Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
1507.html - http://www.securityfocus.com/bid/42128 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://bugzilla.novell.com/show_bug.cgi?id=598834
CVE ID: CVE-2010-1508 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T01:28:41.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Track Header (aka tkhd) atoms. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html - http://zerodayinitiative.com/advisories/ZDI-10-258/ - http://secunia.com/secunia_research/2010-72/ - http://support.apple.com/kb/HT4447 - https://oval.cisecurity.org/repository/se
//secunia.com/secunia_research/2010-72/ - http://support.apple.com/kb/HT4447 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15625 - http://www.securitytracker.com/id?1024830
CVE ID: CVE-2010-1509 State: PUBLISHED Published: 2010-05-14T19:24:00 Last Updated: 2024-08-07T01:28:41.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a "sign-extension error." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2010-41 - http://www.securityfocus.com/archive/1/511274/100/0/threaded - http://secunia.com/advisor
com/secunia_research/2010-41 - http://www.securityfocus.com/archive/1/511274/100/0/threaded - http://secunia.com/advisories/39036 - http://osvdb.org/64627 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6705 - http://www.securityfocus.com/bid/40104 - http://irfanview.com/main_history.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/58548
CVE ID: CVE-2010-1510 State: PUBLISHED Published: 2010-05-14T19:24:00 Last Updated: 2024-08-07T01:28:41.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PSD image with RLE compression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40105 - http://secunia.com/advisories/39036 - http://osvdb.org/64628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58549 - http://www.securityfocus.com/archive/1/511275/100/0/threaded - http://secunia.com/secunia_resear
vulnerabilities/58549 - http://www.securityfocus.com/archive/1/511275/100/0/threaded - http://secunia.com/secunia_research/2010-42 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7397 - http://irfanview.com/main_history.htm
CVE ID: CVE-2010-1511 State: PUBLISHED Published: 2010-05-17T20:42:00 Last Updated: 2024-08-07T01:28:41.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40141 - http://www.ubuntu.com/usn/USN-938-1 - http://www.securityfocus.com/archive/1/511279/100/0/threaded - http://www.securityfocus.com/archive/1/511294/100/0/threaded - http://www.vupen.com/english/advisories/2010/1144 - http:
http://www.securityfocus.com/archive/1/511294/100/0/threaded - http://www.vupen.com/english/advisories/2010/1144 - http://secunia.com/secunia_research/2010-70/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/58629 - http://www.kde.org/info/security/advisory-20100513-1.txt - http://www.vupen.com/english/advisories/2010/3096 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html - http://marc.info/?l=oss-security&m=127378789518426&w=2 - http://secunia.com/advisories/39528 - http://www.vupen.com/english/advisories/2010/1142 - http://securitytracker.com/id?1023984 - http://osvdb.org/64689 - http://secunia.com/advisories/39787
CVE ID: CVE-2010-1512 State: PUBLISHED Published: 2010-05-17T20:42:00 Last Updated: 2024-08-07T01:28:41.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511280/100/0/threaded - http://www.securityfocus.com/bid/40142 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041758.html - http://secunia.com/advisories/39872 - http://www.vupen.com/english/advisories/2011
ckage-announce/2010-May/041758.html - http://secunia.com/advisories/39872 - http://www.vupen.com/english/advisories/2011/0116 - http://downloads.sourceforge.net/project/aria2/stable/aria2-1.9.3/NEWS - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041754.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041753.html - http://www.osvdb.org/64592 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://www.vupen.com/english/advisories/2010/1229 - http://secunia.com/advisories/42906 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/39529 - http://www.mandriva.com/se
.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/39529 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:106 - http://www.debian.org/security/2010/dsa-2047 - http://www.vupen.com/english/advisories/2010/1228 - http://security.gentoo.org/glsa/glsa-201101-04.xml - http://secunia.com/secunia_research/2010-71/
CVE ID: CVE-2010-1513 State: PUBLISHED Published: 2010-05-26T19:00:00 Last Updated: 2024-08-07T01:28:41.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via (1) a large JPG image, related to the jpg2bitmap function or (2) a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2010-75/ - http://ziproxy.sourceforge.net/#news - http://www.securityfocus.com/archive/1/511424/100/0/threaded - http://secunia.com/advisories/39941
CVE ID: CVE-2010-1514 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-17T04:20:44.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain privileges, to execute arbitrary PHP code by uploading an image file, and then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39680 - http://www.securityfocus.com/bid/40544 - http://secunia.com/secunia_research/2010-57/ - http://holisticinfosec.org/content/view/148/45/
