Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3733 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:53:00.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a .eop (aka playlist) file with a ProjectElement element that contains a long Name element. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4171 - https://www.exploit-db.com/exploits/6253 - http://secunia.com/advisories/31511 - http://www.securityfocus.com/bid/30717 - https://exchange.xforce.ibmcloud.com/vulnerabil
/secunia.com/advisories/31511 - http://www.securityfocus.com/bid/30717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44508
CVE ID: CVE-2008-3734 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:52:59.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in a connection greeting (response). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6257 - http://www.securitytracker.com/id?1020713 - http://securityreason.com/securityalert/4173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44512
/id?1020713 - http://securityreason.com/securityalert/4173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44512 - http://www.securitytracker.com/id?1020714 - http://www.securityfocus.com/bid/30720 - http://secunia.com/advisories/31504
CVE ID: CVE-2008-3735 State: PUBLISHED Published: 2008-08-20T16:00:00 Last Updated: 2024-08-07T09:52:59.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PHPizabi before 848 Core HotFix Pack 3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a blogs.search action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44691 - http://packetstormsecurity.org/0808-exploits/phpizabi-traverse.txt - http://lostmon.blogspot.com/2008/08/phpizabi-v0848b-traversal-file-access.html
CVE ID: CVE-2008-3736 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:52:59.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a) change passwords or (b) change configurations. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44592 - http://www.securityfocus.com/bid/30791 - http://jvn.jp/en/jp/JVN83428818/index.html - http://secunia.com/
lities/44592 - http://www.securityfocus.com/bid/30791 - http://jvn.jp/en/jp/JVN83428818/index.html - http://secunia.com/advisories/31574 - http://wiz.syscon.co.jp/Details.htm - http://secunia.com/advisories/31582
CVE ID: CVE-2008-3737 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:52:59.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to execute arbitrary PHP scripts, and delete files, read files, and possibly have unknown other impact. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN53886050/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44594 - http://www.securityfocus.com/bid/30791 - http://secunia.com/advisories/31574 - http://wiz.syscon.co.jp/De
lities/44594 - http://www.securityfocus.com/bid/30791 - http://secunia.com/advisories/31574 - http://wiz.syscon.co.jp/Details.htm - http://secunia.com/advisories/31582
CVE ID: CVE-2008-3738 State: PUBLISHED Published: 2008-08-27T20:00:00.000Z Last Updated: 2025-04-03T13:39:52.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/30791 - http://jvn.jp/en/jp/JVN31723154/index.html - http://secunia.com/advisories/31582 - http://www.spacetag.jp/modules/products/index.php?id=54
CVE ID: CVE-2008-3739 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:52:59.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving upload of files containing XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52557009/index.html - http://www.securityfocus.com/bid/30791 - http://jvn.jp/en/jp/JVN27417220/index.html - http://secunia.com/advisories/31574 - https:
.securityfocus.com/bid/30791 - http://jvn.jp/en/jp/JVN27417220/index.html - http://secunia.com/advisories/31574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44593 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html - http://wiz.syscon.co.jp/Details.htm - http://secunia.com/advisories/31582 - http://www.spacetag.jp/modules/products/index.php?id=54
CVE ID: CVE-2008-3740 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:52:59.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the output filter in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=459108 - http://www.securityfocus.com/bid/30689 - http://secunia.com/advisories/31825 - http://www.vupen.com/english/advisories/2008/2392 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html - h
/english/advisories/2008/2392 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html - http://drupal.org/node/295053 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html - http://secunia.com/advisories/31462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44445
CVE ID: CVE-2008-3741 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:52:59.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The private filesystem in Drupal 5.x before 5.10 and 6.x before 6.4 trusts the MIME type sent by a web browser, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading files containing arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=459108 - http://www.securityfocus.com/bid/30689 - http://secunia.com/advisories/31825 - http://www.vupen.com/english/advisories/2008/2392 - https://www.redhat.com/ar
89 - http://secunia.com/advisories/31825 - http://www.vupen.com/english/advisories/2008/2392 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44446 - http://drupal.org/node/295053 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html - http://secunia.com/advisories/31462
CVE ID: CVE-2008-3742 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:52:59.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=459108 - http://www.securityfocus.com/bid/30689 - http://secunia.com/advisories/31825 - http://www.vupen.com/english/advisories/2008/2392 - https://www.redhat.com/archives/fedora-pack
a.com/advisories/31825 - http://www.vupen.com/english/advisories/2008/2392 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html - http://drupal.org/node/295053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44447 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html - http://secunia.com/advisories/31462
CVE ID: CVE-2008-3743 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:52:59.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to perform unspecified actions via unknown vectors, related to improper token validation for (1) cached forms and (2) forms with AHAH elements. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=459108 - http://www.securityfocus.com/bid/30689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44453 - http://secunia.com/advisories/31825 - http://www.vup
0689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44453 - http://secunia.com/advisories/31825 - http://www.vupen.com/english/advisories/2008/2392 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html - http://drupal.org/node/295053 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html - http://secunia.com/advisories/31462
CVE ID: CVE-2008-3744 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:52:59.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) delete user access rules. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=459108 - http://www.securityfocus.com/bid/30689 - http://secunia.com/advisories/31825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44448 - http://www.vupen.com/english/advisories/2
dvisories/31825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44448 - http://www.vupen.com/english/advisories/2008/2392 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html - http://drupal.org/node/295053 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html - http://secunia.com/advisories/31462
