Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5176 State: PUBLISHED Published: 2008-11-20T15:00:00 Last Updated: 2024-08-07T10:40:17.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/adv/wincomalpd-adv.txt - http://www.securityfocus.com/archive/1/487507/100/200/threaded - http://www.vupen.com/english/advisories/2008/0410 - http://secunia.co
urityfocus.com/archive/1/487507/100/200/threaded - http://www.vupen.com/english/advisories/2008/0410 - http://secunia.com/advisories/28763 - http://www.securityfocus.com/bid/27614 - http://securityreason.com/securityalert/4610 - http://aluigi.org/poc/wincomalpd.zip
CVE ID: CVE-2008-5177 State: PUBLISHED Published: 2008-11-20T15:00:00 Last Updated: 2024-08-07T10:40:17.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to (1) execute arbitrary code on a Linux platform, related to libytlindtb.so; or (2) cause a denial of service (application crash) and possibly execute arbitrary code on a Windows platform, related to ytwindtb.dll; via a long username field during authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32246 - http://secunia.com/advisories/32262 - http://osvdb.org/4974
iner: References: - http://www.securityfocus.com/bid/32246 - http://secunia.com/advisories/32262 - http://osvdb.org/49743 - http://osvdb.org/49744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46515 - http://www.insight-tech.org/xploits/yosemiteStackOverflowExploit.zip - http://www.insight-tech.org/index.php?p=Yosemite-backup-8-7-DtbClsLogin-Buffer-Overflow-Vulnerability
CVE ID: CVE-2008-5178 State: PUBLISHED Published: 2008-11-20T15:00:00 Last Updated: 2024-08-07T10:40:17.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI. NOTE: this might overlap CVE-2008-5680. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32323 - http://www.vupen.com/english/advisories/2008/3183 - http://archives.neohapsis.com/archives/bugtraq/2008-11/0110.html - http://secunia.com/advisories/32752 - https://www.exploit-db.com/exploits/7135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46653 -
visories/32752 - https://www.exploit-db.com/exploits/7135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46653 - http://secunia.com/advisories/34294 - http://osvdb.org/49882 - http://security.gentoo.org/glsa/glsa-200903-30.xml - http://www.opera.com/support/kb/view/922/
CVE ID: CVE-2008-5179 State: PUBLISHED Published: 2008-11-20T15:00:00 Last Updated: 2024-08-07T10:40:17.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote attackers to cause a denial of service (crash) via a crafted Real-time Transport Control Protocol (RTCP) receiver report packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.voipshield.com/research-details.php?id=132 - http://www.securityfocus.com/bid/32341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46670 - http://www.securitytracker.com/id?1021294
CVE ID: CVE-2008-5180 State: PUBLISHED Published: 2008-11-20T15:00:00 Last Updated: 2024-10-15T14:25:12.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/7262 - http://www.securityfocus.com/bid/39221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46673 - http://www.securitytracker.com/id?1021294 - http://www.exploit-
s://exchange.xforce.ibmcloud.com/vulnerabilities/46673 - http://www.securitytracker.com/id?1021294 - http://www.exploit-db.com/exploits/12079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57581 - http://www.voipshield.com/research-details.php?id=133 - http://secunia.com/advisories/32940
CVE ID: CVE-2008-5181 State: PUBLISHED Published: 2008-11-20T15:00:00 Last Updated: 2024-08-07T10:40:17.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Communicator allows remote attackers to cause a denial of service (application or device outage) via instant messages containing large numbers of emoticons. Additional Analyst Notes: - CVE Program Container: References: - http://www.voipshield.com/research-details.php?id=131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46671 - http://www.securitytracker.com/id?1021294
CVE ID: CVE-2008-5182 State: PUBLISHED Published: 2008-11-21T02:00:00 Last Updated: 2024-08-07T10:40:17.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32998 - http://www.securityfocus.com/archive/1/499044/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2009-0225.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10584 - http://secunia.com/ad
l - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10584 - http://secunia.com/advisories/33706 - https://issues.rpath.com/browse/RPL-2915 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc5 - http://secunia.com/advisories/33641 - http://www.redhat.com/support/errata/RHSA-2009-0053.html - http://www.securityfocus.com/bid/33503 - http://secunia.com/advisories/33756 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html - http://secunia.com/advisories/33348 - http://secunia.com/advisories/33623 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332 - http://secunia.com/advisories/33083 - https://usn.ubuntu
/33623 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332 - http://secunia.com/advisories/33083 - https://usn.ubuntu.com/714-1/ - http://www.ubuntu.com/usn/usn-715-1 - http://secunia.com/advisories/33854 - http://secunia.com/advisories/33704 - http://www.debian.org/security/2008/dsa-1681 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
