Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3319 State: PUBLISHED Published: 2008-07-25T16:00:00 Last Updated: 2024-08-07T09:37:26.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary links_cookie cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6062 - http://secunia.com/advisories/31068 - http://www.securityfocus.com/bid/30205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43749 - http://www.maianscriptworld.co.uk/news.html - http://www.maianscriptworld.co.uk/free-php-scripts/maian-links/dev
43749 - http://www.maianscriptworld.co.uk/news.html - http://www.maianscriptworld.co.uk/free-php-scripts/maian-links/development/index.html
CVE ID: CVE-2008-3320 State: PUBLISHED Published: 2008-07-25T16:00:00 Last Updated: 2024-08-07T09:37:26.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gbook_cookie cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6061 - http://secunia.com/advisories/31070 - http://www.securityfocus.com/bid/30203 - http://www.maianscriptworld.co.uk/free-php-scripts/maian-guestbook/development/index.html
CVE ID: CVE-2008-3321 State: PUBLISHED Published: 2008-07-25T16:00:00 Last Updated: 2024-08-07T09:37:25.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary uploader_cookie cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31045 - http://www.securityfocus.com/bid/30210 - http://www.maianscriptworld.co.uk/news.html - https://www.exploit-db.com/exploits/6065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43752 - http://www.maianscriptworld.co.uk/free-php-scripts/maian-upl
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/43752 - http://www.maianscriptworld.co.uk/free-php-scripts/maian-uploader/development/index.html
CVE ID: CVE-2008-3322 State: PUBLISHED Published: 2008-07-25T16:00:00 Last Updated: 2024-08-07T09:37:26.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipe_cookie cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43750 - http://www.securityfocus.com/bid/30208 - http://www.maianscriptworld.co.uk/news.html - https://www.exploit-db.com/exploits/6063 - http://secunia.com/advisories/31071
CVE ID: CVE-2008-3323 State: PUBLISHED Published: 2008-07-28T17:00:00 Last Updated: 2024-08-07T09:37:26.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2321 - http://www.security-objectives.com/advisories/SECOBJADV-2008-02.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44047 - http://www.security
.com/advisories/SECOBJADV-2008-02.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44047 - http://www.securityfocus.com/archive/1/494756/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=449929 - http://www.securityfocus.com/bid/30375 - http://securityreason.com/securityalert/4051 - http://cygwin.com/ml/cygwin-announce/2008-08/msg00001.html - http://secunia.com/advisories/31271
CVE ID: CVE-2008-3324 State: PUBLISHED Published: 2008-08-18T17:15:00 Last Updated: 2024-08-07T09:37:26.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PartyGaming PartyPoker client program 121/120 does not properly verify the authenticity of updates, which allows remote man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30693 - http://seclists.org/fulldisclosure/2008/Aug/0302.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44477 - http://www.securityfocus.com/archive/1/495724/100/0/threaded
CVE ID: CVE-2008-3325 State: PUBLISHED Published: 2008-07-25T16:00:00 Last Updated: 2024-08-07T09:37:26.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privileges as other users via a link or IMG tag to the user edit profile page. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=101405 - http://www.procheckup.com/Vulnerability_PR08-16.php - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabi
p://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43964 - http://secunia.com/advisories/31196 - http://www.debian.org/security/2008/dsa-1691 - http://www.securityfocus.com/archive/1/494658/100/0/threaded - http://secunia.com/advisories/31339
CVE ID: CVE-2008-3326 State: PUBLISHED Published: 2008-07-25T16:00:00 Last Updated: 2024-08-07T09:37:25.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter (blog entry title). Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html - http://www.procheckup.com/Vulnerability_PR08-13.php - http://secunia.com/advisories/31196 - http://www.securityfocus.com/bid/30348 - https://www.exploit-db.com/exploits/665
- http://secunia.com/advisories/31196 - http://www.securityfocus.com/bid/30348 - https://www.exploit-db.com/exploits/6653 - http://www.securityfocus.com/archive/1/494656/100/0/threaded - http://www.debian.org/security/2008/dsa-1691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43961 - http://moodle.org/mod/forum/discuss.php?d=101401 - http://secunia.com/advisories/31339
CVE ID: CVE-2008-3327 State: PUBLISHED Published: 2008-07-25T16:00:00 Last Updated: 2024-08-07T09:37:26.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive information via a direct request to (1) blog/blogpage.php and (2) course/report/stats/report.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44032 - http://www.securityfocus.com/archive/1/494657/100/0/threaded - http://moodle.org/mod/forum/discuss.php?d=101403 - http://www.procheckup.com/Vulnerability_PR08-15
4657/100/0/threaded - http://moodle.org/mod/forum/discuss.php?d=101403 - http://www.procheckup.com/Vulnerability_PR08-15.php
