Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6609 State: PUBLISHED Published: 2009-04-06T16:00:00 Last Updated: 2024-08-07T11:34:47.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote attackers to inject arbitrary web script or HTML via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0812-exploits/phpcksec-xssdisclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/47425 - http://www.securityfocus.com/bid/32890
CVE ID: CVE-2008-6610 State: PUBLISHED Published: 2009-04-06T16:00:00 Last Updated: 2024-08-07T11:34:47.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2.0 allows remote attackers to list arbitrary directories and read arbitrary files via a full pathname in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0812-exploits/phpcksec-xssdisclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/47426
CVE ID: CVE-2008-6611 State: PUBLISHED Published: 2009-04-06T16:00:00 Last Updated: 2024-08-07T11:34:47.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32537 - https://www.exploit-db.com/exploits/7306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46963 - http://www.vupen.com/english/advisories/2008/3291 - http://www.osvdb.org/50349 - http://secunia.com/advisories/32886
CVE ID: CVE-2008-6612 State: PUBLISHED Published: 2009-04-06T16:00:00 Last Updated: 2024-08-07T11:34:47.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32537 - https://www.exploit-db.com/exploits/7306 - http://www.vupen.com/english/advisories/2008/3291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46964 - http://secunia.com/advisorie
english/advisories/2008/3291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46964 - http://secunia.com/advisories/32886
CVE ID: CVE-2008-6613 State: PUBLISHED Published: 2009-04-06T16:00:00 Last Updated: 2024-08-07T11:34:47.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46965 - http://www.osvdb.org/50350 - http://secunia.com/advisories/32886
CVE ID: CVE-2008-6614 State: PUBLISHED Published: 2009-04-06T18:00:00 Last Updated: 2024-08-07T11:34:47.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) allow remote attackers to execute arbitrary SQL commands via (1) the administrators_username parameter (aka the Username field) or (2) the administrators_pass parameter (aka the Password field). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/9699 - http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0344.html - http://www.securityfocus.com/bid/29
its/9699 - http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0344.html - http://www.securityfocus.com/bid/29159 - http://wired-security.net/texts/advisories/IBD_Micro_CMS_3.5_SQL_Injection_Login_Bypass_Advisory.txt - http://osvdb.org/51298 - http://www.securityfocus.com/bid/29159/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/42539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53272
CVE ID: CVE-2008-6615 State: PUBLISHED Published: 2009-04-06T18:00:00 Last Updated: 2024-08-07T11:34:47.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL commands via the keyword parameter in the advanced_search_result page. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42161 - http://downloads.securityfocus.com/vulnerabilities/exploits
https://exchange.xforce.ibmcloud.com/vulnerabilities/42161 - http://downloads.securityfocus.com/vulnerabilities/exploits/29020.html
CVE ID: CVE-2008-6616 State: PUBLISHED Published: 2009-04-06T18:00:00 Last Updated: 2024-08-07T11:34:47.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in the advanced_search_result page. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42162 - http://www.securityfocus.com/bid/29020 - http://downloads.securityfocus.com/vulner
.ibmcloud.com/vulnerabilities/42162 - http://www.securityfocus.com/bid/29020 - http://downloads.securityfocus.com/vulnerabilities/exploits/29020.html
CVE ID: CVE-2008-6617 State: PUBLISHED Published: 2009-04-06T18:00:00 Last Updated: 2024-08-07T11:34:47.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42250 - http://www.securityfocus.com/archive/1/491578/100/0/threaded - http://www.securityfocus.com/bid/29029