CVE ID: CVE-2008-5183 State: PUBLISHED Published: 2008-11-21T02:00:00 Last Updated: 2024-08-07T10:40:17.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7150 - http://secunia.com/advisories/33937 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586 - ht
com/advisories/33937 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10586 - http://www.openwall.com/lists/oss-security/2008/11/20/1 - http://www.openwall.com/lists/oss-security/2008/11/19/3 - http://www.openwall.com/lists/oss-security/2008/11/19/4 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.debian.org/security/2011/dsa-2176 - http://www.securitytracker.com/id?1021396 - http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/ - http://www.vupen.com/english/advisories/2011/0535 - http://www.vupen.com/english/advisories/2009/0422 - http://www.securityfocus.com/bid/32419 - htt
/advisories/2011/0535 - http://www.vupen.com/english/advisories/2009/0422 - http://www.securityfocus.com/bid/32419 - http://www.redhat.com/support/errata/RHSA-2008-1029.html - http://secunia.com/advisories/43521 - http://lab.gnucitizen.org/projects/cups-0day - https://exchange.xforce.ibmcloud.com/vulnerabilities/46684 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:028 - https://bugs.launchpad.net/ubuntu/+source/cups/+bug/298241
CVE ID: CVE-2008-5184 State: PUBLISHED Published: 2008-11-21T02:00:00 Last Updated: 2024-08-07T10:40:17.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the (1) add and (2) cancel RSS subscription functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/11/19/3 - http://www.gnucitizen.org/blog/pwning-ubuntu-via-cups/ - http://www.cups.org/str.php?L2774 - http://lists.opensuse.org/opensuse
www.gnucitizen.org/blog/pwning-ubuntu-via-cups/ - http://www.cups.org/str.php?L2774 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:028
CVE ID: CVE-2008-5185 State: PUBLISHED Published: 2008-11-21T02:00:00 Last Updated: 2024-08-07T10:40:17.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46769 - http://geshi.svn.sourceforge.net/viewvc/geshi/trunk/geshi-1.0.X/src/geshi.php?r1=1321&r2=1322&view=patch - http://www.open
tp://geshi.svn.sourceforge.net/viewvc/geshi/trunk/geshi-1.0.X/src/geshi.php?r1=1321&r2=1322&view=patch - http://www.openwall.com/lists/oss-security/2008/11/20/4
CVE ID: CVE-2008-5186 State: PUBLISHED Published: 2008-11-21T02:00:00 Last Updated: 2024-08-07T10:40:17.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path ($path variable). NOTE: this issue has been disputed by a vendor, stating that only a static value is used, so this is not a vulnerability in GeSHi. Separate CVE identifiers would be created for web applications that integrate GeSHi in a way that allows control of the default language path Additional Analyst No
or web applications that integrate GeSHi in a way that allows control of the default language path Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46271 - http://sourceforge.net/project/shownotes.php?release_id=637321 - http://secunia.com/advisories/32559 - http://www.securityfocus.com/bid/32070 - http://www.openwall.com/lists/oss-security/2008/11/10/8 - http://osvdb.org/49488
CVE ID: CVE-2008-5187 State: PUBLISHED Published: 2008-11-21T02:00:00 Last Updated: 2024-08-07T10:40:17.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:019 - http://www.debian.org/security/2008/dsa-1672 - http://secunia.com/advisories/32949
rity/advisories?name=MDVSA-2009:019 - http://www.debian.org/security/2008/dsa-1672 - http://secunia.com/advisories/32949 - http://www.openwall.com/lists/oss-security/2008/11/20/5 - http://secunia.com/advisories/32963 - http://secunia.com/advisories/33323 - http://www.ubuntu.com/usn/USN-683-1 - http://osvdb.org/49970 - http://secunia.com/advisories/32796 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html - http://secunia.com/advisories/33568 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15 - http://www.securityfocus.com/bid/32371 - http://security.gentoo.org/glsa/glsa-200812-23.xml - http://www.vupen.com/english/advisories/2008/3212 - http://secunia.com/a
//security.gentoo.org/glsa/glsa-200812-23.xml - http://www.vupen.com/english/advisories/2008/3212 - http://secunia.com/advisories/32843 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.html
CVE ID: CVE-2008-5188 State: PUBLISHED Published: 2008-11-21T02:00:00 Last Updated: 2024-08-07T10:40:17.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/23/3 - http://www.openwall.com/lists/oss-security/2008/10/29/7 - https://launchpad.net/bugs/287908 - http://git.kernel.org/?p=linux/kern
w.openwall.com/lists/oss-security/2008/10/29/7 - https://launchpad.net/bugs/287908 - http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53 - http://osvdb.org/50355 - http://www.openwall.com/lists/oss-security/2008/10/29/4 - http://secunia.com/advisories/32382 - http://osvdb.org/50354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46073 - http://osvdb.org/49334 - http://rhn.redhat.com/errata/RHSA-2009-1307.html - http://secunia.com/advisories/36552 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607 - http://osvdb.org/50353
