Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
procedures. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securityfocus.com/archive/1/491521/30/390/threaded - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilitie
874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42037
CVE ID: CVE-2008-1822 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:32:01.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Express component in Oracle Application Express 3.0.1 has unknown impact and remote attack vectors, aka APEX02. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secu
- http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded
CVE ID: CVE-2008-1823 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:32:01.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.14 has unknown impact and remote attack vectors, aka AS01. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/4910
//www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42045
CVE ID: CVE-2008-1824 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:40:59.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Dynamic Monitoring Service component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.3.3 has unknown impact and remote attack vectors, aka AS02. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42050 - http://www.securitytracke
advisories/2008/1233/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42050 - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded
CVE ID: CVE-2008-1825 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:40:59.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 has unknown impact and remote attack vectors, aka AS03. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secunia.com/adviso
upen.com/english/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded
CVE ID: CVE-2008-1826 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:40:59.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and attack vectors related to (a) Advanced Pricing, aka (1) APP01 and (2) APP10; and (b) Applications Framework, aka (3) APP05. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42055
ttp://www.vupen.com/english/advisories/2008/1233/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42055 - http://www.securitytracker.com/id?1019855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42053 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42054 - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded
CVE ID: CVE-2008-1827 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:40:59.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to (a) Advanced Pricing component, aka (1) APP02, (2) APP03, and (3) APP09; (b) Application Object Library component, aka (4) APP04, (5) APP07, and (6) APP11; (c) Applications Manager component, aka (7) APP06; (d) and Applications Technology Stack component, aka (8) APP08. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42057 -
onal Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42063 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42056 - http://www.securitytracker.com/id?1019855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42064 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-0820
ww.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42061 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42060
CVE ID: CVE-2008-1828 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:40:58.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.19, 8.48.16, and 8.49.09 has unknown impact and remote authenticated attack vectors, aka PSE01. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/refe
- http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded
CVE ID: CVE-2008-1829 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:40:58.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vectors, aka PSE02. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytrack
dvisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded
CVE ID: CVE-2008-1830 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:40:59.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and 9.0 has unknown impact and remote attack vectors, aka PSE03. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829
nglish/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42067
CVE ID: CVE-2008-1831 State: PUBLISHED Published: 2008-04-16T10:00:00 Last Updated: 2024-08-07T08:40:59.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and remote or local attack vectors, aka (1) SEBL01, (2) SEBL02, (3) SEBL03, (4) SEBL04, (5) SEBL05, and (6) SEBL06. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 - http://www.vupen.com/english/advisories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytracker.c
ories/2008/1267/references - http://www.vupen.com/english/advisories/2008/1233/references - http://www.securitytracker.com/id?1019855 - http://secunia.com/advisories/29829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42070 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html - http://secunia.com/advisories/29874 - http://www.securityfocus.com/archive/1/491024/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42068
CVE ID: CVE-2008-1832 State: PUBLISHED Published: 2008-04-16T15:00:00 Last Updated: 2024-08-07T08:40:59.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476321 - http://secunia.com/advisories/29832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41837 - http://www.securityfocus.com/bid/28805
CVE ID: CVE-2008-1833 State: PUBLISHED Published: 2008-04-16T15:00:00 Last Updated: 2024-08-07T08:40:58.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:088 - http://security.gentoo.org/glsa/glsa-200805-19.xml - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html - http://secunia.com/advisories/29891 - http:
tml - http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html - http://secunia.com/advisories/29891 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.securityfocus.com/bid/28784 - http://www.vupen.com/english/advisories/2008/2584 - http://www.securitytracker.com/id?1019850 - http://secunia.com/advisories/31882 - http://secunia.com/advisories/29975 - http://secunia.com/advisories/29863 - http://secunia.com/advisories/30328 - http://www.securityfocus.com/bid/28798 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41833 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=877 - h
