Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4648 State: PUBLISHED Published: 2010-02-19T17:00:00 Last Updated: 2024-08-07T07:08:38.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows local administrators to gain privileges via (1) arbitrary arguments in the --file_move action in /usr/local/bin/admin.pl, or a hard link attack in (2) chmod or (3) a certain cp command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38176 - http://www.portcullis-security.com/338.php - https://exchange.xf
References: - http://www.securityfocus.com/bid/38176 - http://www.portcullis-security.com/338.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/56248
CVE ID: CVE-2009-4649 State: PUBLISHED Published: 2010-02-22T20:00:00 Last Updated: 2024-08-07T07:08:38.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to (1) rispondi.php and (2) scrivi.php, which is not properly handled in forum.php. Additional Analyst Notes: - CVE Program Container: References: - http://groups.csail.mit.edu/pag/ardilla/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/56278 - http://groups.csail.mit.edu/pag/ardilla/geccbblite-XSS2-strict-T.txt - http://groups.csail.mit.edu/pag/ardilla/geccbbli
http://groups.csail.mit.edu/pag/ardilla/geccbblite-XSS2-strict-T.txt - http://groups.csail.mit.edu/pag/ardilla/geccbblite-XSS2-lenient-T.txt - http://www.securityfocus.com/bid/35449
CVE ID: CVE-2009-4650 State: PUBLISHED Published: 2010-02-22T21:00:00Z Last Updated: 2024-09-16T20:47:36.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a default action to index2.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/62334 - http://secunia.com/advisories/38625 - http://www.securityfocus.com/bid/38204 - http://jeffchannell.com/Joomla/webee-111-multiple-vulne
.com/advisories/38625 - http://www.securityfocus.com/bid/38204 - http://jeffchannell.com/Joomla/webee-111-multiple-vulnerabilities.html
CVE ID: CVE-2009-4651 State: PUBLISHED Published: 2010-02-22T21:00:00Z Last Updated: 2024-09-16T16:48:43.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) color, (2) img, or (3) url BBCode tags in unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38204 - http://jeffchannell.com/Joomla/webee-111-multiple-vulnerabilities.html
CVE ID: CVE-2009-4652 State: PUBLISHED Published: 2010-02-26T18:09:00 Last Updated: 2024-08-07T07:08:37.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Conn_GetCipherInfo and (2) Conn_UsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service (application crash) by sending the MOTD command from another server in the same IRC network, possibly related to an array index error. Additional Analyst Notes: - CVE Program Container: References: - http://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git%3Ba=blobdiff%3Bf=src/ngircd/conn.c%3Bh=c6095a31c613bc5ca127
s: - http://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git%3Ba=blobdiff%3Bf=src/ngircd/conn.c%3Bh=c6095a31c613bc5ca127d55b8723e15b836f1cca%3Bhp=9752a6191c7e2da5b0df64779e9cc28ad1e6241c%3Bhb=627b0b713c52406e50c84bb9459e7794262920a2%3Bhpb=95428a72ffb5214826b61d5e77f860e7ef6a6c9e - http://ngircd.barton.de/doc/ChangeLog - http://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git%3Ba=commit%3Bh=627b0b713c52406e50c84bb9459e7794262920a2 - http://www.securityfocus.com/bid/37021 - http://www.vupen.com/english/advisories/2009/3240 - http://secunia.com/advisories/37343 - http://ngircd.barton.de/doc/NEWS - https://exchange.xforce.ibmcloud.com/vulnerabilities/54272
CVE ID: CVE-2009-4653 State: PUBLISHED Published: 2010-02-26T18:09:00 Last Updated: 2024-08-07T07:08:38.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to cause a denial of service (dhost.exe crash) and possibly execute arbitrary code via a long string to /dhost/modules?I:. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37009 - http://www.securityfocus.com/archive/1/507812/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/54264
CVE ID: CVE-2009-4654 State: PUBLISHED Published: 2010-02-26T18:09:00 Last Updated: 2024-08-07T07:08:37.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long sadminpwd and verifypwd parameters in a submit action to /dhost/httpstk. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37042 - http://tcc.hellcode.net/advisories/hellcode-adv005.txt - http://downloads.securityfocus.com/vulnerabilities/exploits/37042-2.pl - http://tcc.hellcode.net/sploitz/httpstk.txt - http://www.security
ecurityfocus.com/vulnerabilities/exploits/37042-2.pl - http://tcc.hellcode.net/sploitz/httpstk.txt - http://www.securityfocus.com/archive/1/507926/100/0/threaded - http://www.securitytracker.com/id?1023188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54308
CVE ID: CVE-2009-4655 State: PUBLISHED Published: 2010-02-26T18:09:00 Last Updated: 2024-08-07T07:08:38.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.metasploit.com/modules/auxiliary/admin/edirectory/edirectory_dhost_cookie - http://osvdb.org/60035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56613 - http://www.metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/admin/edirectory/edirectory_dhost_coo
//www.metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/admin/edirectory/edirectory_dhost_cookie.rb
CVE ID: CVE-2009-4656 State: PUBLISHED Published: 2010-03-03T20:00:00 Last Updated: 2024-08-07T07:08:37.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a playlist file (.pls) containing a long string. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2681 - http://secunia.com/advisories/36728 - https://exchange.xforce.
