Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3298 State: PUBLISHED Published: 2009-11-03T16:00:00Z Last Updated: 2024-09-16T22:50:27.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/59584 - http://www.vupen.com/english/advisories/2009/3101 - http://secunia.com/advisories/37218 - http://eduforge.org/frs/shownotes.php?release_id=546 - http://eduforge.org/frs/shownotes.php?release_id=547 - http://secunia.com/advisories/37217 - http://mahara.org/interaction/foru
eduforge.org/frs/shownotes.php?release_id=547 - http://secunia.com/advisories/37217 - http://mahara.org/interaction/forum/topic.php?id=1169 - http://www.debian.org/security/2009/dsa-1924 - http://www.securityfocus.com/bid/36893
CVE ID: CVE-2009-3299 State: PUBLISHED Published: 2009-11-03T16:00:00Z Last Updated: 2024-09-16T20:17:38.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36892 - http://www.osvdb.org/59583 - http://www.vupen.com/english/advisories/2009/3101 - http://secunia.com/advisories/37218 - http://eduforge.org/frs/shownotes.php?release_id=546 - http://eduforge.org/frs/shownotes.php?release_id=
isories/37218 - http://eduforge.org/frs/shownotes.php?release_id=546 - http://eduforge.org/frs/shownotes.php?release_id=547 - http://mahara.org/interaction/forum/topic.php?id=1170 - http://secunia.com/advisories/37217 - http://www.debian.org/security/2009/dsa-1924
CVE ID: CVE-2009-3300 State: PUBLISHED Published: 2009-11-06T15:00:00 Last Updated: 2024-08-07T06:22:24.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and the Service Provider 1.3.x before 1.3.5 and 2.x before 2.3, in Internet2 Middleware Initiative Shibboleth allow remote attackers to inject arbitrary web script or HTML via URLs that are encountered in redirections, and appear in automatically generated forms. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1947 - http://secunia.com/advisories/37
: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1947 - http://secunia.com/advisories/37237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54140 - http://www.vupen.com/english/advisories/2009/3150 - http://shibboleth.internet2.edu/secadv/secadv_20091104.txt
CVE ID: CVE-2009-3301 State: PUBLISHED Published: 2010-02-16T19:00:00 Last Updated: 2024-08-07T06:22:24.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - https://bugzilla.redhat.com/show_bug.cgi?id=
isories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - https://bugzilla.redhat.com/show_bug.cgi?id=533038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56240 - http://secunia.com/advisories/38695 - http://www.debian.org/security/2010/dsa-1995 - http://www.ubuntu.com/usn/USN-903-1 - http://www.vupen.com/english/advisories/2010/0366 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html - http://secunia.com/advisories/38567 - http://www.openoffice.org/security/cves/CVE-2009-3301-3302.html - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.securityfocus.com/bid/38218 - http://www.vupen.com/english/advisorie
topics/security/cpuoct2010-175626.html - http://www.securityfocus.com/bid/38218 - http://www.vupen.com/english/advisories/2010/0635 - http://secunia.com/advisories/38568 - http://securitytracker.com/id?1023591 - http://www.openoffice.org/security/bulletin.html - http://secunia.com/advisories/41818 - http://www.us-cert.gov/cas/techalerts/TA10-287A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10423 - http://www.redhat.com/support/errata/RHSA-2010-0101.html - http://secunia.com/advisories/38921 - http://www.vupen.com/english/advisories/2010/2905
CVE ID: CVE-2009-3302 State: PUBLISHED Published: 2010-02-16T19:00:00 Last Updated: 2024-08-07T06:22:24.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://secunia.com/advisories/3
cunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://secunia.com/advisories/38695 - http://www.debian.org/security/2010/dsa-1995 - https://bugzilla.redhat.com/show_bug.cgi?id=533043 - http://www.ubuntu.com/usn/USN-903-1 - http://www.vupen.com/english/advisories/2010/0366 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html - http://secunia.com/advisories/38567 - http://www.openoffice.org/security/cves/CVE-2009-3301-3302.html - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.securityfocus.com/bid/38218 - http://www.vupen.com/english/advisories/2010/0635 - http://secunia.com/advisories/3856
www.securityfocus.com/bid/38218 - http://www.vupen.com/english/advisories/2010/0635 - http://secunia.com/advisories/38568 - http://securitytracker.com/id?1023591 - http://www.openoffice.org/security/bulletin.html - http://secunia.com/advisories/41818 - http://www.us-cert.gov/cas/techalerts/TA10-287A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56241 - http://www.redhat.com/support/errata/RHSA-2010-0101.html - http://secunia.com/advisories/38921 - http://www.vupen.com/english/advisories/2010/2905 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10022
CVE ID: CVE-2009-3303 State: PUBLISHED Published: 2009-11-24T17:00:00Z Last Updated: 2024-09-17T04:23:46.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web script or HTML via the helpname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch12.diff.gz - http://secunia.com/advisories/37450 - http://www.debian.org/security/2009/dsa-1937 - http://www.securityfocus.com/bid/37088
CVE ID: CVE-2009-3304 State: PUBLISHED Published: 2009-12-04T19:00:00Z Last Updated: 2024-09-16T22:30:29.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' home directories, related to deb-specific/ssh_dump_update.pl and cronjobs/cvs-cron/ssh_create.php. Additional Analyst Notes: - CVE Program Container: References: - http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch13.diff.gz - http://www.securityfocus.com/bid/37195 - http://www.debian.org/security/2009/dsa-1945
CVE ID: CVE-2009-3305 State: PUBLISHED Published: 2009-12-24T16:00:00 Last Updated: 2024-08-07T06:22:24.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a Cache-Control header that lacks a value for the max-age field, which triggers a segmentation fault in the httpParseHeaders function in http_parse.c, and possibly other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37463 - http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/dca6877a8117f0df - http://secunia.com
37463 - http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/dca6877a8117f0df - http://secunia.com/advisories/38647 - http://secunia.com/advisories/37607 - http://www.debian.org/security/2010/dsa-2002 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=547047
CVE ID: CVE-2009-3306 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbitrary PHP code via a URL in the cs_base_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9716 - http://www.securityfocus.com/bid/40457 - http://www.securityfocus.com/archive/1/511507/100/0/threaded - http://www.vupen.com/english/advisories/2009/2702
