Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0439 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in DeluxeBB 1.1 allows remote attackers to inject arbitrary web script or HTML via the lang_listofmatches parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27401 - http://www.securityfocus.com/archive/1/486804/100/0/threaded - http://securityreason.com/securityalert/3564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39829
CVE ID: CVE-2008-0440 State: PUBLISHED Published: 2008-01-23T22:00:00 Last Updated: 2024-08-07T07:46:54.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4956
CVE ID: CVE-2008-0441 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which triggers writing the password to SM_server.log; and (2) after a reconfig action; which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27388 - http://www-1.ibm.com/support/docview.wss?uid=swg24017939 - http://www.securitytracker.com/id?1019250 - http://secunia.com/advisories/28603 - http://www.vupen.com/engli
g24017939 - http://www.securitytracker.com/id?1019250 - http://secunia.com/advisories/28603 - http://www.vupen.com/english/advisories/2008/0240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39822
CVE ID: CVE-2008-0442 State: PUBLISHED Published: 2008-01-24T23:00:00Z Last Updated: 2024-09-17T04:28:51.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the ffile parameter, a different vector than CVE-2008-0376. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28568 - http://www.securityfocus.com/bid/27383
CVE ID: CVE-2008-0443 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows remote attackers to execute arbitrary code via a long HandwriterFilename property value. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4967 - http://www.securityfocus.com/bid/27411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39849 - http://www.vupen.com/e
://www.securityfocus.com/bid/27411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39849 - http://www.vupen.com/english/advisories/2008/0253 - http://secunia.com/advisories/28599
CVE ID: CVE-2008-0444 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28589 - http://www.vupen.com/english/advisories/2008/0265 - http://osvdb.org/41681 - http://midas.psi.ch/elog/download/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/39828 - http://www.securityfocus.com/bid/27399
CVE ID: CVE-2008-0445 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via crafted logbook entries. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28589 - http://www.vupen.com/english/advisories/2008/0265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39824 - http://www.securityfocus.com/bid/27399
CVE ID: CVE-2008-0446 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27416 - https://www.exploit-db.com/exploits/4969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39854
CVE ID: CVE-2008-0447 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL commands via the story parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39855 - http://www.securityfocus.com/bid/27415
CVE ID: CVE-2008-0448 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in utils/class_HTTPRetriever.php in phpSearch allows remote attackers to execute arbitrary PHP code via a URL in the libcurlemuinc parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39805 - http://marc.info/?l=bugtraq&m=120093067011293&w=2
CVE ID: CVE-2008-0449 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39811 - http://www.securityfocus.com/bid/27347
CVE ID: CVE-2008-0450 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP code via a URL in the (1) DIR_PLUGINS parameter to (a) index.php, and the (2) DIR_LIBS parameter to (b) media.php and (c) xmlrpc/server.php in admin/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486743/100/0/threaded - http://securityreason.com/securityalert/3576
CVE ID: CVE-2008-0451 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) siteadmin/article-edit.php; and unspecified parameters to (2) submitted-edit.php, (3) page-edit.php, (4) section-edit.php, (5) staff-edit.php, and (6) staff-access.php in siteadmin/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39833 - http://securityreason.com/securityalert/3574 - http://www.securityfocus.c
ge.xforce.ibmcloud.com/vulnerabilities/39833 - http://securityreason.com/securityalert/3574 - http://www.securityfocus.com/archive/1/486796/100/0/threaded - http://pacercms.sourceforge.net/index.php/2008/01/21/pacercms-061-streamlines-code-base-addresses-security-issue/ - http://www.securityfocus.com/bid/27397
CVE ID: CVE-2008-0452 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to read arbitrary files via directory traversal sequences in the cat parameter in a viewart action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4973 - http://www.securityfocus.com/bid/27422
CVE ID: CVE-2008-0453 State: PUBLISHED Published: 2008-01-24T23:00:00 Last Updated: 2024-08-07T07:46:54.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL commands via the categoryid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39853 - http://www.securityfocus.com/bid/27405
CVE ID: CVE-2008-0454 State: PUBLISHED Published: 2008-01-25T00:00:00 Last Updated: 2024-08-07T07:46:54.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Title field of a (1) Dailymotion and possibly (2) Metacafe movie in the Skype video gallery, accessible through a search within the "Add video to chat" dialog, aka "videomood XSS." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.c
aka "videomood XSS." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39754 - http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0337.html - http://www.critical.lt/?opinions/show/1470 - http://www.securityfocus.com/archive/1/486512/100/0/threaded - http://aviv.raffon.net/2008/01/17/SkypeCrosszoneScriptingVulnerability.aspx - http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0363.html - http://www.securityfocus.com/bid/27338 - http://www.kb.cert.org/vuls/id/248184 - http://www.gnucitizen.org/blog/vulnerabilities-in-skype - http://skype.com/security/skype-sb-2008-001-update1.html - http://share.skype.co
zen.org/blog/vulnerabilities-in-skype - http://skype.com/security/skype-sb-2008-001-update1.html - http://share.skype.com/sites/security/2008/01/skype_cross_zone_scripting_vul.html - http://www.vupen.com/english/advisories/2008/0194 - http://skype.com/security/skype-sb-2008-001.html
