Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5744 State: PUBLISHED Published: 2008-12-26T21:00:00 Last Updated: 2024-08-07T11:04:44.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to an incorrect tor2 patch for CVE-2008-5396 that uses the wrong variable in a range check against the value of lc->sync. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.digium.com/view.php?id=13954#96700 - https://bugzilla.redhat.com/show_bug.cgi?id=475446#c4 - http://secunia.com/advisories/3
um.com/view.php?id=13954#96700 - https://bugzilla.redhat.com/show_bug.cgi?id=475446#c4 - http://secunia.com/advisories/32960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47666 - http://svn.digium.com/view/dahdi?view=rev&revision=5590 - http://www.openwall.com/lists/oss-security/2008/12/19/2
CVE ID: CVE-2008-5745 State: PUBLISHED Published: 2008-12-29T15:00:00 Last Updated: 2024-08-07T11:04:44.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021495 - http://www.secu
tional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021495 - http://www.securityfocus.com/archive/1/499579/100/0/threaded - http://securityreason.com/securityalert/4823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47664 - http://www.securityfocus.com/bid/33018 - https://www.exploit-db.com/exploits/7585
CVE ID: CVE-2008-5746 State: PUBLISHED Published: 2008-12-29T15:00:00 Last Updated: 2024-08-07T11:04:44.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33014 - http://www.securitytracker.com/id?1021496 - http://secunia.com/advisories/33328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47619 - http://osvdb.org/50987 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1
CVE ID: CVE-2008-5747 State: PUBLISHED Published: 2008-12-29T15:00:00 Last Updated: 2024-08-07T11:04:44.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that still allows the program to be executed. NOTE: due to an error in the initial disclosure, F-secure was incorrectly stated as the vendor. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499083 - http://www.securityfocus.com/archive/1/499501/100/0/threaded - http://www.securityfocus.com/bid/32753 - http://security.gentoo.org/glsa/glsa-2
us.com/archive/1/499501/100/0/threaded - http://www.securityfocus.com/bid/32753 - http://security.gentoo.org/glsa/glsa-200904-14.xml - http://secunia.com/advisories/34700 - http://www.ivizsecurity.com/security-advisory-iviz-sr-08016.html - http://securityreason.com/securityalert/4822 - http://www.securityfocus.com/archive/1/499305/100/0/threaded
CVE ID: CVE-2008-5748 State: PUBLISHED Published: 2008-12-29T15:00:00 Last Updated: 2024-08-07T11:04:44.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7580 - http://secunia.com/advisories/33135 - http://securityreason.com/securityalert/4820 - http://osvdb.org/51006 - http://www.securityfocus.com/bid/33013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47611
CVE ID: CVE-2008-5749 State: PUBLISHED Published: 2008-12-29T15:00:00 Last Updated: 2024-08-07T11:04:44.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. NOTE: a third party disputes this issue, stating that Chrome "will ask for user permission" and "cannot launch the applet even [if] you have given out the permission. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/9sg_chrome.html - http://www.securityfocus.com/archive/1/499616/100/0/threaded - ht
es: - http://retrogod.altervista.org/9sg_chrome.html - http://www.securityfocus.com/archive/1/499616/100/0/threaded - http://www.securityfocus.com/bid/32997 - https://www.exploit-db.com/exploits/7566 - http://www.securityfocus.com/archive/1/499570/100/0/threaded - http://www.securityfocus.com/archive/1/499581/100/0/threaded - http://securityreason.com/securityalert/4821
CVE ID: CVE-2008-5750 State: PUBLISHED Published: 2008-12-29T15:00:00 Last Updated: 2024-08-07T11:04:44.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/9sg_chrome.html - https://www.exploit-db.com/exploits/7566 - http://www.securityfocus.com/bid/32999 - http://www.securityfocus.com/archive/1/499570/100/0/threaded - http://securityreason.com/securityalert/4821
CVE ID: CVE-2008-5751 State: PUBLISHED Published: 2008-12-30T17:00:00 Last Updated: 2024-08-07T11:04:44.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a directory action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4824 - http://www.securityfocus.com/bid/33033 - https://www.exploit-db.com/exploits/7596
CVE ID: CVE-2008-5752 State: PUBLISHED Published: 2008-12-30T17:00:00 Last Updated: 2024-08-07T11:04:44.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50902 - http://securityreason.com/securityalert/4836 - http://secunia.com/advisories/33274 - https://www.exploit-db.com/exploits/
ttp://securityreason.com/securityalert/4836 - http://secunia.com/advisories/33274 - https://www.exploit-db.com/exploits/7543 - http://www.securityfocus.com/bid/32966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47568
CVE ID: CVE-2008-5753 State: PUBLISHED Published: 2008-12-30T17:00:00 Last Updated: 2024-08-07T11:04:44.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a bookmark file entry with a long host name, which appears as a host parameter within the quick-connect bar. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7571 - http://packetstormsecurity.com/files/131965/BulletProof-FTP-Client-2010-Buffer-Overflow.html - http://osvdb.org/50968 - http://secunia.com/advisories/33322 - http://www.securityfocus.com
-2010-Buffer-Overflow.html - http://osvdb.org/50968 - http://secunia.com/advisories/33322 - http://www.securityfocus.com/bid/33007 - http://www.kb.cert.org/vuls/id/565580 - https://www.exploit-db.com/exploits/37056/ - http://securityreason.com/securityalert/4835
CVE ID: CVE-2008-5754 State: PUBLISHED Published: 2008-12-30T17:00:00 Last Updated: 2024-08-07T11:04:44.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka Session-File) with a long second line, possibly a related issue to CVE-2008-5753. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7589 - http://www.securityfocus.com/bid/33024 - https://www.exploit-db.com/exploits/8420
CVE ID: CVE-2008-5755 State: PUBLISHED Published: 2008-12-30T17:00:00 Last Updated: 2024-08-07T11:04:44.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47741 - http://www.securityfocus.com/bid/33022 - http://securityreason.com/securityalert/4839
CVE ID: CVE-2008-5756 State: PUBLISHED Published: 2008-12-30T17:00:00 Last Updated: 2024-08-07T11:04:44.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping (.cmap) file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4838 - http://secunia.com/advisories/33327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47630 - http://www.vupen.com/english/advisories/2008/3519 - https://www.exploit-db.com/exploits/7592 - http://www
