Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4932 State: PUBLISHED Published: 2010-07-09T17:00:00 Last Updated: 2024-08-07T07:24:53.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in 1by1 1.67 (aka 1.6.7.0) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49964 - http://www.securityfocus.com/bid/34618 - http://secunia.com/advisories/34815 - http://www.exploit-db.com/exploits/8484
CVE ID: CVE-2009-4933 State: PUBLISHED Published: 2010-07-09T17:00:00 Last Updated: 2024-08-07T07:24:53.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in EZ Webitor allow remote attackers to execute arbitrary SQL commands via the (1) txtUserId (Username) and (2) txtPassword (Password) parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34819 - http://www.exploit-db.com/exploits/8487 - http://www.securityfocus.com/bid/34604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49966
CVE ID: CVE-2009-4934 State: PUBLISHED Published: 2010-07-09T17:00:00Z Last Updated: 2024-09-16T16:54:07.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34625 - http://packetstorm.linuxsecurity.com/0904-exploits/opp20-xss.txt - http://secunia.com/advisories/34825
CVE ID: CVE-2009-4935 State: PUBLISHED Published: 2010-07-09T17:00:00 Last Updated: 2024-08-07T07:24:52.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL commands via the display parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34592 - http://www.exploit-db.com/exploits/8475
CVE ID: CVE-2009-4936 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:52.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to the default URI in an rss .xml action, or the id parameter to (2) pag1.php, (3) pag1-guest.php, (4) rss-comment_post.php (aka rss-coment_post.php), or (5) rss-pic-comment.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54785 - http://www.exploit-db.com/exploits/8819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50837 - http://os
54785 - http://www.exploit-db.com/exploits/8819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50837 - http://osvdb.org/54784 - http://osvdb.org/54788 - http://osvdb.org/54787 - http://www.securityfocus.com/archive/1/503863/100/0/threaded - http://osvdb.org/54786 - http://secunia.com/advisories/35272
CVE ID: CVE-2009-4937 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:53.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8819 - http://osvdb.org/54783 - http://secunia.com/advisories/35272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50836 - http://www.securityfocus.com/archive/1/503863/100/0/threaded
CVE ID: CVE-2009-4938 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:53.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JVideo! (com_jvideo) component 0.3.11c Beta and 0.3.x for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a user action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8821 - http://www.securityfocus.com/bid/35146
CVE ID: CVE-2009-4939 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:53.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the (1) uid parameter, (2) uid parameter in a login_lookup action, (3) uid parameter in an adminlogin action, (4) campaignid parameter in a createcampaign action, (5) type parameter in a view_account_stats action, (6) period parameter in a view_account_stats action, (7) uid parameter in a view_adrates action, (8) accname parameter in an account_confirmation action, (9) loginpass pa
n, (7) uid parameter in a view_adrates action, (8) accname parameter in an account_confirmation action, (9) loginpass parameter in an account_confirmation action, (10) e9 parameter in a setup_account action, (11) from parameter in an email_advertisers action, (12) message parameter in an email_advertisers action, (13) idno parameter in an edit_ad_package action, (14) Advertiser Name field, (15) First Name field, (16) Last Name field, (17) Address field, (18) Phone Number field, (19) Password Hint field, or (20) URL field; and (21) allow remote authenticated users to inject arbitrary web script or HTML via an unspecified form associated with a view_adrates action. Additional Analyst Notes: -
arbitrary web script or HTML via an unspecified form associated with a view_adrates action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503855/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50824 - http://forum.intern0t.net/exploits-vulnerabilities-pocs/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-injection-vulnerabilities.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50823 - http://osvdb.org/54790 - http://www.securityfocus.com/archive/1/503911/100/0/threaded - http://www.exploit-db.com/exploits/8818 - http://secunia.com/advisories/35262
CVE ID: CVE-2009-4940 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:53.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8829
CVE ID: CVE-2009-4941 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:53.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sign_in.php in ATRC ACollab 1.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50833 - http://www.osvdb.org/54798 - http://secunia.com/advisories/35173 - http://holisticinfosec.org/content/view/115/45/
