Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2947 State: PUBLISHED Published: 2008-06-30T22:00:00 Last Updated: 2024-08-07T09:21:34.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a (1) location or (2) location.href property, related to incorrect determination of the origin of web script, aka "Window Location Property Cross-Domain Vulnerability." NOTE: according to Microsoft, CVE-2008-2948 and CVE-2008-2949 are duplicates of this issue, probably different attack vectors. Additional Analyst N
t, CVE-2008-2948 and CVE-2008-2949 are duplicates of this issue, probably different attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43366 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 - http://www.vupen.com/english/advisories/2008/2809 - http://secunia.com/advisories/30857 - http://www.vupen.com/english/advisories/2008/1940/references - http://www.kb.cert.org/vuls/id/923508 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5901 - http://www.ph4nt0m.org-a.googlepages.com/PSTZine_0x
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5901 - http://www.ph4nt0m.org-a.googlepages.com/PSTZine_0x02_0x04.txt - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securityfocus.com/bid/29960 - http://www.securitytracker.com/id?1020382 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45565 - http://blogs.zdnet.com/security/?p=1348
CVE ID: CVE-2008-2948 State: PUBLISHED Published: 2008-06-30T22:00:00 Last Updated: 2024-08-07T09:21:34.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener. NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector. Additional Analyst Notes: - CVE Program Container: References: - http://sirdarckcat.blogspot.com/2008/05/ghosts-for-ie8-
Additional Analyst Notes: - CVE Program Container: References: - http://sirdarckcat.blogspot.com/2008/05/ghosts-for-ie8-and-ie75730.html - http://secunia.com/advisories/30851 - http://www.vupen.com/english/advisories/2008/1941/references - http://www.kb.cert.org/vuls/id/516627 - http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD - http://www.gnucitizen.org/blog/ghost-busters/ - http://blogs.zdnet.com/security/?p=1348
CVE ID: CVE-2008-2949 State: PUBLISHED Published: 2008-06-30T22:00:00 Last Updated: 2024-08-07T09:21:34.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener. NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1941/refer
Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1941/references - http://www.kb.cert.org/vuls/id/516627 - http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD - http://sirdarckcat.blogspot.com/2008/05/browsers-ghost-busters.html - http://blogs.zdnet.com/security/?p=1348
CVE ID: CVE-2008-2950 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:21:34.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.rpath.com/Advisories:rPSA-2008-0223 - http://www.securityfocus.com/archive/1/494142/100/0/threaded - https://www.exploit-db.com/exploits/6032 - http://secunia.com/advisories/30963 - http://lists.opensuse.org/opensus
ded - https://www.exploit-db.com/exploits/6032 - http://secunia.com/advisories/30963 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html - http://www.vupen.com/english/advisories/2008/2024/references - http://secunia.com/advisories/31002 - http://www.securityfocus.com/bid/30107 - http://security.gentoo.org/glsa/glsa-200807-04.xml - http://www.ocert.org/advisories/ocert-2008-007.html - http://secunia.com/advisories/31267 - http://www.ubuntu.com/usn/usn-631-1 - http://secunia.com/advisories/31405 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00161.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43619 - http://www.mandriva.com/secu
ce/2008-August/msg00161.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43619 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:146 - http://securityreason.com/securityalert/3977 - http://www.securitytracker.com/id?1020435 - http://www.securityfocus.com/archive/1/493980/100/0/threaded - http://secunia.com/advisories/31167
CVE ID: CVE-2008-2951 State: PUBLISHED Published: 2008-07-27T22:00:00 Last Updated: 2024-08-07T09:21:34.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html - http://www.osvdb.org/46513 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html - https://exchange.xforce.ibmcloud.co
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44043 - http://www.securityfocus.com/bid/30402 - http://secunia.com/advisories/31314 - http://holisticinfosec.org/content/view/72/45/ - http://trac.edgewall.org/wiki/ChangeLog
CVE ID: CVE-2008-2952 State: PUBLISHED Published: 2008-07-01T21:00:00 Last Updated: 2024-08-07T09:21:34.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0583.html - http://security.gentoo.org/glsa/glsa-200808-09.xml - http://secunia.com/advisories/31364 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10662 - http://secunia.com/advisories/30917 - htt
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10662 - http://secunia.com/advisories/30917 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43515 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580%3Bselectid=5580 - http://www.debian.org/security/2008/dsa-1650 - http://www.securityfocus.com/bid/30013 - http://www.openwall.com/lists/oss-security/2008/07/01/2 - http://www.vupen.com/english/advisories/2008/2268 - http://www.securityfocus.com/archive/1/495320/100/0/threaded - https://issues.rpath.com/browse/RPL-2645 - http://secunia.com/advisories/30996 - http://secunia.com/advis