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41833 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=877 - http://secunia.com/advisories/31576 - http://www.vupen.com/english/advisories/2008/1227/references - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=687 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html - http://www.debian.org/security/2008/dsa-1549 - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog - http://kolab.org/security/kolab-vendor-notice-20.txt
CVE ID: CVE-2008-1834 State: PUBLISHED Published: 2008-04-16T16:00:00 Last Updated: 2024-08-07T08:40:58.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict local file access from untrusted sandboxes, which allows remote attackers to read arbitrary files via a crafted Flash file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41887 - http://gitweb.freedesktop.org/?p=swfdec/swfdec.git%3Ba=commit%3Bh=326ee4ff631ecc11605f1251e1923a94561a3823 - http://secunia.com/advisories/29915 - http://lists.freedeskto
%3Ba=commit%3Bh=326ee4ff631ecc11605f1251e1923a94561a3823 - http://secunia.com/advisories/29915 - http://lists.freedesktop.org/archives/swfdec/2008-April/001321.html
CVE ID: CVE-2008-1835 State: PUBLISHED Published: 2008-04-16T16:00:00 Last Updated: 2024-08-07T08:40:59.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:088 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=541 - http://security.gentoo.org/glsa/glsa-200805-19.xml - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://up2date.astaro.com/2008/0
05-19.xml - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html - http://secunia.com/advisories/29891 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.securityfocus.com/bid/28784 - http://www.vupen.com/english/advisories/2008/2584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41874 - http://secunia.com/advisories/31882 - http://secunia.com/advisories/30328 - http://secunia.com/advisories/31576 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
CVE ID: CVE-2008-1836 State: PUBLISHED Published: 2008-04-16T16:00:00 Last Updated: 2024-08-07T08:40:58.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:088 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=881 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html - http://security.gentoo.org
cgi?id=881 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html - http://security.gentoo.org/glsa/glsa-200805-19.xml - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html - http://secunia.com/advisories/29891 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.securityfocus.com/bid/28784 - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://secunia.com/advisories/30328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41868 - http://secunia.com/advisories/30253 - http://secunia.com/advisories/31576 - http://
ibmcloud.com/vulnerabilities/41868 - http://secunia.com/advisories/30253 - http://secunia.com/advisories/31576 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
CVE ID: CVE-2008-1837 State: PUBLISHED Published: 2008-04-16T16:00:00 Last Updated: 2024-08-07T08:40:59.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41870 - http://security.gentoo.org/glsa/glsa-200805-19.xml - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005
ttp://security.gentoo.org/glsa/glsa-200805-19.xml - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html - http://secunia.com/advisories/29891 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=898 - http://www.securityfocus.com/bid/28784 - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://secunia.com/advisories/30328 - http://secunia.com/advisories/31576 - http://www.vupen.com/english/advisories/2008/1227/references - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
CVE ID: CVE-2008-1838 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:59.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41799 - http://www.securityfocus.com/bid/28760 - https://www.exploit-db.com/exploits/5444 - http://secunia.com/advisories/29799
CVE ID: CVE-2008-1839 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:58.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, and (3) year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29823 - http://www.securityfocus.com/bid/28785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
a.com/advisories/29823 - http://www.securityfocus.com/bid/28785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41811
CVE ID: CVE-2008-1840 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:59.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41784 - http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069 - http://www.securityfocus.com
ies/41784 - http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069 - http://www.securityfocus.com/bid/28766 - http://secunia.com/advisories/29795 - http://www.osvdb.org/44345 - http://forum.coppermine-gallery.net/index.php/topic%2C51787%2C0.html
CVE ID: CVE-2008-1841 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:40:59.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the session_id variable, as exploited in the wild in April 2008. NOTE: the fix for CVE-2008-1840 was intended to address this vulnerability, but is actually inapplicable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28767 - http://sourcef
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28767 - http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=592069 - http://forum.coppermine-gallery.net/index.php/topic%2C51882.0.html - http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.4.x/bridge/coppermine.inc.php?r1=4380&r2=4381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41788 - http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.4.x/bridge/coppermine.inc.php?view=log - http://secunia.com/advisories/29741