Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1283 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T01:21:17.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7262 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://ww
finition/oval%3Aorg.mitre.oval%3Adef%3A7262 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - http://www.zerodayinitiative.com/advisories/ZDI-10-088/ - http://www.securityfocus.com/archive/1/511253/100/0/threaded
CVE ID: CVE-2010-1284 State: PUBLISHED Published: 2010-05-13T21:00:00 Last Updated: 2024-08-07T01:21:17.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/reposit
urity/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6638 - http://www.securityfocus.com/bid/40091
CVE ID: CVE-2010-1285 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T01:21:17.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.sec
vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securitytracker.com/id?1024159 - http://www.securityfocus.com/bid/41232 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6725 - http://www.securityfocus.com/archive/1/512099
CVE ID: CVE-2010-1286 State: PUBLISHED Published: 2010-05-13T21:00:00 Last Updated: 2024-08-07T01:21:17.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/reposit
urity/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7269
CVE ID: CVE-2010-1287 State: PUBLISHED Published: 2010-05-13T21:00:00 Last Updated: 2024-08-07T01:21:17.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/reposit
urity/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6803
CVE ID: CVE-2010-1288 State: PUBLISHED Published: 2010-05-13T21:00:00 Last Updated: 2024-08-07T01:21:17.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7543 - http://www.vupen.com/english/advisories/2010/1128
CVE ID: CVE-2010-1289 State: PUBLISHED Published: 2010-05-13T21:00:00 Last Updated: 2024-08-07T01:21:17.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1290, and CVE-2010-1291. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6652 - http://www.adobe.com/support/security/bulletins/apsb10-12.
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6652 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.securityfocus.com/bid/40087 - http://www.vupen.com/english/advisories/2010/1128
CVE ID: CVE-2010-1290 State: PUBLISHED Published: 2010-05-13T21:00:00 Last Updated: 2024-08-07T01:21:17.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1291. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/reposit
urity/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7154
CVE ID: CVE-2010-1291 State: PUBLISHED Published: 2010-05-13T21:00:00 Last Updated: 2024-08-07T01:21:18.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1290. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7183 - http://www.adobe.com/support/security/bulletins/apsb10-12.
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7183 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.vupen.com/english/advisories/2010/1128
CVE ID: CVE-2010-1292 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T01:21:18.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.securityfocus.com/archive/
dvisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://www.securityfocus.com/archive/1/511242/100/0/threaded - http://www.vupen.com/english/advisories/2010/1128 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7416 - http://www.zerodayinitiative.com/advisories/ZDI-10-089/
CVE ID: CVE-2010-1293 State: PUBLISHED Published: 2010-05-13T17:00:00Z Last Updated: 2024-09-16T22:50:48.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39790 - http://www.vupen.com/english/advisories/2010/1127 - http://www.adobe.com/support/security/bulletins/apsb10-11.html
CVE ID: CVE-2010-1294 State: PUBLISHED Published: 2010-05-13T17:00:00Z Last Updated: 2024-09-16T18:29:49.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39790 - http://www.vupen.com/english/advisories/2010/1127 - http://www.adobe.com/support/security/bulletins/apsb10-11.html
CVE ID: CVE-2010-1295 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T01:21:19.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securityf
com/english/advisories/2010/1636 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.securityfocus.com/bid/41230 - http://www.securitytracker.com/id?1024159 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7504
