Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
w.vupen.com/english/advisories/2008/2754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45708 - https://www.exploit-db.com/exploits/6687 - http://www.securityfocus.com/archive/1/497103
CVE ID: CVE-2008-4487 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) site_name, (2) email, (3) theme_chosen, (4) hp, (5) c_meta, (6) id, and (7) c_js parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45704 - http://secunia.com/advi
//www.securityfocus.com/bid/31610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45704 - http://secunia.com/advisories/32100
CVE ID: CVE-2008-4488 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) id parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45706 - http://secunia.com/advisories/32100
CVE ID: CVE-2008-4489 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the theme_chosen parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45705 - http://secunia.com/advisories/32100
CVE ID: CVE-2008-4490 State: PUBLISHED Published: 2008-10-08T01:00:00 Last Updated: 2024-08-07T10:17:09.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the userInfo cookie. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45680 - http://www.securityfocus.com/bid/31581 - https://www.exploit-db.com/exploits/6679
CVE ID: CVE-2008-4491 State: PUBLISHED Published: 2008-10-08T17:02:00 Last Updated: 2024-08-07T10:17:10.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mail.app 3.5 on Mac OS X, when "Store draft messages on the server" is enabled, stores draft copies of S/MIME email in plaintext on the email server, which allows server owners and remote man-in-the-middle attackers to read sensitive mail. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45688 - http://resources.enablesecurity.com/advisories/apple-mailapp-smime.txt - http://www.securityfocus.com/bid/31598 - http://www.securityfocus.com/archive/1/497057/
sories/apple-mailapp-smime.txt - http://www.securityfocus.com/bid/31598 - http://www.securityfocus.com/archive/1/497057/100/0/threaded - http://enablesecurity.com/2008/10/03/apple-mailapp-security-advisory/ - http://securityreason.com/securityalert/4363 - http://www.securitytracker.com/id?1021019
CVE ID: CVE-2008-4492 State: PUBLISHED Published: 2008-10-08T17:02:00 Last Updated: 2024-08-07T10:17:10.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands via the usNick cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45737 - http://www.securityfocus.com/bid/31624 - http://securityreason.com/securityalert/4362 - https://www.exploit-db.com/exploits/6693
CVE ID: CVE-2008-4493 State: PUBLISHED Published: 2008-10-08T20:44:00 Last Updated: 2024-08-07T10:17:09.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote attackers to force the upload of arbitrary files by using the AddString and Post methods and a modified PostURL to construct an HTTP POST request. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6699 - http://securityreason.com/securityalert/
CVE Program Container: References: - https://www.exploit-db.com/exploits/6699 - http://securityreason.com/securityalert/4376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45735 - http://www.securityfocus.com/bid/31632 - http://www.securitytracker.com/id?1021018
CVE ID: CVE-2008-4494 State: PUBLISHED Published: 2008-10-08T23:00:00 Last Updated: 2024-08-07T10:17:09.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31626 - http://securityreason.com/securityalert/4375 - https://www.exploit-db.com/exploits/6698 - http://secunia.com/advisories/32118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45728
CVE ID: CVE-2008-4495 State: PUBLISHED Published: 2008-10-08T23:00:00 Last Updated: 2024-08-07T10:17:09.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_cat.php in PHP Auto Dealer 2.7 allows remote attackers to execute arbitrary SQL commands via the v_cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32147 - http://www.securityfocus.com/bid/31623 - https://www.exploit-db.com/exploits/6695 - http://selectdevelopment.com/products/phpautodealer/changelog.php - http://securityreason.com/securityalert/4369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45725
CVE ID: CVE-2008-4496 State: PUBLISHED Published: 2008-10-08T23:00:00 Last Updated: 2024-08-07T10:17:09.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_cat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL commands via the v_cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31623 - http://securityreason.com/securityalert/4374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45726 - http://selectdevelopment.com/products/phprealtor/changelog.php - https://www.exploit-db.com/exploits/6694 - http://secunia.com/advisories/32149