lities/47630 - http://www.vupen.com/english/advisories/2008/3519 - https://www.exploit-db.com/exploits/7592 - http://www.securityfocus.com/bid/33023
CVE ID: CVE-2008-5757 State: PUBLISHED Published: 2008-12-30T19:00:00 Last Updated: 2024-08-07T11:04:44.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Body parameter in an article action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28793 - http://www.securityfocus.com/bid/27606 - http://www.securityfocus.com/archive/1/487483/100/200/threaded
CVE ID: CVE-2008-5758 State: PUBLISHED Published: 2008-12-30T19:00:00 Last Updated: 2024-08-07T11:04:44.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors related to private messages. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=575374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47749 - http://secunia.com/advisories/28847
CVE ID: CVE-2008-5759 State: PUBLISHED Published: 2008-12-30T19:00:00 Last Updated: 2024-08-07T11:04:44.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script or HTML via the name parameter in an updaterecord action to index.php in the 08_Files module. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47367
CVE ID: CVE-2008-5760 State: PUBLISHED Published: 2008-12-30T19:00:00 Last Updated: 2024-08-07T11:04:44.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32863 - http://secunia.com/advisories/32955 - http://www.kerio.com/security_advisory.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47398 - http://www.kerio.com/kms_history.
/security_advisory.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47398 - http://www.kerio.com/kms_history.html - http://www.vupen.com/english/advisories/2008/3442
CVE ID: CVE-2008-5761 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter to the default URI; (2) the foto parameter to photo.php in the 05_Foto module; or (3) the name parameter in an insertrecord action to index.php in the 08_Files module, as demonstrated by injection within a SRC attribute of an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/482
ME element. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4825 - http://www.securityfocus.com/bid/32828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47369 - http://www.securityfocus.com/bid/32826 - http://secunia.com/advisories/33175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47367 - https://www.exploit-db.com/exploits/7461
CVE ID: CVE-2008-5762 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for slog_users.txt. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7444 - http://osvdb.org/50712 - http://secunia.com/advisories/33110 - http://securityreason.com/securityalert/4847
CVE ID: CVE-2008-5763 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the slogin_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7444 - http://osvdb.org/50711 - http://secunia.com/advisories/33110 - http://www.securityfocus.com/bid/32811
CVE ID: CVE-2008-5764 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47361 - https://www.exploit-db.com/exploits/7481 - http://secunia.com/advisories/33163 - http://osvdb.org/50726 - http://www.securityfocus.com/bid/32849 - http://securityreason.com/securityalert/4831
CVE ID: CVE-2008-5765 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47368 - http://secunia.com/advisories/33163 - http://osvdb.org/50725 - http://www.securityfocus.com/bid/32849
CVE ID: CVE-2008-5766 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32858 - https://www.exploit-db.com/exploits/7487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47394 - http://securityreason.com/securityalert/4830
CVE ID: CVE-2008-5767 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands via the authorID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7495 - http://securityreason.com/securityalert/4829 - http://www.securityfocus.com/bid/32883 - http://secunia.com/advisories/33118
CVE ID: CVE-2008-5768 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4854 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47360 - http://www.securityfocus.com/bid/32848 - https://www.exploit-db.com/exploits/7479
CVE ID: CVE-2008-5769 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32863 - http://secunia.com/advisories/32955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47397 - http://www.
d/32863 - http://secunia.com/advisories/32955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47397 - http://www.kerio.com/security_advisory.html - http://www.kerio.com/kms_history.html - http://www.vupen.com/english/advisories/2008/3442
CVE ID: CVE-2008-5770 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47308 - http://www.securityfocus.com/bid/32820 - http://secunia.com/advisories/33098 - https://www.exploit-db.com/exploits/7451
CVE ID: CVE-2008-5771 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4826 - http://www.securityfocus.com/bid/32820 - http://secunia.com/advisories/33098 - https://www.exploit-db.com/exploits/7451
CVE ID: CVE-2008-5772 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to type.asp and the (2) iPro parameter to detail.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50708 - http://securityreason.com/securityalert/4848 - https://www.exploit-db.com/exploits/7464 - http://osvdb.org/50707 - http://www.securityfocus.com/bid/32812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47323 - http:
.org/50707 - http://www.securityfocus.com/bid/32812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47323 - http://secunia.com/advisories/33167
CVE ID: CVE-2008-5773 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for database/dbsite.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7491 - http://securityreason.com/securityalert/4840 - http://secunia.com/advisories/33165
CVE ID: CVE-2008-5774 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to (a) type.asp and (b) type2.asp and the (2) iPro parameter to (c) detail.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47319 - http://secunia.com/advisories/33172 - http://www.securityfocus.com/bid/32812 - https://www.exploit-db.com/exploits/7462
CVE ID: CVE-2008-5775 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7482 - http://securityreason.com/securityalert/4844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47346 - http://www.securityfocus.com/bid/32853
CVE ID: CVE-2008-5776 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) action parameter to admin.php and the (2) get parameter to index.php. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7482 - http://www.securityfocus.com/bid/3