Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0379 State: PUBLISHED Published: 2009-02-02T18:33:00 Last Updated: 2024-08-07T04:31:26.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Prince Clan Chess Club (com_pcchess) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the game_id parameter in a showgame action to index.php, a different vector than CVE-2008-0761. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7846 - http://www.securityfocus.com/bid/33394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48144
CVE ID: CVE-2009-0380 State: PUBLISHED Published: 2009-02-02T18:33:00 Last Updated: 2024-08-07T04:31:25.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) RC 2.8.2 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the bid parameter in a showbiz action to index.php, a different vector than CVE-2008-0607. NOTE: CVE disputes this issue, since neither "showbiz" nor "bid" appears in the source code for SOBI2 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33378 - https://www.exploit-db.com/exploits/7841 - ht
Program Container: References: - http://www.securityfocus.com/bid/33378 - https://www.exploit-db.com/exploits/7841 - http://www.attrition.org/pipermail/vim/2009-January/002136.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48131
CVE ID: CVE-2009-0381 State: PUBLISHED Published: 2009-02-02T18:33:00 Last Updated: 2024-08-07T04:31:26.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33380 - http://secunia.com/advisories/33612 - https://www.exploit-db.com/exploits/7840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48141
CVE ID: CVE-2009-0382 State: PUBLISHED Published: 2009-02-02T19:00:00Z Last Updated: 2024-09-16T23:46:43.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Internationalization (i18n) Translation 5.x before 5.x-2.5, a module for Drupal, allows remote attackers with "translate node" permissions to bypass intended access restrictions and read unpublished nodes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33549 - http://drupal.org/node/358958 - http://www.securityfocus.com/bid/33283
CVE ID: CVE-2009-0383 State: PUBLISHED Published: 2009-02-02T19:00:00 Last Updated: 2024-08-07T04:31:26.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48125 - http://www.mzbservices.com/show_post.php?id=72 - http://osvdb.org/51482 - https://www.exploit-db.com/exploits/7835 - http://www.securityfocus.com/bid/33368 - http://secunia.com/advisories/33590
CVE ID: CVE-2009-0384 State: PUBLISHED Published: 2009-02-02T19:00:00 Last Updated: 2024-08-07T04:31:26.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in autor.php in OwnRS CMS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7849
CVE ID: CVE-2009-0385 State: PUBLISHED Published: 2009-02-02T19:00:00 Last Updated: 2024-08-07T04:31:26.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0277 - http://svn.mplayerhq.hu/ffmpeg/trunk/libavformat/4xm.c?r1=16838&r2=16846&pathrev=16846 - http://secunia.com/advisories/34845 - http://secunia.com
fmpeg/trunk/libavformat/4xm.c?r1=16838&r2=16846&pathrev=16846 - http://secunia.com/advisories/34845 - http://secunia.com/advisories/33711 - http://www.securityfocus.com/bid/33502 - http://www.debian.org/security/2009/dsa-1781 - http://osvdb.org/51643 - http://www.ubuntu.com/usn/USN-734-1 - http://secunia.com/advisories/34905 - http://www.debian.org/security/2009/dsa-1782 - http://git.ffmpeg.org/?p=ffmpeg%3Ba=commitdiff%3Bh=72e715fb798f2cb79fd24a6d2eaeafb7c6eeda17 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html - http://secunia.com/advisories/34385 - http://security.gentoo.org/glsa/glsa-200903-33.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2
es/34385 - http://security.gentoo.org/glsa/glsa-200903-33.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2009:297 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48330 - http://secunia.com/advisories/34296 - http://secunia.com/advisories/34712 - http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=16846 - http://www.trapkit.de/advisories/TKADV2009-004.txt - http://www.securityfocus.com/archive/1/500514/100/0/threaded
CVE ID: CVE-2009-0386 State: PUBLISHED Published: 2009-02-02T19:00:00 Last Updated: 2024-08-07T04:31:25.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime media .mov file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33405 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10306 - http://www.secu
d/33405 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10306 - http://www.securityfocus.com/archive/1/500317/100/0/threaded - http://secunia.com/advisories/34336 - http://secunia.com/advisories/33815 - http://secunia.com/advisories/35777 - http://trapkit.de/advisories/TKADV2009-003.txt - http://www.redhat.com/support/errata/RHSA-2009-0271.html - http://security.gentoo.org/glsa/glsa-200907-11.xml - http://secunia.com/advisories/33650 - http://www.vupen.com/english/advisories/2009/0225 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=481267 - http://www.ubuntu.com/usn/USN-736-1 -
