Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://www.kb.cert.org/vuls/id/433821 - http://securitytracker.com/id?1023265 - http://www.securityfocus.com/bid/37200 - http://www.securityfocus.com/archive/1/508188/100/0/threaded
CVE ID: CVE-2009-4212 State: PUBLISHED Published: 2010-01-13T19:00:00 Last Updated: 2024-08-07T06:54:10.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://secunia.com/advisories/38140 - http://www
://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://secunia.com/advisories/38140 - http://www.vupen.com/english/advisories/2010/0096 - http://support.avaya.com/css/P8/documents/100074869 - http://secunia.com/advisories/38126 - http://www.debian.org/security/2010/dsa-1969 - http://www.vupen.com/english/advisories/2010/1481 - http://ubuntu.com/usn/usn-881-1 - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-004.txt - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033915.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:006 - http://www.securitytracker.com/id?1023440 - h
5.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:006 - http://www.securitytracker.com/id?1023440 - http://secunia.com/advisories/38080 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-275530-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021779.1-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8192 - http://secunia.com/advisories/38203 - https://bugzilla.redhat.com/show_bug.cgi?id=545015 - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033919.html - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220 - http://secunia.com/advisories/38108 - http://www.securityfo
.apple.com/kb/HT4188 - http://secunia.com/advisories/40220 - http://secunia.com/advisories/38108 - http://www.securityfocus.com/bid/37749 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11272 - https://rhn.redhat.com/errata/RHSA-2010-0029.html - https://rhn.redhat.com/errata/RHSA-2010-0095.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7357 - http://secunia.com/advisories/38696 - http://www.vupen.com/english/advisories/2010/0129 - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - http://secunia.com/advisories/38184
CVE ID: CVE-2009-4214 State: PUBLISHED Published: 2009-12-07T17:00:00 Last Updated: 2024-08-07T06:54:09.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the strip_tags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attackers to inject arbitrary web script or HTML via vectors involving non-printing ASCII characters, related to HTML::Tokenizer and actionpack/lib/action_controller/vendor/html-scanner/html/node.rb. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/rubyonrails-security/browse_thread/thread/4d4f71f2aef4c0ab?pli=1 - http://secunia.com/advisories/37
ups.google.com/group/rubyonrails-security/browse_thread/thread/4d4f71f2aef4c0ab?pli=1 - http://secunia.com/advisories/37446 - http://www.vupen.com/english/advisories/2009/3352 - http://www.debian.org/security/2011/dsa-2301 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://weblog.rubyonrails.org/2009/11/30/ruby-on-rails-2-3-5-released - http://www.securityfocus.com/bid/37142 - http://www.debian.org/security/2011/dsa-2260 - http://www.openwall.com/lists/oss-security/2009/11/27/2 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://support.apple.com/kb/HT4077 - http://www.securitytracker.com/id?1023245 - http://secunia.com/advi
msg00004.html - http://support.apple.com/kb/HT4077 - http://www.securitytracker.com/id?1023245 - http://secunia.com/advisories/38915 - http://www.openwall.com/lists/oss-security/2009/12/08/3 - http://github.com/rails/rails/commit/bfe032858077bb2946abe25e95e485ba6da86bd5
CVE ID: CVE-2009-4215 State: PUBLISHED Published: 2009-12-07T17:00:00 Last Updated: 2024-08-07T06:54:09.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023121 - http://secunia.com/advisories/37373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54268 - http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2 - http://
e.ibmcloud.com/vulnerabilities/54268 - http://www.pandasecurity.com/homeusers/support/card?id=80164&idIdioma=2 - http://www.vupen.com/english/advisories/2009/3126 - http://www.securityfocus.com/archive/1/507811/100/0/threaded
CVE ID: CVE-2009-4216 State: PUBLISHED Published: 2009-12-07T17:00:00 Last Updated: 2024-08-07T06:54:09.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the LANG parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54429 - http://packetstormsecurity.org/0911-exploits/klinza-lfi.txt
CVE ID: CVE-2009-4217 State: PUBLISHED Published: 2009-12-07T17:00:00Z Last Updated: 2024-09-16T18:28:41.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Itamar Elharar MusicGallery (com_musicgallery) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an itempage action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37146
CVE ID: CVE-2009-4218 State: PUBLISHED Published: 2009-12-07T17:00:00 Last Updated: 2024-08-07T06:54:10.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System eXperience (JBSX) allow remote attackers to execute arbitrary SQL commands via the (1) admin or (2) password field, a related issue to CVE-2007-6091. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54382 - http://www.securityfocus.com/bid/37045