es: - http://www.vupen.com/english/advisories/2009/2681 - http://secunia.com/advisories/36728 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53310 - http://www.exploit-db.com/exploits/9691
CVE ID: CVE-2009-4657 State: PUBLISHED Published: 2010-03-03T20:00:00 Last Updated: 2024-08-07T07:08:38.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the application on port 32123, as demonstrated by setting the action option to wizardStep1. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9717 - http://www.securityfocus.com/bid/36454
CVE ID: CVE-2009-4658 State: PUBLISHED Published: 2010-03-03T20:00:00 Last Updated: 2024-08-07T07:08:37.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port assignment in the management interface. NOTE: this can be leveraged by non-authenticated attackers using CVE-2009-4657. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53351
CVE ID: CVE-2009-4659 State: PUBLISHED Published: 2010-03-03T20:00:00 Last Updated: 2024-08-07T07:08:38.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MP3-Cutter Ease Audio Cutter 1.20 allows user-assisted remote attackers to cause a denial of service (application crash) via a long string in a WAV file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53333 - http://www.exploit-db.com/exploits/9707
CVE ID: CVE-2009-4660 State: PUBLISHED Published: 2010-03-03T20:00:00 Last Updated: 2024-08-07T07:08:38.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9673 - http://www.attrition.org/pipermail/vim/2009-September/002271.html - http://www.exploit-db.com/exploits/9690 - http://secunia.com/advisories/36704 - http://www.vupen.com/english/advisories/2009/2679 - http://www.securityfocus.com/bid/36407
CVE ID: CVE-2009-4661 State: PUBLISHED Published: 2010-03-03T20:00:00 Last Updated: 2024-08-07T07:08:38.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted ZIP file that is not properly handled when the victim uses the (1) Update or (2) Plug-In console menu item. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9695 - http://www.exploit-db.com/exploits/9734
CVE ID: CVE-2009-4662 State: PUBLISHED Published: 2010-03-03T20:00:00 Last Updated: 2024-08-07T07:08:38.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022910 - http://www.novell.com/support/viewContent.do?externalId=7004410&sliceId=1 - http://www.vupen.com/english/advisories/2009/2689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53322 - http
- http://www.vupen.com/english/advisories/2009/2689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53322 - http://secunia.com/advisories/36746 - http://www.securityfocus.com/bid/36437
CVE ID: CVE-2009-4663 State: PUBLISHED Published: 2010-03-03T20:00:00 Last Updated: 2024-08-07T07:08:38.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long argument to the AddAttachment method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53325 - http://www.securityfocus.com/bid/36440 - http://www.exploit-db.com/exploits/9705 - http://www.bmgsec.com.au/advisories/easymail-6-activex-exploit.txt - http://archives.neohapsis.com/archives/bugtraq/2013-04/0220.html
CVE ID: CVE-2009-4664 State: PUBLISHED Published: 2010-03-03T20:00:00 Last Updated: 2024-08-07T07:08:38.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firewall Builder 3.0.4, 3.0.5, and 3.0.6, when running on Linux, allows local users to gain privileges via a symlink attack on an unspecified temporary file that is created by the iptables script. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035112.html - http://blog.fwbuilder.org/2009/09/firewall-builder-v307-released.html - https://bugzilla.redhat.com/show_bug.cgi?id=524588 - http://secunia.com/advisories/36809 - http://osvdb.org/5824
.html - https://bugzilla.redhat.com/show_bug.cgi?id=524588 - http://secunia.com/advisories/36809 - http://osvdb.org/58247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53392 - http://www.securityfocus.com/bid/36468 - http://www.fwbuilder.org/docs/firewall_builder_release_notes.html#3.0.7 - http://www.vupen.com/english/advisories/2010/0389
CVE ID: CVE-2009-4665 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8785 - http://www.securityfocus.com/bid/35085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50727
