Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4792 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to execute arbitrary SQL commands via the memid parameter to members.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21992 - http://www.securityfocus.com/bid/34292 - http://www.exploit-db.com/exploits/8309
CVE ID: CVE-2009-4793 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension via an addphotos action to adminpanel/index.php, and then accessing the file via a direct request with an images/gallery/ directory name. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21992 - h
ty information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21992 - http://www.exploit-db.com/exploits/8309
CVE ID: CVE-2009-4794 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to view.php and the (2) a parameter in an event action to calendar.php, reachable through index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34303 - http://www.securityfocus.com/archive/1/502276/100/0/threaded
CVE ID: CVE-2009-4795 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the (1) USER (aka username) or (2) PASS (aka password) command. Additional Analyst Notes: - CVE Program Container: References: - http://www.xlightftpd.com/forum/viewtopic.php?t=1042 - http://www.securityfocus.com/bid/34288 - http://www.xlightftpd.com/whatsnew.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/49495 - http://secunia.com/advisories/345
htftpd.com/whatsnew.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/49495 - http://secunia.com/advisories/34513
CVE ID: CVE-2009-4796 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php in glFusion 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) order and (2) direction parameters to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502260/100/0/threaded - http://www.exploit-db.com/exploits/8302 - http://www.glfusion.org/article.php/security_20090329 - http://secunia.com/advisories/34519 - h
t-db.com/exploits/8302 - http://www.glfusion.org/article.php/security_20090329 - http://secunia.com/advisories/34519 - http://osvdb.org/52984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49498 - http://www.securityfocus.com/bid/34281
CVE ID: CVE-2009-4797 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse.php in JobHut 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pk parameter. Additional Analyst Notes: - CVE Program Container: References: - http://e-rdc.org/v1/news.php?readmore=132 - http://secunia.com/advisories/34532 - http://www.exploit-db.com/exploits/8318 - http://www.securityfocus.com/bid/34300
CVE ID: CVE-2009-4798 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the (1) kat parameter to side.asp, and the (2) brugerid and (3) password fields to the administration login feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8307 - http://www.securityfocus.com/bid/34289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49510 - http://secunia.com/advisori
oud.com/vulnerabilities/49509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49510 - http://secunia.com/advisories/34540
CVE ID: CVE-2009-4799 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Diskos CMS 6.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) artikler_prod.mdb or (2) medlemmer.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49511 - http://secunia.com/advisories/34540
CVE ID: CVE-2009-4800 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8256 - http://www.securityfocus.com/bid/34209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49360 - http://osvdb.org/52959 - http://secunia.com/advisories/34433
CVE ID: CVE-2009-4801 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T07:17:25.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8128 - http://www.securityfocus.com/archive/1/501352/100/0/threaded
CVE ID: CVE-2009-4802 State: PUBLISHED Published: 2010-04-23T14:00:00Z Last Updated: 2024-09-17T01:06:05.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Flat Manager (flatmgr) extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/flatmgr/1.9.16/ - http://secunia.com/advisories/34158 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-003/ - http://www.securityfocus.com/bid/33998
CVE ID: CVE-2009-4803 State: PUBLISHED Published: 2010-04-23T14:00:00Z Last Updated: 2024-09-16T19:10:59.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Accessibility Glossary (a21glossary) extension 0.4.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-003/ - http://www.securityfocus.com/bid/33997
CVE ID: CVE-2009-4804 State: PUBLISHED Published: 2010-04-23T14:00:00Z Last Updated: 2024-09-16T20:52:15.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameters." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/cal/1.1.1/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-003/ - http://secunia.com/advisories/34155 - http://www.securityfocus.com/bid/33996
CVE ID: CVE-2009-4805 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T07:17:25.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the storyid parameter to public/view.php or (2) the kill parameter to admin/remove.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49013 - http://www.exploit-db.com/exploits/8128 - http://www.securityfocus.com/archive/1/501352/100/0/threaded - http://www.securityfocus.com/bid/33947
CVE ID: CVE-2009-4806 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T07:17:25.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/save_user.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which allows remote attackers to read or modify the administrator's credentials via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49018 - http://www.securityfocus.com/bid/33983 - http://www.exploit-db.com/exploits/8130 - http://secunia.com/advisories/341
8 - http://www.securityfocus.com/bid/33983 - http://www.exploit-db.com/exploits/8130 - http://secunia.com/advisories/34129
CVE ID: CVE-2009-4807 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T07:17:25.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) c parameter to index.php and the (2) id parameter to view.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34126 - http://www.securityfocus.com/bid/33952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49031 - http://www.exploit-db.com/exploits/8133
CVE ID: CVE-2009-4808 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T07:17:25.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the g_admin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34126 - http://www.securityfocus.com/bid/33952 - http://www.exploit-db.com/exploits/8133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49034
