Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0437 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:31:26.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is registered as a Windows service, allows local users to obtain sensitive information by reading the logs/instconfigifwas6.log log file. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1PK67405 - http://www.securityfocus.com/bid/33849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48527
CVE ID: CVE-2009-0438 State: PUBLISHED Published: 2009-02-10T22:13:00 Last Updated: 2024-08-07T04:31:26.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization checking" and obtain sensitive information from JSP pages via a crafted request. NOTE: this is probably a duplicate of CVE-2008-5412. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33700 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK75248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48528 - http://www-01.ibm.com/support/docview.wss?uid=swg2701446
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48528 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2009-0439 State: PUBLISHED Published: 2009-02-24T17:00:00 Last Updated: 2024-08-07T04:31:26.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the queue manager in IBM WebSphere MQ (WMQ) 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain privileges via vectors related to the (1) setmqaut, (2) dmpmqaut, and (3) dspmqaut authorization commands. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?rs=171&uid=swg27006037 - http://www.securityfocus.com/bid/33857 - http://osvdb.org/52297 - http://secunia.com/advisories/34034 - https://exchange.xforce.ibmcloud.com/vuln
com/bid/33857 - http://osvdb.org/52297 - http://secunia.com/advisories/34034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48529 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ40824
CVE ID: CVE-2009-0440 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:31:26.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet (aka RNIF) document to a backend application, related to (1) "altered service content" and (2) "digital signature foot-print." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48530 - http://www.securityfocus.com/bid/33839 - http://secunia.com/advisories/33994 - http:
bmcloud.com/vulnerabilities/48530 - http://www.securityfocus.com/bid/33839 - http://secunia.com/advisories/33994 - http://www-01.ibm.com/support/docview.wss?uid=swg21330341 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR31231
CVE ID: CVE-2009-0441 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter, a different vector than CVE-2008-4138. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33592 - http://secunia.com/advisories/33732 - https://www.exploit-db.com/exploits/7965 - http://osvdb.org/51740
CVE ID: CVE-2009-0442 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0317 - http://secunia.com/advisories/33811 - http://www.securityfocus.com/bid/33603 - http://osvdb.org/51737 - https://www.exploit-db.com/exploits/7980
CVE ID: CVE-2009-0443 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51717 - http://secunia.com/advisories/33742 - https://www.exploit-db.com/exploits/7942 - http://www.securityfocus.com/bid/33089
CVE ID: CVE-2009-0444 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) theme parameter to (a) 179_squarebox_pds_list/view.php, (b) 179_squarebox_minishop_expand/view.php, (c) 179_squarebox_gallery_list_pds/view.php, (d) 179_squarebox_gallery_list/view.php, (e) 179_squarebox_gallery/view.php, (f) 179_squarebox_board_swfupload/view.php, (g) 179_squarebox_board_expand/view.php, (h) 179_squarebox
gallery/view.php, (f) 179_squarebox_board_swfupload/view.php, (g) 179_squarebox_board_expand/view.php, (h) 179_squarebox_board_basic_with_grcode/view.php, (i) 179_squarebox_board_basic/view.php, (j) 179_simplebar_pds_list/view.php, (k) 179_simplebar_notice/view.php, (l) 179_simplebar_gallery_list_pds/view.php, (m) 179_simplebar_gallery/view.php, and (n) 179_simplebar_basic/view.php in theme/; the (2) path parameter to (o) latest/sirini_gallery_latest/list.php; and the (3) grboard parameter to (p) include.php and (q) form_mail.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33602 - http://secunia.com/advisories/33812 - https://www.exploit
tainer: References: - http://www.securityfocus.com/bid/33602 - http://secunia.com/advisories/33812 - https://www.exploit-db.com/exploits/7979
CVE ID: CVE-2009-0445 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL commands via the exhibition_id parameter in a gallery.viewPhotos action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7968 - https://www.exploit-db.com/exploits/9451 - http://www.securityfocus.com/bid/33596 - http://secunia.com/advisories/33730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48468 - http://osvdb.org/51741
CVE ID: CVE-2009-0446 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33590 - https://www.exploit-db.com/exploits/7961
CVE ID: CVE-2009-0447 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the user parameter (aka UserName field) or (2) the pass parameter (aka Pass field) to (a) admin/admin.asp or (b) the default URI under admin/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33593 - http://secunia.com/advisories/33771 - http://osvdb.org/51754 - https://
nces: - http://www.securityfocus.com/bid/33593 - http://secunia.com/advisories/33771 - http://osvdb.org/51754 - https://www.exploit-db.com/exploits/7963
CVE ID: CVE-2009-0448 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the synTarget parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7977 - http://www.securityfocus.com/bid/33601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48496 - http://www.vupen.com/english/advisories/2009/0319
CVE ID: CVE-2009-0449 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call. Additional Analyst Notes: - CVE Program Container: References: - http://www.reversemode.com/index.php?option=com_content&task=view&id=60&Itemid=1 - http://kartoffel.reversemode.com/downloads/kaspersky_klim5_plugin.zip - http://www.securitytracker.com/id?1021661 - http://www.wintercore.com/advisories/advisory_W020209.html - http://www.securityfocus.com/archive/1/500606
/id?1021661 - http://www.wintercore.com/advisories/advisory_W020209.html - http://www.securityfocus.com/archive/1/500606/100/0/threaded - http://www.securityfocus.com/bid/33561 - http://secunia.com/advisories/33788
