Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0155 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:24.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbitrary web script or HTML via the c parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39526 - http://www.securityfocus.com/bid/27190
CVE ID: CVE-2008-0156 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:24.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via encoded "/" (%2F) sequences in the link parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39492 - http://www.securityfocus.com/bid/27174 - http://www.securityfocus.com/archive/1/485882/100/0/threaded
CVE ID: CVE-2008-0157 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:24.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_temp_id parameter in a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4858 - http://www.securityfocus.com/bid/27164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39475 - http://secunia.com/advisories/28373
CVE ID: CVE-2008-0158 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:24.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to read arbitrary files via a .. (dot dot) in the aux_page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39449 - http://www.securityfocus.com/bid/27165 - https://www.exploit-db.com/exploits/4855 - http://packetstormsecurity.org/0801-exploits/shopscript-disclose.txt
CVE ID: CVE-2008-0159 State: PUBLISHED Published: 2008-01-09T00:00:00 Last Updated: 2024-08-07T07:32:23.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39473 - http://secunia.com/advisories/28371 - https://www.exploit-db.com/exploits/4860
CVE ID: CVE-2008-0162 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T07:32:23.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1500 - http://secunia.com/advisories/29190 - http://secunia.com/advisories/29080 - http://security.gentoo.org/glsa/glsa-200803-05.xml - http://secunia.com/advisories/29064 - http://www.securityfocus.com/bid/27936
CVE ID: CVE-2008-0163 State: PUBLISHED Published: 2008-02-12T20:00:00 Last Updated: 2024-08-07T07:32:24.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1494 - http://secunia.com/advisories/28875 - http://www.securityfocus.com/bid/27798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40486 - http://www.securityfocus.com/bid/27704
CVE ID: CVE-2008-0164 State: PUBLISHED Published: 2008-03-20T00:00:00 Last Updated: 2024-08-07T07:39:32.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3754 - http://secunia.com/advisories/29361 - http://www.securityfocus.com/archive/1/489544/100/0/threaded - http://www.procheckup.com/Hacking_Plone_CMS.pdf - http://plone.org/ab
ecurityfocus.com/archive/1/489544/100/0/threaded - http://www.procheckup.com/Hacking_Plone_CMS.pdf - http://plone.org/about/security/advisories/cve-2008-0164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41263
CVE ID: CVE-2008-0165 State: PUBLISHED Published: 2008-04-20T18:00:00 Last Updated: 2024-08-07T07:39:34.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1553 - http://secunia.com/advisories/29907 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475445 - http://secunia.com/advisories/29932 - http://www.vupen.com/english/advisories/2008/1297/references - http://ikiwiki.info/security/#index
om/advisories/29932 - http://www.vupen.com/english/advisories/2008/1297/references - http://ikiwiki.info/security/#index31h2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41904
CVE ID: CVE-2008-0166 State: PUBLISHED Published: 2008-05-13T17:00:00 Last Updated: 2024-08-07T07:39:32.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1576 - https://www.exploit-db.com/exploits/5622 - http://secunia.com/advisories/30221 - http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40she
- http://secunia.com/advisories/30221 - http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-devel - http://www.debian.org/security/2008/dsa-1571 - http://www.securityfocus.com/bid/29179 - http://www.securityfocus.com/archive/1/492112/100/0/threaded - http://secunia.com/advisories/30239 - http://secunia.com/advisories/30220 - http://www.ubuntu.com/usn/usn-612-7 - http://secunia.com/advisories/30231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42375 - http://metasploit.com/users/hdm/tools/debian-openssl/ - http://secunia.com/advisories/30249 - http://www.securitytracker.com/id?1020017 - https://www.exploit-db.com/exploits/563
ttp://secunia.com/advisories/30249 - http://www.securitytracker.com/id?1020017 - https://www.exploit-db.com/exploits/5632 - http://www.ubuntu.com/usn/usn-612-4 - http://www.ubuntu.com/usn/usn-612-2 - http://www.us-cert.gov/cas/techalerts/TA08-137A.html - http://www.kb.cert.org/vuls/id/925211 - https://www.exploit-db.com/exploits/5720 - http://secunia.com/advisories/30136 - http://www.ubuntu.com/usn/usn-612-3 - http://www.ubuntu.com/usn/usn-612-1 - https://16years.secvuln.info - https://news.ycombinator.com/item?id=40333169
CVE ID: CVE-2008-0167 State: PUBLISHED Published: 2008-05-18T14:00:00 Last Updated: 2024-08-07T07:39:34.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29215 - http://secunia.com/advisories/30286 - http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch8.diff.gz - http://www.vup