CVE ID: CVE-2008-3328 State: PUBLISHED Published: 2008-07-27T22:00:00 Last Updated: 2024-08-07T09:37:26.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html - http://www.securityfocus.com/bid/30400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44016 - http://secunia.com/advisories/31231
tyfocus.com/bid/30400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44016 - http://secunia.com/advisories/31231 - http://secunia.com/advisories/31314 - http://www.vupen.com/english/advisories/2008/2223/references - http://trac.edgewall.org/wiki/ChangeLog
CVE ID: CVE-2008-3329 State: PUBLISHED Published: 2008-07-27T22:00:00 Last Updated: 2024-08-07T09:37:26.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs." Additional Analyst Notes: - CVE Program Container: References: - http://links.twibright.com/download/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/44035 - http://www.securityfocus.com/bid/30422
CVE ID: CVE-2008-3330 State: PUBLISHED Published: 2008-07-27T22:00:00 Last Updated: 2024-08-07T09:37:26.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29745 - http://www.securitytracker.com/id?1020566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44198 - http://www.securitytracker.com/id?1020567 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492578 - http://secunia.com/advisories/34609
CVE ID: CVE-2008-3331 State: PUBLISHED Published: 2008-07-27T23:00:00 Last Updated: 2024-08-07T09:37:27.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filter_target parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42549 - http://www.mantisbt.org/bugs/changelog_page.php - http://secunia.com/advisories/30270 - http://marc.info/?l=bugtraq&m=121130774617956&w=4 - http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml - https://www.expl
arc.info/?l=bugtraq&m=121130774617956&w=4 - http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml - https://www.exploit-db.com/exploits/5657 - http://secunia.com/advisories/31972 - http://www.vupen.com/english/advisories/2008/1598/references - http://www.securityfocus.com/bid/29297 - http://securityreason.com/securityalert/4044
CVE ID: CVE-2008-3332 State: PUBLISHED Published: 2008-07-27T23:00:00 Last Updated: 2024-08-07T09:37:26.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.mantisbt.org/bugs/changelog_page.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/42550 - http://secunia.com/advisories/30270 - http://marc.info/?l=bugtraq&m=121130774617956&w=4 - http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml - https://www.exploit-db.com/exploits/56
121130774617956&w=4 - http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml - https://www.exploit-db.com/exploits/5657 - http://secunia.com/advisories/31972 - http://www.vupen.com/english/advisories/2008/1598/references - http://www.securityfocus.com/bid/29297 - http://securityreason.com/securityalert/4044
CVE ID: CVE-2008-3333 State: PUBLISHED Published: 2008-07-27T23:00:00 Last Updated: 2024-08-07T09:37:26.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30354 - http://www.mantisbt.org/bugs/view.php?id=9154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43984 - http://www.mantisbt.org/bugs/changelog_page.php - https://bugzilla.redhat.com/show_bug.cgi?i
com/vulnerabilities/43984 - http://www.mantisbt.org/bugs/changelog_page.php - https://bugzilla.redhat.com/show_bug.cgi?id=456044 - http://secunia.com/advisories/30270 - http://www.gentoo.org/security/en/glsa/glsa-200809-10.xml - http://secunia.com/advisories/31972 - http://www.securityfocus.com/bid/29297
CVE ID: CVE-2008-3334 State: PUBLISHED Published: 2008-07-27T23:00:00 Last Updated: 2024-08-07T09:37:27.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31216 - http://www.securityfocus.com/bid/30401 - http://community.mybboard.net/thread-33865.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44034
CVE ID: CVE-2008-3335 State: PUBLISHED Published: 2008-07-27T23:00:00 Last Updated: 2024-08-07T09:37:25.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt - http://www.securityfocus.com/bid/30395 - http://punbb.informer.com/ - http://punbb.informer.com/forums/topic/19539/punbb-1219/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/44010 - http://secunia.com/advisories/31219
CVE ID: CVE-2008-3336 State: PUBLISHED Published: 2008-07-27T23:00:00 Last Updated: 2024-08-07T09:37:26.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PunBB before 1.2.19 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) include/parser.php and (2) moderate.php. Additional Analyst Notes: - CVE Program Container: References: - http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt - http://www.securityfocus.com/bid/30396 - http://punbb.informer.com/ - http://punbb.informer.com/forums/topic/19539/punbb-1219/ - http://secunia.com/advisories/31219 - https://exchange.xforc
http://punbb.informer.com/forums/topic/19539/punbb-1219/ - http://secunia.com/advisories/31219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44009
CVE ID: CVE-2008-3337 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:37:26.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00109.html - http://secunia.com/advisories/31401 - http://www.securityfocus.com
s/fedora-package-announce/2008-August/msg00109.html - http://secunia.com/advisories/31401 - http://www.securityfocus.com/bid/30587 - http://secunia.com/advisories/31687 - http://doc.powerdns.com/changelog.html - http://secunia.com/advisories/31448 - https://www.debian.org/security/2008/dsa-1628 - http://doc.powerdns.com/powerdns-advisory-2008-02.html - http://secunia.com/advisories/33264 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00140.html - http://mailman.powerdns.com/pipermail/pdns-users/2008-August/005646.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44253 - http://security.gentoo.org/glsa/glsa-200812-19.xml - http://secunia.com/advisories/3140
