Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-10002 State: PUBLISHED Published: 2023-01-01T16:16:09.396Z Last Updated: 2024-08-07T04:17:10.242Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SimpleSAMLphp Products: simplesamlphp-module-openid Problem Types: CWE-79 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the argument AuthState leads to cross site scripting. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability i
cripting. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 1.0 is able to address this issue. The patch is identified as d652d41ccaf8c45d5707e741c0c5d82a2365a9a3. It is recommended to upgrade the affected component. VDB-217170 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217170 - https://vuldb.com/?ctiid.217170 - https://github.com/simplesamlphp/simplesamlphp-module-openid/commit/d652d41ccaf8c45d5707e741
//vuldb.com/?ctiid.217170 - https://github.com/simplesamlphp/simplesamlphp-module-openid/commit/d652d41ccaf8c45d5707e741c0c5d82a2365a9a3 - https://github.com/simplesamlphp/simplesamlphp-module-openid/releases/tag/v1.0
CVE ID: CVE-2010-10003 State: PUBLISHED Published: 2023-01-04T09:05:06.149Z Last Updated: 2024-11-25T17:51:21.721Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: gesellix Products: titlelink Problem Types: CWE-89 Description: A vulnerability classified as critical was found in gesellix titlelink on Joomla. Affected by this vulnerability is an unknown functionality of the file plugin_content_title.php. The manipulation of the argument phrase leads to sql injection. The patch is named b4604e523853965fa981a4e79aef4b554a535db0. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217351. Additional Analyst
ed to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217351. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217351 - https://vuldb.com/?ctiid.217351 - https://github.com/gesellix/titlelink/commit/b4604e523853965fa981a4e79aef4b554a535db0
CVE ID: CVE-2010-10004 State: PUBLISHED Published: 2023-01-09T07:15:26.593Z Last Updated: 2024-08-07T04:17:10.330Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Information Cards Module Problem Types: CWE-79 Description: A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this issue. The identifier of the patch is f6bfea49ae16dc6e179df8306d39c3694f1ef186. It is recommended to upgrade the affected component. The identifier VDB-217661 was assigned
c6e179df8306d39c3694f1ef186. It is recommended to upgrade the affected component. The identifier VDB-217661 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217661 - https://vuldb.com/?ctiid.217661 - https://github.com/simplesamlphp/simplesamlphp-module-infocard/commit/f6bfea49ae16dc6e179df8306d39c3694f1ef186 - https://github.com/simplesamlphp/simplesamlphp-module-infocard/releases/tag/v1.0
CVE ID: CVE-2010-10005 State: REJECTED Published: 2023-01-16T11:00:14.801Z Last Updated: 2025-02-13T16:27:08.525Z Description: No description available.
CVE ID: CVE-2010-10006 State: PUBLISHED Published: 2023-01-17T23:58:07.307Z Last Updated: 2025-04-03T19:25:38.582Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: michaelliao Products: jopenid Problem Types: CWE-208 Description: A vulnerability, which was classified as problematic, was found in michaelliao jopenid. Affected is the function getAuthentication of the file JOpenId/src/org/expressme/openid/OpenIdManager.java. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 1.08 is able to address this issue. The name of the patch is c9baaa976b684637f
old to be difficult. Upgrading to version 1.08 is able to address this issue. The name of the patch is c9baaa976b684637f0d5a50268e91846a7a719ab. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218460. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218460 - https://vuldb.com/?ctiid.218460 - https://github.com/michaelliao/jopenid/commit/c9baaa976b684637f0d5a50268e91846a7a719ab - https://github.com/michaelliao/jopenid/releases/tag/JOpenId-1.08
CVE ID: CVE-2010-10007 State: PUBLISHED Published: 2023-01-18T05:58:03.690Z Last Updated: 2024-08-07T04:17:10.292Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: lierdakil Products: click-reminder Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in lierdakil click-reminder. It has been rated as critical. This issue affects the function db_query of the file src/backend/include/BaseAction.php. The manipulation leads to sql injection. The identifier of the patch is 41213b660e8eb01b22c8074f06208f59a73ca8dc. It is recommended to apply a patch to fix this issue. The identifier VDB-218465 was assigned to this vulnerabili
