Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ocus.com/bid/50565 - http://www.osvdb.org/76913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71163 - http://www.saintcorporation.com/cgi-bin/exploit_info/oracle_hyperion_financial_mgmt_activex_heap - http://retrogod.altervista.org/9sg_ttf16.html - http://secunia.com/advisories/46764
CVE ID: CVE-2011-5168 State: PUBLISHED Published: 2012-09-15T17:00:00Z Last Updated: 2024-09-16T19:51:10.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/17919 - http://www.osvdb.org/83882 - http://www.bananadance.org/Program-News/Minor-Update-and-New-Theme - http://www.securityfocus.com/bid/49903 - http://www.doyoubananadance.com/Program-News/Important-Notice-About-SQLi-Exploit
CVE ID: CVE-2011-5169 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:46.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2 allows remote attackers to execute arbitrary SQL commands via the scheduleID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=196 - http://www.securityfocus.com/archive/1/519983/100/0/threaded - http://www.securityfocus.com/bid/49906 - http://www.sonicwall.com/app/projects/file_downloader/document_lib.php?t=RN&id=379
CVE ID: CVE-2011-5170 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:46.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name in an m3u playlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71573 - http://www.exploit-db.com/exploits/18178 - http://osvdb.org/77453
CVE ID: CVE-2011-5171 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:46.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary code via the (1) src and (2) name parameters in a p2g project file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71723 - http://osvdb.org/77600 - http://www.kb.cert.org/vuls/id/158003 - http://secunia.com/advisories/47145
CVE ID: CVE-2011-5172 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:45.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and StoryBoard Studio, allows remote attackers to execute arbitrary code via a long string in the string element field in a frame xml file. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-assessment.com/files/documents/advisory/Storyboard_Quick6-Stack_Buffer_Overflow.pdf - http://www.exploit-db.com/exploits/18186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71574 - http://secunia.com/advis
ww.exploit-db.com/exploits/18186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71574 - http://secunia.com/advisories/47045
CVE ID: CVE-2011-5173 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:46.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field in a bed file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71578
CVE ID: CVE-2011-5174 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-07T00:30:46.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) in Intel Q67 Express, C202, C204, C206 Chipsets, and Mobile Intel QM67, and QS67 Chipset before 2nd_gen_i5_i7_SINIT_51.BIN Express; Intel Q57, 3450 Chipsets and Mobile Intel QM57 and QS57 Express Chipset before i5_i7_DUAL_SINIT_51.BIN and i7_QUAD_SINIT_51.BIN; Mobile Intel GM45, GS45, and PM45 Express Chipset before GM45_GS45_PM45_SINIT_51.BIN; Intel Q35 Express Chipsets before Q35_SINIT_51.BIN; and Intel 5520, 5500, X58, and 750
fore GM45_GS45_PM45_SINIT_51.BIN; Intel Q35 Express Chipsets before Q35_SINIT_51.BIN; and Intel 5520, 5500, X58, and 7500 Chipsets before SINIT ACM 1.1 allows local users to bypass the Trusted Execution Technology protection mechanism and perform other unspecified SINIT ACM functions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47096 - http://osvdb.org/77554 - http://theinvisiblethings.blogspot.com/2011/12/exploring-new-lands-on-intel-cpus-sinit.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71625 - http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00030&languageid=en-fr
CVE ID: CVE-2011-5175 State: PUBLISHED Published: 2012-09-15T17:00:00Z Last Updated: 2024-09-16T16:58:43.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.bananadance.org/Program-News/Minor-Update-and-New-Theme - http://packetstormsecurity.org/files/115772/Banana-Dance-CMS-B.2.1-XSS-SQL-Injection.html - http://www.doyoubananadance.com/Program-News/Important-Notice-About-SQLi-Exploit
CVE ID: CVE-2011-5176 State: PUBLISHED Published: 2012-09-15T17:00:00Z Last Updated: 2024-09-17T04:14:26.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in search.php in Banana Dance, possibly B.1.5 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) q or (2) category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.bananadance.org/Program-News/Minor-Update-and-New-Theme - http://www.doyoubananadance.com/Program-News/Important-Notice-About-SQLi-Exploit
CVE ID: CVE-2011-5177 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:46.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to the admins (2) blocks, (3) articles, or (4) suggest-category; or (5) sort parameter to the search page. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/107324/esyndicatpro-xss.txt - http://www.securityfocus.com/bid/50822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71485
