Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1950 State: PUBLISHED Published: 2010-05-18T19:00:00Z Last Updated: 2024-09-17T00:11:13.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the date_info parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39536
CVE ID: CVE-2010-1951 State: PUBLISHED Published: 2010-05-18T19:00:00 Last Updated: 2024-08-07T02:17:13.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the DOCUMENT_ROOT parameter to (1) news.php, (2) submitComment.php, and (3) sqlConnect.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39473 - http://www.exploit-db.com/exploits/12249 - http://www.securityfocus.com/archive/1/510721/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/57873
CVE ID: CVE-2010-1952 State: PUBLISHED Published: 2010-05-18T19:00:00 Last Updated: 2024-08-07T02:17:13.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlabeeheardlite-lfi.txt - http://www.securityfocus.com/bid/39506 - http://www.exploit-db.com/exploits/12239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57845 - http://secu
06 - http://www.exploit-db.com/exploits/12239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57845 - http://secunia.com/advisories/39475
CVE ID: CVE-2010-1953 State: PUBLISHED Published: 2010-05-18T19:00:00 Last Updated: 2024-08-07T02:17:14.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39551 - http://www.exploit-db.com/exploits/12288 - http://secunia.com/advisories/39530 - http://www.vupen.com/english/advisories/2010/0927
CVE ID: CVE-2010-1954 State: PUBLISHED Published: 2010-05-18T19:00:00 Last Updated: 2024-08-07T02:17:13.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12287 - http://www.vupen.com/english/advisories/2010/0928 - http://secunia.com/advisories/39531 - http://www.securityfocus.com/bid/39552
CVE ID: CVE-2010-1955 State: PUBLISHED Published: 2010-05-18T19:00:00 Last Updated: 2024-08-07T02:17:13.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39508 - http://packetstormsecurity.org/1004-exploits/joomladeluxeblog-lfi.txt - http://www.exploit-db.com/exploits/12238 - http://secunia.com/advisories/39473 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5784
-db.com/exploits/12238 - http://secunia.com/advisories/39473 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57846 - http://osvdb.org/63801
CVE ID: CVE-2010-1956 State: PUBLISHED Published: 2010-05-18T19:00:00 Last Updated: 2024-08-07T02:17:13.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57895 - http://www.securityfocus.com/bid/39547 - http://osvdb.org/63917 - http://www.exploit-db.com/exploits/12285 - htt
57895 - http://www.securityfocus.com/bid/39547 - http://osvdb.org/63917 - http://www.exploit-db.com/exploits/12285 - http://secunia.com/advisories/39522 - http://www.vupen.com/english/advisories/2010/0930 - http://www.thefactory.ro/all-thefactory-products/gadget-factory-for-joomla-1.5.x/detailed-product-flyer.html - http://packetstormsecurity.org/1004-exploits/joomlagadgetfactory-lfi.txt
CVE ID: CVE-2010-1957 State: PUBLISHED Published: 2010-05-18T19:00:00 Last Updated: 2024-08-07T02:17:13.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39512 - http://osvdb.org/63803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57849 - http://www.exploit-db.com/exploits/12235 - http://secunia.com/advisories/39471 - http://packetstormsecurity.org/1004-exploits/jooml
exploit-db.com/exploits/12235 - http://secunia.com/advisories/39471 - http://packetstormsecurity.org/1004-exploits/joomlalovefactory-lfi.txt
CVE ID: CVE-2010-1958 State: PUBLISHED Published: 2010-06-21T19:00:00 Last Updated: 2024-08-07T02:17:13.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and 'Path to File' or 'URL to File' display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59500 - http://drupal.org/node/829808 - http://www.madirish.net/?article
://exchange.xforce.ibmcloud.com/vulnerabilities/59500 - http://drupal.org/node/829808 - http://www.madirish.net/?article=461 - http://secunia.com/advisories/40186 - http://www.securityfocus.com/bid/40923
CVE ID: CVE-2010-1959 State: PUBLISHED Published: 2010-05-27T19:00:00Z Last Updated: 2024-09-16T18:56:23.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01373684 - http://secunia.com/advisories/39943 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01373684 - http://securitytracker.com/id?1024025 - http://osvdb.org/64917 - http://www.securityfocus.com/bid/40371
CVE ID: CVE-2010-1960 State: PUBLISHED Published: 2010-06-10T00:00:00 Last Updated: 2024-08-07T02:17:13.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long, invalid option to jovgraph.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511734/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-105/ - http://marc.info/?l=bugtraq&m=127602909915281&w=2 - http://secunia.com/advisories/40101 - http://www.securityfocus.com/bi
ttp://marc.info/?l=bugtraq&m=127602909915281&w=2 - http://secunia.com/advisories/40101 - http://www.securityfocus.com/bid/40637 - http://marc.info/?l=bugtraq&m=127602909915281&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59249 - http://www.securitytracker.com/id?1024071