/advisories/30286 - http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch8.diff.gz - http://www.vupen.com/english/advisories/2008/1537/references - http://secunia.com/advisories/30088 - http://www.debian.org/security/2008/dsa-1577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42456
CVE ID: CVE-2008-0169 State: PUBLISHED Published: 2008-06-03T15:00:00 Last Updated: 2024-08-07T07:39:34.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30468 - http://www.vupen.com/english/advisories/2008/1710 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=483770 - http://www.openwall.com/li
.com/english/advisories/2008/1710 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=483770 - http://www.openwall.com/lists/oss-security/2008/05/31/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42798 - http://ikiwiki.info/news/version_2.48/index.html - http://www.securityfocus.com/bid/29479 - http://ikiwiki.info/security/#index33h2
CVE ID: CVE-2008-0171 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:32.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.rpath.com/Advisories:rPSA-2008-0063 - http://secunia.com/advisories/48099 - http://www.vupen.com/english/advisories/2008/0249 - http://www.securityfocus.com/bid/27325 - http://secunia.com/advisories/28860 - http://svn.b
glish/advisories/2008/0249 - http://www.securityfocus.com/bid/27325 - http://secunia.com/advisories/28860 - http://svn.boost.org/trac/boost/changeset/42745 - http://secunia.com/advisories/28943 - http://svn.boost.org/trac/boost/changeset/42674 - https://issues.rpath.com/browse/RPL-2143 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html - http://secunia.com/advisories/28511 - http://www.securityfocus.com/archive/1/488102/100/0/threaded - http://secunia.com/advisories/28705 - http://secunia.com/advisories/28545 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html - http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml - http://secun
nsuse-security-announce/2008-03/msg00004.html - http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml - http://secunia.com/advisories/28527 - http://www.ubuntu.com/usn/usn-570-1 - http://secunia.com/advisories/29323 - http://bugs.gentoo.org/show_bug.cgi?id=205955 - http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032
CVE ID: CVE-2008-0172 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:32.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.rpath.com/Advisories:rPSA-2008-0063 - http://secunia.com/advisories/48099 - http://www.vupen.com/english/advisories/2008/0249 - http://www.securityfocus.com/bid/27325 - http://secunia.com/advisories/2886
www.vupen.com/english/advisories/2008/0249 - http://www.securityfocus.com/bid/27325 - http://secunia.com/advisories/28860 - http://svn.boost.org/trac/boost/changeset/42745 - http://secunia.com/advisories/28943 - http://svn.boost.org/trac/boost/changeset/42674 - https://issues.rpath.com/browse/RPL-2143 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00760.html - http://secunia.com/advisories/28511 - http://www.securityfocus.com/archive/1/488102/100/0/threaded - http://secunia.com/advisories/28705 - http://secunia.com/advisories/28545 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html - http://www.gentoo.org/security/en/glsa/glsa-200802-08.xm
opensuse.org/opensuse-security-announce/2008-03/msg00004.html - http://www.gentoo.org/security/en/glsa/glsa-200802-08.xml - http://secunia.com/advisories/28527 - http://www.ubuntu.com/usn/usn-570-1 - http://secunia.com/advisories/29323 - http://bugs.gentoo.org/show_bug.cgi?id=205955 - http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:032
CVE ID: CVE-2008-0173 State: PUBLISHED Published: 2008-01-15T19:00:00 Last Updated: 2024-08-07T07:39:32.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39666 - http://www.securityfocus.com/bid/27266 - http://www.vupen.com/english/advisories/2008/0115 - http://secunia.com/advisories/28395 - http://secunia.com/advisories/28451
CVE ID: CVE-2008-0174 State: PUBLISHED Published: 2008-01-29T01:00:00 Last Updated: 2024-08-07T07:39:34.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487244/100/0/threaded - http://www.kb.cert.org/vuls/id/180876 - http://securityreason.com/securityalert/3590 - http://securitytracker.com/id?1019273 - http://support.gefanuc.com/support/index?pa
urityreason.com/securityalert/3590 - http://securitytracker.com/id?1019273 - http://support.gefanuc.com/support/index?page=kbchannel&id=KB12459 - http://www.securityfocus.com/archive/1/487075/100/0/threaded - http://www.securityfocus.com/bid/30754
CVE ID: CVE-2008-0175 State: PUBLISHED Published: 2008-01-29T01:00:00 Last Updated: 2024-08-07T07:39:34.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3591 - http://secunia.com/advisories/28678 - http://www.securityfocus.com/bid/27446 - http://www.securityfocus.com/archive/1/487242/100/0/threaded - http://www.securityfocus.com/archive/1/48707
