Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5848 State: PUBLISHED Published: 2009-01-06T17:00:00Z Last Updated: 2024-09-16T23:21:42.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and (1) monitor or (2) control the module's Modbus/TCP I/O activity. Additional Analyst Notes: - CVE Program Container: References: - http://www.ruxcon.org.au/presentations.shtml#13 - http://support.advantech.com.tw/support/DownloadSRDetail.aspx?SR_ID=1-95WMW - http://ruxcon.org.au/files/2008/SIFT-Ruxcon2008-SCADA-Hacking-Modbus-Enabled-Devices.pdf
CVE ID: CVE-2008-5849 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:04:44.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to discover intranet IP addresses via a packet with a small TTL, which triggers an ICMP_TIMXCEED_INTRANS (aka ICMP time exceeded in-transit) response containing an encapsulated IP packet with an intranet address, as demonstrated by a TCP packet to the firewall management server on port 18264. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/porta
dditional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk36321 - http://secunia.com/advisories/32728 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46645 - http://www.portcullis-security.com/293.php - http://www.securityfocus.com/bid/32306 - https://svn.wald.intevation.org/svn/openvas/trunk/openvas-plugins/scripts/checkpoint-vpn1-pat-information-disclosure.nasl - http://www.vupen.com/english/advisories/2008/3229
CVE ID: CVE-2008-5850 State: REJECTED Published: 2009-01-06T17:00:00 Last Updated: 2009-01-10T10:00:00 Description: No description available.
CVE ID: CVE-2008-5851 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:04:44.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in My PHP Baseball Stats (MyPBS) allows remote attackers to execute arbitrary SQL commands via the seasonID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7522 - http://www.securityfocus.com/bid/32930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47498 - http://securityreason.com/securityalert/4869
CVE ID: CVE-2008-5852 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:04:44.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emefa Guestbook 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for guestbook.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4876 - http://secunia.com/advisories/33245 - https://www.exploit-db.com/exploits/7534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47534
CVE ID: CVE-2008-5853 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:04:44.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain database credentials via a direct request for config.inc or (2) read database backups via a request for a backup/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499458/100/0/threaded - https://www.exploit-db.com/exploits/7532 - http://www.bugreport.ir/index_59.htm - http://secu
/1/499458/100/0/threaded - https://www.exploit-db.com/exploits/7532 - http://www.bugreport.ir/index_59.htm - http://securityreason.com/securityalert/4872 - http://secunia.com/advisories/30080
CVE ID: CVE-2008-5854 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:04:44.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ls_user and (2) ls_email parameters (aka the User form) in an ls_register action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4873 - https://www.exploit-db.com/exploits/7526 - http://www.securityfocus.com/bid/32941 - http://sec
.com/securityalert/4873 - https://www.exploit-db.com/exploits/7526 - http://www.securityfocus.com/bid/32941 - http://secunia.com/advisories/33253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47501
CVE ID: CVE-2008-5855 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:12.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4873 - https://www.exploit-db.com/exploits/7526 - http://secunia.com/advisories/33253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47502
CVE ID: CVE-2008-5856 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:12.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory traversal sequences in the ftype parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7579 - http://secunia.com/advisories/33222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47493 - http://osvdb.org/50807 - http://www.securityfocus.com/bid/32929 - http://sourceforge.net/project/shownotes.php?release_id=648307
CVE ID: CVE-2008-5857 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:12.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47530 - http://secunia.com/advisories/33277 - http://issues.knowledgetree.com/browse/KTS-3921 - http://wiki.knowledgetree.com/Version_3.5.4a#Security - http://www.securityfocus.com/bid/32920
CVE ID: CVE-2008-5858 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:12.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47529 - http://wiki.knowledgetree.com/Version_3.5.4a#Security - http://www.securityfocus.com/bid/32920
