Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1291 State: PUBLISHED Published: 2008-03-24T17:00:00 Last Updated: 2024-08-07T08:17:33.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200803-29.xml - http://secunia.com/advisories/29460 - http://secunia.com/advisories/29176 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380 - http://www.vupen.com/english/advisories/2008/0734/references - http://www.securityfo
/cgi-bin/bugreport.cgi?bug=471380 - http://www.vupen.com/english/advisories/2008/0734/references - http://www.securityfocus.com/bid/28055 - http://bugs.gentoo.org/show_bug.cgi?id=212288 - http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD
CVE ID: CVE-2008-1292 State: PUBLISHED Published: 2008-03-24T17:00:00 Last Updated: 2024-08-07T08:17:34.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200803-29.xml - http://secunia.com/advisories/29460 - http://secunia.com/advisories/29176
security.gentoo.org/glsa/glsa-200803-29.xml - http://secunia.com/advisories/29460 - http://secunia.com/advisories/29176 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471380 - http://www.vupen.com/english/advisories/2008/0734/references - http://www.securityfocus.com/bid/28055 - http://bugs.gentoo.org/show_bug.cgi?id=212288 - http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD
CVE ID: CVE-2008-1293 State: PUBLISHED Published: 2008-04-29T00:00:00 Last Updated: 2024-08-07T08:17:34.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6). Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/03/12/3 - http://www.securitytracker.com/id?1019940 - http://www.openwall.com/lists/oss-security/2008/03/11/2 - https://usn.ubuntu.com/610-1/ - http://www.securityfocus.com/bid/28960 - http://secunia.com/advisorie
ity/2008/03/11/2 - https://usn.ubuntu.com/610-1/ - http://www.securityfocus.com/bid/28960 - http://secunia.com/advisories/30099 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469462 - http://www.debian.org/security/2008/dsa-1561 - http://secunia.com/advisories/29959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42080
CVE ID: CVE-2008-1294 State: PUBLISHED Published: 2008-05-02T16:00:00 Last Updated: 2024-08-07T08:17:34.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=215000 - http://www.ubuntu.com/usn/usn-618-1 - http://secunia.com/advisories/31341 - http://www.debian.org/security/2008/dsa-1565 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10
n.org/security/2008/dsa-1565 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10974 - http://www.securityfocus.com/bid/29004 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=9926e4c74300c4b31dee007298c6475d33369df0 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 - http://www.redhat.com/support/errata/RHSA-2008-0612.html - http://secunia.com/advisories/30769 - http://secunia.com/advisories/30018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42145
CVE ID: CVE-2008-1295 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in archives.php in Gregory Kokanosky (aka Greg's Place) phpMyNewsletter 0.8 beta 5 and earlier allows remote attackers to execute arbitrary SQL commands via the msg_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41197 - https://www.exploit-db.com/exploits/5231 - http://www.securityfocus.com/bid/28189
CVE ID: CVE-2008-1296 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file parameter to (1) watermark.php and (2) catalog_watermark.php in core/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/data/vulnerabilities/exploits/28178.html - http://www.securityfocus.com/bid/28178 - https://exchange.
.securityfocus.com/data/vulnerabilities/exploits/28178.html - http://www.securityfocus.com/bid/28178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41164
CVE ID: CVE-2008-1297 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the eWriting (com_ewriting) 1.2.1 module for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41072 - https://www.exploit-db.com/exploits/5226 - http://www.securityfocus.com/bid/28179
CVE ID: CVE-2008-1298 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:33.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489323/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41092 - http://www.securityfocus.com/bid/28171 - http://securityreason.com/securityalert/3730 - http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3078 - http://sec
ecurityreason.com/securityalert/3730 - http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3078 - http://secunia.com/advisories/29322
CVE ID: CVE-2008-1299 State: PUBLISHED Published: 2008-03-12T17:00:00.000Z Last Updated: 2025-04-03T14:03:34.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/29310 - http://www.securityfocus.com/bid/28191
CVE ID: CVE-2008-1300 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a different vector than CVE-2008-1045. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41095 - http://securityreason.com/se
.securityfocus.com/bid/28152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41095 - http://securityreason.com/securityalert/3731 - http://secunia.com/advisories/29278 - http://www.securityfocus.com/archive/1/489291/100/0/threaded
CVE ID: CVE-2008-1301 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28152 - http://securityreason.com/securityalert/3731 - http://secunia.com/advisories/29278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41096 - http://www.security
- http://secunia.com/advisories/29278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41096 - http://www.securityfocus.com/archive/1/489291/100/0/threaded
CVE ID: CVE-2008-1302 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) server-DiffFile or (2) server-ReleaseFile command with a large integer value, which is used in an array initialization calculation, and leads to invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/poc/perforces.zip - http://www.securityfocus.com/bid/28108 - http://www.securityfocus.com/archive/1/489179/100/0/threaded - htt
forces.zip - http://www.securityfocus.com/bid/28108 - http://www.securityfocus.com/archive/1/489179/100/0/threaded - http://secunia.com/advisories/29231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41016 - http://aluigi.altervista.org/adv/perforces-adv.txt - http://securityreason.com/securityalert/3735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41363
CVE ID: CVE-2008-1303 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:33.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/poc/perforces.zip - http://www.securityfocus.com/bid/28108 - http://www.securityfocus.com/archive/1/4891
tp://aluigi.org/poc/perforces.zip - http://www.securityfocus.com/bid/28108 - http://www.securityfocus.com/archive/1/489179/100/0/threaded - http://secunia.com/advisories/29231 - http://aluigi.altervista.org/adv/perforces-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41015 - http://securityreason.com/securityalert/3735