CVE ID: CVE-2009-0450 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code via a long string in a playlist (aka .plf) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48498 - https://www.exploit-db.com/exploits/7975 - http://www.securityfocus.com/bid/33588
CVE ID: CVE-2009-0451 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Admin name field to the default URI under admin/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33546 - https://www.exploit-db.com/exploits/7932
CVE ID: CVE-2009-0452 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7956 - http://www.securityfocus.com/bid/33576 - http://osvdb.org/51712 - http://secunia.com/advisories/33767
CVE ID: CVE-2009-0453 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7956 - http://osvdb.org/51713 - http://secunia.com/advisories/33767
CVE ID: CVE-2009-0454 State: PUBLISHED Published: 2009-02-05T20:00:00 Last Updated: 2024-08-07T04:31:26.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field. NOTE: some third parties report inability to verify this issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48503 - https://www.exploit-db.com/exploits/7970 - http://www.securityfocus.com/bid/33600
CVE ID: CVE-2009-0455 State: PUBLISHED Published: 2009-02-11T00:00:00 Last Updated: 2024-08-07T04:31:26.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortconsult.net/images/pdf/advisories/glFusion-xss-advisory.pdf - http://secunia.com/advisories/33878 - http://www.glfusion.org/article.php/xsscomments - http://www.securityfocus.com/bid/33683 - https://exchan
sories/33878 - http://www.glfusion.org/article.php/xsscomments - http://www.securityfocus.com/bid/33683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48603
CVE ID: CVE-2009-0456 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough 0.3.5, allows remote attackers to execute arbitrary PHP code via a URL in the neededFiles[patForms] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7946 - http://www.securityfocus.com/bid/33569
CVE ID: CVE-2009-0457 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the (1) Contact_Plus and (2) Reviews modules, and (3) the module_name parameter to admin/includes/FANCYNLOptions.php in the Fancy_NewsLetter module. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51708 - http://osvdb.org/51709 - https://www.exploit-db.com/exploits/7939 - http://www
r: References: - http://osvdb.org/51708 - http://osvdb.org/51709 - https://www.exploit-db.com/exploits/7939 - http://www.securityfocus.com/bid/33565 - http://secunia.com/advisories/33735
CVE ID: CVE-2009-0458 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7940 - http://secunia.com/advisories/33777 - http://www.securityfocus.com/bid/33564 - http://osvdb.org/51733
CVE ID: CVE-2009-0459 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter (aka Username field) or (2) the pwd parameter (aka Password field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7941 - http://secunia.com/advisories/33777 - http://www.securityfocus.com/bid/33564 - http://osvdb.o
oit-db.com/exploits/7941 - http://secunia.com/advisories/33777 - http://www.securityfocus.com/bid/33564 - http://osvdb.org/51733
CVE ID: CVE-2009-0460 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33577 - http://secunia.com/advisories/33777 - https://www.exploit-db.com/exploits/7951 - http://osvdb.org/51734
CVE ID: CVE-2009-0461 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33577 - http://secunia.com/advisories/33777 - http://osvdb.org/51734 - https://www.exploit-db.com/exploits/7952
CVE ID: CVE-2009-0462 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via (1) the txtEmail parameter (aka E-MAIL field) or (2) the txtPassword parameter (aka password field) to customer_login.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33575 - http://secunia.com/advisories/33774 - http://osvdb.org/51718 - https://www.ex
- http://www.securityfocus.com/bid/33575 - http://secunia.com/advisories/33774 - http://osvdb.org/51718 - https://www.exploit-db.com/exploits/7953
CVE ID: CVE-2009-0463 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7954 - http://www.securityfocus.com/bid/33578 - http://secunia.com/advisories/33649
CVE ID: CVE-2009-0464 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7955 - http://secunia.com/advisories/33768 - http://www.securityfocus.com/bid/33578 - http://osvdb.org/51716
CVE ID: CVE-2009-0465 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\0' character, which bypasses the intended .box filename extension, as demonstrated by a C:\boot.ini\0 argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33535 - http://osvdb.org/51693 - http://www.dsecrg.com/pages/vul/show.php?id=62 - http://www.vupen.com/en
yfocus.com/bid/33535 - http://osvdb.org/51693 - http://www.dsecrg.com/pages/vul/show.php?id=62 - http://www.vupen.com/english/advisories/2009/0298 - http://secunia.com/advisories/33728 - https://www.exploit-db.com/exploits/7928
CVE ID: CVE-2009-0466 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response. Additional Analyst Notes: - CVE Program Container: References: - http://www.vivvo.net/changelog.php - http://secunia.com/advisories/33368 - http://www.securityfocus.com/bid/33582
CVE ID: CVE-2009-0467 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33523 - https://www.exploit-db.com/exploits/7919 - http://osvdb.org/51659 - http://secunia.com/advisories/33739
CVE ID: CVE-2009-0468 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33523 - http://osvdb.org/51660 - https://www.exp
- CVE Program Container: References: - http://www.securityfocus.com/bid/33523 - http://osvdb.org/51660 - https://www.exploit-db.com/exploits/7919 - http://secunia.com/advisories/33739
CVE ID: CVE-2009-0469 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T04:31:26.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in futomi's CGI Cafe Fulltext search CGI 1.1.2 allows remote attackers to gain administrative privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN80771386/index.html - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000008.html - http://www.securityfocus.com/bid/33409 - http://www.futomi.com/library/info/2009/20090123.html
CVE ID: CVE-2009-0470 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T04:31:26.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) level/15/exec/-/ or (2) exec/, a different vulnerability than CVE-2008-3821. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500674/100/0/threaded - http://www.securityfocus.com/bid/33625 - http://secunia.com/advisories/33844