Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
testing.de/advisories/rt-sa-2008-002.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/41139 - http://marc.info/?l=full-disclosure&m=120523564611595&w=2 - http://secunia.com/advisories/29329 - http://www.securityfocus.com/archive/1/489383/100/0/threaded
CVE ID: CVE-2008-0302 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T07:39:35.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28574 - http://www.ubuntu.com/usn/usn-572-1 - http://packages.debian.org/changelogs/pool/main/a/apt-listchanges/apt-listchanges_2.82/changelog - http://git.madism.org/?p=apt-listchanges.git%3Ba=commitdiff%3Bh=1bcfbf3dc55413bb83a1
es/apt-listchanges_2.82/changelog - http://git.madism.org/?p=apt-listchanges.git%3Ba=commitdiff%3Bh=1bcfbf3dc55413bb83a1782dc9a54515a963fb32 - http://secunia.com/advisories/28513 - http://www.debian.org/security/2008/dsa-1465 - http://www.securityfocus.com/bid/27331
CVE ID: CVE-2008-0303 State: PUBLISHED Published: 2008-02-29T02:00:00 Last Updated: 2024-08-07T07:39:34.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/568073 - http://www.securityfocus.com/bid/28042 - http://jvn.jp/en/jp/JVN10056705/index.html - http://itso.iu.edu/20080229_Canon_MFD_FTP_bounce_attack - http://securitytracker.com/id?1019528 - http://www.usa.canon.com/html/security/pdf/CV
0229_Canon_MFD_FTP_bounce_attack - http://securitytracker.com/id?1019528 - http://www.usa.canon.com/html/security/pdf/CVA-001.pdf - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000013.html
CVE ID: CVE-2008-0304 State: PUBLISHED Published: 2008-02-29T19:00:00 Last Updated: 2024-08-07T07:39:34.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-582-2 - http://www.debian.org/security/2009/dsa-1697 - http://www.mozilla.org/security/announce/2008/mfsa2008-12.html - http://slackware.com/security/viewer.php?l=
/dsa-1697 - http://www.mozilla.org/security/announce/2008/mfsa2008-12.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.445399 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html - http://secunia.com/advisories/29133 - http://www.kb.cert.org/vuls/id/661651 - http://www.ubuntu.com/usn/usn-582-1 - http://secunia.com/advisories/29167 - http://www.securityfocus.com/bid/28012 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://secunia.com/advisories/33433 - http://secuni
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://secunia.com/advisories/33433 - http://secunia.com/advisories/31253 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11075 - http://www.vupen.com/english/advisories/2008/2091/references - http://secunia.com/advisories/29211 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=668 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:062 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://www.debian.org/security/2008/dsa-1621 - http://securitytracker.com/id?1019504 - http://secunia.com/advisories/31043 - http://secunia.com/advisories/290
a-1621 - http://securitytracker.com/id?1019504 - http://secunia.com/advisories/31043 - http://secunia.com/advisories/29098
CVE ID: CVE-2008-0306 State: PUBLISHED Published: 2008-03-11T23:00:00 Last Updated: 2024-08-07T07:39:34.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019570 - http://www.vupen.com/english/advisories/2008/0844/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41104 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670 - http://secunia.com/advisories/29312
s/41104 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670 - http://secunia.com/advisories/29312 - http://www.securityfocus.com/bid/28185
CVE ID: CVE-2008-0307 State: PUBLISHED Published: 2008-03-11T23:00:00 Last Updated: 2024-08-07T07:39:34.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41107 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669 - http://www.securityfocus.com/bid/28183 - http://www.vupen.com/english/advisories/2008/0844/references - http://secunia.com/advisories/29312 - h
s.com/bid/28183 - http://www.vupen.com/english/advisories/2008/0844/references - http://secunia.com/advisories/29312 - http://www.securitytracker.com/id?1019571
CVE ID: CVE-2008-0308 State: PUBLISHED Published: 2008-02-28T20:00:00 Last Updated: 2024-08-07T07:39:35.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp). Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2008.02.27.html - http://www.vupen.com/english/advisories/2008/0680 - http://labs.idefense.com/intelligence/v