CVE ID: CVE-2009-4666 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[RootPath] parameter to (1) Framework/EmailTemplates.class.php, (2) Customers/PDPEmailReplaceConstants.class.php, and (3) Admin/ResellersManager.class.php in includes/DProtect/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8792
CVE ID: CVE-2009-4667 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL commands via the formID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8810 - http://secunia.com/advisories/35227 - http://www.vupen.com/english/advisories/2009/1430
CVE ID: CVE-2009-4668 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long ID3 tag in an MP3 file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503826/100/0/threaded - http://www.exploit-db.com/exploits/8780 - http://secunia.com/advisories/35195 - http://retrogod.altervista.org/9sg_jetcast_heap_bof.html
CVE ID: CVE-2009-4669 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the loginus parameter to Login.php or (2) the Old Password field to changepwd.php, and allow (3) remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/userform.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35237 - http://www.exploit-db.com/exploits/8797
CVE ID: CVE-2009-4670 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via the user parameter or (2) delete arbitrary rooms via the room parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35237 - http://www.exploit-db.com/exploits/8797
CVE ID: CVE-2009-4671 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the room_phplanning cookie to a value associated with the admin account. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35237 - http://www.exploit-db.com/exploits/8797
CVE ID: CVE-2009-4672 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8791 - http://secunia.com/advisories/35244 - http://www.securityfocus.com/bid/35098
CVE ID: CVE-2009-4673 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50731 - http://secunia.com/advisories/35246
CVE ID: CVE-2009-4674 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50722 - http://www.securityfocus.com/bid/35079
CVE ID: CVE-2009-4675 State: PUBLISHED Published: 2010-03-05T18:00:00 Last Updated: 2024-08-07T07:08:38.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50723 - http://www.securityfocus.com/bid/35079
CVE ID: CVE-2009-4676 State: PUBLISHED Published: 2010-03-05T19:00:00Z Last Updated: 2024-09-16T22:09:08.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long title in a FLAC file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35195
CVE ID: CVE-2009-4677 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T07:08:38.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37983 - http://www.osvdb.org/61384 - http://www.securityfocus.com/bid/41330
CVE ID: CVE-2009-4678 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T07:08:38.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55086 - http://packetstormsecurity.org/0912-exploits/winngb-xss.txt - http://secunia.com/advisories/37963 - http://www.osvdb.org/61350
CVE ID: CVE-2009-4679 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T07:08:38.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37473 - http://www.exploit-db.com/exploits/10754 - http://secunia.com/advisories/37760 - http://www.osvdb.org/61382
CVE ID: CVE-2009-4680 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL commands via the st parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9226 - http://packetstormsecurity.org/0907-exploits/wbd-sqlxss.txt - http://www.securityfocus.com/bid/35760 - http://secunia.com/advisories/35941
CVE ID: CVE-2009-4681 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbitrary web script or HTML via the st parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9226 - http://packetstormsecurity.org/0907-exploits/wbd-sqlxss.txt - http://www.securityfocus.com/bid/35760 - http://secunia.com/advisories/35941
CVE ID: CVE-2009-4682 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/55919 - http://secunia.com/advisories/35835 - http://www.exploit-db.com/exploits/9185
CVE ID: CVE-2009-4683 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T07:08:38.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/55918 - http://secunia.com/advisories/35835 - http://www.exploit-db.com/exploits/9185