Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
table print view or (5) zoom search page; or (6) a crafted pma_fontsize cookie that is improperly handled during rendering of the home page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201505-03 - https://github.com/phpmyadmin/phpmyadmin/commit/d32da348c4de2379482a48661ce968a55eebe5c4 - http://www.debian.org/security/2015/dsa-3382 - http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html - http://www.phpmyadmin.net/home_page/security/PMASA-2014-13.php - http://www.securityfocus.com/bid/71243 - https://github.com/phpmyadmin/phpmyadmin/commit/2ffdbf2d7daa0b92541d8b754e2afac555d3ed21 - https://github.com/phpmyadmin/phpmyadmin/commit
/phpmyadmin/phpmyadmin/commit/2ffdbf2d7daa0b92541d8b754e2afac555d3ed21 - https://github.com/phpmyadmin/phpmyadmin/commit/2a3b7393d1d5a8ba0543699df94a08a0f5728fe0 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:228 - https://github.com/phpmyadmin/phpmyadmin/commit/1bc04ec95038f2356ad33752090001bf1c047208
CVE ID: CVE-2014-8959 State: PUBLISHED Published: 2014-11-30T11:00:00 Last Updated: 2024-08-06T13:33:12.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in libraries/gis/GIS_Factory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201505-03 - http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html - http://www.securityfocus.com/bid/71247 - https://github.com/ph
sts.opensuse.org/opensuse-updates/2014-12/msg00017.html - http://www.securityfocus.com/bid/71247 - https://github.com/phpmyadmin/phpmyadmin/commit/80cd40b6687a6717860d345d6eb55bef2908e961 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:228 - http://www.phpmyadmin.net/home_page/security/PMASA-2014-14.php
CVE ID: CVE-2014-8960 State: PUBLISHED Published: 2014-11-30T11:00:00 Last Updated: 2024-08-06T13:33:12.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201505-03 - http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html - https://github.com/phpmyadmin/phpmyadmin/commit/9364e2eee5681681caf7205c0933bc18af11e233 - h
tes/2014-12/msg00017.html - https://github.com/phpmyadmin/phpmyadmin/commit/9364e2eee5681681caf7205c0933bc18af11e233 - http://www.securityfocus.com/bid/71244 - http://www.phpmyadmin.net/home_page/security/PMASA-2014-15.php - http://www.mandriva.com/security/advisories?name=MDVSA-2014:228
CVE ID: CVE-2014-8961 State: PUBLISHED Published: 2014-11-30T11:00:00 Last Updated: 2024-08-06T13:33:12.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to obtain potentially sensitive information about a file's line count via a crafted parameter. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201505-03 - http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html - http://www.phpmyadmin.net/home_page/security/PMASA-2014-16.php - ht
pensuse.org/opensuse-updates/2014-12/msg00017.html - http://www.phpmyadmin.net/home_page/security/PMASA-2014-16.php - https://github.com/phpmyadmin/phpmyadmin/commit/b99b6b6672ff2419f05b05740c80c7a23c1da994 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:228 - http://www.securityfocus.com/bid/71245
CVE ID: CVE-2014-8962 State: PUBLISHED Published: 2014-11-26T15:00:00 Last Updated: 2024-08-06T13:33:12.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file. Additional Analyst Notes: - CVE Program Container: References: - https://git.xiph.org/?p=flac.git%3Ba=commit%3Bh=5b3033a2b355068c11fe637e14ac742d273f076e - http://rhn.redhat.com/errata/RHSA-2015-0767.html - http://packetstormsecurity.com/files/129261/libFLAC-1.3.0-Stack-Overflow-Heap-Overflow-Code-Execution.html - http://www.ubuntu.com/usn/USN-2426-1 - http://www.securityfocus.com/
-Stack-Overflow-Heap-Overflow-Code-Execution.html - http://www.ubuntu.com/usn/USN-2426-1 - http://www.securityfocus.com/bid/71280 - http://www.securityfocus.com/archive/1/534083/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2015:188 - http://www.debian.org/security/2014/dsa-3082 - http://advisories.mageia.org/MGASA-2014-0499.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:239 - http://lists.opensuse.org/opensuse-updates/2014-12/msg00034.html - http://www.ocert.org/advisories/ocert-2014-008.html
CVE ID: CVE-2014-8964 State: PUBLISHED Published: 2014-12-16T18:00:00 Last Updated: 2024-08-06T13:33:12.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147474.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http
se-updates/2015-05/msg00014.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.securityfocus.com/bid/71206 - http://www.exim.org/viewvc/pcre?view=revision&revision=1513 - http://advisories.mageia.org/MGASA-2014-0534.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147511.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145843.html - http://www.openwall.com/lists/oss-security/2014/11/21/6 - http://rhn.redhat.com/errata/RHSA-2015-0330.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147516.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:002
g/pipermail/package-announce/2015-January/147516.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:002 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:137 - https://bugzilla.redhat.com/show_bug.cgi?id=1166147 - http://bugs.exim.org/show_bug.cgi?id=1546 - https://security.gentoo.org/glsa/201607-02
CVE ID: CVE-2014-8966 State: PUBLISHED Published: 2014-12-11T00:00:00 Last Updated: 2024-08-06T13:33:12.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-080
