Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2884 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30768 - https://www.exploit-db.com/exploits/5900 - http://www.securityfocus.com/archive/1/493650/100/0/threaded - http://www.securityfocus.com/bid/29873 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
e/1/493650/100/0/threaded - http://www.securityfocus.com/bid/29873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43283
CVE ID: CVE-2008-2885 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in src/browser/resource/categories/resource_categories_view.php in Open Digital Assets Repository System (ODARS) 1.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CLASSES_ROOT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30784 - https://www.exploit-db.com/exploits/5906 - http://www.securityfocus.com/bid/29881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/432
db.com/exploits/5906 - http://www.securityfocus.com/bid/29881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43285
CVE ID: CVE-2008-2886 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the jamroom[jm_dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29854 - http://securityreason.com/securityalert/3961 - http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1130 - http://secunia.com/advisories/30806 - https://www.exploit-db.com/explo
mroom.net/index.php?m=td_tracker&o=view&id=1130 - http://secunia.com/advisories/30806 - https://www.exploit-db.com/exploits/5876 - http://www.jamroom.net/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43299
CVE ID: CVE-2008-2887 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43228 - http://secunia.com/advisories/30811 - http://www.securityfocus.com/bid/29847 - https://www.exploit-db.com/exploits/5872
CVE ID: CVE-2008-2888 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MiGCMS 2.0.5, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[application][app_root] parameter to (1) collection.class.php and (2) content_image.class.php in lib/obj/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30770 - https://www.exploit-db.com/exploits/5901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43250 - http://www.securityfocus.com/bid/29874
CVE ID: CVE-2008-2889 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30663 - http://www.securityfocus.com/bid/29844 - http://www.vupen.com/english/advisories/2008/1898/references - http://secunia.com/advisories/30788 - http://www.wise-ftp.com/news/index.htm
m/english/advisories/2008/1898/references - http://secunia.com/advisories/30788 - http://www.wise-ftp.com/news/index.htm - http://vuln.sg/wiseftp558-en.html
CVE ID: CVE-2008-2890 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:34.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fflteam_id parameter to teams.php, the (2) league_id parameter to leagues.php, and the (3) player_id parameter to players.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29861 - http://securityreason.com/securityalert/3960 - https://www.exploit-db.com/exploits/5889 - http://secunia.com/advisories/30795 - http
ityreason.com/securityalert/3960 - https://www.exploit-db.com/exploits/5889 - http://secunia.com/advisories/30795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43259
CVE ID: CVE-2008-2891 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a category action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43269 - https://www.exploit-db.com/exploits/5878 - http://www.securityfocus.com/bid/29855
CVE ID: CVE-2008-2892 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_payment action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43246 - http://www.securityfocus.com/bid/29869 - https://www.exploit-db.com/exploits/5893
CVE ID: CVE-2008-2893 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30794 - https://www.exploit-db.com/exploits/5890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43247 - http://www.securityfocus.com/bid/29863
CVE ID: CVE-2008-2894 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345. Additional Analyst Notes: - CVE Program Container: References: - http://vuln.sg/classicftp102-en.html - http://secunia.com/advisories/30708 - http://www.vupen.com/english/advisories/2008/1899/references - http://www.securityfocus.com/bid/29846 - https://exchange.xforce.ibmcloud.com/v
nglish/advisories/2008/1899/references - http://www.securityfocus.com/bid/29846 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43230
CVE ID: CVE-2008-2895 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:33.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5884 - http://www.securityfocus.com/bid/29860 - http://secunia.com/advisories/30800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43245
CVE ID: CVE-2008-2896 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:34.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43229 - https://www.exploit-db.com/exploits/5871 - http://www.securityfocus.com/bid/29843
CVE ID: CVE-2008-2897 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:34.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29870 - https://www.exploit-db.com/exploits/5899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43252
CVE ID: CVE-2008-2898 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:34.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/header.php in Hedgehog-CMS 1.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the c_temp_path parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43277 - https://www.exploit-db.com/exploits/5904 - http://secunia.com/advisor
change.xforce.ibmcloud.com/vulnerabilities/43277 - https://www.exploit-db.com/exploits/5904 - http://secunia.com/advisories/30778 - http://osvdb.org/46480
CVE ID: CVE-2008-2899 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:34.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in includes/classes/page.php in j00lean-CMS 1.03 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43288 - http://sourceforge.net/project/shownotes.php?release_id=608171 - http://www.securityfocus.com/bid/29885 - http://secunia.com/advisories/30703
CVE ID: CVE-2008-2900 State: PUBLISHED Published: 2008-06-27T18:00:00 Last Updated: 2024-08-07T09:21:34.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43262 - http://www.securityfocus.com/bid/29864 - https://www.exploit-db.com/exploits/5892
CVE ID: CVE-2008-2901 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated users to execute arbitrary SQL commands via the (1) address parameter to addressbook.php, the (2) getnews parameter to familynews.php, and the (3) poll_id parameter to home.php in a results action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43097 - http://secunia.com/advisories/30680 - https://www.exploit-db.com/exploits/5811 - http://www.
