Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
3z.de/index.php?/214-KORAMISADV2012-001-Serendipity-1.6-Backend-Cross-Site-Scripting-and-SQL-Injection-vulnerability.html - http://www.securityfocus.com/bid/53418 - http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt - http://www.openwall.com/lists/oss-security/2012/05/09/2 - http://blog.s9y.org/archives/240-Serendipity-1.6.1-released.html - http://archives.neohapsis.com/archives/bugtraq/2012-05/0037.html
CVE ID: CVE-2012-2333 State: PUBLISHED Published: 2012-05-14T22:00:00 Last Updated: 2024-08-06T19:34:25.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53476 - http://secunia.com/advisories/49116 - http://marc.info/?l=bugtraq&
eferences: - http://www.securityfocus.com/bid/53476 - http://secunia.com/advisories/49116 - http://marc.info/?l=bugtraq&m=134919053717161&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html - http://secunia.com/advisories/51312 - http://rhn.redhat.com/errata/RHSA-2012-1308.html - http://cvs.openssl.org/chngview?cn=22538 - http://rhn.redhat.com/errata/RHSA-2012-1307.html - http://marc.info/?l=bugtraq&m=136432043316835&w=2 - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://secunia.com/advisories/49208 - http://www.kb.cert.org/vuls/id/737740 - http://lists.opensuse.org/opensuse-security-a
p://secunia.com/advisories/49208 - http://www.kb.cert.org/vuls/id/737740 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html - https://bugzilla.redhat.com/show_bug.cgi?id=820686 - http://cvs.openssl.org/chngview?cn=22547 - http://rhn.redhat.com/errata/RHSA-2012-1306.html - http://secunia.com/advisories/50768 - http://secunia.com/advisories/49324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75525 - http://marc.info/?l=bugtraq&m=136432043316835&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html - http://www.openssl.org/news/secadv_20120510.txt - http://www.securitytracker.com/id?1027057 - http://lists.fedoraproject.org/pipermail/
ssl.org/news/secadv_20120510.txt - http://www.securitytracker.com/id?1027057 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html - http://www.cert.fi/en/reports/2012/vulnerability641549.html - http://marc.info/?l=bugtraq&m=134919053717161&w=2 - http://www.debian.org/security/2012/dsa-2475 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:073 - http://rhn.redhat.com/errata/RHSA-2012-0699.html
CVE ID: CVE-2012-2334 State: PUBLISHED Published: 2012-06-19T20:00:00 Last Updated: 2024-08-06T19:34:23.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60799 - https://bugzilla.redhat.com/show_bug.cgi?id=821803 - http://www.gentoo.org
nces: - http://secunia.com/advisories/60799 - https://bugzilla.redhat.com/show_bug.cgi?id=821803 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2012:090 - http://archives.neohapsis.com/archives/bugtraq/2012-05/0091.html - http://cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502e - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html - http://www.securityfocus.com/bid/53570 - http://www.openwall.com/lists/oss-security/2012/05/28/2 - http://securitytracker.com/id?1027070 - http://www.libreoffice.org/advisories/cve-2012-2334/ - http://www.debian.org/security/20
ecuritytracker.com/id?1027070 - http://www.libreoffice.org/advisories/cve-2012-2334/ - http://www.debian.org/security/2012/dsa-2487 - http://secunia.com/advisories/46992 - http://cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533da - http://secunia.com/advisories/47244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75695 - http://secunia.com/advisories/49392 - http://secunia.com/advisories/49373 - http://rhn.redhat.com/errata/RHSA-2012-0705.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:091 - http://www.openoffice.org/security/cves/CVE-2012-2334.html - http://www.osvdb.org/82517
CVE ID: CVE-2012-2335 State: PUBLISHED Published: 2012-05-11T10:00:00 Last Updated: 2024-08-06T19:34:23.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code by leveraging improper interaction between the PHP sapi/cgi/cgi_main.c component and a query string beginning with a +- sequence. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=61910 - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00004.html - http://lists.opensuse.org/opensuse-secur
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html - http://secunia.com/advisories/49014 - http://git.php.net/?p=php-src.git%3Ba=blob%3Bf=sapi/cgi/cgi_main.c%3Bh=a7ac26f0#l1569 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 - http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ - http://www.kb.cert.org/vuls/id/520827 - http://www.php.net/archive/2012.php#id2012-05-06-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75652 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE ID: CVE-2012-2336 State: PUBLISHED Published: 2012-05-11T10:00:00 Last Updated: 2024-08-06T19:34:23.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823. Additional Analyst Notes: - CVE Program Container: Referenc