CVE ID: CVE-2010-1515 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T23:20:56.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) keyword or (2) article-id parameter in conjunction with a /admin/news/article/list PATH_INFO; the (3) keyword parameter in conjunction with a /admin/multimedia/set/list PATH_INFO; the (4) keyword or (5) fileId parameter in conjunction with a /admin/multimedia/file/list PATH_INFO; or the (6) name, (7) email, or (8) address parameter in conjunction with a /admi
/admin/multimedia/file/list PATH_INFO; or the (6) name, (7) email, or (8) address parameter in conjunction with a /admin/ad/client/list PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39680 - http://www.securityfocus.com/bid/40544 - http://secunia.com/secunia_research/2010-58/ - http://holisticinfosec.org/content/view/148/45/
CVE ID: CVE-2010-1516 State: PUBLISHED Published: 2010-08-17T18:00:00 Last Updated: 2024-08-07T01:28:41.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via (1) a crafted PNG file, related to the getPNG function in lib/png.c; or (2) a crafted JPEG file, related to the jpeg_load function in lib/jpeg.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39970 - http://secunia.com/secunia_research/2010-80/ - http://security.gentoo.org/glsa/glsa-201204-05.xml - http://secunia.com/advisories/48821 - http://www.securityfocus.com/archive/1/513102/1
ntoo.org/glsa/glsa-201204-05.xml - http://secunia.com/advisories/48821 - http://www.securityfocus.com/archive/1/513102/100/0/threaded
CVE ID: CVE-2010-1517 State: PUBLISHED Published: 2010-08-02T19:00:00Z Last Updated: 2024-09-17T04:15:02.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and (2) download arbitrary programs onto a client system via vectors involving the SetDLInfo method in conjunction with the Bdl method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40161 - http://secunia.com/secunia_research/2010-85/
CVE ID: CVE-2010-1518 State: PUBLISHED Published: 2010-08-02T19:00:00Z Last Updated: 2024-09-17T01:45:58.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the SetDLInfo method in the GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via the item argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40161 - http://secunia.com/secunia_research/2010-86/
CVE ID: CVE-2010-1519 State: PUBLISHED Published: 2010-08-13T19:00:00 Last Updated: 2024-08-07T01:28:41.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute arbitrary code via a crafted PNG image, related to (1) the pngLoadRawF function and (2) the pngLoadF function, leading to heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2010-87/ - http://www.securityfocus.com/archive/1/513022/100/0/threaded - http://secunia.com/advisories/40354 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:179
CVE ID: CVE-2010-1520 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T01:28:41.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40025 - http://www.securityfocus.com/archive/1/512078/100/0/threaded - http://www.taskfreak.com/original/versions - http://osvdb.org/65846 - http://www.securityfocus.com/bid/41221 - http://secunia.com/secunia_research/2010-78/
CVE ID: CVE-2010-1521 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T01:28:41.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40025 - http://www.taskfreak.com/original/versions - http://secunia.com/secunia_research/2010-79/ - http://www.securityfocus.com/archive/1/512077/100/0/threaded - http://www.securityfocus.com/bid/41218 - http://osvdb.org/65847
CVE ID: CVE-2010-1522 State: PUBLISHED Published: 2010-07-01T18:00:00 Last Updated: 2024-08-07T01:28:41.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the BookLibrary Basic (com_booklibrary) component 1.5.3 before 1.5.3_2010_06_20 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid[] parameter in a (1) lend_request or (2) save_lend_request action to index.php, the id parameter in a (3) mdownload or (4) downitsf action to index.php, or (5) the searchtext parameter in a search action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://ordasoft.com/Download/Download-document
dex.php. Additional Analyst Notes: - CVE Program Container: References: - http://ordasoft.com/Download/Download-document/3-BookLibrary-1.5.3-Basic-for-Joomla-1.5.html - http://www.securityfocus.com/archive/1/512094/100/0/threaded - http://ordasoft.com/Download/View-document-details/3-BookLibrary-1.5.3-Basic-for-Joomla-1.5.html - http://www.securityfocus.com/bid/41264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59966 - http://secunia.com/advisories/40131 - http://secunia.com/secunia_research/2010-84/ - http://osvdb.org/65879
CVE ID: CVE-2010-1523 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T01:28:41.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 (1) video file or (2) video stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44466 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12056 - http://www.securityfocus.com/archive/1/514484/100/0/threaded - http://secunia.com/secunia_research/2010-95/ - http:/
