Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0251 State: PUBLISHED Published: 2009-01-22T16:00:00 Last Updated: 2024-08-07T04:24:18.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4935 - http://osvdb.org/51412 - https://www.exploit-db.com/exploits/7780 - http
http://securityreason.com/securityalert/4935 - http://osvdb.org/51412 - https://www.exploit-db.com/exploits/7780 - http://secunia.com/advisories/33531
CVE ID: CVE-2009-0252 State: PUBLISHED Published: 2009-01-22T16:00:00 Last Updated: 2024-08-07T04:24:18.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the (1) Login parameter (aka username field) or the (2) Password parameter (aka password field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33578 - http://osvdb.org/51456 - http://www.securityfocus.com/bid/33321 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
- http://osvdb.org/51456 - http://www.securityfocus.com/bid/33321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48062 - https://www.exploit-db.com/exploits/7801
CVE ID: CVE-2009-0253 State: PUBLISHED Published: 2009-01-22T18:00:00 Last Updated: 2024-08-07T04:24:18.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Status Bar Obfuscation" and "Clickjacking" attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48212 - http://securityreason.com/securityalert/4936
CVE ID: CVE-2009-0254 State: PUBLISHED Published: 2009-01-22T18:00:00 Last Updated: 2024-08-07T04:24:18.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0190 - http://www.securityfocus.com/bid/33363 - http://easyhdr.com/version.php - http://secunia.com/advisories/33468 - http://osvdb.org/51608
CVE ID: CVE-2009-0255 State: PUBLISHED Published: 2009-01-22T23:00:00 Last Updated: 2024-08-07T04:24:18.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/ - http://secunia.com/advisories/33617 - http://www.debian.org/security/2009/dsa-1711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48132 - http://www.securityfocu
debian.org/security/2009/dsa-1711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48132 - http://www.securityfocus.com/bid/33376 - http://secunia.com/advisories/33679
CVE ID: CVE-2009-0256 State: PUBLISHED Published: 2009-01-22T23:00:00 Last Updated: 2024-08-07T04:24:18.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/ - http://secunia.com/advisories/33617 - http://www.debian.org/security/2009/dsa-1711 - http://www.securityfocus.com/bid/33376 - https:
ia.com/advisories/33617 - http://www.debian.org/security/2009/dsa-1711 - http://www.securityfocus.com/bid/33376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48133 - http://secunia.com/advisories/33679
CVE ID: CVE-2009-0257 State: PUBLISHED Published: 2009-01-22T23:00:00 Last Updated: 2024-08-07T04:24:18.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bullet
module. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/ - http://secunia.com/advisories/33617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48135 - http://www.debian.org/security/2009/dsa-1711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48137 - http://www.securityfocus.com/bid/33376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48133 - http://secunia.com/advisories/33679
CVE ID: CVE-2009-0258 State: PUBLISHED Published: 2009-01-22T23:00:00 Last Updated: 2024-08-07T04:24:18.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/ - http://secunia.com/advisories/33617 - http://www.debian.org/security/2009/dsa-1711 - https:
lletins/typo3-sa-2009-001/ - http://secunia.com/advisories/33617 - http://www.debian.org/security/2009/dsa-1711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48138 - http://www.securityfocus.com/bid/33376 - http://www.openwall.com/lists/oss-security/2009/01/23/4 - http://secunia.com/advisories/33679
CVE ID: CVE-2009-0259 State: PUBLISHED Published: 2009-01-22T23:00:00 Last Updated: 2024-08-07T04:24:18.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008, as demonstrated by 2008-crash.doc.rar, and a similar issue to CVE-2008-4841. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6560 - http://www.securityfocus.com/bid/33383 - https://exchange.
