Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2051 State: PUBLISHED Published: 2008-05-05T17:00:00 Last Updated: 2024-08-07T08:49:57.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1412 - http://www.securityfocus.com/archive/1/492535/100/0/threaded - http://secunia.com/advisories/30288 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html - http://secunia.com/advisories/32746 - http://secunia.com/advisories/30083 - http://
e-announce/2008-June/msg00779.html - http://secunia.com/advisories/32746 - http://secunia.com/advisories/30083 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://security.gentoo.org/glsa/glsa-200811-05.xml - http://www.redhat.com/support/errata/RHSA-2008-0546.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10256 - http://www.securityfocus.com/bid/29009 - http://secunia.com/advisories/30828 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:128 - http://www.vupen.com/english/advisories/2008/2268 - http://www.debian.org/sec
/security/advisories?name=MDVSA-2008:128 - http://www.vupen.com/english/advisories/2008/2268 - http://www.debian.org/security/2008/dsa-1572 - http://www.redhat.com/support/errata/RHSA-2008-0582.html - http://secunia.com/advisories/30345 - http://www.ubuntu.com/usn/usn-628-1 - http://www.redhat.com/support/errata/RHSA-2008-0545.html - http://secunia.com/advisories/31124 - http://secunia.com/advisories/30967 - http://secunia.com/advisories/31119 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 - http://www.openwall.com/lists/oss-security/2008/05/02/2 - http://www.securityfocus.com/archive/1/492671/100/0/threaded - http://secunia.com/advisories/30411 - http://secunia.com/advisories/30158
tyfocus.com/archive/1/492671/100/0/threaded - http://secunia.com/advisories/30411 - http://secunia.com/advisories/30158 - http://www.php.net/ChangeLog-5.php - http://secunia.com/advisories/31200 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.488951 - http://secunia.com/advisories/30757 - http://www.redhat.com/support/errata/RHSA-2008-0544.html - http://www.debian.org/security/2008/dsa-1578 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:125 - http://secunia.com/advisories/31326 - https://issues.rpath
://www.mandriva.com/security/advisories?name=MDVSA-2008:125 - http://secunia.com/advisories/31326 - https://issues.rpath.com/browse/RPL-2503 - http://www.redhat.com/support/errata/RHSA-2008-0505.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:126 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:127 - http://secunia.com/advisories/30048
CVE ID: CVE-2008-2052 State: PUBLISHED Published: 2008-05-02T17:00:00 Last Updated: 2024-08-07T08:49:57.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42157 - http://holisticinfosec.org/content/view/62/45/
CVE ID: CVE-2008-2053 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:49:57.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES11, and 7.x before 7.0(1) allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30289 - http://www.securityfocus.com/bid/29315 - http://www.cisco.com/en/US/products/products_security_advisory09186a008099beae.shtml - http://www.vupen.com/english/advisori
://www.cisco.com/en/US/products/products_security_advisory09186a008099beae.shtml - http://www.vupen.com/english/advisories/2008/1603/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42564 - http://securitytracker.com/id?1020080
CVE ID: CVE-2008-2054 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:49:57.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42702 - http://www.liquidmatrix.org/blog/2008/05/28/advisory-ciscoworks-arbitrary-code-execution-vulnerability/ - http://www.securitytracker.com/id?1020127 - http://www.vupen.com/english/advisories/2008/1687/references - http://secunia.com/a
www.securitytracker.com/id?1020127 - http://www.vupen.com/english/advisories/2008/1687/references - http://secunia.com/advisories/30422 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809a1f14.shtml
CVE ID: CVE-2008-2055 State: PUBLISHED Published: 2008-06-04T21:00:00 Last Updated: 2024-08-07T08:49:56.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10 allows remote attackers to cause a denial of service via a crafted TCP ACK packet to the device interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020176 - http://www.securitytracker.com/id?1020177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42835 - http://www.cisco.com/en/US/products/products_security_advisory09186a
xchange.xforce.ibmcloud.com/vulnerabilities/42835 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml - http://secunia.com/advisories/30552 - http://www.vupen.com/english/advisories/2008/1750/references
CVE ID: CVE-2008-2056 State: PUBLISHED Published: 2008-06-04T21:00:00 Last Updated: 2024-08-07T08:49:56.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1 allows remote attackers to cause a denial of service (device reload) via a crafted Transport Layer Security (TLS) packet to the device interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/42836 - http://www.securitytracker.com/id?1020178 - http://sec
ml - https://exchange.xforce.ibmcloud.com/vulnerabilities/42836 - http://www.securitytracker.com/id?1020178 - http://secunia.com/advisories/30552 - http://www.securitytracker.com/id?1020179 - http://www.vupen.com/english/advisories/2008/1750/references
