Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1661 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Node Quick Find module 6.x-1.1 for Drupal does not use db_rewrite_sql when presenting node titles, which allows remote attackers to bypass intended access restrictions and read potentially sensitive node titles via the autocomplete feature. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/files/issues/db_rewrite_sql_12.patch - http://drupal.org/node/1118408 - http://secunia.com/advisories/44046 - http://www.securityfocus.com/bid/47238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ia.com/advisories/44046 - http://www.securityfocus.com/bid/47238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66604 - http://drupal.org/node/1080114
CVE ID: CVE-2011-1662 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:24.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66475 - http://drupal.org/node/1111174 - http://secunia.com/advisories/43950 - http://www.securityfocus.com/bid/47098
CVE ID: CVE-2011-1663 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66476 - http://drupal.org/node/1111174 - http://secunia.com/advisories/43950 - http://www.securityfocus.com/bid/47098
CVE ID: CVE-2011-1664 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1111174 - http://secunia.com/advisories/43950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66477
CVE ID: CVE-2011-1665 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66474 - http://secunia.com/advisories/43949 - http://www.exploit-db.com/exploits/17085
CVE ID: CVE-2011-1666 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:24.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php, (2) Crm/Export/Csv.php, or (3) Calendar/Model/Attender.php, which reveal the full installation path. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/path_disclosure_in_tine_2_0.html - http://www.securityfocus.com/bid/47102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66558 - http://securityreason.com/securityalert/8191 - http://www.securityfocus.com/
xforce.ibmcloud.com/vulnerabilities/66558 - http://securityreason.com/securityalert/8191 - http://www.securityfocus.com/archive/1/517269/100/0/threaded
CVE ID: CVE-2011-1667 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/100006/anzeigenmarkt-sql.txt - http://www.exploit-db.com/exploits/17102 - http://osvdb.org/71463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66551 - http://securityreason.com/securityalert/8192 - http://www.securityfocus.com/bid/47136 - http://secunia.com
ities/66551 - http://securityreason.com/securityalert/8192 - http://www.securityfocus.com/bid/47136 - http://secunia.com/advisories/44005
CVE ID: CVE-2011-1668 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secpod.org/advisories/SECPOD_AWCM_XSS.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/66536 - http://www.securityfocus.com/bid/47126 - http://securityreason.com/securityalert/8193 - http://www.securityfocus.com/archive/1/517294/100/0/
ocus.com/bid/47126 - http://securityreason.com/securityalert/8193 - http://www.securityfocus.com/archive/1/517294/100/0/threaded
CVE ID: CVE-2011-1669 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/71707 - http://www.exploit-db.com/exploits/17119 - http://www.securityfocus.com/bid/47146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66559 - http://www.autosectools.com/Advisories/WordPress.WP.Custom.Pages.0.5.0.1_Local.File.
bmcloud.com/vulnerabilities/66559 - http://www.autosectools.com/Advisories/WordPress.WP.Custom.Pages.0.5.0.1_Local.File.Inclusion_169.html - http://secunia.com/advisories/43963
CVE ID: CVE-2011-1670 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the subject parameter to post_url/edit. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66562 - http://www.securityfocus.com/archive/1/517271/100/0/threaded - http://www.htbridge.ch/advisory/xss_vulnerability_in_interra_blog_machine.