0/0/threaded - https://issues.rpath.com/browse/RPL-2645 - http://secunia.com/advisories/30996 - http://secunia.com/advisories/31436 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:144 - http://www.openwall.com/lists/oss-security/2008/07/13/2 - http://www.ubuntu.com/usn/usn-634-1 - http://www.zerodayinitiative.com/advisories/ZDI-08-052/ - http://secunia.com/advisories/30853 - http://wiki.rpath.com/Advisories:rPSA-2008-0249 - http://secunia.com/advisories/31326 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00129.html - http://secunia.com/advisories/32254 - http://www.securitytrac
archives/fedora-package-announce/2008-July/msg00129.html - http://secunia.com/advisories/32254 - http://www.securitytracker.com/id?1020405 - http://www.vupen.com/english/advisories/2008/1978/references - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5580 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00109.html - http://secunia.com/advisories/32316
CVE ID: CVE-2008-2953 State: PUBLISHED Published: 2008-07-01T22:00:00 Last Updated: 2024-08-07T09:21:34.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via "partial file list requests" that trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29924 - http://www.securitytracker.com/id?1020407 - http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/ShareManager.cpp.diff?r1=1.14&r2=1.15&sortby=date - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.html - http://w
r1=1.14&r2=1.15&sortby=date - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.html - http://www.securitytracker.com/id?1020408 - http://secunia.com/advisories/30812 - http://secunia.com/advisories/30907 - http://secunia.com/advisories/30918 - http://sourceforge.net/project/shownotes.php?release_id=608612&group_id=40287 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00101.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43341
CVE ID: CVE-2008-2954 State: PUBLISHED Published: 2008-07-01T22:00:00 Last Updated: 2024-08-07T09:21:34.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43566 - http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diff?r1=1.14&r2=1.15&sortby=date - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.html - http://cvs.berlios.de
15&sortby=date - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.html - http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/Changelog.txt - http://dcplusplus.svn.sourceforge.net/viewvc/dcplusplus/dcplusplus/trunk/changelog.txt?r1=1027&r2=1026&pathrev=1027 - http://www.securitytracker.com/id?1020410 - http://www.securityfocus.com/bid/30037 - http://secunia.com/advisories/30907 - http://secunia.com/advisories/30918 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00101.html - http://www.securitytracker.com/id?1020409
CVE ID: CVE-2008-2955 State: PUBLISHED Published: 2008-07-01T22:00:00 Last Updated: 2024-08-07T09:21:34.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1947 - http://securityreason.com/securityalert/3966 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18050 - http://www.mandriva.com/security/advisories
urity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18050 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:025 - http://www.securityfocus.com/bid/29985 - http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm - http://secunia.com/advisories/33102 - http://www.securityfocus.com/archive/1/493682/100/0/threaded - http://www.ubuntu.com/usn/USN-675-1 - http://secunia.com/advisories/32859 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10131 - http://secunia.com/advisories/30881 - http://www.redhat.com/support/errata/RHSA-2008-1023.html
CVE ID: CVE-2008-2956 State: PUBLISHED Published: 2008-07-01T00:00:00 Last Updated: 2024-08-07T09:21:34.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Pidgin 2.0.0, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via malformed XML documents. NOTE: this issue has been disputed by the upstream vendor, who states: "I was never able to identify a scenario under which a problem occurred and the original reporter wasn't able to supply any sort of reproduction details." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29985 - http://www.openwall.com/lists/oss-secur
- CVE Program Container: References: - http://www.securityfocus.com/bid/29985 - http://www.openwall.com/lists/oss-security/2008/06/27/3 - http://secunia.com/advisories/31387 - http://www.securityfocus.com/archive/1/495165/100/0/threaded - http://crisp.cs.du.edu/?q=ca2007-1 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246 - https://issues.rpath.com/browse/RPL-2647
CVE ID: CVE-2008-2957 State: PUBLISHED Published: 2008-07-01T22:00:00 Last Updated: 2024-08-07T09:21:34.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:025 - http://www.securityfocus.com/bid/29985 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9076 - http://support.avaya.
