Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4868 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:27.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers." Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46325 - http://www.openwall.com/lists/oss-security/2008/10/29/6 - http://secunia.com/advisories/34385 - http://security.gentoo.org/g
://www.openwall.com/lists/oss-security/2008/10/29/6 - http://secunia.com/advisories/34385 - http://security.gentoo.org/glsa/glsa-200903-33.xml - http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016136.html
CVE ID: CVE-2008-4869 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:28.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service (memory consumption) via unknown vectors, aka a "Tcp/udp memory leak." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46326 - http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html - http://www.openwall.com/lists/oss-security/2008/10/29/6 - http://secunia.com/advisories/34385 - http://security.gentoo.org/glsa/glsa-200903-33.xml - http://www.man
2008/10/29/6 - http://secunia.com/advisories/34385 - http://security.gentoo.org/glsa/glsa-200903-33.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2009:297
CVE ID: CVE-2008-4870 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:27.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32164 - http://www.openwall.com/lists/oss-security/2008/10/29/10 - http://secunia.com/advisories/33149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46323 - https://bugzilla.redhat.com/show_bug.cgi?id=436287 - http://security.gentoo
.xforce.ibmcloud.com/vulnerabilities/46323 - https://bugzilla.redhat.com/show_bug.cgi?id=436287 - http://security.gentoo.org/glsa/glsa-200812-16.xml - http://www.redhat.com/support/errata/RHSA-2009-0205.html - http://secunia.com/advisories/33624 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10776
CVE ID: CVE-2008-4871 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:27.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487987/100/200/threaded - http://www.securityfocus.com/bid/27746 - http://securityreason.com/securityalert/4533
CVE ID: CVE-2008-4872 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:27.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the item_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46320 - http://secunia.com/advisories/28780
CVE ID: CVE-2008-4873 State: PUBLISHED Published: 2008-10-31T22:00:00 Last Updated: 2024-08-07T10:31:28.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter during a down_file action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6864 - http://www.securityfocus.com/bid/31972 - http://secunia.com/advisories/32459 - http://securityreason.com/securityalert/4534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46192
CVE ID: CVE-2008-4874 State: PUBLISHED Published: 2008-10-31T23:00:00 Last Updated: 2024-08-07T10:31:27.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5113 - http://secunia.com/advisories/28978 - http://osvdb.org/42940 - http://www.securityfocus.com/bid/27790 - http://www.vupen.com/english/advisories/2008/0583 - http://www.securenetwork.it/ricerca/advisory/
yfocus.com/bid/27790 - http://www.vupen.com/english/advisories/2008/0583 - http://www.securenetwork.it/ricerca/advisory/download/SN-2008-01.txt - http://www.securityfocus.com/archive/1/488127/100/200/threaded - http://securityreason.com/securityalert/4536 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0227.html
CVE ID: CVE-2008-4875 State: PUBLISHED Published: 2008-10-31T23:00:00 Last Updated: 2024-08-07T10:31:27.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access to sensitive files such as (1) save.dat and (2) apply.log, which can contain other credentials such as the Skype username and password. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/explo
username and password. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5113 - http://osvdb.org/42941 - http://secunia.com/advisories/28978 - http://www.securityfocus.com/bid/27790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40534 - http://www.vupen.com/english/advisories/2008/0583 - http://www.securityfocus.com/archive/1/488127/100/200/threaded - http://securityreason.com/securityalert/4536
CVE ID: CVE-2008-4876 State: PUBLISHED Published: 2008-10-31T23:00:00 Last Updated: 2024-08-07T10:31:27.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5113 - http://secunia.com/advisories/28978 - http://www.securityfocus.com/bid/27790 - http://www.vupen.com/english/advisories/2008/0583 - http://
/advisories/28978 - http://www.securityfocus.com/bid/27790 - http://www.vupen.com/english/advisories/2008/0583 - http://www.securityfocus.com/archive/1/488127/100/200/threaded - http://securityreason.com/securityalert/4536
CVE ID: CVE-2008-4877 State: PUBLISHED Published: 2008-10-31T23:00:00 Last Updated: 2024-08-07T10:31:28.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6869 - http://secunia.com/advisories/32440 - http://securityreason.com/securityalert/4535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46193 - http://www.securityfocus.com/bid
n.com/securityalert/4535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46193 - http://www.securityfocus.com/bid/31977
CVE ID: CVE-2008-4878 State: PUBLISHED Published: 2008-10-31T23:00:00 Last Updated: 2024-08-07T10:31:28.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6869 - http://secunia.com/advisories/32440 - http://securityreason.com/securityalert/4535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46222
CVE ID: CVE-2008-4879 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:28.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2008-4880. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49532 - https://www.exploit-db.com/exploits/6953 - http://securityreason.com/securityalert/4543 - http://www.securityfocus.com/bid/32044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46307
CVE ID: CVE-2008-4880 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:28.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-4879. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2976 - http://www.securityfocus.com/bid/32043 - http://securityreason.com/securityalert/4548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46305 - https://www.exploit-db.com/exploits/6958 - http://osvdb.org/49533
CVE ID: CVE-2008-4881 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:28.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32061 - http://osvdb.org/49593 - https://www.exploit-db.com/exploits/6943 - http://secunia.com/advisories/32504