CVE ID: CVE-2008-5859 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:12.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the show_page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33250 - http://www.securityfocus.com/bid/32956 - http://securityreason.com/securityalert/4868 - https://www.exploit-db.com/exploits/7529
CVE ID: CVE-2008-5860 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:13.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the edit_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33250 - http://securityreason.com/securityalert/4868 - https://www.exploit-db.com/exploits/7529
CVE ID: CVE-2008-5861 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:12.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via directory traversal sequences in the p parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32946 - https://www.exploit-db.com/exploits/7527 - http://securityreason.com/securityalert/4875 - http://secunia.com/advisories/33252
CVE ID: CVE-2008-5862 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:13.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021484 - http://securityreason.com/securityalert/4877 - http://www.securityfocus.com/bid/32928 - http://secunia.com/advisories/33257 - https://www.exploit-db.com/exploits/7521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47492
CVE ID: CVE-2008-5863 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:12.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the y parameter in a get_user action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4874 - https://www.exploit-db.com/exploits/7530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47887 - http://www.securityfocus.com/bid/32960
CVE ID: CVE-2008-5864 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:13.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32952 - https://www.exploit-db.com/exploits/7539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47540 - http://securityreason.com/securityalert/4871
CVE ID: CVE-2008-5865 State: PUBLISHED Published: 2009-01-06T17:00:00 Last Updated: 2024-08-07T11:13:12.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the r_type parameter in a showhoteldetails action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33215 - http://securityreason.com/securityalert/4870 - http://www.securityfocus.com/bid/32951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47539 - https://www.exploit-db.
//www.securityfocus.com/bid/32951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47539 - https://www.exploit-db.com/exploits/7538
CVE ID: CVE-2008-5866 State: PUBLISHED Published: 2009-01-07T20:00:00 Last Updated: 2024-08-07T11:13:12.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read/write community, which makes it easier for remote attackers to obtain sensitive information or modify SNMP variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-24 - http://www.securityfocus.com/archive/1/497182/100/0/threaded - http://securityreason.com/securityalert/4884
CVE ID: CVE-2008-5867 State: PUBLISHED Published: 2009-01-07T20:00:00 Last Updated: 2024-08-07T11:13:13.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Yerba SACphp 6.3 allows remote attackers to read arbitrary files, and possibly have other impact, via directory traversal sequences in the mod field contained in the base64-encoded SID parameter to an unspecified component. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32093 - http://www.securityfocus.com/bid/31619 - https://exch
ram Container: References: - http://secunia.com/advisories/32093 - http://www.securityfocus.com/bid/31619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45733
CVE ID: CVE-2008-5868 State: PUBLISHED Published: 2009-01-08T18:13:00 Last Updated: 2024-08-07T11:13:12.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to execute arbitrary code via a long ProxyLogin value in a configuration (.cfg) file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4882 - https://www.exploit-db.com/exploits/7608
CVE ID: CVE-2008-5869 State: PUBLISHED Published: 2009-01-08T18:13:00 Last Updated: 2024-08-07T11:13:12.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45797 - http://www.securityfocus.com/bid/31666 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-24 - http://www.securityfocus.com/archive/1/497182/100/0/threaded - http://securityre
ility_manager/vulnerabilities/pr08-24 - http://www.securityfocus.com/archive/1/497182/100/0/threaded - http://securityreason.com/securityalert/4884
CVE ID: CVE-2008-5870 State: PUBLISHED Published: 2009-01-08T18:13:00 Last Updated: 2024-08-07T11:13:13.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6673 - http://securityreason.com/securityalert/4878 - http://www.securityfocus.com/archive/1/497061/100/0/threaded
CVE ID: CVE-2008-5871 State: PUBLISHED Published: 2009-01-08T18:13:00 Last Updated: 2024-08-07T11:13:12.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel Multimedia Communication Server (MSC) 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command. Additional Analyst Notes: - CVE Program Container: References: - http://voipshield.com/research-details.php?id=119 - http://www.securityfocus.com/bid/31640 - http://secunia.com/advisories/32203 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45752