CVE ID: CVE-2009-4942 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:53.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of arbitrary users for requests that add personal agenda items. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50835 - http://secunia.com/advisories/35173 - http://holisticinfosec.org/content/view/115/45/
CVE ID: CVE-2009-4943 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:54.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with an invalid uid parameter, which reveals the installation path in an error message; or (2) an adminlogin action with a crafted uid parameter, which reveals the version number. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503855/100/0/threaded - http://forum.intern0t.net/exploits-vulnerabilities-pocs/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-i
readed - http://forum.intern0t.net/exploits-vulnerabilities-pocs/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-injection-vulnerabilities.html - http://www.securityfocus.com/archive/1/503911/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50822
CVE ID: CVE-2009-4944 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:53.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) address parameter to profile.php or the (2) description parameter to events/add_event.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50834 - http://secunia.com/advisories/35173 - http://www.osvdb
s: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50834 - http://secunia.com/advisories/35173 - http://www.osvdb.org/54799 - http://www.osvdb.org/54800
CVE ID: CVE-2009-4945 State: PUBLISHED Published: 2010-07-22T10:00:00 Last Updated: 2024-08-07T07:24:53.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503855/100/0/threaded - http://www.securityfocus.com/archive/1/503911/100/0/threaded - http://forum.intern0t.net/intern0t-advisories/1049-intern0t-adpeeps-8-5d1-cross-site-scripting-html-injection-vulnerabilities.html
CVE ID: CVE-2009-4946 State: PUBLISHED Published: 2010-07-22T18:00:00 Last Updated: 2024-08-07T07:24:53.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Messaging (com_messaging) component before 1.5.1 for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter in a messages action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49650 - http://osvdb.org/53195
VE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49650 - http://osvdb.org/53195 - http://www.securityfocus.com/bid/34365 - http://secunia.com/advisories/34562
CVE ID: CVE-2009-4947 State: PUBLISHED Published: 2010-07-22T18:00:00 Last Updated: 2024-08-07T07:24:53.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in frmLoginPwdReminderPopup.aspx in Q2 Solutions ConnX 4.0.20080606 allows remote attackers to execute arbitrary SQL commands via the txtEmail parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.aushack.com/200904-q2solutions.txt - http://www.securityfocus.com/bid/34350 - http://secunia.com/advisories/34541 - http://www.securityfocus.com/archive/1/502360/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/49653
CVE ID: CVE-2009-4948 State: PUBLISHED Published: 2010-07-22T18:00:00Z Last Updated: 2024-09-16T20:03:50.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34573 - http://typo3.org/extensions/repository/view/locator/1.2.8/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
CVE ID: CVE-2009-4949 State: PUBLISHED Published: 2010-07-22T18:00:00Z Last Updated: 2024-09-17T00:00:31.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34573 - http://typo3.org/extensions/repository/view/locator/1.2.8/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
CVE ID: CVE-2009-4950 State: PUBLISHED Published: 2010-07-22T18:00:00Z Last Updated: 2024-09-16T19:14:24.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the A21glossary Advanced Output (a21glossary_advanced_output) extension before 0.1.12 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/a21glossary_advanced_output/0.1.12/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
CVE ID: CVE-2009-4951 State: PUBLISHED Published: 2010-07-22T18:00:00Z Last Updated: 2024-09-17T01:06:44.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ClickStream Analyzer [output] (alternet_csa_out) extension 0.3.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
CVE ID: CVE-2009-4952 State: PUBLISHED Published: 2010-07-22T18:00:00Z Last Updated: 2024-09-16T18:44:15.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Directory Listing (dir_listing) extension 1.1.0 and earlier for TYPO3 allows remote attackers to have an unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
CVE ID: CVE-2009-4953 State: PUBLISHED Published: 2010-07-22T18:00:00Z Last Updated: 2024-09-16T20:22:04.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
