Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
erent issue than CVE-2008-2712. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2009-0004.html - http://ftp.vim.org/pub/vim/patches/7.2/7.2.010 - http://www.redhat.com/support/errata/RHSA-2008-0618.html - http://www.openwall.com/lists/oss-security/2008/09/16/5 - http://secunia.com/advisories/31592 - http://www.securityfocus.com/archive/1/495703 - http://www.ubuntu.com/usn/USN-712-1 - http://www.openwall.com/lists/oss-security/2008/09/11/4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894 - http://www.securityfocus.com/bid/31681 - http://www.openwall.com/lists/oss-security/2008/09/16/6
re.oval%3Adef%3A10894 - http://www.securityfocus.com/bid/31681 - http://www.openwall.com/lists/oss-security/2008/09/16/6 - http://secunia.com/advisories/32858 - http://secunia.com/advisories/33410 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.redhat.com/support/errata/RHSA-2008-0580.html - http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/44626 - http://www.vupen.com/english/advisories/2009/0904 - http://www.vupen.com/english/advisories/2009/0033 - http://www.securityfocus.com/archive/1/502322/100/0/threaded - http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-
yfocus.com/archive/1/502322/100/0/threaded - http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2 - https://bugzilla.redhat.com/show_bug.cgi?id=461927 - http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm - http://secunia.com/advisories/32222 - http://support.apple.com/kb/HT4077 - http://www.securityfocus.com/bid/30795 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812 - http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2 - http://www.openwall.com/lists/oss-security/2008/09/11/3 - http://www.securityfocus.com/archive/1/495662 - http
?part=2 - http://www.openwall.com/lists/oss-security/2008/09/11/3 - http://www.securityfocus.com/archive/1/495662 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:236 - http://www.vupen.com/english/advisories/2008/2780 - http://secunia.com/advisories/32864 - http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33 - http://www.rdancer.org/vulnerablevim-K.html - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e - http://www.redhat.com/support/errata/RHSA-2008-0617.html
CVE ID: CVE-2008-4102 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:00:42.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for attackers to guess the pseudo-random values produced by PHP's mt_rand function, as demonstrated by guessing password reset tokens, a different vulnerability than CVE-2008-3681. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=122152798516853&w=2 - http://securityreason.com/securityalert/4271 - http://www.securityfocus.com/archive/1/496237/100/0/threaded - http://secunia.com/advisories/3
.com/securityalert/4271 - http://www.securityfocus.com/archive/1/496237/100/0/threaded - http://secunia.com/advisories/31789 - http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/45068 - http://marc.info/?l=oss-security&m=122115344915232&w=2 - http://marc.info/?l=oss-security&m=122118210029084&w=2 - http://developer.joomla.org/security/news/272-20080902-core-random-number-generation-flaw.html - http://www.sektioneins.de/advisories/SE-2008-04.txt
CVE ID: CVE-2008-4103 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:00:42.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=122152798516853&w=2 - http://secunia.com/advisories/31789 - http://developer.joomla.org/security/news/273-20080903-core-commailto-spam.html - http://marc.info/?l=oss-security&m=122115344915232&w=2 - http://securityreason.com/securityalert/4275 - https://exchange.xforc
/marc.info/?l=oss-security&m=122115344915232&w=2 - http://securityreason.com/securityalert/4275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45070 - http://marc.info/?l=oss-security&m=122118210029084&w=2
CVE ID: CVE-2008-4104 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:00:43.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45071 - http://marc.info/?l=oss-security&m=122152798516853&w=2 - http://developer.joomla.org/security/news/274-20080904-core-redirect-spam.html - http://marc.info/?l=oss-security&m=122115344915232&w=2 - http://securityreason.com/se
20080904-core-redirect-spam.html - http://marc.info/?l=oss-security&m=122115344915232&w=2 - http://securityreason.com/securityalert/4275 - http://marc.info/?l=oss-security&m=122118210029084&w=2
CVE ID: CVE-2008-4105 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:00:42.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=122152798516853&w=2 - http://developer.joomla.org/security/news/271-20080901-core-jrequest-variable-injection.html - http://secunia.com/advisories/31789 - http://marc.info/?l=oss-security&m=122115344915232&w=2 - http://securi
tion.html - http://secunia.com/advisories/31789 - http://marc.info/?l=oss-security&m=122115344915232&w=2 - http://securityreason.com/securityalert/4275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45069 - http://marc.info/?l=oss-security&m=122118210029084&w=2 - http://securitytracker.com/id?1020843
CVE ID: CVE-2008-4106 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:00:42.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the user_login column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's password to a random value by registering a similar username and then requesting a password reset, related to a "SQL column truncation vulnerability." NOTE: the attacker can discover the random password by also exploiting CVE-2008-4107. A