CVE ID: CVE-2008-2057 State: PUBLISHED Published: 2008-06-04T21:00:00 Last Updated: 2024-08-07T08:49:56.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x before 8.1(1)2 allows remote attackers to cause a denial of service via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020180 - http://securitytracker.com/id?1020181 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml - http://secunia.com/advisories/30552
tp://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml - http://secunia.com/advisories/30552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42837 - http://www.vupen.com/english/advisories/2008/1750/references
CVE ID: CVE-2008-2058 State: PUBLISHED Published: 2008-06-04T21:00:00 Last Updated: 2024-08-07T08:49:57.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(3)2 and 8.0.x before 8.0(2)17 allows remote attackers to cause a denial of service (device reload) via a port scan against TCP port 443 on the device. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020183 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml - http://secunia.com/advisories/30552 - http://securitytracker.com/id?1020182 - http://www.vupen.com/
6a00809a8354.shtml - http://secunia.com/advisories/30552 - http://securitytracker.com/id?1020182 - http://www.vupen.com/english/advisories/2008/1750/references
CVE ID: CVE-2008-2059 State: PUBLISHED Published: 2008-06-04T21:00:00 Last Updated: 2024-08-07T08:49:56.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42841 - http://www.securitytracker.com/id?1020185 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml - http://secunia.com/advisories/30552 - http://www.vupen.com/english/advisories/2008/1750/refe
ory09186a00809a8354.shtml - http://secunia.com/advisories/30552 - http://www.vupen.com/english/advisories/2008/1750/references - http://www.securitytracker.com/id?1020184
CVE ID: CVE-2008-2060 State: PUBLISHED Published: 2008-06-18T19:29:00 Last Updated: 2024-08-07T08:49:57.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service (panic), and possibly bypass intended restrictions on network traffic, via a "specific series of jumbo Ethernet frames." Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a00809b3842.shtml - http://www.securitytracker.com/id?1
tp://www.cisco.com/en/US/products/products_security_advisory09186a00809b3842.shtml - http://www.securitytracker.com/id?1020326 - http://www.securityfocus.com/bid/29791 - http://www.vupen.com/english/advisories/2008/1872/references - http://secunia.com/advisories/30767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43166
CVE ID: CVE-2008-2061 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T08:49:56.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Computer Telephony Integration (CTI) Manager service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3c) and 6.x before 6.1(2) allows remote attackers to cause a denial of service (TSP crash) via malformed network traffic to TCP port 2748. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29933 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43349 - http://www.vupen.com/english/advisories/2008/1933/references - http://secunia.com/advisories/30848 - http:/
ties/43349 - http://www.vupen.com/english/advisories/2008/1933/references - http://secunia.com/advisories/30848 - http://www.securitytracker.com/id?1020360 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml
CVE ID: CVE-2008-2062 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T08:49:57.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2(3)SR4, and 4.3 before 4.3(2)SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service port, aka Bug ID CSCsq35151. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43355 - http://www.vupen.com/english/advisories/2008/1933/references - http://
hange.xforce.ibmcloud.com/vulnerabilities/43355 - http://www.vupen.com/english/advisories/2008/1933/references - http://secunia.com/advisories/30848 - http://www.securityfocus.com/bid/29935 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml - http://www.securitytracker.com/id?1020361
CVE ID: CVE-2008-2063 State: PUBLISHED Published: 2008-05-02T23:00:00 Last Updated: 2024-08-07T08:49:57.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29991 - http://www.securityfocus.com/bid/28979 - https://www.exploit-db.com/exploits/5520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42086
CVE ID: CVE-2008-2064 State: PUBLISHED Published: 2008-05-02T23:00:00 Last Updated: 2024-08-07T08:49:57.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw in the interface (API) to connect phpGedView with external programs like content management systems." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1580 - http://www.securityfocus.com/bid/28978 - http://sourceforge.net/project/shownotes.php?group_id=55456&release_id=595222 - http://secunia.com/advisories/30256 - http://secunia.com
ge.net/project/shownotes.php?group_id=55456&release_id=595222 - http://secunia.com/advisories/30256 - http://secunia.com/advisories/29989 - http://www.phpgedview.net/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/42085
CVE ID: CVE-2008-2065 State: PUBLISHED Published: 2008-05-02T23:00:00 Last Updated: 2024-08-07T08:49:56.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via the catagorie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28963 - http://secunia.com/advisories/29981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42047 - https://www.exploit-db.com/exploits/5508
