Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4603 State: PUBLISHED Published: 2008-10-17T22:00:00 Last Updated: 2024-08-07T10:24:21.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search_games action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4433 - http://www.securityfocus.com/bid/31793 - https://www.exploit-db.com/exploits/6769
CVE ID: CVE-2008-4604 State: PUBLISHED Published: 2008-10-17T22:00:00 Last Updated: 2024-08-07T10:24:20.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32307 - https://www.exploit-db.com/exploits/6762 - http://securityreason.com/securityalert/4434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45930 - http://www.securityfocus.com/bid/31788
CVE ID: CVE-2008-4605 State: PUBLISHED Published: 2008-10-17T22:00:00 Last Updated: 2024-08-07T10:24:21.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and (2) menu.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32308 - http://www.securityfocus.com/bid/31786 - https://www.exploit-db.com/exploits/6762 - http://securityreason.com/securityalert/4434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45929
CVE ID: CVE-2008-4606 State: PUBLISHED Published: 2008-10-17T22:00:00 Last Updated: 2024-08-07T10:24:20.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) location_id parameter to locationdel.php and (2) vlan_id parameter to vlanedit.php. NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/49232 - https://www.exploit-db.com/exploits/6765 - http://osvdb.org/show/osvdb/49231 - http://www.securityfocus.com/bid/31781 - https://
www.exploit-db.com/exploits/6765 - http://osvdb.org/show/osvdb/49231 - http://www.securityfocus.com/bid/31781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45934 - http://securityreason.com/securityalert/4435
CVE ID: CVE-2008-4607 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:31 Description: No description available.
CVE ID: CVE-2008-4608 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:34 Description: No description available.
CVE ID: CVE-2008-4609 State: PUBLISHED Published: 2008-10-20T17:00:00 Last Updated: 2024-08-07T10:24:20.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress. Additional Analyst Notes: - CVE Program Container: References: - http://blog.robertlee.name/2008/10/conjecture-speculation.html - https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html
g.robertlee.name/2008/10/conjecture-speculation.html - https://www.cert.fi/haavoittuvuudet/2008/tcp-vulnerabilities.html - http://marc.info/?l=bugtraq&m=125856010926699&w=2 - http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html - http://insecure.org/stf/tcp-dos-attack-explained.html - http://www.outpost24.com/news/news-2008-10-02.html - http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf - http://www.cisco.com/en/US/products/products_security_advisory09186a0080af511d.shtml - http://www.us-cert.gov/cas/techalerts/TA09-251A.html - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://www.cisco.com/en/US/products/products_security_re
oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://www.cisco.com/en/US/products/products_security_response09186a0080a15120.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048 - http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borked - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://marc.info/?l=bugtraq&m=125856010926699&w=2
CVE ID: CVE-2008-4610 State: PUBLISHED Published: 2008-10-20T17:00:00 Last Updated: 2024-08-07T10:24:20.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/07/1 - http://www.ubuntu.com/usn/USN-734-1 - http://secunia.com/advisories/34296
CVE ID: CVE-2008-4611 State: PUBLISHED Published: 2008-10-20T18:00:00 Last Updated: 2024-08-07T10:24:20.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40069 - http://www.securityfocus.com/bid/27518 - http://securityreason.com/securityalert/4436 - http://www.securityfocus.com/archive/1/487317/100/200/threaded
CVE ID: CVE-2008-4612 State: PUBLISHED Published: 2008-10-20T18:00:00 Last Updated: 2024-08-07T10:24:20.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp and (2) content.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512073/100/0/threaded - http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads - https://www.exploit-db.com/exploits/4848 - http://www.securityfocus.com/bid/27170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39455 - http
ploits/4848 - http://www.securityfocus.com/bid/27170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39455 - http://www.htbridge.ch/advisory/xss_vulnerability_in_portalapp_1.html - http://securityreason.com/securityalert/4439 - http://www.vupen.com/english/advisories/2010/1630 - http://secunia.com/advisories/28337
CVE ID: CVE-2008-4613 State: PUBLISHED Published: 2008-10-20T18:00:00 Last Updated: 2024-08-07T10:24:20.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads - https://www.exploit-db.com/exploits/4848 - http://www.securityfocus.com/bid/27170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39454 - http://securityreason.com/securityalert/4439 - http://secunia.com/advisories/28337
CVE ID: CVE-2008-4614 State: PUBLISHED Published: 2008-10-20T18:00:00 Last Updated: 2024-08-07T10:24:20.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies. Additional Analyst Notes: - CVE Program Container: References: - http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads - https://www.exploit-db.com/exploits/4848 - http://www.securityfocus.com/bid/27170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39457 - http://securityreason.com/securityalert/4439 - http://secunia.com/advisories/28337
CVE ID: CVE-2008-4615 State: PUBLISHED Published: 2008-10-20T18:00:00 Last Updated: 2024-08-07T10:24:20.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads - https://exchange.xforce.ibmcloud.com/vulnerabilities/46056
CVE ID: CVE-2008-4616 State: PUBLISHED Published: 2008-10-20T18:00:00 Last Updated: 2024-08-07T10:24:20.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4438 - http://www.securityfocus.com/bid/27291 - http://www.securityfocus.com/archive/1/486333/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39690
CVE ID: CVE-2008-4617 State: PUBLISHED Published: 2008-10-20T19:00:00 Last Updated: 2024-08-07T10:24:20.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41579 - http://www.securityfocus.com/bid/28565 - http://securityreason.com/securityalert/4437 - https://www.exploit-db.com/exploits/5337
CVE ID: CVE-2008-4618 State: PUBLISHED Published: 2008-10-20T22:00:00 Last Updated: 2024-08-07T10:24:21.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service (panic) via unspecified vectors, related to sctp_sf_violation_paramlen, sctp_sf_abort_violation, sctp_make_abort_violation, and incorrect data types in function calls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32998 - http://git.kernel.org/