CVE ID: CVE-2014-8967 State: PUBLISHED Published: 2014-12-15T17:27:00 Last Updated: 2024-08-06T13:33:12.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted HTML document in conjunction with a Cascading Style Sheets (CSS) token sequence specifying the run-in value for the display property, leading to improper CElement reference counting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71483 - http://zerodayinitiative.com/advisories/ZDI-14-403/
CVE ID: CVE-2014-8968 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8969 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8970 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8971 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8972 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8973 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8974 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8975 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8976 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8977 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8978 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8979 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8980 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8981 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8982 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8983 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8984 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-8985 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-06T13:33:12.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-2823, CVE-2014-4057, and CVE-2014-4145. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70937 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051
CVE ID: CVE-2014-8986 State: PUBLISHED Published: 2014-11-24T15:00:00 Last Updated: 2024-08-06T13:33:12.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the selection list in the filters in the Configuration Report page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.17 allows remote administrators to inject arbitrary web script or HTML via a crafted config option, a different vulnerability than CVE-2014-8987. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/15/2 - http://www.openwall.com/lists/oss-security/2014/11/19/20 - http://www.openwall.com/lists/oss-secu
ecurity/2014/11/15/2 - http://www.openwall.com/lists/oss-security/2014/11/19/20 - http://www.openwall.com/lists/oss-security/2014/11/15/3 - http://secunia.com/advisories/62101 - http://www.openwall.com/lists/oss-security/2014/11/15/1 - https://github.com/mantisbt/mantisbt/commit/cabacdc291c251bfde0dc2a2c945c02cef41bf40 - http://www.debian.org/security/2015/dsa-3120
CVE ID: CVE-2014-8987 State: PUBLISHED Published: 2015-08-24T15:00:00 Last Updated: 2024-08-06T13:33:13.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "set configuration" box in the Configuration Report page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.17 allows remote administrators to inject arbitrary web script or HTML via the config_option parameter, a different vulnerability than CVE-2014-8986. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/15/2 - https://github.com/mantisbt/mantisbt/commit/49c3d089 - http://www.mantisbt.org/bugs/view.php?id=178
urity/2014/11/15/2 - https://github.com/mantisbt/mantisbt/commit/49c3d089 - http://www.mantisbt.org/bugs/view.php?id=17870 - http://www.openwall.com/lists/oss-security/2014/11/15/3 - http://www.openwall.com/lists/oss-security/2014/11/19/21 - http://www.openwall.com/lists/oss-security/2014/11/14/9 - http://www.openwall.com/lists/oss-security/2014/11/15/4
CVE ID: CVE-2014-8988 State: PUBLISHED Published: 2014-11-24T15:00:00 Last Updated: 2024-08-06T13:33:12.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: MantisBT before 1.2.18 allows remote authenticated users to bypass the $g_download_attachments_threshold and $g_view_attachments_threshold restrictions and read attachments for private projects by leveraging access to a project that does not restrict access to attachments and a request to the download URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/15/6 - https://github.com/mantisbt/mantisbt/commit/5f0b150b - http://www.mantisbt.org/bugs/view.php?id=17742
ity/2014/11/15/6 - https://github.com/mantisbt/mantisbt/commit/5f0b150b - http://www.mantisbt.org/bugs/view.php?id=17742 - http://secunia.com/advisories/62101 - http://www.securityfocus.com/bid/71104 - http://seclists.org/oss-sec/2014/q4/693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98731 - http://www.debian.org/security/2015/dsa-3120
CVE ID: CVE-2014-8989 State: PUBLISHED Published: 2014-11-30T01:00:00 Last Updated: 2024-08-06T13:33:12.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a "negative groups" issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipe
l/user_namespace.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147864.html - http://www.ubuntu.com/usn/USN-2515-1 - http://www.securityfocus.com/bid/71154 - http://www.ubuntu.com/usn/USN-2518-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147973.html - http://thread.gmane.org/gmane.linux.man/7385/ - http://www.ubuntu.com/usn/USN-2517-1 - http://www.openwall.com/lists/oss-security/2014/11/20/4 - http://www.ubuntu.com/usn/USN-2516-1
