Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4596 State: PUBLISHED Published: 2011-04-01T21:00:00Z Last Updated: 2024-09-17T00:21:51.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request. Additional Analyst Notes: - CVE Program Container: References: - http://docs.real.com/docs/security/SecurityUpdate033111HS.pdf - http://www.securityfocus.com/bid/47109 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=899
CVE ID: CVE-2010-4597 State: PUBLISHED Published: 2010-12-23T17:00:00 Last Updated: 2024-08-07T03:51:17.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface (HMI) before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-01.pdf - http://secunia.com/advisories/42650 - http://www.kb.cert.org/vuls/id/603928 - http://www.securityfocus.com/bid/45487 - http://www.integraxo
advisories/42650 - http://www.kb.cert.org/vuls/id/603928 - http://www.securityfocus.com/bid/45487 - http://www.integraxor.com/blog/integraxor-3-5-scada-security-issue-20101006-0109-vulnerability-note - http://www.exploit-db.com/exploits/15767 - http://www.vupen.com/english/advisories/2010/3275
CVE ID: CVE-2010-4598 State: PUBLISHED Published: 2010-12-23T17:00:00 Last Updated: 2024-08-07T03:51:17.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45535 - http://www.integraxor.com/blog/integraxor-3-6-scada-security-issue-20101222-0323-vulnerability-note - http://www.exploit-db.com/exploits/15802 - http://www.vupen.com/english/advisories/2010/3304 - http://secunia.com/advisories/42730 -
ploit-db.com/exploits/15802 - http://www.vupen.com/english/advisories/2010/3304 - http://secunia.com/advisories/42730 - http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-10-355-01.pdf - http://www.kb.cert.org/vuls/id/979776 - http://aluigi.org/adv/integraxor_1-adv.txt
CVE ID: CVE-2010-4599 State: PUBLISHED Published: 2010-12-23T17:00:00 Last Updated: 2024-08-07T03:51:17.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45549 - http://secunia.com/advisories/42734
CVE ID: CVE-2010-4600 State: PUBLISHED Published: 2010-12-29T17:27:00Z Last Updated: 2024-09-16T17:07:53.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attackers to read cookies by navigating to a Dojo file, related to an "open direct" issue. Additional Analyst Notes: - CVE Program Container: References: - ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15146 - http://secunia.com/advisories/42624
CVE ID: CVE-2010-4601 State: PUBLISHED Published: 2010-12-29T17:27:00Z Last Updated: 2024-09-17T02:20:51.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 allow attackers to have an unknown impact via vectors related to third-party .ocx files. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM01811 - http://secunia.com/advisories/42624
CVE ID: CVE-2010-4602 State: PUBLISHED Published: 2010-12-29T17:27:00 Last Updated: 2024-08-07T03:51:17.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass "restricted user" limitations, and read arbitrary records, via a modified record number in the URL for a RECORD action, as demonstrated by a modified bookmark. Additional Analyst Notes: - CVE Program Container: References: - ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme - http://www.securityfocus.com/bid/45646 - https://exchange.xforce.
st/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme - http://www.securityfocus.com/bid/45646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64440 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM20172
CVE ID: CVE-2010-4603 State: PUBLISHED Published: 2010-12-29T17:27:00 Last Updated: 2024-08-07T03:51:17.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-reference fields, which allows remote authenticated users to interfere with intended record relationships, and possibly cause a denial of service (loop) or have unspecified other impact, by (1) adding or (2) removing a back reference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64439 - http://www-01.ibm.com/support/docvi
ontainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64439 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM22186 - http://www-01.ibm.com/support/docview.wss?uid=swg21125139 - ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme - http://www.securityfocus.com/bid/45648
CVE ID: CVE-2010-4604 State: PUBLISHED Published: 2010-12-29T17:27:00 Last Updated: 2024-08-07T03:51:17.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024901 - http://w
pipe. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024901 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65491 - http://www.vupen.com/english/advisories/2010/3251 - http://www.exploit-db.com/exploits/15745 - http://secunia.com/advisories/42639 - http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt - http://www.securityfocus.com/archive/1/515263/100/0/threaded - http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c - http://www.ibm.com/support/docview.wss?uid=swg21454745
