Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0550 State: PUBLISHED Published: 2008-02-01T19:41:00 Last Updated: 2024-08-07T07:46:55.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/poc/steamcazz.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/39928 - http://aluigi.altervista.org/adv/steamcazz-adv.txt
CVE ID: CVE-2008-0551 State: PUBLISHED Published: 2008-02-01T19:41:00 Last Updated: 2024-08-07T07:46:55.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39943 - https://www.exploit-db.com/exploits/4986 - http://www.securityfocus.com/bid/27580 - http://www.vu
ulnerabilities/39943 - https://www.exploit-db.com/exploits/4986 - http://www.securityfocus.com/bid/27580 - http://www.vupen.com/english/advisories/2008/0299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39974 - http://secunia.com/advisories/28649 - http://www.securityfocus.com/bid/27453
CVE ID: CVE-2008-0552 State: PUBLISHED Published: 2008-02-01T19:41:00 Last Updated: 2024-08-07T07:46:54.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39968 - http://www.securityfocus.com/bid/27473 - http://www.lonerunners.net/users/jekil/pub/hack-eticket/hack-eticket.txt - http://www.securitytracker.com/id?1019278 - http://www.securityfocus.com/archive/1/487133/100/0/threaded - http://securityreason.com/
curitytracker.com/id?1019278 - http://www.securityfocus.com/archive/1/487133/100/0/threaded - http://securityreason.com/securityalert/3601
CVE ID: CVE-2008-0553 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:46:55.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30129 - http://secunia.com/advisories/28784 - http://www.redhat.com/support/errata/RHSA-2008-0134.html - http://www.debian.org/security/2008/dsa-1598 - http://www.securityfocus.com/archive/1/488069/100/0/threaded - http://www.vupen.
www.debian.org/security/2008/dsa-1598 - http://www.securityfocus.com/archive/1/488069/100/0/threaded - http://www.vupen.com/english/advisories/2008/1744 - http://secunia.com/advisories/29622 - http://www.securityfocus.com/bid/27655 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html - http://ubuntu.com/usn/usn-664-1 - http://www.vupen.com/english/advisories/2008/1456/references - http://secunia.com/advisories/28857 - http://secunia.com/advisories/30783 - https://issues.rpath.com/browse/RPL-2215 - http://www.vmware.com/security/advisories/VMSA-2008-0009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098 - http://www.deb
009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098 - http://www.debian.org/security/2008/dsa-1490 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1 - http://www.redhat.com/support/errata/RHSA-2008-0136.html - https://bugzilla.redhat.com/show_bug.cgi?id=431518 - http://www.vupen.com/english/advisories/2008/0430 - http://secunia.com/advisories/28954 - http://secunia.com/advisories/30535 - http://secunia.com/advisories/30188 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html - http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894 - http://www.securityfocus.com/archiv
ml - http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894 - http://www.securityfocus.com/archive/1/493080/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html - http://secunia.com/advisories/32608 - http://secunia.com/advisories/29070 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html - http://secunia.com/advisories/28848 - http://www.redhat.com/support/errata/RHSA-2008-0135.html - http://secunia.com/advisories/29069 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html - ht
/secunia.com/advisories/29069 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html - http://secunia.com/advisories/28867 - http://securitytracker.com/id?1019309 - http://wiki.rpath.com/Advisories:rPSA-2008-0054 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:041 - http://www.debian.org/security/2008/dsa-1491 - http://secunia.com/advisories/28807 - http://www.novell.com/linux/security/advisories/2008_13_sr.html - http://secunia.com/advisories/30717
CVE ID: CVE-2008-0554 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:46:54.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-665-1 - http://www.securityfocus.com/bid/27682 - http://www.redhat.com/support/errata/RHSA-2008-0131.html - https://oval.cisecurity.org/repository/search/definition/
2 - http://www.redhat.com/support/errata/RHSA-2008-0131.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10975 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464056 - http://secunia.com/advisories/29079 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:039 - http://www.securitytracker.com/id?1019358 - http://secunia.com/advisories/32607 - http://secunia.com/advisories/30280 - http://www.vupen.com/english/advisories/2008/0460 - http://www.debian.org/security/2008/dsa-1579 - https://issues.rpath.com/browse/RPL-2216