tyfocus.com/archive/1/517271/100/0/threaded - http://www.htbridge.ch/advisory/xss_vulnerability_in_interra_blog_machine.html - http://www.exploit-db.com/exploits/17098 - http://securityreason.com/securityalert/8195
CVE ID: CVE-2011-1671 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:37:25.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to todos/tag/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/71352 - http://www.securityfocus.com/archive/1/517223/100/0/threaded - http://www.mavitunasecurity.com/XSS-vulnerability-in-Tracks/ - http://securityreason.com/secur
1/517223/100/0/threaded - http://www.mavitunasecurity.com/XSS-vulnerability-in-Tracks/ - http://securityreason.com/securityalert/8196 - http://www.securityfocus.com/bid/47078 - http://secunia.com/advisories/43909 - http://www.getontracks.org/downloads/comments/tracks-173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66561
CVE ID: CVE-2011-1672 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:25.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47172 - http://www.kb.cert.org/vuls/id/598700 - http://www.vupen.com/english/advisories/2011/0883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66630 - http://www.kac
www.vupen.com/english/advisories/2011/0883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66630 - http://www.kace.com/support/kb/index.php?action=artikel&cat=1&id=1104
CVE ID: CVE-2011-1673 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:24.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66817 - http://www.kb.cert.org/vuls/id/644812 - http://www.vupen.com/english/advisories/2011/0884 - http://secunia.com/advisories/44045
CVE ID: CVE-2011-1674 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:25.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66723 - http://www.kb.cert.org/vuls/id/644812 - http://www.vupen.com/english/advisories/2011/0884 - http://secunia.com/advisories/44045
CVE ID: CVE-2011-1675 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:25.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/04/9 - http://openwall.com/lists/oss-security/2011/03/22/6 - http://op
- http://openwall.com/lists/oss-security/2011/03/04/9 - http://openwall.com/lists/oss-security/2011/03/22/6 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-security/2011/03/05/7 - http://secunia.com/advisories/48114 - https://bugzilla.redhat.com/show_bug.cgi?id=688980 - http://openwall.com/lists/oss-security/2011/03/07/9 - http://openwall.com/lists/oss-security/2011/04/01/2 - http://openwall.com/lists/oss-security/2011/03/04/10 - http://openwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/lists/oss-security/2011/03/04/12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66705 - ht
- http://openwall.com/lists/oss-security/2011/03/04/12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66705 - http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://openwall.com/lists/oss-security/2011/03/05/3 - http://openwall.com/lists/oss-security/2011/03/31/3 - http://openwall.com/lists/oss-security/2011/03/15/6 - http://www.redhat.com/support/errata/RHSA-2011-1691.html
CVE ID: CVE-2011-1676 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:25.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/04/9 - http://openwall.com/lists/oss-security/2011/03/22/6 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-secur
ts/oss-security/2011/03/22/6 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-security/2011/03/05/7 - https://bugzilla.redhat.com/show_bug.cgi?id=688980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66704 - http://openwall.com/lists/oss-security/2011/03/07/9 - http://openwall.com/lists/oss-security/2011/04/01/2 - http://openwall.com/lists/oss-security/2011/03/04/10 - http://openwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/lists/oss-security/2011/03/04/12 - http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://open
http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://openwall.com/lists/oss-security/2011/03/05/3 - http://openwall.com/lists/oss-security/2011/03/31/3 - http://openwall.com/lists/oss-security/2011/03/15/6
CVE ID: CVE-2011-1677 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:24.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/04/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66703 - http://openwall.com/lists/oss-security/2011/03/22/6 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openw
http://openwall.com/lists/oss-security/2011/03/22/6 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-security/2011/03/05/7 - http://secunia.com/advisories/48114 - https://bugzilla.redhat.com/show_bug.cgi?id=688980 - http://openwall.com/lists/oss-security/2011/03/07/9 - http://openwall.com/lists/oss-security/2011/04/01/2 - http://openwall.com/lists/oss-security/2011/03/04/10 - http://openwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/lists/oss-security/2011/03/04/12 - http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://open
http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://openwall.com/lists/oss-security/2011/03/05/3 - http://openwall.com/lists/oss-security/2011/03/31/3 - http://openwall.com/lists/oss-security/2011/03/15/6 - http://www.redhat.com/support/errata/RHSA-2011-1691.html