CVE ID: CVE-2010-1961 State: PUBLISHED Published: 2010-06-10T00:00:00 Last Updated: 2024-08-07T02:17:14.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40638 - http://marc.info/?l=bugtraq&m=127602909915281&w=2 - http://www.zerodayinitiative.com/advisories/ZDI-10-106/ - http://www.securityfocus.com/archive/1/511731/10
9915281&w=2 - http://www.zerodayinitiative.com/advisories/ZDI-10-106/ - http://www.securityfocus.com/archive/1/511731/100/0/threaded - http://secunia.com/advisories/40101 - http://marc.info/?l=bugtraq&m=127602909915281&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59250 - http://www.securitytracker.com/id?1024071
CVE ID: CVE-2010-1962 State: PUBLISHED Published: 2010-06-07T14:00:00 Last Updated: 2024-08-07T02:17:13.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.2.1.870.0 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=127557820805729&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59099 - http://www.securitytracker.com/id?1024054 - http://marc.info/?l=bugtraq&m=127602909915281&w=2 - http://secunia.com/advisories/40044 - http://marc.info/?l=bugtraq&m=127557820805729&w=2 - http://www.se
2909915281&w=2 - http://secunia.com/advisories/40044 - http://marc.info/?l=bugtraq&m=127557820805729&w=2 - http://www.securityfocus.com/bid/40539 - http://www.vupen.com/english/advisories/2010/1319 - http://osvdb.org/65142 - http://marc.info/?l=bugtraq&m=127602909915281&w=2
CVE ID: CVE-2010-1963 State: PUBLISHED Published: 2010-06-07T14:00:00Z Last Updated: 2024-09-16T23:31:23.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=127557884206863&w=2 - http://marc.info/?l=bugtraq&m=127557884206863&w=2
CVE ID: CVE-2010-1964 State: PUBLISHED Published: 2010-06-17T16:00:00 Last Updated: 2024-08-07T02:17:14.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified parameters to jovgraph.exe, aka ZDI-CAN-683. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-108 - http://seclists.org/bugtraq/2010/Jun/152 - http://www.securityfocus.com/archive/1/511854/100/0/threaded - http://osvdb.org/65552 - http://securityreason.com/securityalert/8155 - http://www.securityfocus.c
1854/100/0/threaded - http://osvdb.org/65552 - http://securityreason.com/securityalert/8155 - http://www.securityfocus.com/bid/40873 - http://seclists.org/bugtraq/2010/Jun/152
CVE ID: CVE-2010-1965 State: PUBLISHED Published: 2010-07-14T18:31:00Z Last Updated: 2024-09-17T01:31:20.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Orchestration for Windows before 6.1 allows remote attackers to read or modify data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1794 - http://secunia.com/advisories/40549 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02280158 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02280158 - http://securitytracker.com/id?1024183
CVE ID: CVE-2010-1966 State: PUBLISHED Published: 2010-07-14T18:31:00Z Last Updated: 2024-09-16T16:48:15.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Control power management for Windows before 6.1 allows local users to read or modify data, or cause a denial of service, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1795 - http://securitytracker.com/id?1024184 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282361 - http://secunia.com/advisories/40550 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282361
CVE ID: CVE-2010-1967 State: PUBLISHED Published: 2010-07-14T18:31:00Z Last Updated: 2024-09-17T02:27:46.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1792 - http://securitytracker.com/id?1024185 - http://secunia.com/advisories/40544 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377
CVE ID: CVE-2010-1968 State: PUBLISHED Published: 2010-07-14T18:31:00Z Last Updated: 2024-09-16T23:46:39.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1971. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1792 - http://securitytracker.com/id?1024185 - http://secunia.com/advisories/40544 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377 - http://itrc.hp.com/
secunia.com/advisories/40544 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377
CVE ID: CVE-2010-1969 State: PUBLISHED Published: 2010-07-22T01:00:00Z Last Updated: 2024-09-16T22:30:17.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024181 - http://secunia.com/advisories/40552 - http://www.vupen.com/english/advisories/2010/1797 - http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02283465&admit=109447626+1279054975923+28353475 - http://www11.itrc.hp.com/ser
m/service/cki/docDisplay.do?docId=emr_na-c02283465&admit=109447626+1279054975923+28353475 - http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02283465&admit=109447626+1279054975923+28353475
CVE ID: CVE-2010-1970 State: PUBLISHED Published: 2010-07-14T18:31:00Z Last Updated: 2024-09-16T20:43:21.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data, and consequently gain privileges, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1792 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388 - http://securitytracker.com/id?1024186 - http://secunia.com/advisories/40553 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388
