Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-5072 State: PUBLISHED Published: 2012-01-29T11:00:00Z Last Updated: 2024-09-17T01:30:51.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to execute arbitrary SQL commands via the (1) start parameter to portal/kb.php; (2) contractid parameter to contract_add_service.php; (3) id parameter to edit_escalation_path.php; (4) unlock, (5) lock, or (6) selected parameter to holding_queue.php; inc parameter in a report action to (7) report_customers.php or (8) report_incidents_by_site.php; (9) start parameter to search.php; or (10) sites parameter to transact
ustomers.php or (8) report_incidents_by_site.php; (9) start parameter to search.php; or (10) sites parameter to transactions.php. Additional Analyst Notes: - CVE Program Container: References: - http://sitracker.org/wiki/ReleaseNotes365 - http://www.securityfocus.com/archive/1/519636 - http://secunia.com/advisories/46019 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_sit_support_incident_tracker.html
CVE ID: CVE-2011-5073 State: PUBLISHED Published: 2012-01-29T11:00:00Z Last Updated: 2024-09-17T04:03:57.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to inject arbitrary web script or HTML via the (1) mode parameter to contact_support.php; (2) contractid parameter to contract_add_service.php; (3) user parameter to edit_backup_users.php; (4) id parameter to edit_escalation_path.php; the Referer to (5) forgotpwd.php, (6) an approvalpage action to billable_incidents.php, or (7) transactions.php; (8) action parameter to inbox.php; (9) search_string para
age action to billable_incidents.php, or (7) transactions.php; (8) action parameter to inbox.php; (9) search_string parameter in a findcontact action to incident_add.php; table1 parameter to (10) report_customers.php, (11) report_incidents_by_engineer.php, (12) report_incidents_by_site.php, or (13) report_marketing.php; or the (14) startdate or (15) enddate parameter to report_incidents_by_vendor.php. Additional Analyst Notes: - CVE Program Container: References: - http://sitracker.org/wiki/ReleaseNotes365 - http://www.securityfocus.com/archive/1/519636 - http://secunia.com/advisories/46019 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_sit_support_incident_tracker.html
CVE ID: CVE-2011-5074 State: PUBLISHED Published: 2012-01-29T11:00:00Z Last Updated: 2024-09-17T01:06:39.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via (1) user_profile_edit.php or (2) user_add.php. Additional Analyst Notes: - CVE Program Container: References: - http://sitracker.org/wiki/ReleaseNotes365 - http://www.securityfocus.com/archive/1/519636 - http://secunia.com/advisories/46019 - https:/
org/wiki/ReleaseNotes365 - http://www.securityfocus.com/archive/1/519636 - http://secunia.com/advisories/46019 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_sit_support_incident_tracker.html
CVE ID: CVE-2011-5075 State: PUBLISHED Published: 2012-01-29T11:00:00Z Last Updated: 2024-09-17T00:31:08.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.sitracker.org/view.php?id=1737 - http://www.exploit-db.com/exploits/18132/ - http://www.openwall.com/lists/oss-security/2011/11/22/3 - http://www.securityfocus.com/archive/1/520577
CVE ID: CVE-2011-5076 State: PUBLISHED Published: 2012-02-08T00:00:00Z Last Updated: 2024-09-16T16:23:57.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other versions allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51871 - http://bbs.wolvez.org/viewtopic.php?id=208 - http://secunia.com/advisories/47907
CVE ID: CVE-2011-5077 State: PUBLISHED Published: 2012-02-08T00:00:00Z Last Updated: 2024-09-16T22:09:26.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in attachement.php in HDWiki 5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in image directory. Additional Analyst Notes: - CVE Program Container: References: - http://bbs.wolvez.org/viewtopic.php?id=208
CVE ID: CVE-2011-5078 State: PUBLISHED Published: 2012-02-08T21:00:00Z Last Updated: 2024-09-16T20:58:18.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP requests, aka Bug IDs 678497 and 678499. Additional Analyst Notes: - CVE Program Container: References: - http://www.sybase.com/detail?id=1095200 - http://www.verisigninc.com/products-and-services/network-intelligence-availability/id
www.sybase.com/detail?id=1095200 - http://www.verisigninc.com/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=952
CVE ID: CVE-2011-5079 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-16T22:25:51.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://www.securityfocus.com/bid/51845 - http://typo3.org/extensions/repository/view/irfaq/1.1.4/info/ChangeLog/ - h
/ - http://www.securityfocus.com/bid/51845 - http://typo3.org/extensions/repository/view/irfaq/1.1.4/info/ChangeLog/ - http://osvdb.org/78750 - http://secunia.com/advisories/47823