olumn truncation vulnerability." NOTE: the attacker can discover the random password by also exploiting CVE-2008-4107. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31737 - https://www.exploit-db.com/exploits/6421 - http://marc.info/?l=oss-security&m=122152830017099&w=2 - http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/ - http://www.vupen.com/english/advisories/2008/2553 - https://www.exploit-db.com/exploits/6397 - http://www.debian.org/security/2009/dsa-1871 - http://www.openwall.com/lists/oss-security/2008/09/11/6 - http://www.sektioneins.de/advisories/SE-2008-05.txt - http://securityreason.com/securityalert
ss-security/2008/09/11/6 - http://www.sektioneins.de/advisories/SE-2008-05.txt - http://securityreason.com/securityalert/4272 - http://www.securityfocus.com/bid/31068 - http://secunia.com/advisories/31870 - http://www.securityfocus.com/archive/1/496287/100/0/threaded - http://securitytracker.com/id?1020869 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00629.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00607.html - http://wordpress.org/development/2008/09/wordpress-262/
CVE ID: CVE-2008-4107 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:00:42.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset functionality in Joomla! 1.5.x and WordPress before 2.6.2, a different vulnerability than CVE-2008-2107, CVE-2008-2108, and CVE-2008-4102. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31737 - http://marc.info/?l=o
tional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31737 - http://marc.info/?l=oss-security&m=122152830017099&w=2 - http://securityreason.com/securityalert/4271 - http://www.securityfocus.com/bid/31115 - http://www.securityfocus.com/archive/1/496237/100/0/threaded - http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/ - http://www.vupen.com/english/advisories/2008/2553 - http://www.openwall.com/lists/oss-security/2008/09/11/6 - http://osvdb.org/48700 - http://www.sektioneins.de/advisories/SE-2008-05.txt - http://secunia.com/advisories/31870 - http://www.securityfocus.com/archive/1/496287/100/0/threaded - http://securitytracker.com/id?1
ia.com/advisories/31870 - http://www.securityfocus.com/archive/1/496287/100/0/threaded - http://securitytracker.com/id?1020869 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00629.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00607.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45956 - http://wordpress.org/development/2008/09/wordpress-262/ - http://www.sektioneins.de/advisories/SE-2008-04.txt - http://www.sektioneins.de/advisories/SE-2008-02.txt
CVE ID: CVE-2008-4108 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:00:42.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directory. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4274 - http://www.securityfocus.com/bid/31184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45161 - http://www.secu
- http://www.securityfocus.com/bid/31184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45161 - http://www.securitytracker.com/id?1020904 - http://www.vupen.com/english/advisories/2008/2659 - https://bugzilla.redhat.com/show_bug.cgi?id=462326 - http://marc.info/?l=oss-security&m=122152861617434&w=2 - http://marc.info/?l=oss-security&m=122148330903513&w=2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498899
CVE ID: CVE-2008-4109 State: PUBLISHED Published: 2008-09-17T18:06:00 Last Updated: 2024-08-07T10:00:42.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-649-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45202 - http://secunia.com/advisories/31885 - http://www.securitytracker.com/id?1020891 - http://www.debian.org/security/2008/dsa-1638 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html - http://secunia.com/advisories/32080 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498678 - http://secunia.com/advisories/32181 - http://www.openwall.com/lists/oss-security/2024/07/01/3
CVE ID: CVE-2008-4110 State: PUBLISHED Published: 2008-09-16T22:00:00 Last Updated: 2024-08-07T10:00:42.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long URL in the second argument to the Connect method. NOTE: this issue is not a vulnerability in many environments, since the control is not marked as safe for scripting and would not execute with default Internet Explorer settings. Additional Analyst Notes: - CVE Program Contain
scripting and would not execute with default Internet Explorer settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496232/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45186 - http://securityreason.com/securityalert/4262 - http://www.securityfocus.com/bid/31129
CVE ID: CVE-2008-4111 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T10:00:42.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www.vupen.com/english/advisories/2008/2566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45122 - http://www.vupen.com/english/advisories/2008/2871 - http://www-1.ib
exchange.xforce.ibmcloud.com/vulnerabilities/45122 - http://www.vupen.com/english/advisories/2008/2871 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK64302 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www.securityfocus.com/bid/31186 - http://secunia.com/advisories/32296 - http://www.securityfocus.com/bid/31839 - http://secunia.com/advisories/31892
CVE ID: CVE-2008-4112 State: REJECTED Published: 2008-09-16T23:00:00 Last Updated: 2008-09-24T09:00:00 Description: No description available.