CVE ID: CVE-2008-0455 State: PUBLISHED Published: 2008-01-25T00:00:00 Last Updated: 2024-08-07T07:46:54.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by uploading a file with a name containing XSS sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file. A
6 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486847/100/0/threaded - http://security.gentoo.org/glsa/glsa-200803-19.xml - http://securitytracker.com/id?1019256 - http://securityreason.com/securityalert/3575 - http://rhn.redhat.com/errata/RHSA-2012-1594.html - http://secunia.com/advisories/51607 - http://www.mindedsecurity.com/MSA01150108.html - http://rhn.redhat.com/errata/RHSA-2012-1592.html - http://secunia.com/advisories/29348 - http://rhn.redhat.com/errata/RHSA-2013-0130.html - http://rhn.redhat.com/errata/RHSA-2
://secunia.com/advisories/29348 - http://rhn.redhat.com/errata/RHSA-2013-0130.html - http://rhn.redhat.com/errata/RHSA-2012-1591.html - http://www.securityfocus.com/bid/27409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39867 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951
f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r
8f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apac
%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2008-0456 State: PUBLISHED Published: 2008-01-25T00:00:00 Last Updated: 2024-08-07T07:46:54.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by uploading a file with a multi-line name containing HTTP header sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the exte
on, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486847/100/0/threaded - http://security.gentoo.org/glsa/glsa-200803-19.xml - http://support.apple.com/kb/HT3549 - http://securitytracker.com/id?1019256 - http://securityreason.com/securityalert/3575 - http://secunia.com/advisories/35074 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39893 - http://www.mindedsecurity.com/MSA01150108.html - http://s
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39893 - http://www.mindedsecurity.com/MSA01150108.html - http://secunia.com/advisories/29348 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://rhn.redhat.com/errata/RHSA-2013-0130.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/bid/27409 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Cc
pd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c211517
0af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2008-0457 State: PUBLISHED Published: 2008-02-07T20:00:00 Last Updated: 2024-08-07T07:46:54.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5078 - http://secunia.com/advisories/28787 - http://www.securityfocus.com/archive/1/487688/100/0/threaded - http://www.vupen.com/english/advisories/2008/0
es/28787 - http://www.securityfocus.com/archive/1/487688/100/0/threaded - http://www.vupen.com/english/advisories/2008/0413 - http://www.securityfocus.com/bid/27487 - http://www.securitytracker.com/id?1019303 - http://seer.entsupport.symantec.com/docs/297171.htm - http://www.symantec.com/avcenter/security/Content/2008.02.04.html - http://www.zerodayinitiative.com/advisories/ZDI-08-003.html
CVE ID: CVE-2008-0458 State: PUBLISHED Published: 2008-01-25T15:00:00 Last Updated: 2024-08-07T07:46:55.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newlang parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4975 - http://www.vupen.com/english/advisories/2008/0308 - http://www.securityfocus.com/bid/27426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39897
CVE ID: CVE-2008-0459 State: PUBLISHED Published: 2008-01-25T15:00:00 Last Updated: 2024-08-07T07:46:54.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the update parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4976 - http://www.securityfocus.com/bid/27425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39895 - http://secunia.com/advisories/28619 - http://www.vupen.com/english/advisories/2008/0309
CVE ID: CVE-2008-0460 State: PUBLISHED Published: 2008-01-25T15:00:00 Last Updated: 2024-08-07T07:46:54.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8; and (2) the BotQuery extension for MediaWiki 1.7 and earlier; when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39901 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00189.html -
.ibmcloud.com/vulnerabilities/39901 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00189.html - http://www.vupen.com/english/advisories/2008/0280 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00147.html - http://www.securityfocus.com/bid/28137 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-January/000068.html - http://secunia.com/advisories/28629 - http://secunia.com/advisories/29266
CVE ID: CVE-2008-0461 State: PUBLISHED Published: 2008-01-25T15:00:00 Last Updated: 2024-08-07T07:46:54.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a comments action to modules.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39850 - https://www.exploit-db.com/exploits/4965 - http:
es/28624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39850 - https://www.exploit-db.com/exploits/4965 - http://www.securityfocus.com/bid/27408 - http://www.vupen.com/english/advisories/2008/0264
CVE ID: CVE-2008-0462 State: PUBLISHED Published: 2008-01-25T15:00:00 Last Updated: 2024-08-07T07:46:54.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Archive 5.x before 5.x-1.8 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/213478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39898 - http://www.vupen.com/english/advisories/2008/0278 - http://secunia.com/advisories/28632 - http://www.securityfocus.com/bid/27436
CVE ID: CVE-2008-0463 State: PUBLISHED Published: 2008-01-25T15:00:00 Last Updated: 2024-08-07T07:46:54.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Workflow 4.7.x before 4.7.x-1.2 and 5.x before 5.x-1.2 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving node properties. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27444 - http://secunia.com/advisories/28633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39896 - http://www.vupen.com/english/advisories/2008/0279 - http://drupal.org/node/213473