CVE ID: CVE-2009-3307 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the FSPHP_LIB parameter to (1) FSphp.php, (2) navigation.php, and (3) pathwrite.php in lib/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9720 - http://www.vupen.com/english/advisories/2009/2704
CVE ID: CVE-2009-3308 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL commands via the listingid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36795 - http://www.exploit-db.com/exploits/9719 - http://www.vupen.com/english/advisories/2009/2703
CVE ID: CVE-2009-3309 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a ViewDetails action, a different vector than CVE-2008-6320. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53331 - http://www.securityfocus.com/bid/36442 - http://www.exploit-db.com/exploits/9710
CVE ID: CVE-2009-3310 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the album_id parameter in an AlbumSongs action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2701 - http://secunia.com/advisories/36798 - http://www.securityfocus.com/bid/36453 - http://www.exploit-db.com/exploits/9715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53352
CVE ID: CVE-2009-3311 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53319 - http://packetstormsecurity.org/0909-exploits/rssms-xss.txt - http://osvdb.org/58169
CVE ID: CVE-2009-3312 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a crafted URL in the include_class parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9703 - http://osvdb.org/58181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53316 - http://secunia.com/advisories/36730 - http://www.vupen.com/english/advisories/2009/2686
CVE ID: CVE-2009-3313 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58183 - http://www.exploit-db.com/exploits/9711 - http://osvdb.org/58182 - http://osvdb.org/58184 - http://secunia.com/advisories/3677
/www.exploit-db.com/exploits/9711 - http://osvdb.org/58182 - http://osvdb.org/58184 - http://secunia.com/advisories/36778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53330
CVE ID: CVE-2009-3314 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL commands via the platform parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58168 - http://secunia.com/advisories/36732 - http://www.vupen.com/english/advisories/2009/2685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53317 - http://www.exploit-db.com/exploits/9702
CVE ID: CVE-2009-3315 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53332 - http://www.exploit-db.com/exploits/9712
CVE ID: CVE-2009-3316 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a propertycpanel action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58176 - http://www.securityfocus.com/bid/36446 - http://www.exploit-db.com/exploits/9713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53327 - http://secunia.com/advisories/36774
CVE ID: CVE-2009-3317 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to execute arbitrary PHP code via a URL in the path parameter, a different vector than CVE-2008-0648. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53326 - http://www.securityfocus.com/bid/36445 - http://www.exploit-db.com/exploits/9708
CVE ID: CVE-2009-3318 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a .. (dot dot) in the target parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36441 - http://www.exploit-db.com/exploits/9706
CVE ID: CVE-2009-3319 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506616/100/0/threaded - http://www.securityfocus.com/bid/16909
CVE ID: CVE-2009-3320 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36738 - http://packetstormsecurity.org/0909-exploits/paolink-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53324 - http://osvdb.org/58166
CVE ID: CVE-2009-3321 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9700 - http://www.securityfocus.com/bid/36422 - http://secunia.com/advisories/36737 - http://osvdb.org/58173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53305
CVE ID: CVE-2009-3322 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood of crafted TCP packets to port 1723. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36697 - http://www.exploit-db.com/exploits/9646 - http://www.osvdb.org/58199 - http://www.securityfocus.com/bid/36366 - http://www.securityfocus.com/archive/1/506414/100/0/threaded
CVE ID: CVE-2009-3323 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the baros_path parameter to (1) include/common_functions.php, and the main_path parameter to (2) lib_users.php, (3) lib_stats.php, and (4) lib_slots.php in include/lib/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53378 - http://www.exploit-db.com/exploits/9724
CVE ID: CVE-2009-3324 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9728
CVE ID: CVE-2009-3325 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the stype parameter in an editsurvey action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2705 - http://www.securityfocus.com/bid/36464 - http://www.exploit-db.com/exploits/9721
CVE ID: CVE-2009-3326 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute arbitrary SQL commands via the id_menu parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9727
CVE ID: CVE-2009-3327 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute arbitrary SQL commands via the (1) QUERY parameter to search.php and (2) USERNAME parameter to login.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36806 - http://www.exploit-db.com/exploits/9730
CVE ID: CVE-2009-3328 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrary web script or HTML via the sName parameter (aka the name field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36806 - http://www.exploit-db.com/exploits/9730
CVE ID: CVE-2009-3329 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Winplot 1.25.0.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Plot2D (.wp2) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9725 - http://secunia.com/advisories/36817
CVE ID: CVE-2009-3330 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tickets parameter in a support ticket action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36815 - http://www.exploit-db.com/exploits/9726
CVE ID: CVE-2009-3331 State: PUBLISHED Published: 2009-09-23T10:00:00 Last Updated: 2024-08-07T06:22:24.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the wwwRoot parameter to (1) header.php, (2) submit.php, (3) submitted.php, and (4) autosubmitter/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53373 - http://www.exploit-db.com/exploits/9722