CVE ID: CVE-2010-1296 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T01:21:18.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) .ASL, (2) .ABR, or (3) .GRD file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4938.php - http://www.zeroscience.mk/codes/psgradient_bof.txt - http://www.zeroscience.mk/codes/psstyle_bof.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58888 - http://www.exploit-db.com/exploits/12752 - http://www.securi
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/58888 - http://www.exploit-db.com/exploits/12752 - http://www.securitytracker.com/id?1024042 - http://www.securityfocus.com/bid/40389 - http://www.exploit-db.com/exploits/12753 - http://www.adobe.com/support/security/bulletins/apsb10-13.html - http://www.exploit-db.com/exploits/12751 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4939.php - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4940.php - http://www.zeroscience.mk/codes/psbrush_bof.txt
CVE ID: CVE-2010-1297 State: PUBLISHED Published: 2010-06-08T18:00:00.000Z Last Updated: 2025-10-22T00:05:52.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
exploited in the wild in June 2010. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2010/1636 - http://community.websense.com/blogs/securitylabs/archive/2010/06/09/having-fun-with-adobe-0-day-exploits.aspx - http://www.vupen.com/english/advisories/2010/1349 - http://www.adobe.com/support/security/bulletins/apsb10-15.html - http://www.vupen.com/english/advisories/2011/0192 - http://www.vupen.com/english/advisories/2010/1421 - http://support.apple.com/kb/HT4435 - http://secunia.com/advisories/40545 - http://blog.zynamics.com/2010/06/09/analyzing-the-currently-exploited-0-day-for-adobe-reader-and-adobe-flash/ - h
0545 - http://blog.zynamics.com/2010/06/09/analyzing-the-currently-exploited-0-day-for-adobe-reader-and-adobe-flash/ - http://www.redhat.com/support/errata/RHSA-2010-0464.html - http://www.vupen.com/english/advisories/2010/1793 - http://secunia.com/advisories/43026 - http://www.vupen.com/english/advisories/2010/1432 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://www.us-cert.gov/cas/techalerts/TA10-162A.html - http://www.adobe.com/support/security/advisories/apsa10-01.html - http://www.kb.cert.org/vuls/id/486225 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.securityfocus.com/bid/40759 - http://securitytracker.com/id?1024085 - http://li
nce/2010//Nov/msg00000.html - http://www.securityfocus.com/bid/40759 - http://securitytracker.com/id?1024085 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://securitytracker.com/id?1024057 - http://securitytracker.com/id?1024086 - http://secunia.com/advisories/40034 - http://www.vupen.com/english/advisories/2010/1434 - http://www.securityfocus.com/bid/40586 - http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html - http://securitytracker.com/id?1024058 - http://www.vupen.com/english/advisories/2010/1348 -
nce/2010-06/msg00000.html - http://securitytracker.com/id?1024058 - http://www.vupen.com/english/advisories/2010/1348 - http://www.exploit-db.com/exploits/13787 - http://www.adobe.com/support/security/bulletins/apsb10-14.html - http://www.us-cert.gov/cas/techalerts/TA10-159A.html - http://secunia.com/advisories/40144 - http://www.redhat.com/support/errata/RHSA-2010-0470.html - http://www.vupen.com/english/advisories/2010/1482 - http://secunia.com/advisories/40026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59137 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 - http://www.vupen.com/english/advisories/2010/1522 - https://oval.cisecurity.org/repository/search/d
d=emr_na-c02273751 - http://www.vupen.com/english/advisories/2010/1522 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7116 - http://www.osvdb.org/65141 - http://www.vupen.com/english/advisories/2010/1453
CVE ID: CVE-2010-1298 State: PUBLISHED Published: 2010-04-06T22:00:00Z Last Updated: 2024-09-17T00:21:41.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to read arbitrary files via directory traversal sequences in the f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38650
CVE ID: CVE-2010-1299 State: PUBLISHED Published: 2010-04-07T18:00:00 Last Updated: 2024-08-07T01:21:18.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) DefineRootToTool parameter to counter.php, (2) PathToRoot parameter to plugins/DPGguestbook/guestbookaction.php and (3) get_popUpResource parameter to backendpopup/popup.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: R