CVE ID: CVE-2008-0555 State: PUBLISHED Published: 2008-04-04T00:00:00 Last Updated: 2024-08-07T07:46:54.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguished Name (DN) in a client certificate, which might allow remote attackers to bypass authentication via a crafted DN that triggers overwriting of environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3797 - http://www.cynops.de/advisories/CVE-2008-0555.txt - http://www.vupen.com/english/advisories/2008/1079/references
3797 - http://www.cynops.de/advisories/CVE-2008-0555.txt - http://www.vupen.com/english/advisories/2008/1079/references - http://www.apache-ssl.org/advisory-cve-2008-0555.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41618 - http://www.securityfocus.com/bid/28576 - http://www.klink.name/security/aklink-sa-2008-005-apache-ssl.txt - http://secunia.com/advisories/29644 - http://www.securitytracker.com/id?1019784 - http://www.securityfocus.com/archive/1/490386/100/0/threaded
CVE ID: CVE-2008-0556 State: PUBLISHED Published: 2008-02-18T23:00:00 Last Updated: 2024-08-07T07:46:55.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform unauthorized actions as authorized users via a link or IMG tag to RAServer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060300.html - https://www.cynops.de/advisories/CVE-2008-0556.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/40476 - http://www.vupen.com/english/advisories/2008/0588 - http://se
tps://exchange.xforce.ibmcloud.com/vulnerabilities/40476 - http://www.vupen.com/english/advisories/2008/0588 - http://secunia.com/advisories/28951 - http://securitytracker.com/id?1019426 - http://www.kb.cert.org/vuls/id/264385
CVE ID: CVE-2008-0557 State: PUBLISHED Published: 2008-02-04T22:00:00 Last Updated: 2024-08-07T07:46:55.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the CatalogShop (com_catalogshop) 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5030 - http://www.securityfocus.com/bid/27558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40142
CVE ID: CVE-2008-0558 State: PUBLISHED Published: 2008-02-04T22:00:00Z Last Updated: 2024-09-17T00:22:01.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27560 - http://secunia.com/advisories/28735
CVE ID: CVE-2008-0559 State: PUBLISHED Published: 2008-02-04T22:00:00 Last Updated: 2024-08-07T07:46:54.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the permalink parameter in core.php, accessed through index.php; and (2) the thispost parameter in comments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27559 - http://securityreason.com/securityalert/3604 - http://www.securityfocus.com/archive/1/487384/100/0/threaded - http://secunia.com/advisories/28737
CVE ID: CVE-2008-0560 State: PUBLISHED Published: 2008-02-04T22:00:00 Last Updated: 2024-08-07T07:46:55.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cforms-css.php in Oliver Seidel cforms (contactforms), a Wordpress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the tm parameter. NOTE: CVE disputes this issue for 7.3, since there is no tm parameter, and the code exits with a fatal error due to a call to an undefined function Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487347/100/0/threaded - http://www.attrition.org/pipermail/vim/2008-January/0
: - http://www.securityfocus.com/archive/1/487347/100/0/threaded - http://www.attrition.org/pipermail/vim/2008-January/001895.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40143 - http://securityreason.com/securityalert/3605
CVE ID: CVE-2008-0561 State: PUBLISHED Published: 2008-02-04T22:00:00 Last Updated: 2024-08-07T07:46:55.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27557 - https://www.exploit-db.com/exploits/5029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40141
CVE ID: CVE-2008-0562 State: PUBLISHED Published: 2008-02-04T22:00:00 Last Updated: 2024-08-07T07:46:55.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Restaurant (com_restaurant) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40144 - http://www.securityfocus.com/bid/27551
CVE ID: CVE-2008-0563 State: PUBLISHED Published: 2008-02-04T23:00:00Z Last Updated: 2024-09-16T16:33:24.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated users via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format. Additional Analyst Notes: - CVE Program Container: References: - http://support.liferay.com/browse/LEP-4737
CVE ID: CVE-2008-0564 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:54.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list's "info attribute" in the web administrator interface, a different vulnerability than CVE-2006-3636. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:061 - http:
use-security-announce/2008-08/msg00006.html - http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:061 - http://www.redhat.com/support/errata/RHSA-2011-0307.html - https://issues.rpath.com/browse/RPL-2207 - http://www.vupen.com/english/advisories/2008/0422 - http://secunia.com/advisories/31687 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://wiki.rpath.com/Advisories:rPSA-2008-0056 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00452.html - http://secunia.com/advisories/28966 - http://www.ubuntu.com/usn/usn-586-1 - http://support.apple.com/kb/HT4077 - http://sourceforge.net/project/shownotes.php?release_id=559308&group