3ca8dc. It is recommended to apply a patch to fix this issue. The identifier VDB-218465 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218465 - https://vuldb.com/?ctiid.218465 - https://github.com/lierdakil/click-reminder/commit/41213b660e8eb01b22c8074f06208f59a73ca8dc
CVE ID: CVE-2010-10008 State: PUBLISHED Published: 2023-01-17T07:35:29.073Z Last Updated: 2024-11-25T16:35:21.618Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: simplesamlphp Products: simplesamlphp-module-openidprovider Problem Types: CWE-79 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads to cross site scripting. The attack can be launched remotely. Upgrading to version 0.9.0 is able to address this issue. The ide
s site scripting. The attack can be launched remotely. Upgrading to version 0.9.0 is able to address this issue. The identifier of the patch is 8365d48c863cf06ccf1465cc0a161cefae29d69d. It is recommended to upgrade the affected component. The identifier VDB-218473 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218473 - https://vuldb.com/?ctiid.218473 - https://github.com/simplesamlphp/simplesamlphp-module-openidprovider/commit/8365d48c863cf06ccf1465cc0a161cefae29d69d - https://github.com/simplesamlp
php/simplesamlphp-module-openidprovider/commit/8365d48c863cf06ccf1465cc0a161cefae29d69d - https://github.com/simplesamlphp/simplesamlphp-module-openidprovider/releases/tag/v0.9.0
CVE ID: CVE-2010-10009 State: PUBLISHED Published: 2023-01-18T20:58:03.131Z Last Updated: 2024-08-07T04:17:10.230Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: frioux Products: ptome Problem Types: CWE-89 Description: A vulnerability was found in frioux ptome. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named 26829bba67858ca0bd4ce49ad50e7ce653914276. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218519. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218519 - https://vuld
VDB-218519. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218519 - https://vuldb.com/?ctiid.218519 - https://github.com/frioux/ptome/commit/26829bba67858ca0bd4ce49ad50e7ce653914276
CVE ID: CVE-2010-10010 State: PUBLISHED Published: 2023-06-01T05:00:04.185Z Last Updated: 2024-08-07T04:17:10.187Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Stars Alliance Products: PsychoStats Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a. This affects an unknown part of the file upload/admin/login.php. The manipulation of the argument ref leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 3.2.2b is able to address this issue. The identifier of the patch is 5d3b7311fd5085ec6ea1b1bfa9a05285964e07e4. It is recommended to upgrade the affecte
issue. The identifier of the patch is 5d3b7311fd5085ec6ea1b1bfa9a05285964e07e4. It is recommended to upgrade the affected component. The identifier VDB-230265 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230265 - https://vuldb.com/?ctiid.230265 - http://www.psychostats.com/forums/index.php?showtopic=20796&hl= - https://github.com/StarsAlliance/PsychoStats/commit/5d3b7311fd5085ec6ea1b1bfa9a05285964e07e4 - https://github.com/StarsAlliance/PsychoStats/releases/tag/3.2.2b
CVE ID: CVE-2010-10011 State: PUBLISHED Published: 2024-01-12T19:31:04.066Z Last Updated: 2025-06-03T14:04:08.764Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:P/I:N/A:N) Vendors: Acritum Products: Femitter Server Problem Types: CWE-22 Description: A vulnerability, which was classified as problematic, was found in Acritum Femitter Server 1.04. Affected is an unknown function. The manipulation leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250446 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2504
ty. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.250446 - https://vuldb.com/?ctiid.250446 - https://www.exploit-db.com/exploits/15445
CVE ID: CVE-2010-10012 State: PUBLISHED Published: 2025-07-23T13:53:38.611Z Last Updated: 2025-07-23T14:20:38.138Z Vendors: Japheth Products: httpdasm Problem Types: CWE-22 Description: A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal patterns, an attacker can escape the web root and access sensitive files outside of the intended directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/15861 -
directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/15861 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/httpdasm_directory_traversal.rb - https://www.japheth.de/httpdASM.html - https://www.vulncheck.com/advisories/httpasm-path-traversal