CVE ID: CVE-2008-1304 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489241/100/0/threaded - http://www.hackerscenter.com/index.php?/Latest-posts/114-WordPress-Multiple-Cross-Site-Scripting-Vulnerabilities.html?id=114 - h
ww.hackerscenter.com/index.php?/Latest-posts/114-WordPress-Multiple-Cross-Site-Scripting-Vulnerabilities.html?id=114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41056 - http://www.securityfocus.com/bid/28139 - http://securityreason.com/securityalert/3732 - http://securitytracker.com/id?1019564
CVE ID: CVE-2008-1305 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28194 - https://www.exploit-db.com/exploits/5236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41137
CVE ID: CVE-2008-1306 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Savvy Content Manager (CM) allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to (1) searchresults.cfm, (2) search_results.cfm, and (3) search_results/index.cfm. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28200 - http://secunia.com/advisories/29298 - http://www.besa
Container: References: - http://www.securityfocus.com/bid/28200 - http://secunia.com/advisories/29298 - http://www.besavvy.com/blog/index.cfm/2008/3/11/Security-Patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/41342
CVE ID: CVE-2008-1307 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29204 - http://www.securityfocus.com/bid/28172 - https://www.exploit-db.com/exploits/5225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41088 - http://www.vupen.com/english/ad
loit-db.com/exploits/5225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41088 - http://www.vupen.com/english/advisories/2008/0857/references
CVE ID: CVE-2008-1308 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg parameter in a ViewCatg action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28197 - http://securityreason.com/securityalert/3733 - http://www.securityfocus.com/archive/1/489387/100/0/threaded
CVE ID: CVE-2008-1309 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:33.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls property, which allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via a series of assignments of long string values, which triggers an overwrite of freed heap memory. Additional Analyst Notes: - CVE Program Cont
ts of long string values, which triggers an overwrite of freed heap memory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41087 - http://www.vupen.com/english/advisories/2008/2194/references - http://service.real.com/realplayer/security/07252008_player/en/ - http://secunia.com/advisories/29315 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060659.html - http://www.securitytracker.com/id?1019576 - https://www.exploit-db.com/exploits/5332 - http://www.vupen.com/english/advisories/2008/0842 - http://www.zerodayinitiative.com/advisories/ZDI-08-047/ - http://www.kb.cert.org/vuls/id/831457 - http://www.securit
2 - http://www.zerodayinitiative.com/advisories/ZDI-08-047/ - http://www.kb.cert.org/vuls/id/831457 - http://www.securityfocus.com/archive/1/494779/100/0/threaded - http://www.securitytracker.com/id?1020563 - http://www.securityfocus.com/bid/28157
CVE ID: CVE-2008-1310 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=120457602310315&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40979 - http://secunia.com/advisories/29207 - http://www.securityfocus.com/bid/28078 - http://www.emediawi
lnerabilities/40979 - http://secunia.com/advisories/29207 - http://www.securityfocus.com/bid/28078 - http://www.emediawire.com/releases/2008/2/prweb731563.htm - http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt
CVE ID: CVE-2008-1311 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or (4) a file with a long name. NOTE: the issue for vector 4 might exist because of an incomplete fix for CVE-2008-1312. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489355/100/0/threaded - http://www.securityfocus.com/bid/28
tainer: References: - http://www.securityfocus.com/archive/1/489355/100/0/threaded - http://www.securityfocus.com/bid/28187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41073 - http://aluigi.org/testz/tftpx.zip - http://www.vupen.com/english/advisories/2008/0811/references - http://aluigi.altervista.org/adv/packettrash-adv.txt - http://secunia.com/advisories/29308 - http://securityreason.com/securityalert/3734
CVE ID: CVE-2008-1312 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service (daemon crash) via a long TFTP packet, a different vulnerability than CVE-2008-1311. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-09.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41267 - http://www.securityfocus.com/bid/28079 - http://www.emediaw
https://exchange.xforce.ibmcloud.com/vulnerabilities/41267 - http://www.securityfocus.com/bid/28079 - http://www.emediawire.com/releases/2008/2/prweb731563.htm - http://secunia.com/advisories/29207 - http://marc.info/?l=bugtraq&m=120457979416868&w=2
CVE ID: CVE-2008-1313 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) post_id, (2) post_category_id, (3) post_year_month, and (4) static_page_id parameters; and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28203 - https://www.exploit-db.com/exploits/5234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41141 - http://secunia.com/advisories/29338
CVE ID: CVE-2008-1314 State: PUBLISHED Published: 2008-03-12T17:00:00 Last Updated: 2024-08-07T08:17:34.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=120440053123054&w=2 - http://cod3rz.helloweb.eu/exploits/gaestebuch.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/40975 - http://www.securityfocus.com/bid/28063
CVE ID: CVE-2008-1315 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3109 - http://securityreason.com/securityalert/3736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41149 - http://www.securityfocus.com/archive/1/489416/100/0/threaded - http://www.securityfocus.com/bid/28211
CVE ID: CVE-2008-1316 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29288 - http://www.securityfocus.com/bid/28215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41148 - https://www.exploit-db.com/exploits/5240
CVE ID: CVE-2008-1317 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service (reboot) via blocked I/O message queues. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41146 - http://www.securityfocus.com/bid/28214 - http://www.vupen.com/english/advisories/2008/0858/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231403-1
CVE ID: CVE-2008-1318 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive "cross-site" information via the callback parameter in an API call for JavaScript Object Notation (JSON) formatted results. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28070 - http://secunia.com/advisories/29216 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-March/000070.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40960 - http://svn.wikimedia