CVE ID: CVE-2010-4605 State: PUBLISHED Published: 2010-12-29T17:27:00Z Last Updated: 2024-09-16T16:43:06.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024901 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686 - http://www.vupen.com/english/advisories/2010/3251 - http://secunia.com/advisorie
m/support/docview.wss?uid=swg1IC66686 - http://www.vupen.com/english/advisories/2010/3251 - http://secunia.com/advisories/42639 - http://www.ibm.com/support/docview.wss?uid=swg21454745
CVE ID: CVE-2010-4606 State: PUBLISHED Published: 2010-12-29T17:27:00Z Last Updated: 2024-09-16T18:29:19.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary commands via unknown vectors, related to a "script execution vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024901 - http://www.vupen.com/english/advisories/2010/3251 - h
m Container: References: - http://securitytracker.com/id?1024901 - http://www.vupen.com/english/advisories/2010/3251 - http://secunia.com/advisories/42639 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69150 - http://www.ibm.com/support/docview.wss?uid=swg21454745
CVE ID: CVE-2010-4607 State: PUBLISHED Published: 2010-12-29T19:00:00Z Last Updated: 2024-09-16T17:24:07.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash_additem.php and the (2) status_data[] parameter to system/admin/dash_status.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.habariproject.org/en/Release_0.6.6 - http://www.htbridge.ch/advisory/xss_vulnerab
m Container: References: - http://wiki.habariproject.org/en/Release_0.6.6 - http://www.htbridge.ch/advisory/xss_vulnerability_in_habari_1.html - http://www.exploit-db.com/exploits/15799 - http://www.htbridge.ch/advisory/xss_vulnerability_in_habari.html - http://secunia.com/advisories/42688
CVE ID: CVE-2010-4608 State: PUBLISHED Published: 2010-12-29T19:00:00Z Last Updated: 2024-09-16T22:35:25.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in system/admin/, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.habariproject.org/en/Release_0.6.6 - http://www.exploit-db.com/exploits/15799 - http://www.htbridge.ch/advisory/path_disclosure_in_habari.html
CVE ID: CVE-2010-4609 State: PUBLISHED Published: 2010-12-29T19:00:00Z Last Updated: 2024-09-17T01:11:02.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/sql_injection_in_html_edit_cms.html - http://www.exploit-db.com/exploits/15800 - http://secunia.com/advisories/42664
CVE ID: CVE-2010-4610 State: PUBLISHED Published: 2010-12-29T19:00:00Z Last Updated: 2024-09-17T00:51:02.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML via the error parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15800 - http://www.htbridge.ch/advisory/xss_in_html_edit_cms.html - http://secunia.com/advisories/42664
CVE ID: CVE-2010-4611 State: PUBLISHED Published: 2010-12-29T19:00:00 Last Updated: 2024-08-07T03:51:17.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (2) menu.php in includes/core_files and (3) extensions/login/frontend/pages/antihacker.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/path_disclosure_in_html_edit_cms.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64437 - http://www.exploit-db.com/exploits/15800
CVE ID: CVE-2010-4612 State: PUBLISHED Published: 2010-12-29T19:00:00 Last Updated: 2024-08-07T03:51:17.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) usr_email parameters to user/1/hregister.html, (3) usr_email parameter to user/1/hlogin.html, (4) useremail parameter to user/1/forgotpass.html, and the (5) q parameter to search/1.html. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbr
obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_2.html - http://www.securityfocus.com/bid/45527 - http://secunia.com/advisories/42567 - http://www.exploit-db.com/exploits/15797 - http://www.securityfocus.com/archive/1/515382/100/0/threaded - http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_1.html - http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_3.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64438 - http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms.html
CVE ID: CVE-2010-4613 State: PUBLISHED Published: 2010-12-29T19:00:00Z Last Updated: 2024-09-16T16:43:40.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the site parameter to (1) index.php and (2) admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45527 - http://www.exploit-db.com/exploits/15797 - http://www.htbridge.ch/advisory/lfi_in_hycus_cms.html
CVE ID: CVE-2010-4614 State: PUBLISHED Published: 2010-12-29T19:00:00Z Last Updated: 2024-09-16T23:25:49.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-0723. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45503 - http://www.exploit-db.com/exploits/15769 - http://secunia.com/advisories/38666
CVE ID: CVE-2010-4615 State: PUBLISHED Published: 2010-12-29T19:00:00 Last Updated: 2024-08-07T03:51:17.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac parameter to carsdetail.asp and the (2) marka parameter to twohandscars.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64210 - http://www.exploit-db.com/exploits/15777 - http://www.securityfocus.com/bid/45513 - http://secunia.com/advisories/42706