ty/Content/2008.02.27.html - http://www.vupen.com/english/advisories/2008/0680 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=666 - http://www.securityfocus.com/bid/27911 - http://secunia.com/advisories/29140 - http://www.securitytracker.com/id?1019503
CVE ID: CVE-2008-0309 State: PUBLISHED Published: 2008-02-28T20:00:00 Last Updated: 2024-08-07T07:39:34.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp). Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2008.02.27.html - http://www.vupen.com/english/adviso
r: References: - http://www.symantec.com/avcenter/security/Content/2008.02.27.html - http://www.vupen.com/english/advisories/2008/0680 - http://www.securityfocus.com/bid/27913 - http://secunia.com/advisories/29140 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667 - http://www.securitytracker.com/id?1019503
CVE ID: CVE-2008-0310 State: PUBLISHED Published: 2008-04-07T17:00:00 Last Updated: 2024-08-07T07:39:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST. Additional Analyst Notes: - CVE Program Container: References: - http://www.sco.com/support/update/download/release.php?rid=324 - http://www.securitytracker.com/id?1019787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41759 - http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt - https://www.e
e.ibmcloud.com/vulnerabilities/41759 - http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt - https://www.exploit-db.com/exploits/5355 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676 - http://secunia.com/advisories/29657
CVE ID: CVE-2008-0311 State: PUBLISHED Published: 2008-04-06T23:00:00 Last Updated: 2024-08-07T07:39:35.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41647 - http://secunia.com/advisories/29631 - http://securitytracker.com/id?1019786 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=675 - http://ww
://securitytracker.com/id?1019786 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=675 - http://www.vupen.com/english/advisories/2008/1100 - http://www.securityfocus.com/bid/28602
CVE ID: CVE-2008-0312 State: PUBLISHED Published: 2008-04-08T17:00:00 Last Updated: 2024-08-07T07:39:35.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id
rd party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019753 - http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html - http://www.securitytracker.com/id?1019751 - http://www.securitytracker.com/id?1019752 - http://secunia.com/advisories/29660 - http://www.vupen.com/english/advisories/2008/1077/references - http://www.securityfocus.com/bid/28507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41629 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=677
CVE ID: CVE-2008-0313 State: PUBLISHED Published: 2008-04-08T17:00:00 Last Updated: 2024-08-07T07:39:34.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.co
WebDAV or (2) SMB share. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019753 - http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html - http://www.securitytracker.com/id?1019751 - http://www.securitytracker.com/id?1019752 - http://secunia.com/advisories/29660 - http://www.vupen.com/english/advisories/2008/1077/references - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41631 - http://www.securityfocus.com/bid/28509
CVE ID: CVE-2008-0314 State: PUBLISHED Published: 2008-04-16T15:00:00 Last Updated: 2024-08-07T07:39:34.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:088 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html - http://security.gentoo.org/glsa/glsa-200805-19.xml - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http:/
.gentoo.org/glsa/glsa-200805-19.xml - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html - http://secunia.com/advisories/29891 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.securityfocus.com/bid/28784 - http://www.vupen.com/english/advisories/2008/2584 - http://www.securitytracker.com/id?1019851 - http://secunia.com/advisories/31882 - http://secunia.com/advisories/29975 - http://secunia.com/advisories/29863 - http://secunia.com/advisories/30328 - http://secunia.com/advisories/29886 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html - http://labs.