CVE ID: CVE-2011-1678 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:24.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/
ner: References: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/04/9 - http://openwall.com/lists/oss-security/2011/03/22/6 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-security/2011/03/05/7 - https://bugzilla.redhat.com/show_bug.cgi?id=688980 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:148 - http://openwall.com/lists/oss-security/2011/03/07/9 - http://openwall.com/lists/oss-security/2011/04/01/2 - http://openwall.com/lists/oss-security/2011/03/04/10 - http://openwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/
enwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/lists/oss-security/2011/03/04/12 - http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://openwall.com/lists/oss-security/2011/03/05/3 - http://openwall.com/lists/oss-security/2011/03/31/3 - http://openwall.com/lists/oss-security/2011/03/15/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66702
CVE ID: CVE-2011-1679 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:24.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/04/9 - http:/
es: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/04/9 - http://openwall.com/lists/oss-security/2011/03/22/6 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-security/2011/03/05/7 - https://bugzilla.redhat.com/show_bug.cgi?id=688980 - http://openwall.com/lists/oss-security/2011/03/07/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66701 - http://openwall.com/lists/oss-security/2011/04/01/2 - http://openwall.com/lists/oss-security/2011/03/04/10 - http://openwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/lists/oss-security
ss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/lists/oss-security/2011/03/04/12 - http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://openwall.com/lists/oss-security/2011/03/05/3 - http://openwall.com/lists/oss-security/2011/03/31/3 - http://openwall.com/lists/oss-security/2011/03/15/6
CVE ID: CVE-2011-1680 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:24.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/5 - http://openwall.com/lists/oss-security/2011/03/04/9 - http://openwall.com/lists/oss-security/2011/03/22/6 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-security/2011/03/05/7 - https://bugzilla.red
penwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-security/2011/03/05/7 - https://bugzilla.redhat.com/show_bug.cgi?id=688980 - http://openwall.com/lists/oss-security/2011/03/07/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66700 - http://openwall.com/lists/oss-security/2011/04/01/2 - http://openwall.com/lists/oss-security/2011/03/04/10 - http://openwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/lists/oss-security/2011/03/04/12 - http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://openwall.com/lists/oss-security/2011/03/05/
2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://openwall.com/lists/oss-security/2011/03/05/3 - http://openwall.com/lists/oss-security/2011/03/31/3 - http://openwall.com/lists/oss-security/2011/03/15/6
CVE ID: CVE-2011-1681 State: PUBLISHED Published: 2011-04-10T01:29:00 Last Updated: 2024-08-06T22:37:25.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to trigger corruption of this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66699 - http://openwall.com/lists/oss-security/2011/03/14/5 - http:
https://exchange.xforce.ibmcloud.com/vulnerabilities/66699 - http://openwall.com/lists/oss-security/2011/03/14/5 - http://secunia.com/advisories/44904 - http://openwall.com/lists/oss-security/2011/03/04/9 - http://openwall.com/lists/oss-security/2011/03/22/6 - http://openwall.com/lists/oss-security/2011/03/22/4 - http://openwall.com/lists/oss-security/2011/03/05/7 - https://bugzilla.redhat.com/show_bug.cgi?id=688980 - http://openwall.com/lists/oss-security/2011/03/07/9 - http://openwall.com/lists/oss-security/2011/04/01/2 - http://openwall.com/lists/oss-security/2011/03/04/10 - http://openwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http:/
10 - http://openwall.com/lists/oss-security/2011/03/14/16 - http://openwall.com/lists/oss-security/2011/03/31/4 - http://openwall.com/lists/oss-security/2011/03/04/12 - http://openwall.com/lists/oss-security/2011/03/14/7 - http://openwall.com/lists/oss-security/2011/03/04/11 - http://openwall.com/lists/oss-security/2011/03/05/3 - http://openwall.com/lists/oss-security/2011/03/31/3 - http://openwall.com/lists/oss-security/2011/03/15/6 - https://hermes.opensuse.org/messages/8711677
CVE ID: CVE-2011-1682 State: PUBLISHED Published: 2011-04-13T14:00:00 Last Updated: 2024-08-06T22:37:24.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences. NOTE: this issue exists because of an incomplete fix for CVE-2011-0748. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud
ird party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/66666 - http://secunia.com/advisories/44041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66816