ility exists because of an incomplete fix for CVE-2012-1823. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html - https://bugs.php.net/patch-display.php?bug_id=61910&patch=CVE-2012-1823.patch&revision=1336251592&display=1 - http://secunia.com/advisories/49014 - https://bugs.php.net/bug.php?id=61910 - http://www.php.net/archive/2012.php#id2012-05-08-1 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 -
splay?docId=emr_na-c03839862 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 - http://www.php.net/ChangeLog-5.php#5.4.3
CVE ID: CVE-2012-2337 State: PUBLISHED Published: 2012-05-18T18:00:00 Last Updated: 2024-08-06T19:34:24.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=820677 - http://secunia.com/advisories/49219 - http://secunia.com/advisories/49948 - http://secunia.com/advisories/49244 - http://www.man
ecunia.com/advisories/49219 - http://secunia.com/advisories/49948 - http://secunia.com/advisories/49244 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:079 - http://secunia.com/advisories/49291 - http://www.debian.org/security/2012/dsa-2478 - http://www.securitytracker.com/id?1027077 - https://www.suse.com/security/cve/CVE-2012-2337/ - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081432.html - http://www.sudo.ws/sudo/alerts/netmask.html
CVE ID: CVE-2012-2338 State: PUBLISHED Published: 2012-05-21T20:00:00Z Last Updated: 2024-09-16T19:46:33.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to picture.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/11/1 - http://www.securityfocus.com/bid/53463 - http://www.openwall.com/lists/oss-security/2012/05/10/5 - http://redmine.ulysses.fr/issues/250 - http://redmine.ulysses.fr/projects/galette/repository/revisi
urity/2012/05/10/5 - http://redmine.ulysses.fr/issues/250 - http://redmine.ulysses.fr/projects/galette/repository/revisions/8c13ec159ba
CVE ID: CVE-2012-2339 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-06T19:34:25.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53440 - http://drupal.org/node/1569482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75503 - http://secunia.com/advisories/49074 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupalcod
75503 - http://secunia.com/advisories/49074 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupalcode.org/project/glossary.git/commitdiff/c6cc3ac - http://www.openwall.com/lists/oss-security/2012/05/11/2 - http://www.openwall.com/lists/oss-security/2012/05/10/6 - http://drupal.org/node/1568156 - http://www.openwall.com/lists/oss-security/2012/06/15/6
CVE ID: CVE-2012-2340 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-06T19:34:23.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" permission to modify the module settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1569508 - http://secunia.com/advisories/49070 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://drupalcode.org/project/contact_forms.git/commitdiff/d11ce2b - http
openwall.com/lists/oss-security/2012/06/14/3 - http://drupalcode.org/project/contact_forms.git/commitdiff/d11ce2b - http://www.openwall.com/lists/oss-security/2012/05/11/2 - http://www.securityfocus.com/bid/53441 - http://www.openwall.com/lists/oss-security/2012/05/10/6 - http://drupal.org/node/1569352 - http://www.openwall.com/lists/oss-security/2012/06/15/6
CVE ID: CVE-2012-2341 State: PUBLISHED Published: 2012-05-18T22:00:00 Last Updated: 2024-08-06T19:34:23.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49060 - http://drupal.org/node/1243604 - http://drupal.org/node/1569512 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://www.openwall.com/lists/oss-security/2012/05/11/2 - http://www.securityfocu
.com/lists/oss-security/2012/06/14/3 - http://www.openwall.com/lists/oss-security/2012/05/11/2 - http://www.securityfocus.com/bid/53452 - http://www.openwall.com/lists/oss-security/2012/05/10/6 - http://www.openwall.com/lists/oss-security/2012/06/15/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75504
CVE ID: CVE-2012-2342 State: REJECTED Published: 2012-05-21T20:00:00Z Last Updated: 2024-09-16T16:39:05.000Z Description: No description available.
CVE ID: CVE-2012-2343 State: REJECTED Published: 2012-05-21T20:00:00Z Last Updated: 2024-09-17T00:16:51.710Z Description: No description available.
CVE ID: CVE-2012-2344 State: REJECTED Published: 2012-05-21T20:00:00Z Last Updated: 2024-09-16T22:40:42.587Z Description: No description available.
CVE ID: CVE-2012-2345 State: REJECTED Published: 2012-05-21T20:00:00Z Last Updated: 2024-09-17T01:06:23.103Z Description: No description available.
CVE ID: CVE-2012-2346 State: REJECTED Published: 2012-05-21T20:00:00Z Last Updated: 2024-09-17T03:13:40.973Z Description: No description available.