ounce/2009-03/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=481267 - http://www.ubuntu.com/usn/USN-736-1 - http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html - http://www.openwall.com/lists/oss-security/2009/01/29/3 - http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:035
CVE ID: CVE-2009-0387 State: PUBLISHED Published: 2009-02-02T19:00:00 Last Updated: 2024-08-07T04:31:26.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) atom data in a malformed QuickTime media .mov file, related to "mark keyframes." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33405 - http://www.securityfocus.com/archive/1/500317/1
rogram Container: References: - http://www.securityfocus.com/bid/33405 - http://www.securityfocus.com/archive/1/500317/100/0/threaded - http://secunia.com/advisories/34336 - http://secunia.com/advisories/33815 - http://secunia.com/advisories/35777 - http://trapkit.de/advisories/TKADV2009-003.txt - http://www.redhat.com/support/errata/RHSA-2009-0271.html - http://security.gentoo.org/glsa/glsa-200907-11.xml - http://secunia.com/advisories/33650 - http://www.vupen.com/english/advisories/2009/0225 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=481267 - http://www.ubuntu.com/usn/USN-736-1 - http://gstreamer.freedesktop.or
tps://bugzilla.redhat.com/show_bug.cgi?id=481267 - http://www.ubuntu.com/usn/USN-736-1 - http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10611 - http://www.openwall.com/lists/oss-security/2009/01/29/3 - http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:035
CVE ID: CVE-2009-0388 State: PUBLISHED Published: 2009-02-04T19:00:00 Last Updated: 2024-08-07T04:31:25.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code via a large length value in a message, related to the (a) ClientConnection::CheckBufferSize and (b) ClientConnection::CheckFileZipBufferSize functions in ClientConnection.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://forum.ultravnc.info/viewtopic.php?t=14654 - http://vnc-tight.svn.
t Notes: - CVE Program Container: References: - http://forum.ultravnc.info/viewtopic.php?t=14654 - http://vnc-tight.svn.sourceforge.net/viewvc/vnc-tight?view=rev&revision=3564 - http://www.vupen.com/english/advisories/2009/0321 - http://www.securityfocus.com/bid/33568 - http://www.securityfocus.com/archive/1/500632/100/0/threaded - https://www.exploit-db.com/exploits/8024 - http://www.coresecurity.com/content/vnc-integer-overflows - http://www.vupen.com/english/advisories/2009/0322 - https://www.exploit-db.com/exploits/7990 - http://secunia.com/advisories/33807
CVE ID: CVE-2009-0389 State: PUBLISHED Published: 2009-02-02T21:29:00 Last Updated: 2024-08-07T04:31:26.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW ActiveX 2 allow remote attackers to (1) create and overwrite arbitrary files via the WriteIniFileString method, (2) execute arbitrary programs via the ShellExecute method, (3) read from the registry via unspecified vectors, and (4) write to the registry via unspecified vectors. NOTE: vectors 1 and 2 can be used together to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ib
r to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48337 - https://www.exploit-db.com/exploits/7910 - http://www.securityfocus.com/bid/33515
CVE ID: CVE-2009-0390 State: PUBLISHED Published: 2009-02-02T22:00:00 Last Updated: 2024-08-07T04:31:26.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to send signals to arbitrary processes by populating the /tmp/enomalism2.pid file with command-line arguments for the kill program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500573/100/0/threaded
CVE ID: CVE-2009-0391 State: PUBLISHED Published: 2009-02-02T22:00:00 Last Updated: 2024-08-07T04:31:26.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021658 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK79232 - http://www.securityfocus.com/bid/33533 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK72036 - http://secunia.com/advisories/33729 - http://www.vupen.com/english/advisories/2009/0423 - http://osvdb.org/51663
CVE ID: CVE-2009-0392 State: PUBLISHED Published: 2009-02-03T01:00:00 Last Updated: 2024-08-07T04:31:26.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33519 - https://www.exploit-db.com/exploits/7915 - http://www.securityfocus.com/archive/1/500545/100/0/threaded
CVE ID: CVE-2009-0393 State: PUBLISHED Published: 2009-02-03T01:00:00 Last Updated: 2024-08-07T04:31:26.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33519 - https://www.exploit-db.com/exploits/7915 - http://www.securityfocus.com/archive/1/500545/100/0/threaded
CVE ID: CVE-2009-0394 State: PUBLISHED Published: 2009-02-03T01:00:00 Last Updated: 2024-08-07T04:31:26.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33524 - https://www.exploit-db.com/exploits/7917
CVE ID: CVE-2009-0395 State: PUBLISHED Published: 2009-02-03T01:00:00 Last Updated: 2024-08-07T04:31:26.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33521 - https://www.exploit-db.com/exploits/7916