6 - http://www.securityfocus.com/archive/1/514484/100/0/threaded - http://secunia.com/secunia_research/2010-95/ - http://forums.winamp.com/showthread.php?t=322995
CVE ID: CVE-2010-1524 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T01:28:41.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing," which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://secun
sponse/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://secunia.com/secunia_research/2010-35/ - http://www.securityfocus.com/bid/41928 - http://www-01.ibm.com/support/docview.wss?uid=swg21440812
CVE ID: CVE-2010-1525 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T01:28:41.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted size for an unspecified record type, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 - http://www.securityfocus.com/bid/41928 - http://www-01.ibm.com/support/docview.wss?uid=swg21440812 - http://secunia.com/secunia_research/2010-49/
CVE ID: CVE-2010-1526 State: PUBLISHED Published: 2010-08-24T20:00:00 Last Updated: 2024-08-07T01:28:41.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via (1) a crafted TIFF file, related to the gdip_load_tiff_image function in tiffcodec.c; (2) a crafted JPEG file, related to the gdip_load_jpeg_image_internal function in jpegcodec.c; or (3) a crafted BMP file, related to the gdip_read_bmp_image function in bmpcodec.c, leading to heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2010-102/ - h
lows. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2010-102/ - http://secunia.com/advisories/40792 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-1527 State: PUBLISHED Published: 2010-08-23T20:00:00 Last Updated: 2024-08-07T01:28:41.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61220 - http://www.securityfocus.com/bid/42576 - http://secunia.com/secunia_research/2010-104/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11973 - http://www.novell.com/support/v
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11973 - http://www.novell.com/support/viewContent.do?externalId=7006679 - http://secunia.com/advisories/40805
CVE ID: CVE-2010-1528 State: PUBLISHED Published: 2010-04-26T18:00:00 Last Updated: 2024-08-07T01:28:41.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39365 - http://www.osvdb.org/63528 - http://www.exploit-db.com/exploits/12049 - http://secunia.com/advisories/39313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57515
CVE ID: CVE-2010-1529 State: PUBLISHED Published: 2010-04-26T18:00:00 Last Updated: 2024-08-07T01:28:41.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote attackers to execute arbitrary SQL commands via the faqid parameter in an faq action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57588 - http://packetstormsecurity.org/1004-exploits/joomlafreestyle-sql.txt - http://www.securityfocus.com/bid/39220 - http://www.exploit-db.com/exploits/12078 - http://secunia.com/advisories/39288
CVE ID: CVE-2010-1530 State: PUBLISHED Published: 2010-04-26T18:00:00Z Last Updated: 2024-09-17T03:38:19.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Internationalization module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with translate interface or administer blocks privileges, to inject arbitrary web script or HTML via (1) strings used in block translation or (2) the untranslated input. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/63589 - http://drupal.org/node/764906 - http://drupal.org/node/764998 - http://www.securityfocus.com/bid/39304 - http://secunia.
http://drupal.org/node/764906 - http://drupal.org/node/764998 - http://www.securityfocus.com/bid/39304 - http://secunia.com/advisories/39361
CVE ID: CVE-2010-1531 State: PUBLISHED Published: 2010-04-26T18:00:00 Last Updated: 2024-08-07T01:28:41.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/63535 - http://www.securityfocus.com/bid/39206 - http://redcomponent.com/redshop/redshop-changelog - http://www.exploit-db.com/exploits/12054 - http://secunia.com/advisories/39343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57512 - http://pa
its/12054 - http://secunia.com/advisories/39343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57512 - http://packetstormsecurity.org/1004-exploits/joomlaredshop-lfi.txt
CVE ID: CVE-2010-1532 State: PUBLISHED Published: 2010-04-26T18:00:00 Last Updated: 2024-08-07T01:28:41.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39348 - http://secunia.com/advisories/39226 - http://packetstormsecurity.org/1004-exploits/joomlapowermail-lfi.txt - http://www.exploit-db.com/exploits/12118
CVE ID: CVE-2010-1533 State: PUBLISHED Published: 2010-04-26T18:00:00 Last Updated: 2024-08-07T01:28:41.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39258 - http://www.exploit-db.com/exploits/12142
CVE ID: CVE-2010-1534 State: PUBLISHED Published: 2010-04-26T18:00:00 Last Updated: 2024-08-07T01:28:41.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57534 - http://secunia.com/advisories/39352 - http://osvdb.org/63562 - http://www.securityfocus.com/bid/39213 - http://www.exploit-db.com/exploits/12067
CVE ID: CVE-2010-1535 State: PUBLISHED Published: 2010-04-26T18:00:00 Last Updated: 2024-08-07T01:28:41.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12151 - http://secunia.com/advisories/39254