CVE ID: CVE-2014-8990 State: PUBLISHED Published: 2014-12-05T16:00:00 Last Updated: 2024-08-06T13:33:12.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: default-rsyncssh.lua in Lsyncd 2.1.5 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62321 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145131.html - http://www.openwall.com/lists/oss-security/2014/11/19/1 - https://github.com/axkibe/lsyncd/issues/220 - http://www.securityfocus.com/bid/71179 - https://github.com/axkibe/lsyncd/commit/e6016b374837087
ibe/lsyncd/issues/220 - http://www.securityfocus.com/bid/71179 - https://github.com/axkibe/lsyncd/commit/e6016b3748370878778b8f0b568d5281cc248aa4 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145114.html - http://www.debian.org/security/2015/dsa-3130 - https://github.com/axkibe/lsyncd/commit/18f02ad013b41a72753912155ae2ba72f2a53e52 - http://www.openwall.com/lists/oss-security/2014/11/20/5 - https://security.gentoo.org/glsa/201702-05
CVE ID: CVE-2014-8991 State: PUBLISHED Published: 2014-11-24T15:00:00 Last Updated: 2024-08-06T13:33:12.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/11/19/17 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725847 - http://www.securityfocus.com/bid/71209 - http://www.openwall.com/lists/oss-security/2014/11/20/6 - https://
bug=725847 - http://www.securityfocus.com/bid/71209 - http://www.openwall.com/lists/oss-security/2014/11/20/6 - https://github.com/pypa/pip/pull/2122
CVE ID: CVE-2014-8992 State: PUBLISHED Published: 2014-12-22T19:00:00 Last Updated: 2024-08-06T13:33:12.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution 2.3.2-pl allows remote attackers to inject arbitrary web script or HTML via the callback parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/modxcms/revolution/issues/12161
CVE ID: CVE-2014-8993 State: PUBLISHED Published: 2015-01-07T18:00:00 Last Updated: 2024-08-06T13:33:12.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before 7.6.0-rev32, and 7.6.1 before 7.6.1-rev11 allows remote attackers to inject arbitrary web script or HTML via a crafted XHTML file with the application/xhtml+xml MIME type. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62031 - http://packetstormsecurity.com/files/129811/Open-Xchange-Server-6-OX-AppSuite-7.6.1-Cross-Site-Scripting.html - http://www.securitytracker
security.com/files/129811/Open-Xchange-Server-6-OX-AppSuite-7.6.1-Cross-Site-Scripting.html - http://www.securitytracker.com/id/1031488 - http://www.securityfocus.com/archive/1/534383/100/0/threaded
CVE ID: CVE-2014-8994 State: PUBLISHED Published: 2014-11-28T15:00:00 Last Updated: 2024-08-06T13:33:12.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_diskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to arbitrary files via a symlink attack on a temporary file with a predictable name (tmp/check_diskio_status-*-*). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98849 - http://www.securityfocus.com/bid/71208 - http://seclists.org/oss-sec/2014/q4/679 - http://seclists.org/oss-sec/2014/q4/701
CVE ID: CVE-2014-8995 State: PUBLISHED Published: 2014-11-20T11:00:00 Last Updated: 2024-08-06T13:33:12.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98775 - http://packetstormsecurity.com/files/129135/Maarch-LetterBox-2.8-Insecure-Cookie-Handling.html - http://www.osvdb.org/114772
CVE ID: CVE-2014-8996 State: PUBLISHED Published: 2014-11-20T11:00:00 Last Updated: 2024-08-06T13:33:12.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) author_name or (2) content parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.nibbleblog.com/post/nibbleblog-v4.0.2-coffee/ - http://packetstormsecurity.com/files/129133/Nibbleblog-4.0.1-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98738 - http://www.securityfocus.com/bid/71111 - http://secli
tml - https://exchange.xforce.ibmcloud.com/vulnerabilities/98738 - http://www.securityfocus.com/bid/71111 - http://seclists.org/fulldisclosure/2014/Nov/38
CVE ID: CVE-2014-8997 State: PUBLISHED Published: 2014-11-20T11:00:00 Last Updated: 2024-08-06T13:33:12.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35223 - http://packetstormsecurity.com/files/129108/Digi-Online-Examination-System-2.0-Shell-Upload.html - https://exchange.xforce.ibmcl
acketstormsecurity.com/files/129108/Digi-Online-Examination-System-2.0-Shell-Upload.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/98662
CVE ID: CVE-2014-8998 State: PUBLISHED Published: 2014-11-20T11:00:00 Last Updated: 2024-08-06T13:33:13.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128964/X7-Chat-2.0.5-lib-message.php-preg_replace-PHP-Code-Execution.html - http://www.exploit-db.com/exploits/35183 - http://www.securityfocus.com/bid/71014 - https://exchange.xforce.ibmcloud.com/vulnerabil
exploit-db.com/exploits/35183 - http://www.securityfocus.com/bid/71014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98513
CVE ID: CVE-2014-8999 State: PUBLISHED Published: 2014-11-20T11:00:00Z Last Updated: 2024-09-16T17:14:54.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows remote authenticated users to execute arbitrary SQL commands via the selgroups parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/39 - http://packetstormsecurity.com/files/129134/XOOPS-2.5.6-SQL-Injection.html - http://xoops.org/modules/news/article.php?storyid=6658 - http://www.securityfocus.com/bid/71117
CVE ID: CVE-2014-999999 State: REJECTED Published: 2015-01-13T11:00:00 Last Updated: 2016-04-26T12:57:01 Description: No description available.
CVE ID: CVE-2014-99999 State: REJECTED Published: 2015-01-13T11:00:00 Last Updated: 2016-04-26T12:57:01 Description: No description available.