CVE ID: CVE-2011-5178 State: PUBLISHED Published: 2012-09-20T10:00:00Z Last Updated: 2024-09-16T17:37:52.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) eulaAccepted or (2) mode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46854 - http://www.infoblox.com/community/downloads/hotfix-v621-netmri-8831gpg - http://seclists.org/fulldisclosure/2011/Nov/158 - http://www.infoblox.com/community/downloads/hotfix-v
-netmri-8831gpg - http://seclists.org/fulldisclosure/2011/Nov/158 - http://www.infoblox.com/community/downloads/hotfix-v602-netmri-8831gpg - http://foregroundsecurity.com/secure-coding-and-security-qa/111-infoblox-netmri-621-612-and-60242-multiple-cross-site-scripting-xss - http://www.securitytracker.com/id?1026319 - http://www.infoblox.com/community/downloads/hotfix-v612-netmri-8831gpg
CVE ID: CVE-2011-5179 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:46.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly before 1.04, for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71486 - http://www.securityfocus.com/archive/1/520662/100/0/threaded
CVE ID: CVE-2011-5180 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:46.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-1pluginjquery.php in the ZooEffect plugin 1.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information. NOTE: this has been disputed by a third party. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71572 - http://www.osvdb.org/77648 - http://www.securityfocu
0860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71572 - http://www.osvdb.org/77648 - http://www.securityfocus.com/archive/1/520690/100/0/threaded
CVE ID: CVE-2011-5181 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:46.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50778 - http://wordpress.org/extend/plugins/clickdesk-live-support-chat-plugin/changelog/ - http://osvdb.org/77338 - http://www.securityfocus.com/arc
extend/plugins/clickdesk-live-support-chat-plugin/changelog/ - http://osvdb.org/77338 - http://www.securityfocus.com/archive/1/520624/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/71469
CVE ID: CVE-2011-5182 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:46.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lanoba-social-plugin/index.php in the Lanoba Social plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor disputes this issue, stating "Lanoba's plug in does sanitize user input, and because that input is never sent to the browser, an attacker has no way of executing script or code on a user's behalf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/5206
r's behalf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520678/100/0/threaded - http://www.securityfocus.com/bid/50746 - http://www.securityfocus.com/archive/1/520574/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/71411 - https://wordpress.org/support/topic/plugin-lanoba-social-plugin-xss-vulnerabilities
CVE ID: CVE-2011-5183 State: PUBLISHED Published: 2012-09-20T10:00:00Z Last Updated: 2024-09-16T23:02:04.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the where_clause parameter to (1) index.php, (2) index_long.php, or (3) index_short.php in ordering/interface_creator/. Additional Analyst Notes: - CVE Program Container: References: - http://www.bioinformatics.org/phplabware/labwiki/index.php?page=release_notes - http://www.exploit-db.com/exploits/18091
CVE ID: CVE-2011-5184 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:46.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the (1) node parameter to nnm/mibdiscover; (2) nodename parameter to nnm/protected/configurationpoll.jsp, (3) nnm/protected/ping.jsp, (4) nnm/protected/statuspoll.jsp, or (5) nnm/protected/traceroute.jsp; or (6) field parameter to nmm/validate. NOTE: this might be a duplicate of CVE-2011-4155 or CVE-2011-4156. Additional Analyst Notes: - CVE Program Container: References: - htt
t be a duplicate of CVE-2011-4155 or CVE-2011-4156. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77396 - http://0a29.blogspot.com/2011/11/0a29-11-1-cross-site-scripting.html - http://www.securityfocus.com/bid/50806 - http://osvdb.org/77399 - http://osvdb.org/77397 - http://osvdb.org/77401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71527 - http://secunia.com/advisories/46941 - http://www.securityfocus.com/archive/1/520653/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/71528 - http://osvdb.org/77398 - http://osvdb.org/77400
CVE ID: CVE-2011-5185 State: PUBLISHED Published: 2012-09-20T10:00:00Z Last Updated: 2024-09-16T23:25:36.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in video_comments.php in Online Subtitles Workshop before 2.0 rev 131 allows remote attackers to inject arbitrary web script or HTML via the comment parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18035 - http://onlinesubtitles.svn.sourceforge.net/viewvc/onlinesubtitles/video_comments.php?r1=31&r2=131&pathrev=146
CVE ID: CVE-2011-5186 State: PUBLISHED Published: 2012-09-20T10:00:00Z Last Updated: 2024-09-16T18:34:22.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to inject arbitrary web script or HTML via the item_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/83371 - http://www.exploit-db.com/exploits/18056