CVE ID: CVE-2009-4219 State: PUBLISHED Published: 2009-12-07T17:00:00 Last Updated: 2024-08-07T06:54:09.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82346 - http://www.shinnai.net/exploits/ZzLsi6TIfSuVPh1kPHmP.txt - http://secunia.com/advisories/37509
CVE ID: CVE-2009-4220 State: PUBLISHED Published: 2009-12-07T17:00:00 Last Updated: 2024-08-07T06:54:09.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfig[smartyPath] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10220 - http://packetstormsecurity.org/0911-exploits/pointcomma-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54389
CVE ID: CVE-2009-4221 State: PUBLISHED Published: 2009-12-07T17:00:00 Last Updated: 2024-08-07T06:54:10.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54447 - http://www.securityfocus.com/bid/37144 - http://packetstormsecurity.org/0911-exploits/phpbazar211fix-sql.txt - http://www.exploit-db.com/exploits/10245
CVE ID: CVE-2009-4222 State: PUBLISHED Published: 2009-12-07T17:00:00Z Last Updated: 2024-09-16T17:47:44.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0911-exploits/phpbazar-access.txt - http://www.securityfocus.com/bid/37132
CVE ID: CVE-2009-4223 State: PUBLISHED Published: 2009-12-07T17:00:00 Last Updated: 2024-08-07T06:54:10.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54395
CVE ID: CVE-2009-4224 State: PUBLISHED Published: 2009-12-07T17:00:00 Last Updated: 2024-08-07T06:54:09.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter to (1) _plugin/subscriber/inc/post.php and (2) as/lib/news_modify.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54446 - http://www.osvdb.org/60581 - http://www.osvdb.org/60582 - http://www.exploit-db.com/exploits/10246 - http://packetstor
- http://www.osvdb.org/60581 - http://www.osvdb.org/60582 - http://www.exploit-db.com/exploits/10246 - http://packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt
CVE ID: CVE-2009-4225 State: PUBLISHED Published: 2009-12-08T18:00:00 Last Updated: 2024-08-07T06:54:10.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method. Additional Analyst Notes: - CVE Program Container: References: - http://www.metasploit.com/redmine/projects/framework/repository/revisions/7167/entry/modules/exploits/windows/fileformat/etrust_pestscan.rb - http://www.fortiguard.com/encyclopedia/vulnerability/ca.etrust.pestpatrol.ppctl.dll.activex.access.html - http://www.securi
p://www.fortiguard.com/encyclopedia/vulnerability/ca.etrust.pestpatrol.ppctl.dll.activex.access.html - http://www.securityfocus.com/bid/37133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54458
CVE ID: CVE-2009-4226 State: PUBLISHED Published: 2009-12-08T18:00:00 Last Updated: 2024-08-07T06:54:10.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the IP module in the kernel in Sun OpenSolaris snv_106 through snv_124 allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors related to the (1) tcp_do_getsockname or (2) tcp_do_getpeername function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54574 - http://www.vupen.com/english/advisories/2009/3413 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-268189-1 - http://op
w.vupen.com/english/advisories/2009/3413 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-268189-1 - http://opensolaris.org/jive/thread.jspa?messageID=415069&tstart=0
CVE ID: CVE-2009-4227 State: PUBLISHED Published: 2009-12-08T18:00:00 Last Updated: 2024-08-07T06:54:09.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject function in read1_3.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses the 1.3 file format. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37577 - http://www.openwall.com/lists/oss-s
Notes: - CVE Program Container: References: - http://secunia.com/advisories/37577 - http://www.openwall.com/lists/oss-security/2009/12/03/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274 - http://www.securityfocus.com/bid/37193 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54525 - http://www.vupen.com/english/advisories/2011/0108 - https://bugzilla.redhat.com/show_bug.cgi?id=543905 - http://secunia.com/advisories/37571
CVE ID: CVE-2009-4228 State: PUBLISHED Published: 2009-12-08T18:00:00 Last Updated: 2024-08-07T06:54:10.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfp_fig function in f_read.c. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559274 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:010 - http://www.vupen.com/english/advisories/2011/0108 - https://bugzill
ndriva.com/security/advisories?name=MDVSA-2011:010 - http://www.vupen.com/english/advisories/2011/0108 - https://bugzilla.redhat.com/show_bug.cgi?id=543905
CVE ID: CVE-2009-4229 State: PUBLISHED Published: 2009-12-08T19:00:00 Last Updated: 2024-08-07T06:54:10.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter in the PATH_INFO to the default URI or (2) the catid parameter to default.asp. NOTE: this might overlap CVE-2009-0429.3. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37047 - https://exchange.xforce.ibmcloud
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54486
CVE ID: CVE-2009-4230 State: PUBLISHED Published: 2009-12-08T19:00:00Z Last Updated: 2024-09-16T22:40:24.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow remote attackers to execute arbitrary code via vectors associated with crafted arguments to the (1) RGN::run, (2) JTLS::run, or (3) SHD::run function. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37565 - http://iipimage.sourceforge.net/blog/ - http://freshmeat.net/projects/iipimage/release