CVE ID: CVE-2011-5080 State: PUBLISHED Published: 2012-02-14T17:00:00Z Last Updated: 2024-09-17T04:20:40.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/class.tx_jftcaforms_tceFunc.php in the Additional TCA Forms (jftcaforms) extension before 0.2.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/ - http://forge.typo3.org/projects/extension-jftcaforms/repository/diff?rev=51637&rev_to=51568 - http://www.securityfocus.com/bid/5185
e.typo3.org/projects/extension-jftcaforms/repository/diff?rev=51637&rev_to=51568 - http://www.securityfocus.com/bid/51854 - http://osvdb.org/78800
CVE ID: CVE-2011-5081 State: PUBLISHED Published: 2012-02-18T00:00:00 Last Updated: 2024-08-07T00:23:39.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2011/Apr/266 - https://www.htbridge.ch/advisory/multiple_xss_vulnerabilities_in_backuppc.html - http://www.osvdb.org/72055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67170 - http://
ies_in_backuppc.html - http://www.osvdb.org/72055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67170 - http://secunia.com/advisories/44385
CVE ID: CVE-2011-5082 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-07T00:23:39.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47954 - http://www.securityfocus.com/bid/51997 - http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73202
CVE ID: CVE-2011-5083 State: PUBLISHED Published: 2012-03-19T18:00:00Z Last Updated: 2024-09-16T22:45:52.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/79665 - http://cxsecurity.com/issue/WLB-2011090012 - http://www.exploit-db.com/exploits/18529 - http://www.securityfocus.com/bid/52173 - http://vigilance.fr/vulnerabilit
2 - http://www.exploit-db.com/exploits/18529 - http://www.securityfocus.com/bid/52173 - http://vigilance.fr/vulnerability/Dotclear-file-upload-via-swfupload-swf-11396
CVE ID: CVE-2011-5084 State: PUBLISHED Published: 2012-04-02T18:00:00 Last Updated: 2024-08-07T00:23:40.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2423 - http://www.movabletype.org/2011/05/movable_type_51_and_505_436_security_update.html
CVE ID: CVE-2011-5085 State: PUBLISHED Published: 2012-04-02T18:00:00 Last Updated: 2024-08-07T00:23:40.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to read or modify data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2423 - http://www.movabletype.org/2011/05/movable_type_51_and_505_436_security_update.html
CVE ID: CVE-2011-5086 State: PUBLISHED Published: 2012-04-18T10:00:00Z Last Updated: 2024-09-17T00:16:03.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: https50.ocx in IP*Works! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-03A.pdf
CVE ID: CVE-2011-5087 State: PUBLISHED Published: 2012-04-18T10:00:00 Last Updated: 2024-08-07T00:23:40.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53160 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-096-01.pdf
CVE ID: CVE-2011-5088 State: PUBLISHED Published: 2012-04-18T17:00:00Z Last Updated: 2024-09-17T04:18:54.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execute arbitrary code via a crafted web site, related to a "Workbench32/WebHMI component SetTrustedZone Policy vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-11-182-01.pdf
CVE ID: CVE-2011-5089 State: PUBLISHED Published: 2012-04-18T17:00:00 Last Updated: 2024-08-07T00:23:39.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74932 - http://www.us-cert.gov/control_systems/pdf/ICSA-11-182-02.pdf
CVE ID: CVE-2011-5090 State: PUBLISHED Published: 2012-05-24T00:00:00 Last Updated: 2024-08-07T00:23:39.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: GR Board (aka grboard) 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to (1) mod_rewrite.php, (2) comment_write_ok.php, (3) poll/index.php, (4) update/index.php, (5) trackback.php, or (6) an arbitrary poll.php script under theme/. Additional Analyst Notes: - CVE Program Container: References: - http://sirini.net/grboard/board.php?id=developer&articleNo=591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75856
CVE ID: CVE-2011-5091 State: PUBLISHED Published: 2012-05-24T00:00:00 Last Updated: 2024-08-07T00:23:40.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the (1) tableType or (2) blindTarget parameter to view.php, (3) the delTargets[0] parameter to view_memo.php, or (4) the isReported parameter to write_ok.php. Additional Analyst Notes: - CVE Program Container: References: - http://sirini.net/grboard/board.php?id=developer&articleNo=591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75855
CVE ID: CVE-2011-5092 State: PUBLISHED Published: 2012-06-04T19:00:00Z Last Updated: 2024-09-17T03:02:30.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges via unspecified vectors, a different vulnerability than CVE-2011-4458 and CVE-2011-5093. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
CVE ID: CVE-2011-5093 State: PUBLISHED Published: 2012-06-04T19:00:00Z Last Updated: 2024-09-16T23:46:51.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated users to bypass intended access restrictions and execute arbitrary code by leveraging access to a privileged account, a different vulnerability than CVE-2011-4458 and CVE-2011-5092. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.