CVE ID: CVE-2008-4497 State: PUBLISHED Published: 2008-10-08T23:00:00 Last Updated: 2024-08-07T10:17:09.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in event_detail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute arbitrary SQL commands via the event_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45736 - http://www.securityfocus.com/bid/31628 - http://secunia.com/advisories/32129 - https://www.exploit-db.com/exploits/6697 - http://securityreason.com/securityalert/4373
CVE ID: CVE-2008-4498 State: PUBLISHED Published: 2008-10-08T23:00:00 Last Updated: 2024-08-07T10:17:09.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6696 - http://secunia.com/advisories/32139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45727 - http://www.securityfocus.com/bid/31622 - http://securityreason.com/securityalert/4372
CVE ID: CVE-2008-4499 State: PUBLISHED Published: 2008-10-08T23:00:00 Last Updated: 2024-08-07T10:17:09.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) refer parameter to main.php and the (2) file parameter to edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45691 - http://marc.info/?l=bugtraq&m=122332154511973&w=2 - http://www.securityfocus.com/bid/31595 - http://securityreason.com/securityalert/4371
CVE ID: CVE-2008-4500 State: PUBLISHED Published: 2008-10-08T23:00:00 Last Updated: 2024-08-07T10:17:09.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45652 - http://www.vupen.com/english/advisories/2008/2746 - http://secunia.com/advisories/32150 - https://www.exploit-db.com/exploits/6660 - http://securityreason.com/securityalert/4377
/secunia.com/advisories/32150 - https://www.exploit-db.com/exploits/6660 - http://securityreason.com/securityalert/4377 - http://www.securityfocus.com/bid/31556
CVE ID: CVE-2008-4501 State: PUBLISHED Published: 2008-10-08T23:00:00 Last Updated: 2024-08-07T10:17:09.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ (dot dot backslash) in the RNTO command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2746 - https://www.exploit-db.com/exploits/6661 - http://secunia.com/advisories/32150 - http://securityreason.com/securityalert/4378
CVE ID: CVE-2008-4502 State: PUBLISHED Published: 2008-10-08T23:00:00 Last Updated: 2024-08-07T10:17:09.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DataFeedFile (DFF) PHP Framework API allow remote attackers to execute arbitrary PHP code via a URL in the DFF_config[dir_include] parameter to (1) DFF_affiliate_client_API.php, (2) DFF_featured_prdt.func.php, (3) DFF_mer.func.php, (4) DFF_mer_prdt.func.php, (5) DFF_paging.func.php, (6) DFF_rss.func.php, and (7) DFF_sku.func.php in include/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6700 - http://securityreason.com/
lyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6700 - http://securityreason.com/securityalert/4370 - http://secunia.com/advisories/32166 - http://www.securityfocus.com/bid/31644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45764
CVE ID: CVE-2008-4503 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking." Additional Analyst Notes: - CVE Program Container: References: - http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/ - http://secunia.com/advisories/33390 - http://www.adobe.com/support/security/bulletins/aps
a-spying-using-clickjacking/ - http://secunia.com/advisories/33390 - http://www.adobe.com/support/security/bulletins/apsb08-18.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45721 - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://secunia.com/advisories/32702 - http://secunia.com/advisories/34226 - http://www.securitytracker.com/id?1020996 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://www.adobe.com/support/security/advisories/apsa08-08.html - http://secunia.com/advisories/32759 - http://www.redhat.com/support/errata/RHSA-2008-0945.html - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA
8-0945.html - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://secunia.com/advisories/32163 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - http://secunia.com/advisories/32448 - http://www.vupen.com/english/advisories/2008/2764 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://ha.ckers.org/blog/20081007/clickjacking-details/ - http://www.securityfocus.com/bid/31625
CVE ID: CVE-2008-4504 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45724 - http://secunia.com/advisories/31933
CVE ID: CVE-2008-4505 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) might allow attackers to cause a denial of service (system crash) via a "nonstandard URL argument" to the OpenDocument command. NOTE: due to lack of details from the vendor, it is not clear whether this is a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31608 - http://secunia.com/advisories/32098 - http://www.vupen.com/english/advisories/2008/2753 - http://www-01.ibm.com/support/docvi
