blognplus255-en.html - http://www.blogn.org/index.php?e=171
CVE ID: CVE-2008-3091 State: PUBLISHED Published: 2008-07-09T19:00:00 Last Updated: 2024-08-07T09:28:41.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create or edit post permissions, to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43570 - http://secunia.com/advisories/30933 - http://drupal.org/node/277877