CVE ID: CVE-2009-4809 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T07:17:25.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing (EFS) Web Server 4.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the vfolder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8155 - http://www.securityfocus.com/bid/33973 - http://secunia.com/advisories/34121
CVE ID: CVE-2009-4810 State: PUBLISHED Published: 2010-04-23T14:00:00Z Last Updated: 2024-09-17T01:50:50.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34104 - http://trac.la-samhna.de/samhain/ticket/150 - http://trac.la-samhna.de/samhain/changeset/225 - http://www.securityfocus.com/bid/34003
CVE ID: CVE-2009-4811 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, and VMware Server 2.x allows remote attackers to cause a denial of service (process crash) via a \x25\x90 sequence in the USER and PASS commands, a related issue to CVE-2009-3707. NOTE: some of t
(process crash) via a \x25\x90 sequence in the USER and PASS commands, a related issue to CVE-2009-3707. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.securityfocus.com/bid/36630 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://freetexthost.com/qr1tffkzpu - http://pocoftheday.blogspot.com/2009/10/vmware-server-20x-remote-dos-exploit.html - http://archives.neohapsis.com/archives/ful
/pocoftheday.blogspot.com/2009/10/vmware-server-20x-remote-dos-exploit.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2009-4812 State: PUBLISHED Published: 2010-04-27T15:00:00Z Last Updated: 2024-09-16T19:24:11.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wolfram Research webMathematica allows remote attackers to obtain sensitive information via a direct request to the MSP script, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0431.html
CVE ID: CVE-2009-4813 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a donate action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37910 - http://www.exploit-db.com/exploits/10622 - http://www.securityfocus.com/bid/37464 - http://osvdb.org/61298
CVE ID: CVE-2009-4814 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary web script or HTML via the URI to the MSP script. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61266 - http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0431.html - http://secunia.com/advisories/37905 - http://www.securityfocus.com/bid/37451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55008
CVE ID: CVE-2009-4815 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37414 - http://secunia.com/advisories/37847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54932 - http://www.serv-u.com/releasenotes/ - http://www.vupen.com/english/advisories/2009/3595
CVE ID: CVE-2009-4816 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54974 - http://www.exploit-db.com/exploits/10599 - http://osvdb.org/61270 - http://secunia.com/advisories/37873
CVE ID: CVE-2009-4817 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54972 - http://osvdb.org/61237 - http://www.exploit-db.com/exploits/10578 - http://secunia.com/advisories/37880
CVE ID: CVE-2009-4818 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54952 - http://www.securityfocus.com/bid/37424 - http://www.exploit-db.com/exploits/10568
CVE ID: CVE-2009-4819 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitrary code by uploading a file with a (1) .php.pgif or (2) .php.pjpeg double extension, then accessing it via a direct request to the file in albums/userpics/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54958 - http://www.securityfocus.com/bid/37436
CVE ID: CVE-2009-4820 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for veribaze/angelo.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54946 - http://osvdb.org/61228 - http://secunia.com/advisories/37724 - http://www.exploit-db.com/exploits/10576
CVE ID: CVE-2009-4821 State: PUBLISHED Published: 2010-04-27T15:00:00Z Last Updated: 2024-09-17T01:36:54.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply.cgi, which allows remote attackers to (1) change the admin password via the admin_password parameter, (2) disable the security requirement for the Wi-Fi network via unspecified vectors, or (3) modify DNS settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37415 - http://secunia.com/advisories/37777 - http://www.hiredhacker.com/2009/12/15/d-link-dir-615
securityfocus.com/bid/37415 - http://secunia.com/advisories/37777 - http://www.hiredhacker.com/2009/12/15/d-link-dir-615-remote-exploit/
CVE ID: CVE-2009-4822 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) do, (2) id, and (3) uname parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37435 - http://www.exploit-db.com/exploits/10581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54953
CVE ID: CVE-2009-4823 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37826 - http://www.exploit-db.com/exploits/10519 - http://www.vupen.com/english/advisories/2009/3608 - http://www.securityfocus.com/bid/37394 - http://osvdb.org/61231 - http://www.cpanel.net/2009/12/cpanel-cross-site-scripting-vulnerability.ht
ocus.com/bid/37394 - http://osvdb.org/61231 - http://www.cpanel.net/2009/12/cpanel-cross-site-scripting-vulnerability.html
CVE ID: CVE-2009-4824 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an "image upload form." Additional Analyst Notes: - CVE Program Container: References: - http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt - http://secunia.com/advisories/37918 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:108 - http://osvdb.org/61301 - http://www.vupen.com/english/advisories/2010/1245 - http://www.securityf
?name=MDVSA-2010:108 - http://osvdb.org/61301 - http://www.vupen.com/english/advisories/2010/1245 - http://www.securityfocus.com/bid/37465
CVE ID: CVE-2009-4825 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: 8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for App_Data/sb.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54938 - http://secunia.com/advisories/37846 - http://www.exploit-db.com/exploits/10573 - http://osvdb.org/61227
CVE ID: CVE-2009-4826 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in hosting/admin_ac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack the authentication of administrators for requests that alter administrative settings via a cp action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37721 - http://www.vupen.com/english/advisories/2009/3525 - http://www.exploit-db.com/exploits/10444
CVE ID: CVE-2009-4827 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T07:17:25.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin.php in Mail Manager Pro allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a change action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37750 - http://www.vupen.com/english/advisories/2009/3533 - http://www.exploit-db.com/exploits/10433