ner: References: - https://www.exploit-db.com/exploits/6560 - http://www.securityfocus.com/bid/33383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48213 - http://www.openwall.com/lists/oss-security/2009/01/21/9 - http://milw0rm.com/sploits/2008-crash.doc.rar
CVE ID: CVE-2009-0260 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T04:24:18.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the drawing parameter (aka the basename variable). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33593 - http://secunia.com/advisories/33755 - http://www.vupen.com/english/advisories/2009/0195 - http://secunia.com/advisories/3371
://secunia.com/advisories/33755 - http://www.vupen.com/english/advisories/2009/0195 - http://secunia.com/advisories/33716 - http://moinmo.in/SecurityFixes#moin1.8.1 - http://www.securityfocus.com/bid/33365 - http://osvdb.org/51485 - http://www.securityfocus.com/archive/1/500197/100/0/threaded - http://hg.moinmo.in/moin/1.8/rev/8cb4d34ccbc1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48126 - https://www.debian.org/security/2009/dsa-1715 - https://usn.ubuntu.com/716-1/
CVE ID: CVE-2009-0261 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T04:24:18.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\DefaultSkin\DefaultSkin.ini file with a large ColumnHeaderSpan value. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7839 - http://www.securityfocus.com/bid/33373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48140
CVE ID: CVE-2009-0262 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T04:24:18.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7737 - http://secunia.com/advisories/33496 - http://www.securityfocus.com/bid/33221 - http://www.vupen.com/english/advisories/2009/0097
CVE ID: CVE-2009-0263 State: PUBLISHED Published: 2009-01-23T18:38:00 Last Updated: 2024-08-07T04:24:18.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14756 - http://www.vupen.com/english/advisories/2009/0113 - http://www.securityfocus.com/bid/33226 - http://secunia.com/advisor
http://www.vupen.com/english/advisories/2009/0113 - http://www.securityfocus.com/bid/33226 - http://secunia.com/advisories/33478 - https://www.exploit-db.com/exploits/7742
CVE ID: CVE-2009-0264 State: PUBLISHED Published: 2009-01-26T15:05:00 Last Updated: 2024-08-07T04:24:18.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48315 - http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html
CVE ID: CVE-2009-0265 State: PUBLISHED Published: 2009-01-26T15:05:00 Last Updated: 2024-08-07T04:24:18.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:037 - http://secunia.com/advisories/33559 - http://www.vupen.com/english/advisories/2009/0043 -
visories?name=MDVSA-2009:037 - http://secunia.com/advisories/33559 - http://www.vupen.com/english/advisories/2009/0043 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362 - http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33 - https://www.isc.org/node/373
CVE ID: CVE-2009-0266 State: PUBLISHED Published: 2009-01-26T15:05:00Z Last Updated: 2024-09-17T04:04:22.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3l playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33496
CVE ID: CVE-2009-0267 State: PUBLISHED Published: 2009-01-26T15:05:00 Last Updated: 2024-08-07T04:24:18.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of service (in.iked daemon crash) via an unspecified IKE packet, a different vulnerability than CVE-2007-2989. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33407 - http://secunia.com/advisories/33702 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6116 - http://sunsolve.sun.com/search/documen
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6116 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-113451-15-1 - http://support.avaya.com/elmodocs2/security/ASA-2009-032.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-66-247406-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48178
CVE ID: CVE-2009-0268 State: PUBLISHED Published: 2009-01-26T15:05:00 Last Updated: 2024-08-07T04:24:18.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows local users to cause a denial of service (panic) via unspecified vectors related to lack of "properly sequenced code" in ptc and ptsl. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2009-034.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-21-113685-07-1 - http://www.securityfocus.com/bid/33406 - http://www.securitytracker.