CVE ID: CVE-2008-4882 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:27.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32056 - https://www.exploit-db.com/exploits/6938 - http://osvdb.org/49595 - http://secunia.com/advisories/32504 - http://securityreason.com/securityalert/4540
CVE ID: CVE-2008-4883 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:27.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32055 - https://www.exploit-db.com/exploits/6937 - http://osvdb.org/49594 - http://secunia.com/advisories/32504 - http://www.vupen.com/english/advisories/2008/2988
CVE ID: CVE-2008-4884 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:28.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6948 - http://osvdb.org/49596 - http://www.securityfocus.com/bid/32064 - http://securityreason.com/securityalert/4538
CVE ID: CVE-2008-4885 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:27.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49597 - https://www.exploit-db.com/exploits/6942 - http://www.securityfocus.com/bid/32060 - http://securityreason.com/securityalert/4541 - http://www.vupen.com/english/advisories/2008/2983
CVE ID: CVE-2008-4886 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:28.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the c parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32492 - http://osvdb.org/49501 - http://osvdb.org/49598 - http://securityreason.com/securityalert/4539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46270 - https://www.exploit-db.com/exploits/6952 - http://www.securityfocus.com/bid/32045
CVE ID: CVE-2008-4887 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:28.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) profile page (profile.php) or (2) game page (game.php). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32051 - http://osvdb.org/49498 - http://www.vupen.com/english/advisories/2008/2977 - http://secunia.com/advisories/32484 - http://securityreason.com/se
- http://www.vupen.com/english/advisories/2008/2977 - http://secunia.com/advisories/32484 - http://securityreason.com/securityalert/4544 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46263 - https://www.exploit-db.com/exploits/6957
CVE ID: CVE-2008-4888 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:28.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32051 - http://www.vupen.com/english/advisories/2008/2977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46261 - http://secunia.com/advisories/32484 - https://www.exploit-db
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/46261 - http://secunia.com/advisories/32484 - https://www.exploit-db.com/exploits/6957 - http://osvdb.org/49497
CVE ID: CVE-2008-4889 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:28.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2974 - http://secunia.com/advisories/32458 - http://www.securityfocus.com/bid/32049 - http://securityreason.com/securityalert/4552 - https://www.exploit-db.com/exploits/6961 - https://exchange.xforce.ibmcl
http://securityreason.com/securityalert/4552 - https://www.exploit-db.com/exploits/6961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46268 - http://osvdb.org/49500
CVE ID: CVE-2008-4890 State: PUBLISHED Published: 2008-11-03T23:00:00 Last Updated: 2024-08-07T10:31:27.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in products.php in 1st News 4 Professional (PR 1) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46291 - http://securityreason.com/securityalert/4553 - http://osvdb.org/49534 - http://www.securityfocus.com/bid/32042
CVE ID: CVE-2008-4891 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55 allows remote attackers to inject arbitrary web script or HTML via the hash parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32068 - http://www.planetluc.com/en/news/20081101_xss.php?navurl=/en/news.php - http://secunia.com/advisories/32506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46199 - ht
url=/en/news.php - http://secunia.com/advisories/32506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46199 - http://holisticinfosec.org/content/view/88/45/
CVE ID: CVE-2008-4892 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.planetluc.com/en/news/20081101_xss.php?navurl=/en/news.php - http://www.securityfocus.com/bid/32067 - http://holisticinfosec.org/content/view/86/45/ - h
ss.php?navurl=/en/news.php - http://www.securityfocus.com/bid/32067 - http://holisticinfosec.org/content/view/86/45/ - http://secunia.com/advisories/32505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46200
CVE ID: CVE-2008-4893 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the template_path parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
am Container: References: - http://secunia.com/advisories/32548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46265 - http://www.securityfocus.com/bid/32050
CVE ID: CVE-2008-4894 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the template_path parameter. NOTE: it was later reported that this issue also affects 5.0.12c. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6888 - http://www.securityfocus.com/bid/
tes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6888 - http://www.securityfocus.com/bid/32018 - http://secunia.com/advisories/32548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46264
CVE ID: CVE-2008-4895 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32047 - https://www.exploit-db.com/exploits/6935 - http://www.securityfocus.com/bid/32046 - http://www.vupen.com/english/advisories/2008/2990 - http://osvdb.org/49599
CVE ID: CVE-2008-4896 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the art parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32022 - http://secunia.com/advisories/32542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46258
CVE ID: CVE-2008-4897 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the art parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46257 - http://packetstormsecurity.org/0810-exploits/logzpodcast-sql.txt - http://securityreason.com/securityalert/4555 - https://www.exploit-db.com/exploits/6896 - http://www.securityfocus.com/bid/32022 - http://securi
m/securityalert/4555 - https://www.exploit-db.com/exploits/6896 - http://www.securityfocus.com/bid/32022 - http://securityreason.com/securityalert/4546 - http://secunia.com/advisories/32542
CVE ID: CVE-2008-4898 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32511 - http://www.securityfocus.com/bid/32069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46202 - http://holisticinfosec.org/content/view/85/45/
CVE ID: CVE-2008-4899 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Planetluc RateMe 1.3.3 allows remote attackers to perform unauthorized actions as other users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46201 - http://holisticinfosec.org/content/view/85/45/