Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2429 State: PUBLISHED Published: 2010-06-23T17:13:00 Last Updated: 2024-08-07T02:32:16.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAFHY - http://secunia.com/advisories/40187 - http://www.osvdb.org/65623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59517
CVE ID: CVE-2010-2431 State: PUBLISHED Published: 2010-06-22T20:24:00 Last Updated: 2024-08-07T02:32:16.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:234 - http://rhn.redhat.com/errata/RHSA-2010-0811.html - http://cups.org/articles.php?L596 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:232 - http://www.vupen.com/engli
ups.org/articles.php?L596 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:232 - http://www.vupen.com/english/advisories/2010/2856 - http://www.debian.org/security/2011/dsa-2176 - http://security.gentoo.org/glsa/glsa-201207-10.xml - http://www.vupen.com/english/advisories/2011/0535 - https://bugzilla.redhat.com/show_bug.cgi?id=605397 - http://secunia.com/advisories/43521 - http://cups.org/str.php?L3510
CVE ID: CVE-2010-2432 State: PUBLISHED Published: 2010-06-22T20:24:00 Last Updated: 2024-08-07T02:32:16.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses. Additional Analyst Notes: - CVE Program Container: References: - http://cups.org/str.php?L3518 - http://cups.org/articles.php?L596 - http://www.debian.org/security/2011/dsa-2176 - http://security.gentoo.org/glsa/glsa-201207-10.xml - http://www.mandriva.com/se
/www.debian.org/security/2011/dsa-2176 - http://security.gentoo.org/glsa/glsa-201207-10.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2011:146 - http://www.vupen.com/english/advisories/2011/0535 - http://secunia.com/advisories/43521
CVE ID: CVE-2010-2433 State: PUBLISHED Published: 2010-06-23T19:00:00 Last Updated: 2024-08-07T02:32:16.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow remote attackers to inject arbitrary web script or HTML via an RTS URL to (1) explore/explore.jsp, (2) compose/compose.jsp, or (3) home.jsp in faces/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41030 - http://www-01.ibm.com/support/docview.wss?uid=swg1RS00133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59609 - http://secunia.com/advisories/4027
ew.wss?uid=swg1RS00133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59609 - http://secunia.com/advisories/40275
CVE ID: CVE-2010-2434 State: PUBLISHED Published: 2010-06-25T18:00:00 Last Updated: 2024-08-07T02:32:16.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65666 - http://www.securityfocus.com/bid/41025 - http://www.ponsoftware.com/archiver/bug.htm#lzh_bufover - http://secunia.com/advisories/40324 - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000026.html - https://exchang
er - http://secunia.com/advisories/40324 - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000026.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/59624 - http://jvn.jp/en/jp/JVN34729123/index.html
CVE ID: CVE-2010-2435 State: PUBLISHED Published: 2010-06-24T17:00:00 Last Updated: 2024-08-07T02:32:16.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characters in a Connection HTTP header, and possibly other headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511953/100/0/threaded - http://www.securityfocus.com/bid/41064 - http://secunia.com/advisories/40322 - http://freshmeat.net/projects/weborf/releases/318531
CVE ID: CVE-2010-2436 State: PUBLISHED Published: 2010-06-24T17:00:00 Last Updated: 2024-08-07T02:32:16.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40840 - http://www.securityfocus.com/archive/1/511812/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/59436 - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_anecms.html
CVE ID: CVE-2010-2437 State: PUBLISHED Published: 2010-06-24T17:00:00 Last Updated: 2024-08-07T02:32:16.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the comment variable to modules/blog/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511816/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/59438 - http://www.securityfocus.com/bid/40838 - http://www.htbridge.ch/advisory/stored_xss_vulnerability_in_anecms_blog_module.ht
tp://www.securityfocus.com/bid/40838 - http://www.htbridge.ch/advisory/stored_xss_vulnerability_in_anecms_blog_module.html
CVE ID: CVE-2010-2438 State: PUBLISHED Published: 2010-06-24T17:00:00 Last Updated: 2024-08-07T02:32:16.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang parameter to the default URI, probably index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59621 - http://www.exploit-db.com/exploits/13954
CVE ID: CVE-2010-2439 State: PUBLISHED Published: 2010-06-24T17:00:00 Last Updated: 2024-08-07T02:32:16.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list (.maf file). Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13942 - http://www.exploit-db.com/exploits/13934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59570