CVE ID: CVE-2008-6618 State: PUBLISHED Published: 2009-04-06T18:00:00 Last Updated: 2024-08-07T11:34:47.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via the teacher_id parameter in (1) class/HomepageMain.php and (2) class/HomepageTop.php, and (3) the message_id parameter in class/MessageReply.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30365 - http://osvdb.org/45640 - http://www.securityfocus.com/archive/1/492583/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42650 - http://www.chro
focus.com/archive/1/492583/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42650 - http://www.chroot.org/exploits/chroot_uu_005 - http://www.securityfocus.com/bid/29372 - http://osvdb.org/45639 - http://www.vupen.com/english/advisories/2008/1664 - http://osvdb.org/45641
CVE ID: CVE-2008-6619 State: PUBLISHED Published: 2009-04-06T18:00:00 Last Updated: 2024-08-07T11:34:47.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30365 - http://www.securityfocus.com/archive/1/492583/100/0/threaded - http://www.chroot.org/exploits/chroot_uu_005 - http://www.securityfocus.com/bid/29372 - http://www.vupen.com/e
hreaded - http://www.chroot.org/exploits/chroot_uu_005 - http://www.securityfocus.com/bid/29372 - http://www.vupen.com/english/advisories/2008/1664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42651
CVE ID: CVE-2008-6620 State: PUBLISHED Published: 2009-04-06T18:00:00 Last Updated: 2024-08-07T11:34:47.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php in GraFX miniCWB 2.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errcontext, (2) _GET, (3) _POST, (4) _SESSION, (5) _SERVER, and (6) fckphp_config[Debug_SERVER] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29368 - http://marc.info/?l=bugtraq&m=121181445919047&w=2 - http://secunia.com/adv
s: - http://www.securityfocus.com/bid/29368 - http://marc.info/?l=bugtraq&m=121181445919047&w=2 - http://secunia.com/advisories/30390 - http://osvdb.org/45647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42630
CVE ID: CVE-2008-6621 State: PUBLISHED Published: 2009-04-06T21:00:00 Last Updated: 2024-08-07T11:34:47.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in GraphicsMagick before 1.2.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors in DPX images. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=604837 - http://secunia.com/advisories/30549 - http://www.vupen.com/english/advisories/2008/1767 - http://osvdb.org/46258 - http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMa
.com/english/advisories/2008/1767 - http://osvdb.org/46258 - http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/dpx.c
CVE ID: CVE-2008-6622 State: PUBLISHED Published: 2009-04-06T21:00:00 Last Updated: 2024-08-07T11:34:47.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32494 - http://osvdb.org/49823 - https://www.exploit-db.com/exploits/6977 - http://www.securityfocus.com/bid/32097
CVE ID: CVE-2008-6623 State: PUBLISHED Published: 2009-04-06T21:00:00 Last Updated: 2024-08-07T11:34:47.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32108 - http://secunia.com/advisories/32494 - https://www.exploit-db.com/exploits/6989 - http://osvdb.org/49824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46359
CVE ID: CVE-2008-6624 State: PUBLISHED Published: 2009-04-06T21:00:00 Last Updated: 2024-08-07T11:34:47.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46362 - https://www.exploit-db.com/exploits/6983 - http://osvdb.org/49759
CVE ID: CVE-2008-6625 State: PUBLISHED Published: 2009-04-06T21:00:00 Last Updated: 2024-08-07T11:34:47.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6984 - http://www.securityfocus.com/bid/32108 - http://secunia.com/advisories/32508 - http://osvdb.org/49760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46360
CVE ID: CVE-2008-6626 State: PUBLISHED Published: 2009-04-06T21:00:00 Last Updated: 2024-08-07T11:34:47.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32108 - http://secunia.com/advisories/32508 - https://www.exploit-db.com/exploits/6985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46358 - http://osvdb.org/49761
CVE ID: CVE-2008-6627 State: PUBLISHED Published: 2009-04-06T21:00:00 Last Updated: 2024-08-07T11:34:47.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46357 - https://www.exploit-db.com/exploits/6986 - http://osvdb.org/49720 - http://secunia.com/advisories/32499
CVE ID: CVE-2008-6628 State: REJECTED Published: 2009-04-06T21:00:00 Last Updated: 2009-05-15T09:00:00 Description: No description available.