l.com/pipermail/rt-announce/2012-May/000203.html - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html - http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
CVE ID: CVE-2011-5094 State: PUBLISHED Published: 2012-06-16T21:00:00Z Last Updated: 2024-09-16T21:56:51.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL_ENABLE_RENEGOTIATION option, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-1473. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit rene
can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment Additional Analyst Notes: - CVE Program Container: References: - http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html - http://www.ietf.org/mail-archive/web/tls/current/msg07567.html - http://www.ietf.org/mail-archive/web/tls/current/msg07577.html - https://bugzilla.redhat.com/show_bug.cgi?id=707065 - http://www.educatedguesswork.org/2011/10/ssltls_and_computational_dos.html - http://www.openwall.com/lists/oss-security/2011/07/08/2 - http://www.ietf.org/mail-archive/web/tls/current/msg07576.html - htt
/www.openwall.com/lists/oss-security/2011/07/08/2 - http://www.ietf.org/mail-archive/web/tls/current/msg07576.html - http://orchilles.com/2011/03/ssl-renegotiation-dos.html - http://www.ietf.org/mail-archive/web/tls/current/msg07553.html - http://www.ietf.org/mail-archive/web/tls/current/msg07564.html
CVE ID: CVE-2011-5095 State: PUBLISHED Published: 2012-06-20T17:00:00Z Last Updated: 2024-09-16T20:31:45.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923. Additional Analyst Notes: - CVE Program Container: References: - http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdf - http://www.nessus.org/plugins/index.php?view=single&id=53360 - https://discussions.nessus.org/thread/3381
CVE ID: CVE-2011-5096 State: PUBLISHED Published: 2012-07-03T21:00:00Z Last Updated: 2024-09-17T00:06:20.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media Application Server) 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted cs_anams parameter in a CONTENT_STORE_ADMIN_REQ packet. Additional Analyst Notes: - CVE Program Container: References: - https://downloads.avaya.com/css/P8/documents/100146108 - http://zerodayinitiative.com/advisories/ZDI-11-260/
CVE ID: CVE-2011-5097 State: PUBLISHED Published: 2012-08-08T10:00:00Z Last Updated: 2024-09-16T23:36:44.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: chef-server-api/app/controllers/cookbooks.rb in Chef Server in Chef before 0.9.18, and 0.10.x before 0.10.2, does not require administrative privileges for the update and destroy methods, which allows remote authenticated users to (1) upload cookbooks via a knife cookbook upload command or (2) delete cookbooks via a knife cookbook delete command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opscode/chef/commit/a4ea6edab2fecb922f999cffb0daa04eeeec7a26 - http://tickets.opscode.com/browse/C
- https://github.com/opscode/chef/commit/a4ea6edab2fecb922f999cffb0daa04eeeec7a26 - http://tickets.opscode.com/browse/CHEF-2436
CVE ID: CVE-2011-5098 State: PUBLISHED Published: 2012-08-08T10:00:00Z Last Updated: 2024-09-17T03:42:41.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: chef-server-api/app/controllers/clients.rb in Chef Server in Chef before 0.9.20, and 0.10.x before 0.10.6, does not require administrative privileges for creating admin clients, which allows remote authenticated users to bypass intended access restrictions by leveraging read permission for the validation key and executing a knife client create command with the --admin option. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opscode/chef/commit/33f0e9c58bbf047e1b401a834f3abfe72d9a8947 - http:
Program Container: References: - https://github.com/opscode/chef/commit/33f0e9c58bbf047e1b401a834f3abfe72d9a8947 - http://tickets.opscode.com/browse/CHEF-2649
CVE ID: CVE-2011-5099 State: PUBLISHED Published: 2012-08-14T22:00:00 Last Updated: 2024-08-07T00:23:40.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75112 - http://www.securityfocus.com/bid/53208 - http://packetstormsecurity.org/files/112092/Joomla-CCNewsLetter-1.0.7-SQL-Injection.html - http://www.chillcreations.com/blog/5-ccnewsletter-joomla-newslett
/112092/Joomla-CCNewsLetter-1.0.7-SQL-Injection.html - http://www.chillcreations.com/blog/5-ccnewsletter-joomla-newsletter/274-ccnewsletter-1010-security-release.html - http://secunia.com/advisories/48934
CVE ID: CVE-2011-5100 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-16T16:47:37.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in McAfee Firewall Reporter before 5.1.0.13 does not properly implement cookie authentication, which allows remote attackers to obtain access, and disable anti-virus functionality, via an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10015
CVE ID: CVE-2011-5101 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-07T00:23:40.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78274
CVE ID: CVE-2011-5102 State: PUBLISHED Published: 2012-08-23T10:00:00Z Last Updated: 2024-09-16T22:20:37.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before Hotfix 109, 7.1.1 before Hotfix 06, 7.5 before Hotfix 78, 7.5.1 before Hotfix 12, 7.6 before Hotfix 24, and 7.6.2 before Hotfix 12; Web Filter; Web Security Gateway; and Web Security Gateway Anywhere allows remote attackers to execute commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/v7-1-About-Hotfix-109-for-Websense-Web