CVE ID: CVE-2008-4113 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T10:00:42.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?102100
kopt function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021000 - http://www.trapkit.de/advisories/TKADV2008-007.txt - http://secunia.com/advisories/32190 - http://securityreason.com/securityalert/4266 - http://www.debian.org/security/2008/dsa-1655 - http://secunia.com/advisories/32393 - https://www.exploit-db.com/exploits/7618 - http://www.securityfocus.com/bid/31121 - http://www.ubuntu.com/usn/usn-659-1 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=d97240552cd98c4b07322f30f66fd9c3ba4171de - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html - http://www.redhat.com/suppor
d9c3ba4171de - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html - http://www.redhat.com/support/errata/RHSA-2008-0857.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45188 - http://www.securityfocus.com/archive/1/496256/100/0/threaded - http://secunia.com/advisories/32315 - http://www.openwall.com/lists/oss-security/2008/09/26/6
CVE ID: CVE-2008-4114 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T10:00:42.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via an SMB WRITE_ANDX packet with an offset that is inconsistent with the packet size, related to "insufficiently validating the buffer size," as demonstrated by a request to the \PIPE\lsarpc named pipe, aka "SMB Validation Denial of Service Vulnerability." Additional Analyst Notes:
request to the \PIPE\lsarpc named pipe, aka "SMB Validation Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6044 - https://www.exploit-db.com/exploits/6463 - http://www.securityfocus.com/bid/31179 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-001 - http://secunia.com/advisories/31883 - http://www.vupen.com/english/advisories/2008/2583 - http://www.us-cert.gov/cas/techalerts/TA09-013A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45146 - http://www.securitytracker.com/id?1020887 - https://oval.cisecurity.org/r
ge.xforce.ibmcloud.com/vulnerabilities/45146 - http://www.securitytracker.com/id?1020887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5262 - http://www.vallejo.cc/proyectos/vista_SMB_write_DoS.htm - http://www.reversemode.com/index.php?option=com_content&task=view&id=54&Itemid=1 - http://www.securityfocus.com/archive/1/496354/100/0/threaded
CVE ID: CVE-2008-4115 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T10:00:42.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6451 - http://securityreason.com/securityalert/4267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45103
CVE ID: CVE-2008-4116 State: PUBLISHED Published: 2008-09-17T18:06:00 Last Updated: 2024-08-07T10:00:42.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web page or embedded in a (2) .mp4 or (3) .mov file, possibly related to the Check_stack_cookie function and an off-by-one error that leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4270 - https://oval.cisecurity.org/repos
- CVE Program Container: References: - http://securityreason.com/securityalert/4270 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5936 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7995 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6113 - http://www.securityfocus.com/bid/31212 - https://www.exploit-db.com/exploits/6471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45311
CVE ID: CVE-2008-4117 State: PUBLISHED Published: 2008-09-17T18:06:00 Last Updated: 2024-08-07T10:00:42.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a web page in the PRM module in Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2587 - http://www.securityfocus.com/bid/31194 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-241686-1 - http://www.securitytracker.com/id?1020890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45156
y=1-26-241686-1 - http://www.securitytracker.com/id?1020890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45156 - http://secunia.com/advisories/31841
CVE ID: CVE-2008-4118 State: PUBLISHED Published: 2008-09-17T19:00:00 Last Updated: 2024-08-07T10:08:33.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in High Norm Sound Master 2nd 1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://high-norm.rash.jp/script_soundmaster2nd.html. - https://exchange.xforce.ibmcloud.com/vulnerabilities/44977 - http://high-norm.rash.jp/script_soundmaster2nd.html - http://jvn.jp/en/jp/JVN55010230/index.html - http://www.securityfocus.com/bid/31076
CVE ID: CVE-2008-4119 State: PUBLISHED Published: 2008-09-27T00:00:00 Last Updated: 2024-08-07T10:08:34.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms." Additional Analyst Notes: - CVE Program Container: References: - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=186585 - http://www.securityfocus.com/bid/31412 - http://secunia.com/advisories/32038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45416 - http://www.securitytracker.co
ecunia.com/advisories/32038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45416 - http://www.securitytracker.com/id?1020949 - http://www.vupen.com/english/advisories/2008/2673 - http://community.ca.com/blogs/casecurityresponseblog/archive/2008/09/25.aspx - http://securityreason.com/securityalert/4318 - http://www.securityfocus.com/archive/1/496755/100/0/threaded
CVE ID: CVE-2008-4120 State: PUBLISHED Published: 2008-09-29T17:00:00 Last Updated: 2024-08-07T10:08:33.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.flatpress.org/home/comments.php?entry=entry080925-180744 - http://www.securityfocus.com/archive/1/496740/100/0/threaded - http://www.securityfocus.com/bid/31407 - http://www.datensalat.eu/~fabian/cve/CVE-2008-4120-flatpress.html
/0/threaded - http://www.securityfocus.com/bid/31407 - http://www.datensalat.eu/~fabian/cve/CVE-2008-4120-flatpress.html - http://sourceforge.net/project/shownotes.php?group_id=157089&release_id=628765_id=628765 - http://securityreason.com/securityalert/4324