.com/search/document.do?assetkey=1-21-113685-07-1 - http://www.securityfocus.com/bid/33406 - http://www.securitytracker.com/id?1021640 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48179 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-249586-1 - http://secunia.com/advisories/33708
CVE ID: CVE-2009-0269 State: PUBLISHED Published: 2009-01-26T15:05:00 Last Updated: 2024-08-07T04:24:18.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://secunia.com/advisories/34502 - http://www.redhat.com/support/errata/RHSA-2009-0326.html - http://www.mandriva.com/secu
//secunia.com/advisories/34502 - http://www.redhat.com/support/errata/RHSA-2009-0326.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:118 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html - http://secunia.com/advisories/37471 - http://www.redhat.com/support/errata/RHSA-2009-0360.html - https://lists.launchpad.net/ecryptfs-devel/msg00010.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1749 - http://secunia.com/advisories/33758 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://www.ubuntu.com/usn/usn-751-1 - https://lists.launchpad.net/ecryptfs-devel/ms
ity-announce/2009-06/msg00000.html - http://www.ubuntu.com/usn/usn-751-1 - https://lists.launchpad.net/ecryptfs-devel/msg00011.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8169 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.1 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=a17d5232de7b53d34229de79ec22f4bb04adb7e4 - http://secunia.com/advisories/34981 - http://secunia.com/advisories/34394 - http://www.debian.org/security/2009/dsa-1787 - https://exchange.x
visories/34981 - http://secunia.com/advisories/34394 - http://www.debian.org/security/2009/dsa-1787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8944 - http://www.securityfocus.com/bid/33412 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-0270 State: PUBLISHED Published: 2009-01-26T19:00:00 Last Updated: 2024-08-07T04:24:18.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51486 - http://www.securityfocus.com/archive/1/500172/100/0/threaded - http://www.vupen.com/english/advisories/2009/0176 - http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html - http://www.w
http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html - http://www.wintercore.com/advisories/advisory_W010109.html - http://www.securityfocus.com/bid/33342 - http://secunia.com/advisories/33594
CVE ID: CVE-2009-0271 State: PUBLISHED Published: 2009-01-26T19:00:00 Last Updated: 2024-08-07T04:24:18.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33344 - http://osvdb.org/51487 - http://www.vupen.com/english/advisories/2009/0176 - http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html - http://secunia.com/a
ww.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html - http://secunia.com/advisories/33594
CVE ID: CVE-2009-0272 State: PUBLISHED Published: 2009-02-02T22:00:00 Last Updated: 2024-08-07T04:24:18.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding rules, and modify unspecified other configuration settings, as arbitrary users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33744 - http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002319 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-2
earch.do?usemicrosite=true&searchString=7002319 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-21 - http://www.securityfocus.com/archive/1/500569/100/0/threaded
CVE ID: CVE-2009-0273 State: PUBLISHED Published: 2009-02-02T22:00:00 Last Updated: 2024-08-07T04:24:18.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) User.id and (2) Library.queryText parameters to gw/webacc, and other vectors involving (3) HTML e-mail and (4) HTML attachments. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33744 - http://www.securityfocus.com/bid/33541 - http://www.procheckup.com/vulnerability_manager/vulnera
.com/advisories/33744 - http://www.securityfocus.com/bid/33541 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-23 - http://www.securityfocus.com/bid/33537 - http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002320 - http://www.securityfocus.com/archive/1/500575/100/0/threaded - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-22 - http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002321 - http://www.securityfocus.com/archive/1/500572/100/0/threaded
CVE ID: CVE-2009-0274 State: PUBLISHED Published: 2009-02-03T19:00:00Z Last Updated: 2024-09-16T17:03:30.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to obtain sensitive information via a crafted URL, related to conversion of POST requests to GET requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33744 - http://www.novell.com/support/viewContent.do?externalId=7002322 - http://www.securityfocus.com/bid/33559
CVE ID: CVE-2009-0275 State: PUBLISHED Published: 2009-01-26T20:00:00Z Last Updated: 2024-09-17T03:47:54.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/51412 - http://secunia.com/advisories/33531
CVE ID: CVE-2009-0276 State: PUBLISHED Published: 2009-02-03T19:00:00Z Last Updated: 2024-09-17T02:31:15.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a crafted script that accesses another frame and reads its full URL and possibly other sensitive information, or modifies the URL of this frame. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html - http://src.chromium.org/viewvc/chrome?view=rev&revision=8524 - http://secunia.co
table-beta-update-yahoo-mail-and.html - http://src.chromium.org/viewvc/chrome?view=rev&revision=8524 - http://secunia.com/advisories/33754 - http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes - http://codereview.chromium.org/18531