CVE ID: CVE-2008-3745 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:53:00.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=459108 - http://www.securityfocus.com/bid/30689 - http://secunia.com/advisories/31825 - http://www.vupen.com/english/advisories/2008/2392 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html - http://drupal.org/node/2950
392 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html - http://drupal.org/node/295053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44458 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html
CVE ID: CVE-2008-3746 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:52:59.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication, Digest domain parameter support, and the parse_domain function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://secunia.com/advisories/32286 - http://lists.manyfish.co.uk/pipermail/neon/2008-August/000038.html - http://secunia.com/advisories/31508 - http://www.securityt
lists.manyfish.co.uk/pipermail/neon/2008-August/000038.html - http://secunia.com/advisories/31508 - http://www.securitytracker.com/id?1020725 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00367.html - http://secunia.com/advisories/31687 - http://lists.manyfish.co.uk/pipermail/neon/2008-August/000040.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:074 - http://www.openwall.com/lists/oss-security/2008/08/20/5 - http://www.openwall.com/lists/oss-security/2008/08/15/4 - http://www.securityfocus.com/bid/30710 - http://www.openwall.com/lists/oss-security/2008/08/20/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476571 - http://www.ubuntu.com/usn
om/lists/oss-security/2008/08/20/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476571 - http://www.ubuntu.com/usn/usn-835-1 - http://secunia.com/advisories/36799 - http://www.vupen.com/english/advisories/2008/2420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44511
CVE ID: CVE-2008-3747 State: PUBLISHED Published: 2008-08-27T15:00:00 Last Updated: 2024-08-07T09:52:59.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://trac.wordpress.org/ticket/7359 - http://www.openwall.com/lists/oss-security/2008/08/20/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44569 - http://www.securityf
.com/lists/oss-security/2008/08/20/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44569 - http://www.securityfocus.com/bid/30750 - http://www.openwall.com/lists/oss-security/2008/08/19/1
CVE ID: CVE-2008-3748 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44548 - https://www.exploit-db.com/exploits/6277 - http://secunia.com/advisories/31544 - http://securityreason.com/securityalert/4174
CVE ID: CVE-2008-3749 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4175 - https://www.exploit-db.com/exploits/6936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44551 - http://www.securityfocus.com/bid/30756 - http://www.vupen.com/english/advisories/2008/2989 - https://www.exploit-db.com/exploits/6276 - http://secunia.com/a
56 - http://www.vupen.com/english/advisories/2008/2989 - https://www.exploit-db.com/exploits/6276 - http://secunia.com/advisories/31542
CVE ID: CVE-2008-3750 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30765 - https://www.exploit-db.com/exploits/6949 - http://packetstormsecurity.org/0808-exploits/urlrotator-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44560 - http://secunia.com/advisories/31546
CVE ID: CVE-2008-3751 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:53:00.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0808-exploits/shorturl-sql.txt - http://www.vupen.com/english/advisories/2008/2985 - http://www.securityfocus.com/bid/30767 - https://www.exploit-db.com/exploits/6940 - http://secunia.com/advisories/31547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44561
CVE ID: CVE-2008-3752 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:53:00.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44564 - http://www.securityfocus.com/bid/30762 - http://www.packetstormsecurity.org/0808-exploits/adexchange-sql.txt
CVE ID: CVE-2008-3753 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:53:00.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2991 - http://www.securityfocus.com/bid/30759 - http://www.packetstormsecurity.org/0808-exploits/prograte-sql.txt - http://secunia.com/advisories/31550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44566
CVE ID: CVE-2008-3754 State: PUBLISHED Published: 2008-08-21T17:00:00Z Last Updated: 2024-09-17T03:17:28.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30766 - http://www.packetstormsecurity.org/0808-exploits/stylishtextads-sql.txt
CVE ID: CVE-2008-3755 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44565 - http://www.securityfocus.com/bid/30761 - http://secunia.com/advisories/31513 - https://www.exploit-db.com/exploits/6945 - http://packetstormsecurity.org/0808-exploits/classifieds-sql.txt
CVE ID: CVE-2008-3756 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44562 - http://www.securityfocus.com/bid/30764 - https://www.exploit-db.com/exploits/6941 - http://secunia.com/advisories/31541 - http://www.vupen.com/english/advisories/2008/2984 - http://packetstormsecurity.org/0808-exploits/viral-sql.txt
CVE ID: CVE-2008-3757 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.org/0808-exploits/forcedmatrix-sql.txt - https://www.exploit-db.com/exploits/6939 - http://secunia.com/advisories/31510 - http://www.securityfocus.com/bid/30760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44563 - http://www.vupen.com/english/advisories/2008/2986
CVE ID: CVE-2008-3758 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1) allow remote attackers to inject arbitrary web script or HTML via the NewPassword parameter to people.php, and allow remote authenticated users to inject arbitrary web script or HTML via the (2) Account picture and (3) Icon fields in account.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31527 - https://exchange.x
dditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44554 - http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/ - http://www.securityfocus.com/archive/1/495577/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44556 - http://www.gulftech.org/?node=research&article_id=00126-08192008 - http://www.securityfocus.com/bid/30748 - http://lussumo.com/docs/doku.php?id=vanilla:releasenotes - http://securityreason.com/securityalert/4176
CVE ID: CVE-2008-3759 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and earlier has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31527 - http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/ - http://lussumo.com/bugs/discussion/91/ajaxupdatecheckphp-csrf-vulnerability/ - http://lussumo.com/docs/doku.php?id=vanilla:releasenotes - https://exchange.xforce.ibmcloud.com/vulnerabilities/44558
CVE ID: CVE-2008-3760 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout via a SignOutNow action to people.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44748 - http://secunia.com/advisories/31527 - http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/ - http://lussumo.com/community/discussion/8463
://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/ - http://lussumo.com/community/discussion/8463/possible-security-flaw/#Comment_88511 - http://lussumo.com/docs/doku.php?id=vanilla:releasenotes - https://exchange.xforce.ibmcloud.com/vulnerabilities/44558 - http://lussumo.com/bugs/discussion/88/csrf-attack-hole/