E: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11994 - http://secunia.com/advisories/39185 - http://www.dynpg.org/cms-freeware.php?t=DynPG-Update+4.1.1+noch+einfacher+und+sicherer%21&read_article=169 - http://packetstormsecurity.org/1004-exploits/dynpgcms-rfi.txt - http://www.securityfocus.com/archive/1/510477/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/57491 - http://www.securityfocus.com/bid/39168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57490 - http://osvdb.org/63415
CVE ID: CVE-2010-1300 State: PUBLISHED Published: 2010-04-07T18:00:00 Last Updated: 2024-08-07T01:21:18.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbitrary SQL commands via the calbums parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/yamamah-sql.txt - http://www.securityfocus.com/bid/39690 - http://osvdb.org/63344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59404 - http://www.exploit-db.com/exploits/13857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57415 - http://s
59404 - http://www.exploit-db.com/exploits/13857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57415 - http://secunia.com/advisories/39205 - http://www.exploit-db.com/exploits/11947 - http://www.exploit-db.com/exploits/13849
CVE ID: CVE-2010-1301 State: PUBLISHED Published: 2010-04-07T18:00:00 Last Updated: 2024-08-07T01:21:18.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the host_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57464 - http://www.securityfocus.com/bid/39118 - http://secunia.com/advisories/39236 - http://www.exploit-db.com/exploits/11979 - http://packetstormsecurity.org/1004-exploits/centreon-sql.txt - http://osvdb.org/63347
CVE ID: CVE-2010-1302 State: PUBLISHED Published: 2010-04-07T18:00:00 Last Updated: 2024-08-07T01:21:18.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39108 - http://packetstormsecurity.org/1003-exploits/joomladwgraph-lfi.txt - http://www.exploit-db.com/exploits/11978 - http://secunia.com/advisories/39200 - http://osvdb.org/63345
CVE ID: CVE-2010-1303 State: PUBLISHED Published: 2010-04-08T16:00:00 Last Updated: 2024-08-07T01:21:18.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary (1) names, (2) terms, and (3) filter menus. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/622096 - http://drupal.org/node/758756 - http://www.osvdb.org/63425 - http://secunia.com/advisories/39220
upal.org/node/622096 - http://drupal.org/node/758756 - http://www.osvdb.org/63425 - http://secunia.com/advisories/39220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57445
CVE ID: CVE-2010-1304 State: PUBLISHED Published: 2010-04-08T16:00:00 Last Updated: 2024-08-07T01:21:18.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39174 - http://www.exploit-db.com/exploits/11998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57483
CVE ID: CVE-2010-1305 State: PUBLISHED Published: 2010-04-08T16:00:00 Last Updated: 2024-08-07T01:21:18.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57538 - http://www.exploit-db.com/exploits/12065 - http://packetstormsecurity.org/1004-exploits/
oud.com/vulnerabilities/57538 - http://www.exploit-db.com/exploits/12065 - http://packetstormsecurity.org/1004-exploits/jinventory-lfi.txt - http://www.securityfocus.com/bid/39203 - http://www.vupen.com/english/advisories/2010/0811 - http://extensions.joomla.org/extensions/e-commerce/shopping-cart/7951
CVE ID: CVE-2010-1306 State: PUBLISHED Published: 2010-04-08T16:00:00 Last Updated: 2024-08-07T01:21:18.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57508 - http://www.securityfocus.com/bid/39200 - http://packetstormsecurity.org/1004-exploits/joomlapicasa-lfi.txt - http://
8 - http://www.securityfocus.com/bid/39200 - http://packetstormsecurity.org/1004-exploits/joomlapicasa-lfi.txt - http://www.exploit-db.com/exploits/12058 - http://secunia.com/advisories/39338
CVE ID: CVE-2010-1307 State: PUBLISHED Published: 2010-04-08T16:00:00 Last Updated: 2024-08-07T01:21:18.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39348 - http://packetstormsecurity.org/1004-exploits/joomlaupdater-lfi.txt - http://www.securityfocus.com/bid/39207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57531 - http://www.vupen.com/english/advisories/2010/0806 -