/bid/27446 - http://www.securityfocus.com/archive/1/487242/100/0/threaded - http://www.securityfocus.com/archive/1/487079/100/0/threaded - http://www.kb.cert.org/vuls/id/339345 - http://support.gefanuc.com/support/index?page=kbchannel&id=KB12460 - http://www.securitytracker.com/id?1019274 - http://www.vupen.com/english/advisories/2008/0307/references
CVE ID: CVE-2008-0176 State: PUBLISHED Published: 2008-01-29T01:00:00 Last Updated: 2024-08-07T07:39:35.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 010708_162517_6106, allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3592 - http://www.securityfocus.com/bid/27447 - http://www.securityfocus.com/archive/1/487076/100/0/threaded - http://secunia.com/advisories/28663 - http://www.securitytracker.com/id?10192
ocus.com/archive/1/487076/100/0/threaded - http://secunia.com/advisories/28663 - http://www.securitytracker.com/id?1019275 - http://support.gefanuc.com/support/index?page=kbchannel&id=KB12458 - http://www.vupen.com/english/advisories/2008/0306 - http://www.securityfocus.com/archive/1/487241/100/0/threaded - http://www.kb.cert.org/vuls/id/308556
CVE ID: CVE-2008-0177 State: PUBLISHED Published: 2008-02-07T21:00:00 Last Updated: 2024-08-07T07:39:35.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function, which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28816 - http://www.vupen.com/english/advisories/2008/0688 - http://www.vupen.com/english/advisories/2008/0441 - http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/ne
dvisories/2008/0688 - http://www.vupen.com/english/advisories/2008/0441 - http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/ipcomp_input.c?f=u&only_with_tag=netbsd-3-1 - http://www.securityfocus.com/bid/27642 - http://secunia.com/advisories/28788 - http://security.freebsd.org/advisories/FreeBSD-SA-08:04.ipsec.asc - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/29130 - http://secunia.com/advisories/28979 - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36%3Br2=1.37 - http://lists.apple.com/archives/secu
.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ipcomp_input.c.diff?r1=1.36%3Br2=1.37 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://www.vupen.com/english/advisories/2008/2094/references - http://www.vupen.com/english/advisories/2008/1697 - http://securitytracker.com/id?1019314 - http://www.kb.cert.org/vuls/id/110947 - http://secunia.com/advisories/31074 - https://www.exploit-db.com/exploits/5191
CVE ID: CVE-2008-0178 State: PUBLISHED Published: 2008-02-04T23:00:00Z Last Updated: 2024-09-16T22:25:28.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28742 - http://www.kb.cert.org/vuls/id/326065 - http://www.securityfocus.com/bid/27547 - http://support.liferay.com/browse/LEP-4736
CVE ID: CVE-2008-0179 State: PUBLISHED Published: 2008-02-04T23:00:00Z Last Updated: 2024-09-17T03:06:59.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format. Additional Analyst Notes: - CVE Program Container: References: - http://support.liferay.com/browse/LEP-4737 - http://secunia.com/advisories/28742 - http://www.kb.cert.org/vuls/id/888209 - http://www.securityfocus.com/bid/27550
CVE ID: CVE-2008-0180 State: PUBLISHED Published: 2008-02-04T23:00:00Z Last Updated: 2024-09-16T23:41:28.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27546 - http://secunia.com/advisories/28742 - http://www.kb.cert.org/vuls/id/732449 - http://support.liferay.com/browse/LEP-4738
CVE ID: CVE-2008-0181 State: PUBLISHED Published: 2008-02-04T23:00:00Z Last Updated: 2024-09-16T18:55:56.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28742 - http://www.kb.cert.org/vuls/id/217825 - http://support.liferay.com/browse/LEP-4739 - http://www.securityfocus.com/bid/27554
CVE ID: CVE-2008-0182 State: PUBLISHED Published: 2008-02-04T23:00:00Z Last Updated: 2024-09-17T02:27:19.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/767825 - http://secunia.com/advisories/28742 - http://support.liferay.com/browse/LEP-4739
CVE ID: CVE-2008-0184 State: PUBLISHED Published: 2008-01-09T22:00:00 Last Updated: 2024-08-07T07:39:34.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrary files via an encoded "/" ("%2F") in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3528 - http://www.securityfocus.com/bid/27184 - http://www.securityfocus.com/archive/1/485940/100/0/threaded
CVE ID: CVE-2008-0185 State: PUBLISHED Published: 2008-01-09T22:00:00 Last Updated: 2024-08-07T07:39:34.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the pid parameter in a profile page (possibly profile.php). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28328 - http://sourceforge.net/project/shownotes.php?release_id=551208&group_id=129681 - https://www.exploit-db.com/exploits/4852 - http://www.securityfocus.com/bid/27161 - http://www.securityfocus.com/archive/1/485834/100/0/th
t-db.com/exploits/4852 - http://www.securityfocus.com/bid/27161 - http://www.securityfocus.com/archive/1/485834/100/0/threaded
CVE ID: CVE-2008-0186 State: PUBLISHED Published: 2008-01-09T22:00:00 Last Updated: 2024-08-07T07:39:34.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28369 - https://www.exploit-db.com/exploits/4852 - http://www.securityfocus.com/bid/27161 - http://www.securityfocus.com/archive/1/485834/100/0/threaded