//secunia.com/advisories/32098 - http://www.vupen.com/english/advisories/2008/2753 - http://www-01.ibm.com/support/docview.wss?uid=swg27013341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45692
CVE ID: CVE-2008-4506 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows a place manager to "demote or delete a place superuser group" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45694 - http://secunia.com/advisories/32098 - http://www.vupen.com/english/advisories/2008/2753 - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2008-4507 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows editors to delete pages that were created by a different author via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31608 - http://secunia.com/advisories/32098 - http://www.vupen.com/english/advisories/2008/2753 - http://www-01.ibm.com/support/docview.wss?uid=swg27013341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45693
CVE ID: CVE-2008-4508 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a different vulnerability than CVE-2005-2210. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45711 - http://downloads.securityfocus.com/vulnerabilities/exploits/316
s://exchange.xforce.ibmcloud.com/vulnerabilities/45711 - http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl - http://www.securityfocus.com/bid/31603
CVE ID: CVE-2008-4509 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the root directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45683 - https://www.exploit-db.com/exploits/6680 - http://securityreason.com/security
force.ibmcloud.com/vulnerabilities/45683 - https://www.exploit-db.com/exploits/6680 - http://securityreason.com/securityalert/4379 - https://www.exploit-db.com/exploits/6674 - https://www.exploit-db.com/exploits/6670
CVE ID: CVE-2008-4510 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service (page fault and system crash) via multiple attempts to access a virtual address in a PAGE_NOACCESS memory page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45719 - http://secunia.com/advisories/32115 - http://securityreason.com/securityalert/4388 - https://www.exploit-db.com/exploits/6671
CVE ID: CVE-2008-4511 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Todd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45838 - http://securityreason.com/securityalert/4380 - http://www.securityfocus.com/archive/1/496787/100/0/threaded
CVE ID: CVE-2008-4512 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496789/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45837 - http://securityreason.com/securityalert/4395
CVE ID: CVE-2008-4513 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags. Additional Analyst Notes: - CVE Program Container: References: - http://trac.phorum.org/changeset/3528 - http://secunia.com/advisories/32225 - http://www.phorum.org/phorum5/read.php?64%2C133699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45686 - http://nulledcore.com/?p=126 - http://www.securityfocus.com/bid/31589
CVE ID: CVE-2008-4514 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via a font tag with a long color value, which triggers an assertion error. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6689 - http://securityreason.com/securityalert/4394 - http://www.securityfocus.com/bid/31605
CVE ID: CVE-2008-4515 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass authentication and access the (1) summary, (2) detail, (3) overrides, and (4) pwemail pages by disabling JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2008/Oct/0070.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45696 - http://www.securityfocus.com/bid/31584 - http://dicas3000.blogspot.com/2008/10/blue-coat-k9-
com/vulnerabilities/45696 - http://www.securityfocus.com/bid/31584 - http://dicas3000.blogspot.com/2008/10/blue-coat-k9-web-protection-v40230-beta.html
CVE ID: CVE-2008-4516 State: PUBLISHED Published: 2008-10-09T16:00:00 Last Updated: 2024-08-07T10:17:09.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via the pic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31593 - http://securityreason.com/securityalert/4381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45698 - https://www.exploit-db.com/exploits/6675
CVE ID: CVE-2008-4517 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45682 - http://securityreason.com/securityalert/4382 - http://www.securityfocus.com/bid/31585 - https://www.exploit-db.com/exploits/6677
CVE ID: CVE-2008-4518 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbitrary SQL commands via the (1) sprache parameter to index2.php and the (2) artikel parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45671 - http://securityreason.com/securityalert/4383 - http://secunia.com/advisories/32126 - https://www.exploit-db.com/exploits/6678