CVE ID: CVE-2009-4954 State: PUBLISHED Published: 2010-07-22T18:00:00Z Last Updated: 2024-09-16T19:57:39.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Versatile Calendar Extension [VCE] (sk_calendar) extension before 0.3.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/ - http://typo3.org/extensions/repository/view/sk_calendar/0.3.4/
CVE ID: CVE-2009-4955 State: PUBLISHED Published: 2010-07-22T18:00:00Z Last Updated: 2024-09-16T17:54:20.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ultraCards (th_ultracards) extension before 0.5.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/th_ultracards/0.5.1/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
CVE ID: CVE-2009-4956 State: PUBLISHED Published: 2010-07-22T18:00:00Z Last Updated: 2024-09-17T03:37:52.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Visitor Tracking (ws_stats) extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/ws_stats/0.1.2/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
CVE ID: CVE-2009-4957 State: PUBLISHED Published: 2010-07-22T18:00:00 Last Updated: 2024-08-07T07:24:53.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly have unspecified other impact via directory traversal sequences in the Panel parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49646 - http://www.exploit-db.com/exploits/8346
CVE ID: CVE-2009-4958 State: PUBLISHED Published: 2010-07-27T18:39:00 Last Updated: 2024-08-07T07:24:53.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in video.php in EMO Breeder Manager (aka EMO Breader Manager) allows remote attackers to execute arbitrary SQL commands via the idd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9518 - http://secunia.com/advisories/36464
CVE ID: CVE-2009-4959 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-17T03:38:22.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the T3M E-Mail Marketing Tool (t3m) extension 0.2.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2410 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-012 - http://www.securityfocus.com/bid/36140
CVE ID: CVE-2009-4960 State: PUBLISHED Published: 2010-07-27T18:39:00 Last Updated: 2024-08-07T07:24:54.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/backup/download.php in Lanai Core 0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9490 - http://www.vupen.com/english/advisories/2009/2402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52718
CVE ID: CVE-2009-4961 State: PUBLISHED Published: 2010-07-27T18:39:00 Last Updated: 2024-08-07T07:24:54.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9490
CVE ID: CVE-2009-4962 State: PUBLISHED Published: 2010-07-27T18:39:00 Last Updated: 2024-08-07T07:24:54.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57343 - http://www.vupen.com/english/advisories/2009/2394 - http://secunia.com/advisories/36441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52713 - http://www.exploit-db.com/exploits/9495
CVE ID: CVE-2009-4963 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-16T22:46:07.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2409 - http://www.securityfocus.com/bid/36133 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-011/
CVE ID: CVE-2009-4964 State: PUBLISHED Published: 2010-07-27T18:39:00 Last Updated: 2024-08-07T07:24:54.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .M3U playlist file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52710 - http://www.vupen.com/english/advisories/2009/2393 - http://www.exploit-db.com/exploits/9486
CVE ID: CVE-2009-4965 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-16T23:41:02.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the AIRware Lexicon (air_lexicon) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2411 - http://www.securityfocus.com/bid/36130 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-013/
CVE ID: CVE-2009-4966 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-16T19:24:38.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the AST ZipCodeSearch (ast_addresszipsearch) extension 0.5.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2411 - http://www.securityfocus.com/bid/36135 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-013/
CVE ID: CVE-2009-4967 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-17T02:01:14.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2411 - http://www.securityfocus.com/bid/36131 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-013/
CVE ID: CVE-2009-4968 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-16T22:41:20.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Event Registration (event_registr) extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36136 - http://www.vupen.com/english/advisories/2009/2411 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-013/
CVE ID: CVE-2009-4969 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-17T00:30:46.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Solidbase Bannermanagement (SBbanner) extension 1.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2411 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-013/ - http://www.securityfocus.com/bid/36137