CVE ID: CVE-2010-1971 State: PUBLISHED Published: 2010-07-14T18:31:00Z Last Updated: 2024-09-16T20:58:32.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1792 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388 - http://securitytracker.com/id?1024186 - http://secunia.com/advisories/40553 - http://itrc.hp.com/
cId=emr_na-c02282388 - http://securitytracker.com/id?1024186 - http://secunia.com/advisories/40553 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388
CVE ID: CVE-2010-1972 State: PUBLISHED Published: 2010-07-22T01:00:00Z Last Updated: 2024-09-17T03:22:56.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of HP Client Automation (HPCA) Enterprise Infrastructure (aka Radia) allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=127905601332098&w=2 - http://marc.info/?l=bugtraq&m=127905601332098&w=2 - http://secunia.com/advisories/40592 - http://securitytracker.com/id?1024191
CVE ID: CVE-2010-1973 State: PUBLISHED Published: 2010-07-22T01:00:00Z Last Updated: 2024-09-16T16:12:34.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on the Itanium platform, allows local users to gain privileges or obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=127905660900687&w=2 - http://securitytracker.com/id?1024190 - http://marc.info/?l=bugtraq&m=127905660900687&w=2
CVE ID: CVE-2010-1974 State: REJECTED Published: 2010-05-19T18:13:00 Last Updated: 2010-06-23T09:00:00 Description: No description available.
CVE ID: CVE-2010-1975 State: PUBLISHED Published: 2010-05-19T18:13:00 Last Updated: 2024-08-07T02:17:13.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/docs/current/static/release-8-1-21.html - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://www.debi
gresql.org/docs/current/static/release-8-1-21.html - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://www.debian.org/security/2010/dsa-2051 - http://www.postgresql.org/docs/current/static/release-7-4-29.html - http://www.postgresql.org/docs/current/static/release-8-0-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11004 - http://www.vupen.com/english/advisories/2010/1221 - http://www.postgresql.org/docs/current/static/release-8-3-11.html - http://www.vupen.com/english/advisories/2010/1207 - http://www.postgresql.org/docs/current/static/release-8-2-17.html - http://www.postgresql.org/docs/current/static/release-8-4-4.html - http://lis
/docs/current/static/release-8-2-17.html - http://www.postgresql.org/docs/current/static/release-8-4-4.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.securityfocus.com/bid/40304 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:103 - http://secunia.com/advisories/39939 - http://marc.info/?l=bugtraq&m=134124585221119&w=2
CVE ID: CVE-2010-1976 State: PUBLISHED Published: 2010-05-19T19:31:00 Last Updated: 2024-08-07T02:17:14.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb module 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the node title in a Breadcrumb display. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39138 - http://drupal.org/node/757974 - http://drupal.org/node/758456 - http://osvdb.org/63424 - http://drupal.org/node/757980 - https://exchange.xforce.ibmcloud.com/vulnerabil
g/node/758456 - http://osvdb.org/63424 - http://drupal.org/node/757980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57446
CVE ID: CVE-2010-1977 State: PUBLISHED Published: 2010-05-19T19:31:00 Last Updated: 2024-08-07T02:17:14.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39356 - http://www.securityfocus.com/bid/39243 - http://www.exploit-db.com/exploits/12083
CVE ID: CVE-2010-1978 State: PUBLISHED Published: 2010-05-19T19:31:00 Last Updated: 2024-08-07T02:17:13.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in default_theme.php in FreePHPBlogSoftware 1.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpincdir parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12063 - http://www.osvdb.org/63558 - http://secunia.com/advisories/39321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57560 - http://www
rg/63558 - http://secunia.com/advisories/39321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57560 - http://www.securityfocus.com/bid/39233
CVE ID: CVE-2010-1979 State: PUBLISHED Published: 2010-05-19T19:31:00 Last Updated: 2024-08-07T02:17:13.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39246 - http://secunia.com/advisories/39360 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57570 - http://www.exploit-db.com/exploits/12088
CVE ID: CVE-2010-1980 State: PUBLISHED Published: 2010-05-19T19:31:00 Last Updated: 2024-08-07T02:17:13.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39251 - http://packetstormsecurity.org/1004-exploits/joomlaflickr-lfi.txt - http://www.exploit-db.com/exploits/12085 - http://bitbucket.org/roberto.aloi/joomla-flickr/changeset/64ebf