sn/usn-586-1 - http://support.apple.com/kb/HT4077 - http://sourceforge.net/project/shownotes.php?release_id=559308&group_id=103 - http://secunia.com/advisories/28916 - http://mail.python.org/pipermail/mailman-announce/2008-February/000096.html - http://www.securityfocus.com/archive/1/488236/100/0/threaded - http://secunia.com/advisories/29388 - http://www.securityfocus.com/bid/27630 - http://www.vupen.com/english/advisories/2011/0542 - http://secunia.com/advisories/28794 - http://secunia.com/advisories/29249 - https://bugzilla.redhat.com/show_bug.cgi?id=431526 - http://secunia.com/advisories/43549
CVE ID: CVE-2008-0565 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27530 - https://www.exploit-db.com/exploits/5021 - http://osvdb.org/40840 - http://secunia.com/advisories/28727
CVE ID: CVE-2008-0566 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path_to_public_program parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5022 - http://www.securityfocus.com/bid/27529
CVE ID: CVE-2008-0567 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) PPS/File.php, (2) Writer.php, and (3) PPS.php in excelwriter/; and (4) BIFFwriter.php, (5) Workbook.php, (6) Worksheet.php, and (7) Format.php in excelwriter/Writer/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5020 - http://www.security
nal Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5020 - http://www.securityfocus.com/bid/27531
CVE ID: CVE-2008-0568 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IP-authentication feature in the Secure Site 5.x-1.0 and 4.7.x-1.0 module for Drupal allows remote attackers to gain the privileges of a user who has authenticated from behind the same proxy server as the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0377/references - http://www.securityfocus.com/bid/27543 - http://secunia.com/advisories/28732 - http://drupal.org/node/216019
CVE ID: CVE-2008-0569 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0374/references - http://drupal.org/node/216024 - http://secunia.com/advisories/28729 - http://drupal.org/node/216036 - http://www.securi
http://drupal.org/node/216024 - http://secunia.com/advisories/28729 - http://drupal.org/node/216036 - http://www.securityfocus.com/bid/27544 - http://drupal.org/node/216035
CVE ID: CVE-2008-0570 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID providers to spoof OpenID authentication for domains associated with other providers. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0373/references - http://secunia.com/advisories/28717 - http://www.securityfocus.com/bid/27542 - http://drupal.org/node/216022
CVE ID: CVE-2008-0571 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: The point moderation form in the Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5.x-3 before 5.x-3.3 module for Drupal does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and manipulate points. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/216023 - http://www.vupen.com/english/advisories/2008/0375/references - http://secunia.com/advisories/28730
CVE ID: CVE-2008-0572 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in the MM_GLOBALS[home] parameter to (1) acweb/admin_index.php; and (2) ask.inc.php, (3) learn.inc.php, (4) manage.inc.php, (5) mind.inc.php, and (6) sensory.inc.php in include/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5026 - http://www.securityfocus.com/bid/27538
CVE ID: CVE-2008-0573 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and SoftRemote allows local users to gain privileges via a crafted IPSECDRV_IOCTL IOCTL request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5004 - http://www.vupen.com/english/advisories/2008/0333 - http://secunia.com/advisories/28701 - http://www.securityfocus.com/bid/27496 - http://www.securitytracker.com/id?1019282
CVE ID: CVE-2008-0574 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via the sort parameter in a whoisonline action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40084 - http://www.securityfocus.com/archive/1/487312/100/0/threaded - http://www.securityfocus.com/bid/27517 - http://securityreason.com/securityalert/3606 - http://secunia.com/advisories/28684
CVE ID: CVE-2008-0575 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmin privilege level to arbitrary accounts as administrators via an "update member" action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487312/100/0/threaded - http://securityreason.com/securityalert/3606 - http://secunia.com/advisories/28684
CVE ID: CVE-2008-0576 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T07:46:55.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier in the 4.7.x-2.x series, and 4.7.x-1.6 and earlier in the 4.7.x-1.x series for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors that write to summary table pages. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/216062 - http://www.vupen.com/en
Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/216062 - http://www.vupen.com/english/advisories/2008/0376/references - http://secunia.com/advisories/28731