loud.com/vulnerabilities/44253 - http://security.gentoo.org/glsa/glsa-200812-19.xml - http://secunia.com/advisories/31407 - http://www.vupen.com/english/advisories/2008/2320
CVE ID: CVE-2008-3338 State: PUBLISHED Published: 2008-08-13T22:00:00 Last Updated: 2024-08-07T09:37:26.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44604 - http://s
ttp://www.vupen.com/english/advisories/2008/2448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44604 - http://secunia.com/advisories/31618 - http://www.securityfocus.com/bid/30836 - http://www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt
CVE ID: CVE-2008-3339 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:26.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: search_result.cfm in Jobbex JobSite allows remote attackers to obtain sensitive information via unspecified vectors that reveal the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://holisticinfosec.org/content/view/78/45/ - http://www.securityfocus.com/bid/30302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43915 - http://support.avidwebtech.com/index.php?_m=news&_a=viewnews&newsid=4 - http://secunia.com/advisories/31089
CVE ID: CVE-2008-3340 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:26.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search_result.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable (possibly the opt parameter.) Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43912 - http://holisticinfosec.org/content/view/78/45/ - http://www.securityfocus.com/bid/30302 - http://support.avidwebtech.com/index.php?_m=news&_a=viewnews&newsid=4 - http://secunia.com/advisories/31089
CVE ID: CVE-2008-3341 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:25.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in search_result.cfm in Jobbex JobSite allow remote attackers to execute arbitrary SQL commands via the (1) jobcountryid and (2) jobstateid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43914 - http://holisticinfosec.org/content/view/78/45/ - http://www.securityfocus.com/bid/30302 - http://sup
erabilities/43914 - http://holisticinfosec.org/content/view/78/45/ - http://www.securityfocus.com/bid/30302 - http://support.avidwebtech.com/index.php?_m=news&_a=viewnews&newsid=4 - http://secunia.com/advisories/31089
CVE ID: CVE-2008-3342 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:25.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_News action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4050 - http://www.vupen.com/english/advisories/2008/2164/references - http://www.securityfocus.com/bid/30307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43919 - http://www.securityfocus.com/archive/1
ocus.com/bid/30307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43919 - http://www.securityfocus.com/archive/1/494556/100/0/threaded - http://secunia.com/advisories/31193
CVE ID: CVE-2008-3343 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:26.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr (trial edition) allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4050 - http://www.vupen.com/english/advisories/2008/2164/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43921 - http://www.securityfocus.com/bid/30307 - http://www.securityfocus.com/archive/1/4945
bmcloud.com/vulnerabilities/43921 - http://www.securityfocus.com/bid/30307 - http://www.securityfocus.com/archive/1/494556/100/0/threaded - http://secunia.com/advisories/31193
CVE ID: CVE-2008-3344 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:25.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a allow remote attackers to inject arbitrary web script or HTML via the (1) ResultHtml, (2) dir, (3) SenderName, (4) RecipientName, (5) SenderMail, and (6) RecipientMail parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30328 - http://secunia.com/advisories/31192 - http://securityreason.com/securityalert/4049 - https://exchange
us.com/bid/30328 - http://secunia.com/advisories/31192 - http://securityreason.com/securityalert/4049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43923 - http://marc.info/?l=bugtraq&m=121665294304071&w=2
CVE ID: CVE-2008-3345 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:26.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30328 - http://secunia.com/advisories/31192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43924 - http://securityreason.com/securityalert/4049 - http://marc.info/?l=bug
hange.xforce.ibmcloud.com/vulnerabilities/43924 - http://securityreason.com/securityalert/4049 - http://marc.info/?l=bugtraq&m=121665294304071&w=2
CVE ID: CVE-2008-3346 State: PUBLISHED Published: 2008-07-28T16:00:00 Last Updated: 2024-08-07T09:37:26.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_detail.php in ShopCart DX allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31156 - https://www.exploit-db.com/exploits/6114 - http://www.vupen.com/english/advisories/2008/2161/references - http://securityreason.com/securityalert/4045 - http://www.securityfocus.com/bid/30337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43945