85 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9076 - http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm - http://secunia.com/advisories/33102 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17599 - http://www.openwall.com/lists/oss-security/2008/06/27/3 - http://www.ubuntu.com/usn/USN-675-1 - http://secunia.com/advisories/32859 - http://crisp.cs.du.edu/?q=ca2007-1 - http://www.redhat.com/support/errata/RHSA-2008-1023.html
CVE ID: CVE-2008-2958 State: PUBLISHED Published: 2008-07-01T22:00:00 Last Updated: 2024-08-07T09:21:34.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly other attacks on temporary working directories. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30873 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=488140 - http://lists.alioth.debian.org/pipermail/secure-testing-team/2008-June/001672.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43440
CVE ID: CVE-2008-2959 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers to execute arbitrary code via a long lpstrLinkPath argument to the fCreateShellLink function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5851 - http://www.securityfocus.com/bid/29792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43180
CVE ID: CVE-2008-2960 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7, when register_globals is enabled and .htaccess support is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving scripts in libraries/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43320 - http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://s
me_page/downloads.php?relnotes=0 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://secunia.com/advisories/30813 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-4 - http://secunia.com/advisories/30816 - http://www.vupen.com/english/advisories/2008/1904/references - http://secunia.com/advisories/33822 - http://www.openwall.com/lists/oss-security/2008/07/16/11 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:131
CVE ID: CVE-2008-2961 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) path and (2) p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29890 - https://www.exploit-db.com/exploits/5896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43276
CVE ID: CVE-2008-2962 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) sort parameters to index.php, and the (3) id parameter to post.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43293 - https://www.exploit-db.com/exploits/5913
CVE ID: CVE-2008-2963 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:35.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29900 - https://www.exploit-db.com/exploits/5913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43292
CVE ID: CVE-2008-2964 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43261
CVE ID: CVE-2008-2965 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in viewforum.php in JaxUltraBB (JUBB) 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43279 - https://www.exploit-db.com/exploits/5877 - http://www.securityfocus.com/bid/29853
CVE ID: CVE-2008-2966 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in viewprofile.php in JaxUltraBB 2.0 and earlier allows remote attackers to read arbitrary local files via a .. (dot dot) in the user parameter. party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43278 - http://www.securityfocus.com/bid/29853
CVE ID: CVE-2008-2967 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) query string to login.php and the (2) glb_sid parameter to hta/htmlarea.js.php, and allow remote authenticated users to inject arbitrary web script or HTML via an unspecified field in room.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493472/100/0/threaded - http://secunia.c
: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493472/100/0/threaded - http://secunia.com/advisories/30763 - http://www.bugreport.ir/?/44 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43178 - http://securityreason.com/securityalert/3959 - http://www.securityfocus.com/bid/29813
CVE ID: CVE-2008-2968 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493472/100/0/threaded - http://secunia.com/advisories/30763 - http://www.bugreport.ir/?/44 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43177 - http://securityreason.com/securityalert/3959 - http://www.securityfocus.com/bid
rce.ibmcloud.com/vulnerabilities/43177 - http://securityreason.com/securityalert/3959 - http://www.securityfocus.com/bid/29813
CVE ID: CVE-2008-2969 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:35.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the dfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493472/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/43175 - http://www.bugreport.ir/?/44 - http://securityreason.com/securityalert/3959 - http://www.securityfocus.com/bid/29813
CVE ID: CVE-2008-2970 State: PUBLISHED Published: 2008-07-02T17:00:00 Last Updated: 2024-08-07T09:21:34.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by setting the PHPSESSID parameter to (1) index.php and (2) login.php in homepg/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43179 - http://www.securityfocus.com/archive/1/493472/100/0/threaded - http://www.bugreport.ir/?/44 - http://securityreason.com/securityalert/3959 - http://www.securityfocus.co