Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://secunia.com/advisories/60385 - http://rhn.redhat.com/errata/RHSA-2014-1359.html - http://www.debian.org/security/2014/dsa-3004 - http://www.ubuntu.com/usn/USN-2304-1 - http://quickgit.kde.org/?p=kauth.git&a=commit&h=341b7d84b6d9c03cf56905cb277b47e11c81482a - http://www.kde.org/info/security/advisory-20140730-1.txt - http://secunia.com/advisories/60654 - http://lists.opensuse.org/opensuse-updates/2014-08/msg00012.html - http://secunia.com/advisories/60633 - http://quickgit.kde.org/?p=kdelibs.git&a=commitdiff&h=e4e7b53b71e2659adaf52691d4accc3594203b23
CVE ID: CVE-2014-5034 State: PUBLISHED Published: 2018-04-06T16:00:00 Last Updated: 2024-08-06T11:34:37.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0pc0deFR/Exploits/blob/master/CVE-2014-5034/exploit.html - https://github.com/0pc0deFR/wordpress-sploit-framework/blob/master/explo
ploits/blob/master/CVE-2014-5034/exploit.html - https://github.com/0pc0deFR/wordpress-sploit-framework/blob/master/exploits/Brute_Force_Login_Protection_1_3_Cross_Site_Request_Forgery
CVE ID: CVE-2014-5035 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T11:34:37.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference in an XML-RPC message, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Aug/34 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95254 - http://www.securityfocus.com/archive/1/533114/100/0/threaded - http://packetstormsecurity.com/files/127843/Openday
254 - http://www.securityfocus.com/archive/1/533114/100/0/threaded - http://packetstormsecurity.com/files/127843/Opendaylight-1.0-Local-File-Inclusion-Remote-File-Inclusion.html
CVE ID: CVE-2014-5036 State: PUBLISHED Published: 2014-09-05T14:00:00 Last Updated: 2024-08-06T11:34:37.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Storage Controller (SC) component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60359 - http://secunia.com/advisories/60712 - https://www.eucalyptus.com/resources/security/advisories/esa-23
CVE ID: CVE-2014-5037 State: PUBLISHED Published: 2014-11-07T19:00:00 Last Updated: 2024-08-06T11:34:37.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62055 - https://www.eucalyptus.com/resources/security/advisories/esa-25
CVE ID: CVE-2014-5038 State: PUBLISHED Published: 2014-11-07T19:00:00 Last Updated: 2024-08-06T11:34:37.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files. Additional Analyst Notes: - CVE Program Container: References: - https://www.eucalyptus.com/resources/security/advisories/esa-26
CVE ID: CVE-2014-5039 State: PUBLISHED Published: 2020-01-31T21:52:58 Last Updated: 2024-08-06T11:34:37.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/a/eucalyptus.com/forum/#%21topic/security-announce/U4AbkOgpQSA
CVE ID: CVE-2014-5040 State: PUBLISHED Published: 2016-01-05T02:00:00 Last Updated: 2024-08-06T11:34:37.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary (1) access key credentials by leveraging knowledge of a key ID or (2) signing certificates by leveraging knowledge of a certificate ID. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04926463 - https://www.eucalyptus.com/resources/security/advisories/esa-32
CVE ID: CVE-2014-5043 State: REJECTED Published: 2014-08-18T10:00:00 Last Updated: 2014-08-18T04:57:00 Description: No description available.