CVE ID: CVE-2011-5187 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:45.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Support Ticketing System module 6.x-1.x before 6.x-1.7 for Drupal allows remote authenticated users with the "administer support projects" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1357378 - http://www.osvdb.org/77424 - http://www.securityfocus.com/bid/50871 - http://secunia.com/advisories/47056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71598 - htt
s.com/bid/50871 - http://secunia.com/advisories/47056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71598 - http://drupal.org/node/1357300
CVE ID: CVE-2011-5188 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:46.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Support Timer module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "track time spent" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1357278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71596 - http://drupal.org/node/1357384 - http://www.osvdb.org/77423 - http://secunia.com/advisories/47030
CVE ID: CVE-2011-5189 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:46.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform Validation module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with permissions to "update Webform nodes" to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71597 - http://secunia.com/advisories/47035 - http://drupal.org/node/1357356 - http://drupal.org/node/1357360 - http://www.osvdb.org/77426
unia.com/advisories/47035 - http://drupal.org/node/1357356 - http://drupal.org/node/1357360 - http://www.osvdb.org/77426 - http://drupal.org/node/1357354
CVE ID: CVE-2011-5190 State: PUBLISHED Published: 2012-09-20T10:00:00 Last Updated: 2024-08-07T00:30:46.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to (1) signup.php, (2) lostpass.php, (3) login.php, (4) index.php, (5) help_tos.php, (6) help_contact.php, or (7) help.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47005 - http://www.osvdb.org/77646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71515 - http://www.securityfocus.com/bid/50840
ww.osvdb.org/77646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71515 - http://www.securityfocus.com/bid/50840 - http://packetstormsecurity.org/files/view/107344/socialbook-xss.txt
CVE ID: CVE-2011-5191 State: PUBLISHED Published: 2012-09-23T17:00:00Z Last Updated: 2024-09-16T18:50:25.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/pretty-link/changelog/ - http://plugins.trac.wordpress.org/changeset/473693/pretty-link
CVE ID: CVE-2011-5192 State: PUBLISHED Published: 2012-09-23T17:00:00Z Last Updated: 2024-09-16T16:24:03.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset/485819/pretty-link - http://wordpress.org/extend/plugins/pretty-link/changelog/ - http://secunia.com/advisories/47456 - http://www.securityfocus.com/bid/51306
CVE ID: CVE-2011-5193 State: PUBLISHED Published: 2012-09-23T17:00:00Z Last Updated: 2024-09-16T17:28:00.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for WordPress, when the WHOIS widget is enabled, allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php, a different vulnerability than CVE-2011-5194. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47428
CVE ID: CVE-2011-5194 State: PUBLISHED Published: 2012-09-23T17:00:00 Last Updated: 2024-08-07T00:30:46.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the domain parameter, a different vulnerability than CVE-2011-5193. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51244 - http://secunia.com/advisories/47428 - http://plugins.trac.wordpress.org/changeset/482954/wordpress-whois-search - http://wordpress.org/extend/plugins/wordp
- http://plugins.trac.wordpress.org/changeset/482954/wordpress-whois-search - http://wordpress.org/extend/plugins/wordpress-whois-search/changelog/ - http://packetstormsecurity.org/files/view/108271/wpwhois-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72074
CVE ID: CVE-2011-5195 State: PUBLISHED Published: 2012-09-23T17:00:00 Last Updated: 2024-08-07T00:30:46.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47330 - http://osvdb.org/77995 - http://www.exploit-db.com/exploits/18266
CVE ID: CVE-2011-5196 State: PUBLISHED Published: 2012-09-23T17:00:00 Last Updated: 2024-08-07T00:30:46.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47330 - http://osvdb.org/77995 - http://www.exploit-db.com/exploits/18266
CVE ID: CVE-2011-5197 State: PUBLISHED Published: 2012-09-23T17:00:00 Last Updated: 2024-08-07T00:30:46.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18266
CVE ID: CVE-2011-5198 State: PUBLISHED Published: 2012-09-23T17:00:00 Last Updated: 2024-08-07T00:30:46.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72037 - http://secunia.com/advisories/47354 - http://osvdb.org/78068 - http://packetstormsecurity.org/files/view/108231/neturf-xss.txt
CVE ID: CVE-2011-5199 State: PUBLISHED Published: 2012-09-23T17:00:00 Last Updated: 2024-08-07T00:30:46.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72075 - http://www.securityfocus.com/bid/51248 - http://code.google.com/p/tinyguestbook/issues/detail?id=1 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0009.html