a.com/advisories/29886 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=686 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=876 - http://www.kb.cert.org/vuls/id/858595 - http://secunia.com/advisories/30253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41823 - http://secunia.com/advisories/31576 - http://www.vupen.com/english/advisories/2008/1227/references - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.html - http://www.debian.org/security/2008/dsa-1549 - http://svn.clam
chives/fedora-package-announce/2008-April/msg00576.html - http://www.debian.org/security/2008/dsa-1549 - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog - http://kolab.org/security/kolab-vendor-notice-20.txt
CVE ID: CVE-2008-0318 State: PUBLISHED Published: 2008-02-12T19:00:00 Last Updated: 2024-08-07T07:39:34.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27751 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:088 - http://secunia.com/advisories/29048 - http://support.novell.com/techcenter/psdb/512985d2c
visories?name=MDVSA-2008:088 - http://secunia.com/advisories/29048 - http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html - http://secunia.com/advisories/28913 - http://sourceforge.net/project/shownotes.php?release_id=575703 - http://secunia.com/advisories/29026 - http://secunia.com/advisories/28949 - http://bugs.gentoo.org/show_bug.cgi?id=209915 - http://www.vupen.com/english/advisories/2008/0924/references - http://www.vupen.com/english/advisories/2008/0503 - http://www.debian.org/security/2008/dsa-1497 - http://securitytracker.com/id?1019394 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00462.html - http://secunia.com/advisories/2942
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00462.html - http://secunia.com/advisories/29420 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00481.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=658 - http://www.vupen.com/english/advisories/2008/0606 - http://secunia.com/advisories/28907 - http://security.gentoo.org/glsa/glsa-200802-09.xml - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/29001 - http://kolab.org/security/
http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/29001 - http://kolab.org/security/kolab-vendor-notice-19.txt - http://secunia.com/advisories/29060
CVE ID: CVE-2008-0320 State: PUBLISHED Published: 2008-04-17T17:00:00 Last Updated: 2024-08-07T07:39:35.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29913 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:090 - http://www.redhat.com/support/errata/RHSA-2008-0175.html - http://secunia.com/advisories/29852 - http://www.novell.com/linux
://www.redhat.com/support/errata/RHSA-2008-0175.html - http://secunia.com/advisories/29852 - http://www.novell.com/linux/security/advisories/2008_23_openoffice.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41860 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=694 - http://secunia.com/advisories/29864 - http://secunia.com/advisories/29844 - http://security.gentoo.org/glsa/glsa-200805-16.xml - http://secunia.com/advisories/30100 - http://secunia.com/advisories/29987 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:095 - http://www.securitytracker.com/id?1019890 - http://www.openoffice.org/security/cves/CVE-2007-4770.html - http://www.debian.org
/www.securitytracker.com/id?1019890 - http://www.openoffice.org/security/cves/CVE-2007-4770.html - http://www.debian.org/security/2008/dsa-1547 - http://www.vupen.com/english/advisories/2008/1253/references - http://www.openoffice.org/security/cves/CVE-2008-0320.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00448.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231642-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10318 - http://www.redhat.com/support/errata/RHSA-2008-0176.html - http://www.vupen.com/english/advisories/2008/1375/references - http://www.openoffice.org/security/bulletin.html - http://secu
//www.vupen.com/english/advisories/2008/1375/references - http://www.openoffice.org/security/bulletin.html - http://secunia.com/advisories/30179 - http://www.openoffice.org/security/cves/CVE-2007-5745.html - http://www.securityfocus.com/bid/28819 - http://secunia.com/advisories/29871 - http://secunia.com/advisories/29910 - http://www.ubuntu.com/usn/usn-609-1
CVE ID: CVE-2008-0322 State: PUBLISHED Published: 2008-05-13T20:14:00 Last Updated: 2024-08-07T07:39:34.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call with a crafted DeviceObject pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020006 - http://www.vupen.com/english/advisories/2008/1476/references - https://exchange.xforce.i
ecuritytracker.com/id?1020006 - http://www.vupen.com/english/advisories/2008/1476/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42358 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=699 - http://secunia.com/advisories/30203 - http://www.securityfocus.com/bid/29171
CVE ID: CVE-2008-0324 State: PUBLISHED Published: 2008-01-17T02:00:00 Last Updated: 2024-08-07T07:39:34.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39694 - http://www.vupen.com/english/advisories/2008/0170 - http://www.securitytracker.com/id?1019240 - http://secunia.com/advisories/28472 - https://www.exploit-db.com/exploits/4911 - http://www.securi
cker.com/id?1019240 - http://secunia.com/advisories/28472 - https://www.exploit-db.com/exploits/4911 - http://www.securityfocus.com/bid/27289
CVE ID: CVE-2008-0325 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4916 - http://secunia.com/advisories/28522 - http://www.securityfocus.com/bid/27302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39716
CVE ID: CVE-2008-0326 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:34.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to show.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28565 - http://www.securityfocus.com/bid/27302 - https://www.exploit-db.com/exploits/4917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39717
CVE ID: CVE-2008-0327 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4914 - http://www.securityfocus.com/bid/27302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39714 - http://osvdb.org/40330 - http://secunia.com/advisories/28566
CVE ID: CVE-2008-0328 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4915 - http://www.securityfocus.com/bid/27303 - http://secunia.com/advisories/28528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39715
CVE ID: CVE-2008-0329 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:34.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_refuser.php in Admin/, which allows remote attackers to accept comments, delete comments, and delete articles via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39669 - https://www.exploit-db.com/exploits/4912 - http://secunia.com/advisories/28432