CVE ID: CVE-2010-10013 State: PUBLISHED Published: 2025-08-08T18:09:40.513Z Last Updated: 2025-11-15T18:02:55.000Z Vendors: AjaXplorer Products: AjaXplorer Problem Types: CWE-78 Description: An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior to 2.6. The flaw resides in the checkInstall.php script within the access.ssh plugin, which fails to properly sanitize user-supplied input to the destServer GET parameter. By injecting shell metacharacters, remote attackers can execute arbitrary system commands on the server with the privileges of the web server process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
server with the privileges of the web server process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/ajaxplorer/ - https://www.exploit-db.com/exploits/21993 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/ajaxplorer_checkinstall_exec.rb - https://www.tenable.com/plugins/nessus/45489 - https://www.vulncheck.com/advisories/ajaxplorer-unauth-rce
CVE ID: CVE-2010-10014 State: PUBLISHED Published: 2025-08-20T15:38:23.796Z Last Updated: 2025-08-22T16:12:25.765Z Vendors: Odin Software Products: Odin Secure FTP Problem Types: CWE-121 Description: Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command. A malicious FTP server can send an overly long filename in the directory listing, which overflows a fixed-size stack buffer in the client and overwrites the Structured Exception Handler (SEH). This allows remote attackers to execute arbitrary code on the client system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archiv
arbitrary code on the client system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20111007123101/http://odinshare.com/secure-ftp-expert.html - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/odin_list_reply.rb - https://www.exploit-db.com/exploits/16716 - https://web.archive.org/web/20111016194057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/ - https://www.vulncheck.com/advisories/odin-secure-ftp-stack-buffer-overflow-via-list-response
CVE ID: CVE-2010-10015 State: PUBLISHED Published: 2025-08-21T20:08:37.933Z Last Updated: 2025-08-22T15:35:06.053Z Vendors: AOL Products: AOL Problem Types: CWE-121 Description: AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long string argument. Exploitation allows remote attackers to execute arbitrary code in the context of the user, but only when the malicious HTML file is opened locally, due to the control not being marked safe for scripting or initialization. AOL remains an active and support
ned locally, due to the control not being marked safe for scripting or initialization. AOL remains an active and supported brand offering services like AOL Mail and AOL Desktop Gold, but the legacy AOL 9.5 desktop software—specifically the version containing the vulnerable Phobos.dll ActiveX control—is long discontinued and no longer maintained. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20100804162117/http://www.rec-sec.com/2010/01/25/aol-playlist-class-buffer-overflow/ - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/aol_phobos_bof.rb - https://www.exploit-db.com/exploits/11204 - htt
framework/master/modules/exploits/windows/fileformat/aol_phobos_bof.rb - https://www.exploit-db.com/exploits/11204 - https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=26569 - https://www.fortiguard.com/encyclopedia/ips/32026/aol-phobos-dll-activex-control-import-buffer-overflow - https://appdb.winehq.org/objectManager.php?sClass=version&iId=20354 - http://www.exploit-db.com/exploits/11190 - https://www.vulncheck.com/advisories/aol-phobos-playlist-import-stack-based-buffer-overflow
CVE ID: CVE-2010-10016 State: PUBLISHED Published: 2025-08-30T13:44:22.575Z Last Updated: 2025-09-02T20:46:33.092Z Vendors: BS.Player Products: BS.Player Free and Pro Editions Problem Types: CWE-120 Description: BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality. When processing .m3u files, the application fails to properly validate the length of playlist entries, resulting in a buffer overflow condition. This flaw occurs during parsing of long URLs embedded in the playlist, allowing overwrite of Structured Exception Handler (SEH) records. The vulnerability is triggered upon opening a crafted playlist file and affects the Unicode parsing logic i
EH) records. The vulnerability is triggered upon opening a crafted playlist file and affects the Unicode parsing logic in the Windows client. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/bsplayer_m3u.rb - https://www.exploit-db.com/exploits/15934 - https://www.exploit-db.com/exploits/18375 - http://www.bsplayer.com/ - https://www.vulncheck.com/advisories/bs-player-buffer-overflow-via-m3u-playlist-import