CVE ID: CVE-2008-2066 State: PUBLISHED Published: 2008-05-02T23:00:00 Last Updated: 2024-08-07T08:49:57.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.minibb.com/download.php?file=minibb_update - http://www.securityfocus.com/bid/61116 - http://osvdb.org/95122 - http://secunia.com/advisories/30004 - http://www.securityfocus.com/archive/1/
s.com/bid/61116 - http://osvdb.org/95122 - http://secunia.com/advisories/30004 - http://www.securityfocus.com/archive/1/491375/100/0/threaded - http://seclists.org/fulldisclosure/2013/Jul/102 - https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/ - http://www.securityfocus.com/bid/28957 - http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42076 - http://securityreason.com/securityalert/3846
CVE ID: CVE-2008-2067 State: PUBLISHED Published: 2008-05-02T23:00:00 Last Updated: 2024-08-07T08:49:56.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.minibb.com/download.php?file=minibb_update - http://www.securityfocus.com/bid/61116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42270 - http://secunia.com/advisories/30004 - http://www.securityfo
https://exchange.xforce.ibmcloud.com/vulnerabilities/42270 - http://secunia.com/advisories/30004 - http://www.securityfocus.com/archive/1/491375/100/0/threaded - http://seclists.org/fulldisclosure/2013/Jul/102 - https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/ - http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html - http://securityreason.com/securityalert/3846 - http://osvdb.org/95121
CVE ID: CVE-2008-2068 State: PUBLISHED Published: 2008-05-02T23:00:00 Last Updated: 2024-08-07T08:49:57.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/development/2008/04/wordpress-251/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/42029 - http://secunia.com/advisories/29965
CVE ID: CVE-2008-2069 State: PUBLISHED Published: 2008-05-02T23:00:00 Last Updated: 2024-08-07T08:49:57.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491594/100/0/threaded - http://securityreason.com/securityalert/3847 - http://www.securityfocus.com/archive/1/491576/100/0/threaded - http://www.securityfocus.com/archive/1/491376/100/0/threaded - http://www.securityfocus.com/bid/28969 - http://www.securitytracker.com/id?1
focus.com/archive/1/491376/100/0/threaded - http://www.securityfocus.com/bid/28969 - http://www.securitytracker.com/id?1019942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42052 - http://www.vupen.com/english/advisories/2008/1393/references - https://www.exploit-db.com/exploits/5515
CVE ID: CVE-2008-2070 State: PUBLISHED Published: 2008-05-12T16:00:00 Last Updated: 2024-08-07T08:49:57.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered "<" and ">" characters in the (1) issue parameter to scripts2/knowlegebase, (2) user parameter to scripts2/changeip, (3) search parameter to scripts2/listaccts, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3B
Notes: - CVE Program Container: References: - http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42305 - http://www.securityfocus.com/archive/1/491864/100/0/threaded - http://www.vupen.com/english/advisories/2008/1522/references - http://securityreason.com/securityalert/3866 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062197.html - http://www.securityfocus.com/bid/29125 - http://secunia.com/advisories/30166
CVE ID: CVE-2008-2071 State: PUBLISHED Published: 2008-05-12T16:00:00 Last Updated: 2024-08-07T08:49:57.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allow remote attackers to perform unauthorized actions as cPanel administrators via requests to cpanel/whm/webmail and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2 - http://www.securityfocus.com/archive/1/491864/100/0/threaded - http://www.vup
ew=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2 - http://www.securityfocus.com/archive/1/491864/100/0/threaded - http://www.vupen.com/english/advisories/2008/1522/references - http://securityreason.com/securityalert/3866 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062197.html - http://www.securityfocus.com/bid/29125 - http://secunia.com/advisories/30166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42306
CVE ID: CVE-2008-2072 State: PUBLISHED Published: 2008-05-05T16:00:00 Last Updated: 2024-08-07T08:49:57.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3854 - http://www.securityfocus.com/archive/1/491519/100/0/threaded - http://secunia.com/advisories/30046 - https://www.exploit-db.com/exploits/5529 - http://www.securityfocus.com/bid/29006 - https://exchange.xfor
sories/30046 - https://www.exploit-db.com/exploits/5529 - http://www.securityfocus.com/bid/29006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42126
CVE ID: CVE-2008-2073 State: PUBLISHED Published: 2008-05-05T16:00:00 Last Updated: 2024-08-07T08:49:57.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the l parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3854 - http://www.securityfocus.com/archive/1/491519/100/0/threaded - http://secunia.com/advisories/30046 - https://www.exploit-db.com/exploits/5529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42127 - http://www
046 - https://www.exploit-db.com/exploits/5529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42127 - http://www.securityfocus.com/bid/29006
CVE ID: CVE-2008-2074 State: PUBLISHED Published: 2008-05-05T16:00:00 Last Updated: 2024-08-07T08:49:57.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/. Additional Analyst
.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42112 - https://www.exploit-db.com/exploits/5525 - http://secunia.com/advisories/30022