CVE ID: CVE-2014-5044 State: PUBLISHED Published: 2018-03-07T15:00:00 Last Updated: 2024-08-06T11:34:37.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/94849 - https://bugzilla.redhat.com/show_bug.cgi?id=1122812 - http://www.openwall.com/lists/oss-security/2014/07/31/6 - https://gcc.gnu.org/viewcvs/gcc/trunk/libgfortran/ChangeLog?limit_changes=0&view=markup&pathrev=211
urity/2014/07/31/6 - https://gcc.gnu.org/viewcvs/gcc/trunk/libgfortran/ChangeLog?limit_changes=0&view=markup&pathrev=211721 - http://www.openwall.com/lists/oss-security/2014/07/24/1
CVE ID: CVE-2014-5045 State: PUBLISHED Published: 2014-08-01T10:00:00 Last Updated: 2024-08-06T11:34:37.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/24/2 - https://github.com/torvalds/linux/commit/29
ner: References: - http://www.openwall.com/lists/oss-security/2014/07/24/2 - https://github.com/torvalds/linux/commit/295dc39d941dc2ae53d5c170365af4c9d5c16212 - http://www.securityfocus.com/bid/68862 - http://rhn.redhat.com/errata/RHSA-2015-0062.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=295dc39d941dc2ae53d5c170365af4c9d5c16212 - http://secunia.com/advisories/60353 - https://bugzilla.redhat.com/show_bug.cgi?id=1122472
CVE ID: CVE-2014-5068 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-06T11:34:37.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash) or (2) ..\ (dot dot forward slash) before a file name. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5068/
CVE ID: CVE-2014-5069 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T11:34:37.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Symmetricom s350i 2.70.15 allows remote attackers to inject arbitrary web script or HTML via vectors involving system logs. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5069/
CVE ID: CVE-2014-5070 State: PUBLISHED Published: 2018-01-11T16:00:00 Last Updated: 2024-08-06T11:34:37.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthenticated users to the login page. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis.co.uk/security-research-and-downloads/security-advisories/cve-2014-5070/
CVE ID: CVE-2014-5071 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T11:34:37.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows remote attackers to execute arbitrary SQL commands via vectors involving a username. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5071/
CVE ID: CVE-2014-5072 State: PUBLISHED Published: 2018-04-06T16:00:00 Last Updated: 2024-08-06T11:34:37.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in WP Security Audit Log plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.wpsecurityauditlog.com/plugin-change-log/ - https://github.com/0pc0deFR/Exploits/tree/master/CVE-2014-5072
CVE ID: CVE-2014-5073 State: PUBLISHED Published: 2014-08-29T17:00:00 Last Updated: 2024-08-06T11:34:37.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2014-8/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/95319 - http://packetstormsecurity.com/files/127864/VMTurbo-Operations-Manager-4.6-vmtadmin.cgi-Remote-Command-Execution.html - http://www.osvdb.org/109572 - http://secunia.com/advi
perations-Manager-4.6-vmtadmin.cgi-Remote-Command-Execution.html - http://www.osvdb.org/109572 - http://secunia.com/advisories/58880 - http://www.securityfocus.com/bid/69225 - http://www.exploit-db.com/exploits/34335 - http://disse.cting.org/2014/07/30/vmturbo-operation-manager-remote-command-execution/
CVE ID: CVE-2014-5074 State: PUBLISHED Published: 2014-08-17T23:00:00 Last Updated: 2024-08-06T11:34:37.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-14-226-01 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-310688.pdf - https://www.exploit-db.com/exploits/44693/ - https://cert-portal.siemens.com/productcert/pdf/ssa-310688.pdf
CVE ID: CVE-2014-5075 State: PUBLISHED Published: 2014-10-25T21:00:00 Last Updated: 2024-08-06T11:34:37.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59915 - http://op-co.de/CVE-2014-5075.html - http://rhn.redhat.com/errata/RHSA-2015-1176.
http://secunia.com/advisories/59915 - http://op-co.de/CVE-2014-5075.html - http://rhn.redhat.com/errata/RHSA-2015-1176.html - http://www.securityfocus.com/bid/69064
CVE ID: CVE-2014-5076 State: PUBLISHED Published: 2014-09-02T10:00:00 Last Updated: 2024-08-06T11:34:37.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=MF9lrh1kpDs
CVE ID: CVE-2014-5077 State: PUBLISHED Published: 2014-08-01T10:00:00 Last Updated: 2024-08-06T11:34:37.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60545 - http:
direction. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60545 - http://secunia.com/advisories/62563 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1be9a950c646c9092fb3618197f7b6bfb50e82aa - http://www.ubuntu.com/usn/USN-2335-1 - http://www.ubuntu.com/usn/USN-2334-1 - http://secunia.com/advisories/60430 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://secunia.com/advisories/60564 - http://rhn.redhat.com/errata/RHSA-2014-1083.html - http://www.openwall.com/lists/oss-security/2014/07/26/1 - http://