CVE ID: CVE-2010-10017 State: PUBLISHED Published: 2025-08-30T13:49:28.100Z Last Updated: 2025-09-02T20:38:50.034Z Vendors: WM Downloader Products: WM Downloader Problem Types: CWE-120, CWE-134 Description: WM Downloader version 3.1.2.2 is vulnerable to a buffer overflow when processing a specially crafted .m3u playlist file. The application fails to properly validate input length, allowing an attacker to overwrite structured exception handler (SEH) records and execute arbitrary code. Exploitation occurs locally when a user opens the malicious file, and the payload executes with the privileges of the current user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.g
with the privileges of the current user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/wm_downloader_m3u.rb - https://www.exploit-db.com/exploits/14497 - https://www.exploit-db.com/exploits/16642 - https://www.fortiguard.com/encyclopedia/ips/24038/wm-downloader-buffer-overflow - https://www.vulncheck.com/advisories/wm-downloader-buffer-overflow-via-malformed-m3u-file
CVE ID: CVE-2010-1000 State: PUBLISHED Published: 2010-05-17T20:42:00 Last Updated: 2024-08-07T01:06:52.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40141 - http://www.ubuntu.com/usn/USN-938-1 - http://www.vupen.com/english/advisories/2011/1101 - http://secunia.com/advisories/42423 - http://www.securityfocus.com/archive/1/511294/100/0/threaded - http://www.vupen.co
http://secunia.com/advisories/42423 - http://www.securityfocus.com/archive/1/511294/100/0/threaded - http://www.vupen.com/english/advisories/2010/1144 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:098 - http://secunia.com/secunia_research/2010-69/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/58628 - http://www.securityfocus.com/archive/1/511281/100/0/threaded - http://www.kde.org/info/security/advisory-20100513-1.txt - http://www.vupen.com/english/advisories/2010/3096 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html - http://marc.info/?l=oss-security&m=127378789518426&w=2 - http://secunia.com/advisories/39528 - http://www.vupen.c
html - http://marc.info/?l=oss-security&m=127378789518426&w=2 - http://secunia.com/advisories/39528 - http://www.vupen.com/english/advisories/2010/1142 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html - http://securitytracker.com/id?1023984 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://osvdb.org/64690 - http://secunia.com/advisories/39787
CVE ID: CVE-2010-1003 State: PUBLISHED Published: 2010-03-19T20:00:00 Last Updated: 2024-08-07T01:06:52.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in www/editor/tiny_mce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510155/100/0/threaded - http://www.efrontlearning.net/product/efront-news/265-important-security-fix.html - http://www.coresecurity.com/content/efront-php-file-inclusion - http://www.securityfocus.com/bid/38
-security-fix.html - http://www.coresecurity.com/content/efront-php-file-inclusion - http://www.securityfocus.com/bid/38787 - http://forum.efrontlearning.net/viewtopic.php?f=15&t=1945 - http://osvdb.org/63028
CVE ID: CVE-2010-1004 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T04:04:26.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/yatse/0.3.2/ - http://www.securityfocus.com/bid/38808 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/
CVE ID: CVE-2010-1005 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T19:40:42.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/yatse/0.3.2/ - http://www.securityfocus.com/bid/38808 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/
CVE ID: CVE-2010-1006 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T02:36:38.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Brainstorming extension 0.1.8 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://www.securityfocus.com/bid/38798
CVE ID: CVE-2010-1007 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T16:18:49.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Power Extension Manager (ch_lightem) extension 1.0.34 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://www.securityfocus.com/bid/38811
CVE ID: CVE-2010-1008 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T18:55:12.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Sellector.com Widget Integration (chsellector) extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38816 - http://typo3.org/extensions/repository/view/chsellector/0.1.2/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/