//support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=775223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45752 - http://www.vupen.com/english/advisories/2008/2779
CVE ID: CVE-2008-5872 State: PUBLISHED Published: 2009-01-08T18:13:00 Last Updated: 2024-08-07T11:13:13.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol (UFTP) processing in IP Client Manager (IPCM) in Nortel Multimedia Communication Server (MSC) 5100 3.0.13 allow remote attackers to cause a denial of service (device outage) via a UFTP message that has a negative block size or other crafted Connection Details values. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=774845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4575
://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=774845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45751 - http://secunia.com/advisories/32203 - http://www.vupen.com/english/advisories/2008/2779 - http://voipshield.com/research-details.php?id=120 - http://www.securityfocus.com/bid/31633
CVE ID: CVE-2008-5873 State: PUBLISHED Published: 2009-01-08T18:13:00 Last Updated: 2024-08-07T11:13:13.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta[sesion] cookie that has a value beginning with 1:1: followed by a username. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32093 - http://www.securityfocus.com/bid/31619 - https://www.exploit-db.com/exploits/6691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45734 - http://securityreason.com/securityalert/4883
CVE ID: CVE-2008-5874 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T11:13:13.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32952 - https://www.exploit-db.com/exploits/7575 - https://www.exploit-db.com/exploits
http://www.securityfocus.com/bid/32952 - https://www.exploit-db.com/exploits/7575 - https://www.exploit-db.com/exploits/7568 - http://downloads.securityfocus.com/vulnerabilities/exploits/32952.pl
CVE ID: CVE-2008-5875 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T11:13:13.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32952 - http://securityreason.com/securityalert/4880 - https://www.exploit-db.com/exploits/7567 - http://www.securityfocus.com/archive/1/499580/30/0/threaded
CVE ID: CVE-2008-5876 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T11:13:13.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Irrlicht before 1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors in the B3D loader. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50793 - http://www.securityfocus.com/bid/32907 - http://irrlicht.sourceforge.net/changes.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/47453 - http://secunia.com/advisories/33192
CVE ID: CVE-2008-5877 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T11:13:13.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) form_id parameter to pcw/processforms.php, (3) pcwlogin and (4) pcw_pass parameters to pcw/setlogin.php, (5) searchvalue parameter to pcw/downloads.php, and the (6) searchvalue and (7) whichfield parameter to pcw/downloads.php, a different vector than CVE-2006-0444. Additional Analyst Notes: - CV
and (7) whichfield parameter to pcw/downloads.php, a different vector than CVE-2006-0444. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4881 - https://www.exploit-db.com/exploits/7515 - http://secunia.com/advisories/33211 - http://www.securityfocus.com/bid/32915
CVE ID: CVE-2008-5878 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T11:13:13.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary files via a .. (dot dot) in the (1) boxname parameter to theme/superchrome/box.php and the (2) theme parameter to phpclanwebsite/footer.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4881 - https://www.exploit-db.com/exploits/7515 - http://se
ainer: References: - http://securityreason.com/securityalert/4881 - https://www.exploit-db.com/exploits/7515 - http://secunia.com/advisories/33211 - http://www.securityfocus.com/bid/32915
CVE ID: CVE-2008-5879 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T11:13:13.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4881 - https://www.exploit-db.com/exploits/7515 - http://secunia.com/advisories/33211 - http://www.securityfocus.com/bid/32915
CVE ID: CVE-2008-5880 State: PUBLISHED Published: 2009-01-08T19:00:00 Last Updated: 2024-08-07T11:13:13.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "ok". Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4886 - http://secunia.com/advisories/33190 - http://www.securityfocus.com/bid/32918 - https://www.exploit-db.com/exploits/7518
CVE ID: CVE-2008-5881 State: PUBLISHED Published: 2009-01-09T18:00:00 Last Updated: 2024-08-07T11:13:13.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) gateway_module parameter to plugin/gateway/gnokii/init.php and the (2) themes_module parameter to plugin/themes/default/init.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7687 - http://www.securityfocus.com/bid/33138 - http://secunia.com/advisories/33386 - http://securityreason.com/securityalert/