CVE ID: CVE-2010-4616 State: PUBLISHED Published: 2010-12-29T19:00:00 Last Updated: 2024-08-07T03:51:17.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/xss_vulnerability_in_impresscms.html - http://community.impresscms.org/modules/smartsection/item.php?itemid=525 - http://secunia.com/advisories/42695 - http://www.securityfocus.co
resscms.org/modules/smartsection/item.php?itemid=525 - http://secunia.com/advisories/42695 - http://www.securityfocus.com/archive/1/515397/100/0/threaded
CVE ID: CVE-2010-4617 State: PUBLISHED Published: 2010-12-29T19:00:00 Last Updated: 2024-08-07T03:51:17.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/96812/joomlajotloader-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/64223 - http://www.exploit-db.com/exploits/15791
CVE ID: CVE-2010-4618 State: PUBLISHED Published: 2010-12-29T19:00:00Z Last Updated: 2024-09-17T00:06:16.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Algis Info aiContactSafe component before 2.0.14 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42723 - http://www.algisinfo.com/forum/announcements-english/aicontactsafe-2-0-14.html - http://www.securityfocus.com/bid/45507 - http://www.algisinfo.com/joomla/aicontactsafe-change-log.html
CVE ID: CVE-2010-4619 State: PUBLISHED Published: 2010-12-29T19:00:00 Last Updated: 2024-08-07T03:51:17.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45501 - http://secunia.com/advisories/42710 - http://www.exploit-db.com/exploits/15775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64208
CVE ID: CVE-2010-4622 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:51:17.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3329 - http://www.securityfocus.com/bid/45582 - http://www-01.ibm.com/support/docview.wss?uid=swg24028829 - http://securitytracker.com/id?1024927 - http://www.osvdb.org/70158 - http://secunia.com/a
/docview.wss?uid=swg24028829 - http://securitytracker.com/id?1024927 - http://www.osvdb.org/70158 - http://secunia.com/advisories/42727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64306
CVE ID: CVE-2010-4623 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:51:17.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service (worker thread consumption) via shift-reload actions. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24028829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64471 - http://www.securityfocus.com/bid/45665
CVE ID: CVE-2010-4624 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated users to bypass intended restrictions on the number of [img] MyCodes by editing a post after it has been created. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/ - http://dev.mybboard.net/issues/728 - http://openwall.com/lists/oss-security/2010/10/08/7 - http://openwall.com/lists/oss-security/2010/10/11/8 - http://openwall.com/lists/oss-security/2010/12/06/2 - h
/10/08/7 - http://openwall.com/lists/oss-security/2010/10/11/8 - http://openwall.com/lists/oss-security/2010/12/06/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64518
CVE ID: CVE-2010-4625 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/ - http://dev.mybboard.net/issues/809 - http://openwall.com/lists/oss-security/2010/10/08/7 - http://openwall.com/lists/oss-security/20
ybboard.net/issues/809 - http://openwall.com/lists/oss-security/2010/10/08/7 - http://openwall.com/lists/oss-security/2010/10/11/8 - http://openwall.com/lists/oss-security/2010/12/06/2 - http://community.mybb.com/thread-66255.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64517
CVE ID: CVE-2010-4626 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The my_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not properly use the PHP mt_rand function, which makes it easier for remote attackers to obtain access to an arbitrary account by requesting a reset of the account's password, and then conducting a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://dev.mybboard.net/issues/843 - http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/ - http://openwall.com/lists/oss-security/20
//blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/ - http://openwall.com/lists/oss-security/2010/10/08/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64516 - http://dev.mybboard.net/projects/mybb/repository/revisions/4872 - http://openwall.com/lists/oss-security/2010/10/11/8 - http://openwall.com/lists/oss-security/2010/12/06/2
CVE ID: CVE-2010-4627 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/ - http://openwall.com/lists/oss-security/2010/10/08/7 - http://openwall.com/lists/oss-security/2010/10/11/8 - http://dev.mybboard.net/issues/852 - http://openwall.com/lists/oss-secu
//openwall.com/lists/oss-security/2010/10/11/8 - http://dev.mybboard.net/issues/852 - http://openwall.com/lists/oss-security/2010/12/06/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64515