4 - http://rhn.redhat.com/errata/RHSA-2014-1083.html - http://www.openwall.com/lists/oss-security/2014/07/26/1 - http://www.ubuntu.com/usn/USN-2359-1 - http://rhn.redhat.com/errata/RHSA-2014-1763.html - http://secunia.com/advisories/59777 - http://rhn.redhat.com/errata/RHSA-2014-1668.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95134 - http://www.securitytracker.com/id/1030681 - http://www.ubuntu.com/usn/USN-2358-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1122982 - https://github.com/torvalds/linux/commit/1be9a950c646c9092fb3618197f7b6bfb50e82aa - http://secunia.com/advisories/60744 - http://www.securityfocus.com/bid/68881
CVE ID: CVE-2014-5081 State: PUBLISHED Published: 2020-01-10T12:29:49 Last Updated: 2024-08-06T11:34:37.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: sphider prior to 1.3.6, sphider-pro prior to 3.2, and sphider-plus prior to 3.2 allow authentication bypass Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html - https://www.exploit-db.com/exploits/34238
CVE ID: CVE-2014-5082 State: PUBLISHED Published: 2014-08-06T18:00:00 Last Updated: 2024-08-06T11:34:37.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execute arbitrary SQL commands via the (1) site_id or (2) url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html - http://www.exploit-db.com/exploits/34189
CVE ID: CVE-2014-5083 State: PUBLISHED Published: 2020-02-10T14:51:15 Last Updated: 2024-08-06T11:34:37.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5083 pertains to instances of fwrite in Sphider. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html
CVE ID: CVE-2014-5084 State: PUBLISHED Published: 2020-02-10T14:20:52 Last Updated: 2024-08-06T11:34:37.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let a remote malicious user execute arbitrary code. CVE-2014-5084 pertains to instances of fwrite in Sphider Pro only, but do not exist in either Sphider or Sphider Plus. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html
CVE ID: CVE-2014-5085 State: PUBLISHED Published: 2020-02-10T14:16:05 Last Updated: 2024-08-06T11:34:37.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5085 pertains to instances of fwrite in Sphider Plus, but do not exist in either Sphider or Sphider Pro. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html
CVE ID: CVE-2014-5086 State: PUBLISHED Published: 2020-02-10T14:06:02 Last Updated: 2024-08-06T11:34:37.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5086 pertains to instances of fwrite in Sphider Pro and Sphider Plus only, but don’t exist in Sphider. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html
CVE ID: CVE-2014-5087 State: PUBLISHED Published: 2020-02-07T17:36:48 Last Updated: 2024-08-06T11:34:37.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html - https://vulmon.com/searchpage?page=2&q=Shayan+S
CVE ID: CVE-2014-5088 State: PUBLISHED Published: 2014-08-06T18:00:00 Last Updated: 2024-08-06T11:34:37.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/69012 - http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
CVE ID: CVE-2014-5089 State: PUBLISHED Published: 2014-08-06T18:00:00 Last Updated: 2024-08-06T11:34:37.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
CVE ID: CVE-2014-5090 State: PUBLISHED Published: 2014-08-06T18:00:00 Last Updated: 2024-08-06T11:34:37.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html
CVE ID: CVE-2014-5091 State: PUBLISHED Published: 2020-02-07T17:17:33 Last Updated: 2024-08-06T11:34:37.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html - http://www.exploit-db.com/exploits/34239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95111 - https://www.securityfocus.com/bid/69008
CVE ID: CVE-2014-5092 State: PUBLISHED Published: 2020-01-10T13:28:59 Last Updated: 2024-08-06T11:34:37.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Status2k allows Remote Command Execution in admin/options/editpl.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95112
CVE ID: CVE-2014-5093 State: PUBLISHED Published: 2020-01-10T13:34:04 Last Updated: 2024-08-06T11:34:37.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Status2k does not remove the install directory allowing credential reset. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95113
CVE ID: CVE-2014-5094 State: PUBLISHED Published: 2014-10-20T15:00:00 Last Updated: 2024-08-06T11:34:37.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95114
CVE ID: CVE-2014-5097 State: PUBLISHED Published: 2014-08-22T14:00:00 Last Updated: 2024-08-06T11:34:37.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) get or (2) set action to rate.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23225 - http://packetstormsecurity.com/files/127943/ArticleFR-3.0.4-SQL-Injection.html - http://www.securityfocus.com/bid/69307 - http://www.securityfocus.com/archive/1/533183/100/0/threaded
CVE ID: CVE-2014-5098 State: PUBLISHED Published: 2014-10-20T15:00:00 Last Updated: 2024-08-06T11:34:37.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query string to search/results/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127854/Jamroom-5.2.6-Cross-Site-Scripting.html - https://www.htbridge.com/advisory/HTB23224 - http://www.securityfocus.com/archive/1/533120/100/0/threaded - http://www.securityfocus.com/bid/69219 - https://www.jamroom.net/the-jamroom-networ
om/archive/1/533120/100/0/threaded - http://www.securityfocus.com/bid/69219 - https://www.jamroom.net/the-jamroom-network/networkmarket/43/search?expanded_changelog=1