com/vulnerabilities/43097 - http://secunia.com/advisories/30680 - https://www.exploit-db.com/exploits/5811 - http://www.securityfocus.com/bid/29722
CVE ID: CVE-2008-2902 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30672 - http://www.securityfocus.com/bid/29732 - https://www.exploit-db.com/exploits/5821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43106
CVE ID: CVE-2008-2903 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43110 - http://secunia.com/advisories/30646 - https://www.exploit-db.com/exploits/5823 - http://www.securityfocus.com/bid/29721
CVE ID: CVE-2008-2904 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shop.php in Conkurent PHPMyCart allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43084 - http://www.securityfocus.com/bid/29726 - http://secunia.com/advisories/30679
CVE ID: CVE-2008-2905 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5808 - http://secunia.com/advisories/30685 - http://www.securityfocus.com/bid/29716 - http://www.securitytracker.com/id?1020295 - https://exchange.xforce.ibmcloud.
- http://www.securityfocus.com/bid/29716 - http://www.securitytracker.com/id?1020295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43101
CVE ID: CVE-2008-2906 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lista_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the tsk_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29711 - http://secunia.com/advisories/30690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43069 - https://www.exploit-db.com/exploits/5802
CVE ID: CVE-2008-2907 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the eml parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30690 - http://www.securityfocus.com/bid/29701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43060 - https://www.exploit-db.com/exploits/5798
CVE ID: CVE-2008-2908 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remote attackers to execute arbitrary code via a long value of the (1) operation, (2) printer-url, or (3) target-frame parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1837/references - http://www.securitytracker.com/id?1020303 - https://exchange.xforce.
vupen.com/english/advisories/2008/1837/references - http://www.securitytracker.com/id?1020303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43085 - http://www.kb.cert.org/vuls/id/145313 - http://secunia.com/advisories/30709 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028061.html - http://www.securityfocus.com/bid/29736
CVE ID: CVE-2008-2909 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the searchtype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29694 - http://www.securitytracker.com/id?1020294 - https://www.exploit-db.com/exploits/5794 - http://secunia.com/advisories/30699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43064
CVE ID: CVE-2008-2910 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DXTTextOutEffect ActiveX control (aka the Text-Effect DXT Filter), as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43036 - http://www.securityfocus.com/bid/29693 - https://www.exploit-db.com/exploits/5793 - http://secunia.com/advisories/30696
CVE ID: CVE-2008-2911 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via the (1) contenido, (2) Belang, and (3) username parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29719 - https://www.exploit-db.com/exploits/5810 - http://secunia.com/advisories/30683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43107
CVE ID: CVE-2008-2912 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the (1) contenido_path parameter to (a) contenido/backend_search.php; the (2) cfg[path][contenido] parameter to (b) move_articles.php, (c) move_old_stats.php, (d) optimize_database.php, (e) run_newsletter_job.php, (f) send_reminder.php, (g) session_cleanup.php, and (h) setfrontenduserstate.php in contenido/cronjobs/, and (i) includes/include.newsletter_jobs_subnav.php and (j) plugins/conte
tfrontenduserstate.php in contenido/cronjobs/, and (i) includes/include.newsletter_jobs_subnav.php and (j) plugins/content_allocation/includes/include.right_top.php in contenido/; the (3) cfg[path][templates] parameter to (k) includes/include.newsletter_jobs_subnav.php and (l) plugins/content_allocation/includes/include.right_top.php in contenido/; and the (4) cfg[templates][right_top_blank] parameter to (m) plugins/content_allocation/includes/include.right_top.php and (n) contenido/includes/include.newsletter_jobs_subnav.php in contenido/, different vectors than CVE-2006-5380. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29719 - https://w
380. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29719 - https://www.exploit-db.com/exploits/5810 - http://secunia.com/advisories/30683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43103
CVE ID: CVE-2008-2913 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in func.php in Devalcms 1.4a, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the currentpath parameter, in conjunction with certain ... (triple dot) and ..... sequences in the currentfile parameter, to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30585 - https://www.exploit-db.com/exploits/5822 - http://www.securityfocus.com/bid/29728 - https://exchange.xf
visories/30585 - https://www.exploit-db.com/exploits/5822 - http://www.securityfocus.com/bid/29728 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43116
CVE ID: CVE-2008-2914 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the (1) kw or (2) position parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30686 - https://www.exploit-db.com/exploits/5807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43092 - http://www.securityfocus.com/bid/29713 - http://www
/5807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43092 - http://www.securityfocus.com/bid/29713 - http://www.securityfocus.com/archive/1/493374/100/0/threaded
CVE ID: CVE-2008-2915 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:34.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the (1) position or (2) kw parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.spanish-hackers.com/vuln/joss-42.txt - https://www.exploit-db.com/exploits/5809 - http://secunia.com/advisories/30684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43094 - http://www.securityfocus.com/bid/29717
CVE ID: CVE-2008-2916 State: PUBLISHED Published: 2008-06-30T18:00:00 Last Updated: 2024-08-07T09:21:33.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to showcategory.php and the (2) id parameter to software-description.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43071 - http://secunia.com/advisories/30689 - https://www.exploit-db.com/exploits/5804 - http://e-rdc.org/v