CVE ID: CVE-2010-2440 State: PUBLISHED Published: 2010-06-24T17:00:00Z Last Updated: 2024-09-16T23:01:08.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary code via a crafted SRT file with a long line after a time range. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13965 - http://www.securityfocus.com/bid/41026 - http://osvdb.org/65678 - http://secunia.com/advisories/40303
CVE ID: CVE-2010-2441 State: PUBLISHED Published: 2010-06-24T17:00:00 Last Updated: 2024-08-07T02:32:16.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.vupen.com/english/advisories/2011/0212 - https://bugzilla.mozilla.org/show_bug.cgi?id=552255 - http://lists.opensuse.org/opensus
m/english/advisories/2011/0212 - https://bugzilla.mozilla.org/show_bug.cgi?id=552255 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE ID: CVE-2010-2442 State: PUBLISHED Published: 2010-06-24T17:00:00Z Last Updated: 2024-09-16T23:00:42.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=552255
CVE ID: CVE-2010-2443 State: PUBLISHED Published: 2010-06-24T17:00:00 Last Updated: 2024-08-07T02:32:16.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function. Additional Analyst Notes: - CVE Program Container: References: - http://www.remotesensing.org/libtiff/v3.9.3.html - http://marc.info/?l=oss-security&m=127736307002102&w=2 - http://marc.info/?l=oss-security&m=127781315415896&w=2 - http://blogs.sun.com/security/entry/cve_
=127736307002102&w=2 - http://marc.info/?l=oss-security&m=127781315415896&w=2 - http://blogs.sun.com/security/entry/cve_2010_2065_cve_2010 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://www.vupen.com/english/advisories/2011/0204 - https://bugs.launchpad.net/ubuntu/lucid/+source/tiff/+bug/589145 - http://secunia.com/advisories/50726
CVE ID: CVE-2010-2444 State: PUBLISHED Published: 2010-06-25T18:00:00Z Last Updated: 2024-09-17T04:23:48.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/06/24/5 - http://www.openwall.com/lists/oss-security/2010/06/09/4 - http://maradns.org/download/maradns-1.4.02-parse_segfault.patch
CVE ID: CVE-2010-2445 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:32:16.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the (1) os, (2) io, (3) package, (4) dofile, (5) loadfile, (6) loadlib, (7) module, and (8) require modules or functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/06/24/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:205 - http://gna.org/bugs/?15624 - http://www.openw
6/24/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:205 - http://gna.org/bugs/?15624 - http://www.openwall.com/lists/oss-security/2010/06/09/4 - http://www.osvdb.org/65192 - http://packetstormsecurity.com/files/163311/Android-2.0-FreeCIV-Arbitrary-Code-Execution.html
CVE ID: CVE-2010-2446 State: PUBLISHED Published: 2019-11-06T16:19:09 Last Updated: 2024-08-07T02:32:16.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rbot Reaction plugin allows command execution Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2446 - https://www.securityfocus.com/archive/1/509719/30/0/threaded
CVE ID: CVE-2010-2447 State: PUBLISHED Published: 2019-11-07T19:32:29 Last Updated: 2024-08-07T02:32:16.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: gitolite before 1.4.1 does not filter src/ or hooks/ from path names. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2447 - https://www.openwall.com/lists/oss-security/2010/06/24/5 - https://github.com/sitaramc/gitolite/commit/1e06fea3b6959faeb72d8dca46cd4753ada48637 - https://github.com/sitaramc/gitolite/commit/5fd9328c1cd1e7c576b6530b3253061c68b159aa - https://github.com/sitaramc/gitolite/releases/tag/v1.4.1
CVE ID: CVE-2010-2448 State: PUBLISHED Published: 2010-07-12T17:00:00Z Last Updated: 2024-09-16T22:51:49.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell. Additional Analyst Notes: - CVE Program Container: References: - http://znc.svn.sourceforge.net/viewvc/znc/trunk/znc.cpp?r1=2025&r2=2026&pathrev=2026 - http://www.vupen.com/english/advi
http://znc.svn.sourceforge.net/viewvc/znc/trunk/znc.cpp?r1=2025&r2=2026&pathrev=2026 - http://www.vupen.com/english/advisories/2010/1775 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043043.html - http://secunia.com/advisories/40523 - http://sourceforge.net/projects/znc/files/znc/0.092/znc-0.092-changelog.txt/view - http://www.securityfocus.com/bid/40982 - http://znc.svn.sourceforge.net/viewvc/znc?revision=2026&view=revision - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043000.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043044.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929 - http://www.debian.org/s
ckage-announce/2010-June/043044.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929 - http://www.debian.org/security/2010/dsa-2069