CVE ID: CVE-2009-0396 State: PUBLISHED Published: 2009-02-03T01:00:00 Last Updated: 2024-08-07T04:31:26.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service (device reboot or hang-up) via a malformed WAP Push packet to (1) SMS or (2) UDP port 2948. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33433 - http://www.mseclab.com/index.php?page_id=123 - http://www.securityfocus.com/archive/1/500382/100/0/threaded - http://secunia.com/advisories/33616 - http://www.securitytracker.com/id?1021634
CVE ID: CVE-2009-0397 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T04:31:26.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample (aka stts) atom data in a malformed QuickTime media .mov file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33405 - http://www.securityfocus.com/archive/1/500317/100/0/threaded -
: References: - http://www.securityfocus.com/bid/33405 - http://www.securityfocus.com/archive/1/500317/100/0/threaded - http://secunia.com/advisories/34336 - http://secunia.com/advisories/33815 - http://secunia.com/advisories/35777 - http://trapkit.de/advisories/TKADV2009-003.txt - http://www.redhat.com/support/errata/RHSA-2009-0271.html - http://secunia.com/advisories/33830 - http://security.gentoo.org/glsa/glsa-200907-11.xml - http://secunia.com/advisories/33650 - http://www.vupen.com/english/advisories/2009/0225 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9942 - http:/
-03/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9942 - http://www.redhat.com/support/errata/RHSA-2009-0270.html - https://bugzilla.redhat.com/show_bug.cgi?id=481267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48555 - http://support.avaya.com/elmodocs2/security/ASA-2009-052.htm - http://www.ubuntu.com/usn/USN-736-1 - http://gstreamer.freedesktop.org/releases/gst-plugins-good/0.10.12.html - http://www.openwall.com/lists/oss-security/2009/01/29/3 - http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=bdc20b9baf13564d9a061343416395f8f9a92b53 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:035
CVE ID: CVE-2009-0398 State: PUBLISHED Published: 2009-02-03T11:00:00 Last Updated: 2024-08-07T04:31:26.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-0269.html - http://secunia.com/advisories/33830 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9886 - http://www.openwall.com/lists/oss-security/2009/01/29/3
CVE ID: CVE-2009-0399 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7894
CVE ID: CVE-2009-0400 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the category_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33495 - http://secunia.com/advisories/33701 - https://www.exploit-db.com/exploits/7900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48316 - http://osvdb.org/51644
CVE ID: CVE-2009-0401 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33470 - http://secunia.com/advisories/31923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48297 - http://packetstormsecurity.org/0901-exploits/ephpcmscid-sql.txt
CVE ID: CVE-2009-0402 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in client/new_account.php in Domain Technologie Control (DTC) before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the (1) familyname, (2) christname, (3) company_name, (4) is_company, (5) email, (6) phone, (7) fax, (8) addr1, (9) addr2, (10) addr3, (11) zipcode, (12) city, (13) state, (14) country, and (15) vat_num parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33496 - https://exchange.xforce.ibmcloud.com/vulnera
E Program Container: References: - http://www.securityfocus.com/bid/33496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48292 - http://freshmeat.net/projects/dtc/?branch_id=22759&release_id=292973 - http://osvdb.org/51631 - http://secunia.com/advisories/33698 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=056e1d1849ff3aa183a410e2aab1c1c3e969247d
CVE ID: CVE-2009-0403 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0267 - https://www.exploit-db.com/exploits/7894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48313
CVE ID: CVE-2009-0404 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets (CSS) expressions in the style attribute, which is processed by Internet Explorer 7. Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293026 - http://www.bioinformatics.org/phplabware/forum/viewtopic.php?id=85 - http://osvdb.org/51650 - http://secunia.com/a
026 - http://www.bioinformatics.org/phplabware/forum/viewtopic.php?id=85 - http://osvdb.org/51650 - http://secunia.com/advisories/33655 - http://freshmeat.net/projects/htmlawed/?branch_id=74760&release_id=293090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48333 - http://www.bioinformatics.org/phplabware/internal_utilities/htmLawed/htmLawed_README.htm#s4.3 - http://www.securityfocus.com/bid/33507
CVE ID: CVE-2009-0405 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the var parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48321 - https://www.exploit-db.com/exploits/7901 - http://www.securityfocus.com/bid/33497
CVE ID: CVE-2009-0406 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T04:31:26.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7892 - http://www.securityfocus.com/bid/33484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48304 - http://www.vupen.com/english/advisories/2009/0265