CVE ID: CVE-2012-2347 State: REJECTED Published: 2012-05-21T20:00:00Z Last Updated: 2024-09-17T03:18:40.941Z Description: No description available.
CVE ID: CVE-2012-2348 State: REJECTED Published: 2012-05-21T20:00:00Z Last Updated: 2024-09-17T00:32:16.513Z Description: No description available.
CVE ID: CVE-2012-2349 State: REJECTED Published: 2012-05-21T19:00:00Z Last Updated: 2024-09-17T00:11:46.205Z Description: No description available.
CVE ID: CVE-2012-2350 State: PUBLISHED Published: 2019-11-21T13:54:54 Last Updated: 2024-08-06T19:34:25.396Z Vendors: pam-shield Products: pam-shield Problem Types: default configuration does not take any action Description: pam_shield before 0.9.4: Default configuration does not perform protective action Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-2350 - https://access.redhat.com/security/cve/cve-2012-2350 - http://www.openwall.com/lists/oss-security/2012/05/12/3
CVE ID: CVE-2012-2351 State: PUBLISHED Published: 2012-07-12T20:00:00Z Last Updated: 2024-09-16T17:22:53.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to false, which allows remote SAML IdP servers to spoof users of other SAML IdP servers by using the same internal username. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/932909 - http://gitorious.org/mahara/mahara/commit/f07be6020e70fa8f53cd77fdcd63e7fd7ff8aaea - http://www.debian.org/security/2012/dsa-2467 - http://www.openwall.com/li
mit/f07be6020e70fa8f53cd77fdcd63e7fd7ff8aaea - http://www.debian.org/security/2012/dsa-2467 - http://www.openwall.com/lists/oss-security/2012/05/11/9 - http://www.openwall.com/lists/oss-security/2012/05/12/4
CVE ID: CVE-2012-2352 State: PUBLISHED Published: 2012-05-31T17:00:00 Last Updated: 2024-08-06T19:34:25.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions. Additional Analyst Notes: - CVE Program Container: References: - https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa&r1=6706&r2=7358&pathrev=7358 - http://www.debian.org/security/20
hes/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa&r1=6706&r2=7358&pathrev=7358 - http://www.debian.org/security/2012/dsa-2477 - http://www.openwall.com/lists/oss-security/2012/05/12/8 - http://www.securityfocus.com/bid/53503 - http://www.openwall.com/lists/oss-security/2012/05/11/8 - http://www.openwall.com/lists/oss-security/2012/05/12/2 - http://www.osvdb.org/81890 - https://www.sympa.org/distribution/latest-stable/NEWS - http://secunia.com/advisories/49045 - http://secunia.com/advisories/49237
CVE ID: CVE-2012-2353 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31923
CVE ID: CVE-2012-2354 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmessages capability requirement and read arbitrary messages by using the "Recent conversations" feature with a modified parameter in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=48e03792ca8faa2d781f9ef74606f3b3f0d3baec - http://openwall.com/lists/oss-security/2012/05/23/2
CVE ID: CVE-2012-2355 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use* capability requirements and add arbitrary questions to a quiz via the questions feature. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-32240
CVE ID: CVE-2012-2356 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:23.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question action. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-32239
CVE ID: CVE-2012-2357 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:23.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not use HTTPS, which allows remote attackers to obtain credentials by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=895e76ea51c462c18ad66e0761ad76cd26a63ecf - http://openwall.com/lists/oss-security/2012/05/23/2
CVE ID: CVE-2012-2358 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the database by leveraging the student role and editing database activity entries that already exist. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31811
CVE ID: CVE-2012-2359 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:23.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own capabilities, as demonstrated by obtaining the backup:userinfo capability. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=0f75e1e6272db0303abc8e27362e5c3a1344b82f
CVE ID: CVE-2012-2360 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is inserted into a page title. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-32018
CVE ID: CVE-2012-2361 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:23.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the name field (aka the service name) to admin/webservice/service.php. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31694
CVE ID: CVE-2012-2362 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x before 1.9.18, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted parameter to blog/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/82069 - https://moodle.org/mod/forum/discuss.php?d=203052 - http://openwall.com/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=038131c8b5614f18c14d964dc53b69
om/lists/oss-security/2012/05/23/2 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=038131c8b5614f18c14d964dc53b6960ae6c30d8
CVE ID: CVE-2012-2363 State: PUBLISHED Published: 2012-07-21T01:00:00 Last Updated: 2024-08-06T19:34:25.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=refs%2Fheads%2FMOODLE_19_STABLE&st=commit&s=MDL-31746 - http://openwall.com/lists/oss-security/2012/05/23/2