ional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32998 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=ba0166708ef4da7eeb61dd92bbba4d5a749d6561 - http://www.redhat.com/support/errata/RHSA-2009-0009.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html - http://secunia.com/advisories/33586 - http://www.openwall.com/lists/oss-security/2008/10/06/1 - http://secunia.com/advisories/32918 - http://www.ubuntu.com/usn/usn-679-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27 - http://www.securityfocus.com/bid/31848 - http://www.debian.org/security/2008/dsa-1681
CVE ID: CVE-2008-4619 State: PUBLISHED Published: 2008-10-20T22:00:00 Last Updated: 2024-08-07T10:24:20.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8 in program 100000 (rpcbind), related to the XDR_DECODE operation and the taddr2uaddr function. NOTE: this might be a duplicate of CVE-2007-0165. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2945 - http://www.openwall.com/lists/oss-security/2008/10/29/1 - http://securityreason.com/securityalert/4440 - https://www.exploit-db.co
.openwall.com/lists/oss-security/2008/10/29/1 - http://securityreason.com/securityalert/4440 - https://www.exploit-db.com/exploits/6775 - http://www.openwall.com/lists/oss-security/2008/10/31/2 - http://www.openwall.com/lists/oss-security/2008/10/28/2 - http://secunia.com/advisories/32475 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200412-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46057 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00819.html
CVE ID: CVE-2008-4620 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to (1) month.php, and possibly (2) day.php and (3) week.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2865 - http://securityreason.com/securityalert/4450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45972 - http://www.securityfocus.com/bid/31809 - https://www.exploit-db.com/exploits/6781
CVE ID: CVE-2008-4621 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:21.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bannerclick.php in ZeeScripts Zeeproperty allows remote attackers to execute arbitrary SQL commands via the adid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45978 - http://secunia.com/advisories/32333 - http://www.securityfocus.com/bid/31807 - http://www.vupen.com/english/advisories/2008/2866 - http://securityreason.com/securityalert/4451
CVE ID: CVE-2008-4622 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6779 - http://www.securityfocus.com/bid/31811 - http://www.vupen.com/english/advisories/2008/2867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45977 - http://secunia.com/advisories/32334 - http://securityreason.com/securityalert/4452
CVE ID: CVE-2008-4623 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feed_id parameter to index2.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6792 - http://www.vupen.com/english/advisories/2008/2859 - http://secunia.com/advisories/32321 - http://securityreason.com/securityalert/4453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45979 - http://www.securityfocus.com/bid/
.com/securityalert/4453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45979 - http://www.securityfocus.com/bid/31819
CVE ID: CVE-2008-4624 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFG[CDIR] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6785 - http://securityreason.com/securityalert/4454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45964 - http://secunia.com/advisories/32328 - http://www.vupen.com/english/advisories/2008/2861 - http://www.securit
ies/45964 - http://secunia.com/advisories/32328 - http://www.vupen.com/english/advisories/2008/2861 - http://www.securityfocus.com/bid/31817
CVE ID: CVE-2008-4625 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4446 - http://secunia.com/advisories/32336 - http://www.securityfocus.com/bid/31806 - https://www.exploit-db.com/exploits/6777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45981
CVE ID: CVE-2008-4626 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 and possibly other versions through 2.3.3-beta0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/49171 - http://secunia.com/advisories/32325 - http://securityreason.com/securityalert/4444 - https://www.exploit-db.com/expl
1 - http://secunia.com/advisories/32325 - http://securityreason.com/securityalert/4444 - https://www.exploit-db.com/exploits/6788 - http://www.securityfocus.com/bid/31828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45965
CVE ID: CVE-2008-4627 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32323 - http://securityreason.com/securityalert/4443 - http://www.securityfocus.com/bid/31820 - https://www.exploit-db.com/exploits/6790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45966
CVE ID: CVE-2008-4628 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2864 - https://www.exploit-db.com/exploits/6782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45980 - http://securityreason.com/securityalert/4442 - http://www.securityfocus.com/bid/31810
CVE ID: CVE-2008-4629 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31835 - http://secunia.com/advisories/32348 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000071.html - http://usagi-project.org/PRESS/archives/53 - http://jvn.jp/en/jp/JVN53267766/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45989
CVE ID: CVE-2008-4630 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Midgard Components (MidCOM) Framework before 8.09.1 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32178 - http://freshmeat.net/projects/midcom/?branch_id=38063&release_id=286210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45962 - http://www.securityfocus.com/bid/31829
CVE ID: CVE-2008-4631 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:21.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31822 - https://public.msli.com/lcs/muscle/muscle/HISTORY.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45959 - http://s
://public.msli.com/lcs/muscle/muscle/HISTORY.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45959 - http://secunia.com/advisories/32318 - http://www.vupen.com/english/advisories/2008/2869
CVE ID: CVE-2008-4632 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the (1) post and (2) doc parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6767 - http://www.securityfocus.com/bid/31785 - http://securityreason.com/securityalert/4445 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45927
CVE ID: CVE-2008-4633 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a "previously cast vote." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45920 - http://drupal.org/node/321685 - http://secunia.com/advisories/32276
CVE ID: CVE-2008-4634 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079. Additional Analyst Notes: - CVE Program Container: References: - http://www.sixapart.jp/movabletype/news/2008/10/15-1400.html - http://www.securityfocus.com/bid/31826 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000072.html - http://secunia.com/advisories/32305 - https://exchange.xforce.ib
/jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000072.html - http://secunia.com/advisories/32305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45968 - http://jvn.jp/en/jp/JVN81490697/index.html