CVE ID: CVE-2008-5189 State: PUBLISHED Published: 2008-11-21T11:00:00 Last Updated: 2024-08-07T10:40:17.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/rails/rails/commit/7282ed863ca7e6f928bae9162c9a63a98775a19d - http://www.securityfocus.com/bid/32359 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html - http://weblog.rubyonrails.org/2008/10/19/rails-2-0-5-redirect_
se.org/opensuse-security-announce/2008-12/msg00002.html - http://weblog.rubyonrails.org/2008/10/19/rails-2-0-5-redirect_to-and-offset-limit-sanitizing - http://weblog.rubyonrails.org/2008/10/19/response-splitting-risk
CVE ID: CVE-2008-5190 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1971/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43452 - http://secunia.com/advisories/30712 - http://www.securityfocus.com/bid/30002 - https://www.exploit-db.com/exploits/5970 - http://securityreason.com/securityalert/4619
CVE ID: CVE-2008-5191 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the (1) poll_id parameter to poll.php and the (2) sp_id parameter to staticpages.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30865 - http://www.securityfocus.com/bid/29996 - http://www.securityfocus.com/bid/66315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43450 - https://www.exploit-db.com/exploits/5960 - http://securityreason.com/securityalert/4
bmcloud.com/vulnerabilities/43450 - https://www.exploit-db.com/exploits/5960 - http://securityreason.com/securityalert/4623
CVE ID: CVE-2008-5192 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4621 - http://secunia.com/advisories/30874 - https://www.exploit-db.com/exploits/5958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43449 - http://www.securityfocus.com/bi
loit-db.com/exploits/5958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43449 - http://www.securityfocus.com/bid/29998
CVE ID: CVE-2008-5193 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might overlap CVE-2007-4024. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4621 - http://secunia.com/advisories/30874 - https://www.exploit-db.com/exploits/5958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43451 - http://www.securityfocus.com/bid/29998
CVE ID: CVE-2008-5194 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager (obm) 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30004 - https://www.exploit-db.com/exploits/5964 - http://secunia.com/advisories/30842 - http://www.vupen.com/english/advisories/2008/1976/references - http://securityreason.com/securityalert/4622 - https://exchange.xforce.ibmcloud.com/vulnerabilities
08/1976/references - http://securityreason.com/securityalert/4622 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43448
CVE ID: CVE-2008-5195 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL commands via (1) the recid parameter to cms/form/read.php, (2) the uname parameter to cms/index.php, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30003 - http://www.vupen.com/english/advisories/2008/1973/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43453 - https://www.exploit-db.com/exploits/5967 - http://security
https://exchange.xforce.ibmcloud.com/vulnerabilities/43453 - https://www.exploit-db.com/exploits/5967 - http://securityreason.com/securityalert/4620
CVE ID: CVE-2008-5196 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43462 - http://www.securityfocus.com/bid/29976 - http://securityreason.com/securityalert/4639
CVE ID: CVE-2008-5197 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detail_adverts action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4640 - http://www.securityfocus.com/bid/29995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43561 - https://www.exploit-db.com/exploits/5961
CVE ID: CVE-2008-5198 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in memberlist.php in Acmlmboard 1.A2 allows remote attackers to execute arbitrary SQL commands via the pow parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5969 - http://www.securityfocus.com/bid/30007 - http://www.vupen.com/english/advisories/2008/1972/references - http://securityreason.com/securityalert/4641
CVE ID: CVE-2008-5199 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:40:17.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the gorumDir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493666 - http://securityvulns.ru/Ndocument286.html - http://www.securityfocus.com/bid/29944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43374 - http://securityreason.com/securityalert/4642 - http://marc.info/?l=bugtraq&m=1214411
bmcloud.com/vulnerabilities/43374 - http://securityreason.com/securityalert/4642 - http://marc.info/?l=bugtraq&m=121441106806293&w=2
CVE ID: CVE-2008-5200 State: PUBLISHED Published: 2008-11-21T17:00:00 Last Updated: 2024-08-07T10:49:10.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43469 - https://www.exploit-db.com/exploits/5966 - http://www.securityfocus.com/bid/30006 - http://securityreason.com/securityalert/4643 - http://www.vupen.com/english/advisories/2008/1974/references