://secunia.com/advisories/37565 - http://iipimage.sourceforge.net/blog/ - http://freshmeat.net/projects/iipimage/releases/309013
CVE ID: CVE-2009-4231 State: PUBLISHED Published: 2009-12-08T19:00:00Z Last Updated: 2024-09-16T16:28:03.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to include and execute arbitrary local files via .. (dot dot) in the plugin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0911-exploits/sweetrice-rfilfi.txt
CVE ID: CVE-2009-4232 State: PUBLISHED Published: 2009-12-08T19:00:00Z Last Updated: 2024-09-16T23:56:46.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kide Shoutbox (com_kide) component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37508
CVE ID: CVE-2009-4233 State: PUBLISHED Published: 2009-12-08T19:00:00Z Last Updated: 2024-09-16T22:25:47.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/mod_yj_whois.php in the YJ Whois component 1.0x and 1.5.x for Joomla! allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37525 - http://www.youjoomla.com/joomla_support/yj-whois-module/4950-xss-security-patch-yj-whois.html - http://extensions.joomla.org/extensio
ujoomla.com/joomla_support/yj-whois-module/4950-xss-security-patch-yj-whois.html - http://extensions.joomla.org/extensions/external-contents/domain-search/5774
CVE ID: CVE-2009-4234 State: PUBLISHED Published: 2009-12-08T19:00:00Z Last Updated: 2024-09-16T22:15:09.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in loginpages/error_user.shtml on the Micronet Network Access Controller SP1910 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37514 - http://packetstormsecurity.org/0911-exploits/micronet-xss.txt
CVE ID: CVE-2009-4235 State: PUBLISHED Published: 2009-12-08T19:00:00 Last Updated: 2024-08-07T06:54:10.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=542926 - http://securitytracker.com/id?1023284 - https://bugzilla.redhat.com/show_bug.cgi?id=515062 - http://www.debian.org/security/2009/dsa-1960 -
er.com/id?1023284 - https://bugzilla.redhat.com/show_bug.cgi?id=515062 - http://www.debian.org/security/2009/dsa-1960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54676 - http://www.redhat.com/support/errata/RHSA-2009-1642.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:343 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:342
CVE ID: CVE-2009-4236 State: PUBLISHED Published: 2009-12-08T23:00:00 Last Updated: 2024-08-07T06:54:10.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process function in data/class/pages/admin/customer/LC_Page_Admin_Customer_SearchCustomer.php in EC-CUBE Ver2 2.4.0 RC1 through 2.4.1, and Community Edition r18068 through r18428, allows remote attackers to obtain sensitive information (customer data) via unknown vectors related to sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3421 - http://secunia.com/advisories/37603 - http://jvn.jp/en/jp/JVN79762947/index.html - http://osvdb.org/60685 - https://ex
- http://secunia.com/advisories/37603 - http://jvn.jp/en/jp/JVN79762947/index.html - http://osvdb.org/60685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54573 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000078.html - http://www.ipa.go.jp/security/vuln/documents/2009/200912_ec-cube.html - http://www.ec-cube.net/info/091127/
CVE ID: CVE-2009-4237 State: PUBLISHED Published: 2009-12-10T23:00:00 Last Updated: 2024-08-07T06:54:10.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via (2) the key parameter to lib/general/staticPage.php, (3) the tableName parameter to lib/attachments/attachmentupload.php, or the (4) startDate, (5) endDate, or (6) logLevel parameter to lib/events/eventviewer.php; (7) the search_notes_string parameter to lib/results/result
te, or (6) logLevel parameter to lib/events/eventviewer.php; (7) the search_notes_string parameter to lib/results/resultsMoreBuilds_buildReport.php; or the (8) expected_results, (9) name, (10) steps, or (11) summary parameter in a find action to lib/testcases/searchData.php, related to lib/functions/database.class.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/60915 - http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities - http://osvdb.org/60918 - http://osvdb.org/60917 - http://www.securityfocus.com/bid/37258 - http://www.teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2 - http://archives.neohapsis.com/archives
8 - http://www.teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2 - http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0221.html - http://osvdb.org/60914 - http://osvdb.org/60916
CVE ID: CVE-2009-4238 State: PUBLISHED Published: 2009-12-10T23:00:00 Last Updated: 2024-08-07T06:54:10.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the Test Case ID field to lib/general/navBar.php or (2) the logLevel parameter to lib/events/eventviewer.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/60919 - http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities - http://osvdb.org/60920 - http://www.securityfocus.com/bid/37258 - http://www.teamst.org/index.php?option=com_co
lities - http://osvdb.org/60920 - http://www.securityfocus.com/bid/37258 - http://www.teamst.org/index.php?option=com_content&task=view&id=84&Itemid=2 - http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0221.html