CVE ID: CVE-2010-2449 State: PUBLISHED Published: 2019-11-07T19:46:01 Last Updated: 2024-08-07T02:32:16.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2449 - https://www.securityfocus.com/bid/39529/info - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577958
CVE ID: CVE-2010-2450 State: PUBLISHED Published: 2019-11-07T20:06:05 Last Updated: 2024-08-07T02:32:16.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2450 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571631 - https://todos.internet2.edu/browse/SSP
racker/CVE-2010-2450 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571631 - https://todos.internet2.edu/browse/SSPCPP-106
CVE ID: CVE-2010-2451 State: PUBLISHED Published: 2010-06-29T18:00:00 Last Updated: 2024-08-07T02:32:16.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043601.html - http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html - http://www.securityfocus.com/bid/40746 - http://www.vupen.com/english/advisories/2010/1602 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043629.html - http://ww
glish/advisories/2010/1602 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043629.html - http://www.debian.org/security/2010/dsa-2065 - http://secunia.com/advisories/40349 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/32410
CVE ID: CVE-2010-2452 State: PUBLISHED Published: 2010-06-29T18:00:00 Last Updated: 2024-08-07T02:32:16.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043601.html - http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html - http://www.securityfocus.com/bid/40746 - http://www.vupen.com/english/advisories/2010/1602 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/04362
//www.vupen.com/english/advisories/2010/1602 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043629.html - http://www.debian.org/security/2010/dsa-2065 - http://secunia.com/advisories/40349 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/32410
CVE ID: CVE-2010-2453 State: PUBLISHED Published: 2010-09-29T16:00:00 Last Updated: 2024-08-07T02:32:16.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted (1) USER or (2) PASS command, which is written by the FTP logging module to a web-interface log window, related to a "web commands injection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513970/100/0/threaded
CVE ID: CVE-2010-2454 State: PUBLISHED Published: 2010-06-25T19:00:00 Last Updated: 2024-08-07T02:32:16.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=556957 - http://lcamtuf.blogspot.com/2010/06/yeah-about-that-address-bar-thing.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/59830
CVE ID: CVE-2010-2455 State: PUBLISHED Published: 2010-06-25T19:00:00 Last Updated: 2024-08-07T02:32:16.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=556957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59831
CVE ID: CVE-2010-2456 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read and execute arbitrary local files via a URL in the (1) cook_lan cookie parameter ($lan_dir variable) or possibly (2) Sdb_type parameter. NOTE: this was originally reported as remote file inclusion, but this may be inaccurate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59614 - http://packetstormsecurity.org/1006-exploits/linkerimg-rfi.tx
tps://exchange.xforce.ibmcloud.com/vulnerabilities/59614 - http://packetstormsecurity.org/1006-exploits/linkerimg-rfi.txt - http://www.attrition.org/pipermail/vim/2010-June/002354.html - http://www.vupen.com/english/advisories/2010/1562 - http://www.exploit-db.com/exploits/13964
CVE ID: CVE-2010-2457 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script or HTML via the term parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41057 - http://osvdb.org/65806 - http://www.exploit-db.com/exploits/13993 - http://secunia.com/advisories/17719
CVE ID: CVE-2010-2458 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13970 - http://osvdb.org/65669 - http://packetstormsecurity.org/1006-exploits/2daybizvcp-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59639 - http://secunia.com/advisories/40280 - http://www.securityfocus.com/bid/41022
CVE ID: CVE-2010-2459 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59638 - http://osvdb.org/65810 - http://packetstormsecurity.org/1006-exploits/2daybizvcp-sql.txt - http://www.securityfocus.com/bid/41022
CVE ID: CVE-2010-2460 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1 allows remote attackers to execute arbitrary SQL commands via the mechant_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59581 - http://www.securityfocus.com/bid/40993
CVE ID: CVE-2010-2461 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59596 - http://packetstormsecurity.org/1006-exploits/overstock-sql.txt - http://www.securityfocus.com/bid/40990