CVE ID: CVE-2008-6629 State: PUBLISHED Published: 2009-04-06T21:00:00 Last Updated: 2024-08-07T11:34:47.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6974 - http://osvdb.org/49719 - http://secunia.com/advisories/32499
CVE ID: CVE-2008-6630 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30217 - http://typo3.org/teams/security/security-bulletins/typo3-20080513-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/42364 - http://www.securityfocus.com/bid/29182 - http://osvdb.org/45050
CVE ID: CVE-2008-6631 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter in a sendmessage action and the (2) username parameter when registering a new user, different vectors than CVE-2008-0679. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42370 - http://secunia.com/advisories/30165 - http://www.davidsopas.com/soapbox/bl
e.xforce.ibmcloud.com/vulnerabilities/42370 - http://secunia.com/advisories/30165 - http://www.davidsopas.com/soapbox/blogphp.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/42369 - http://osvdb.org/45038
CVE ID: CVE-2008-6632 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29280 - https://www.exploit-db.com/exploits/5653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42519
CVE ID: CVE-2008-6633 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idresa parameter to resaopen.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42626 - http://www.securityfocus.com/bid/29354 - http://osvdb.org/45604 - https://www.exploit-db.com/exploits/5670 - http://secunia.com/advisories/30376
CVE ID: CVE-2008-6634 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to weekview.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42626 - https://www.exploit-db.com/exploits/5675 - http://secunia.com/advisories/30376
CVE ID: CVE-2008-6635 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir_inc parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5916 - http://sourceforge.net/project/shownotes.php?group_id=79973&release_id=668019 - http://secunia.com/advisories/30771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43304 - http://w
_id=668019 - http://secunia.com/advisories/30771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43304 - http://www.securityfocus.com/bid/29906
CVE ID: CVE-2008-6636 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir_edge_skins parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5916 - http://sourceforge.net/project/shownotes.php?group_id=79973&relea
ferences: - https://www.exploit-db.com/exploits/5916 - http://sourceforge.net/project/shownotes.php?group_id=79973&release_id=668019 - http://secunia.com/advisories/30771
CVE ID: CVE-2008-6637 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) school and (2) email parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42598 - http://www.digitrustgroup.com/advisories/web-application-security-safari-montage.html - http://osvdb.org/45646 - http://www.vupen.com/english/ad
p.com/advisories/web-application-security-safari-montage.html - http://osvdb.org/45646 - http://www.vupen.com/english/advisories/2008/1652 - http://secunia.com/advisories/30363
CVE ID: CVE-2008-6638 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control (UUploaderSvrD.dll 6.0.0.35) allows remote attackers to delete arbitrary files via the RemoveFileOrDir method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5569 - https://www.exploit-db.com/exploits/5272 - http://www.securityfocus.com/bid/28301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41258
CVE ID: CVE-2008-6639 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the update_user_pwd action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42694 - http://www.osvdb.org/45656 - http://secunia.com/advisories/30383 - http://gmda.altervista.org/AjaXplorer-2.3.3/cka.txt
CVE ID: CVE-2008-6640 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) uyeadmin.asp and (2) profil.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42231 - http://www.securityfocus.com/bid/29057/exploit - http://www.securityfocus.com/bid/29057
CVE ID: CVE-2008-6641 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to (1) kanal.asp, (2) google.asp, and (3) hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the (4) username or (5) password fields to yonet/default.asp. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5564 - http://www.securityfocus.com/bid/29091 - https://exchange.xforce.ibmcloud.com/
ttps://www.exploit-db.com/exploits/5564 - http://www.securityfocus.com/bid/29091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42261
CVE ID: CVE-2008-6642 State: PUBLISHED Published: 2009-04-07T10:00:00 Last Updated: 2024-08-07T11:34:47.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL commands via the sid parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29970 - https://www.exploit-db.com/exploits/5509 - http://www.securityfocus.com/bid/28965 - http://osvdb.org/44831 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42048