Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1458 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the slab parameter in an edit action, (2) the catname parameter in a showcats action, and (3) the cat parameter in a reordercat action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34744 - http://razorcms.co.uk/support/viewtopic.php?f=13&t=325 - http://marc.info/?l=full-disclosure&m=123998062108561&w=2 - https://exch
zorcms.co.uk/support/viewtopic.php?f=13&t=325 - http://marc.info/?l=full-disclosure&m=123998062108561&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49945 - http://osvdb.org/53776 - http://marc.info/?l=full-disclosure&m=123990481506680&w=2 - http://www.securityfocus.com/bid/34566
CVE ID: CVE-2009-1459 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrators for requests that create a web page containing PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34744 - http://razorcms.co.uk/support/viewtopic.php?f=13&t=325 - http://osvdb.org/53778 - http://marc.info/?l=full-disclosure&m=123998062108561&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49947 - http://marc.info/?l=full-di
closure&m=123998062108561&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49947 - http://marc.info/?l=full-disclosure&m=123990481506680&w=2 - http://www.securityfocus.com/bid/34566
CVE ID: CVE-2009-1460 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and (2) the root directory, (3) datastore/, and (4) admin/core/, which allows local users to have an unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34744 - http://razorcms.co.uk/support/viewtopic.php?f=13&t=325 - http://marc.info/?l=full-disclosure&m=123998062108561&w=2 - https://exchange.
s.co.uk/support/viewtopic.php?f=13&t=325 - http://marc.info/?l=full-disclosure&m=123998062108561&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49946 - http://marc.info/?l=full-disclosure&m=123990481506680&w=2 - http://www.securityfocus.com/bid/34566 - http://osvdb.org/53777
CVE ID: CVE-2009-1461 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=123998062108561&w=2 - http://razorcms.co.uk/support/viewtopic.php?f=13&t=325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50357 - http://www.securityfocus.com/bid/34854
CVE ID: CVE-2009-1462 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://razorcms.co.uk/support/viewtopic.php?f=13&t=325 - http://marc.info/?l=full-disclosure&m=123998062108561&w=2 - http://marc.info/?l=full-disclosure&m=123990481506680&w=2 - http://www.securityfocus.com/bid/34566 - https://exchange.xforce.ib
marc.info/?l=full-disclosure&m=123990481506680&w=2 - http://www.securityfocus.com/bid/34566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50358
CVE ID: CVE-2009-1463 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving content as a .php file. Additional Analyst Notes: - CVE Program Container: References: - http://razorcms.co.uk/support/viewtopic.php?f=13&t=325 - http://marc.info/?l=full-disclosure&m=123998062108561&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50359 - http://marc.info/?l=full-disclosure&m=123990481506680&w=2 - http://www.securityfocus.com/bid/34566
CVE ID: CVE-2009-1464 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:13:25.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary programs via a command job, (2) stop services via a setservice job, or (3) terminate processes via a killprocess job. Additional Analyst Notes: - CVE Program Container: References: - http://www.syhunt.com/advisories/?id=aas-multiple - http://www.syhunt.com/advisories/aashack.txt - http://www.securityfocus
p://www.syhunt.com/advisories/?id=aas-multiple - http://www.syhunt.com/advisories/aashack.txt - http://www.securityfocus.com/archive/1/503434/100/0/threaded - http://www.securityfocus.com/bid/34911 - http://securitytracker.com/id?1022204 - http://secunia.com/advisories/35034
CVE ID: CVE-2009-1465 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:13:25.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attackers to obtain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.syhunt.com/advisories/?id=aas-multiple - http://www.securityfocus.com/archive/1/503434/100/0/threaded - http://www.securityfocus.com/bid/34911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50589 - http://securitytracker.com/id?1022204
CVE ID: CVE-2009-1466 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:13:25.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.syhunt.com/advisories/?id=aas-multiple - http://www.securityfocus.com/archive/1/503434/100/0/threaded - http://www.securityfocus.com/bid/34911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50590 - http://securitytracker.com/id?1022204
CVE ID: CVE-2009-1467 State: PUBLISHED Published: 2009-05-05T20:00:00 Last Updated: 2024-08-07T05:13:25.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in server/inc/tools.php; or the (2) title, (3) link, or (4) description element in an RSS feed, related to the getHTML function in server/inc/rss/item.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcl
server/inc/rss/item.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50331 - http://www.securityfocus.com/bid/34825 - http://www.securitytracker.com/id?1022167 - http://www.securityfocus.com/archive/1/503225/100/0/threaded - http://www.redteam-pentesting.de/advisories/rt-sa-2009-001 - http://www.redteam-pentesting.de/advisories/rt-sa-2009-002 - http://www.vupen.com/english/advisories/2009/1253 - http://osvdb.org/54227 - http://osvdb.org/54226 - http://www.securityfocus.com/archive/1/503229/100/0/threaded - http://www.securitytracker.com/id?1022168
CVE ID: CVE-2009-1468 State: PUBLISHED Published: 2009-05-05T20:00:00 Last Updated: 2024-08-07T05:13:25.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an XML search query. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34820 - http://www.securitytracker.com/id?1022169 - http://www.vupen.com/english/advisories/2009/1253 - http://osvdb.org/54228 - http://ww
.securitytracker.com/id?1022169 - http://www.vupen.com/english/advisories/2009/1253 - http://osvdb.org/54228 - http://www.redteam-pentesting.de/advisories/rt-sa-2009-003 - http://www.securityfocus.com/archive/1/503226/100/0/threaded
CVE ID: CVE-2009-1469 State: PUBLISHED Published: 2009-05-05T20:00:00 Last Updated: 2024-08-07T05:13:25.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header in the subject element of an XML document, as demonstrated by triggering an e-mail message from the server that contains a user's correct credentials, and requests that the user compose a reply that includes this message. Additional Analyst Notes: - CVE Progr
redentials, and requests that the user compose a reply that includes this message. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54229 - http://www.redteam-pentesting.de/advisories/rt-sa-2009-004 - http://www.securityfocus.com/bid/34827 - http://www.securityfocus.com/archive/1/503227/100/0/threaded - http://www.vupen.com/english/advisories/2009/1253 - http://www.securitytracker.com/id?1022166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50332
CVE ID: CVE-2009-1472 State: PUBLISHED Published: 2009-05-27T16:00:00 Last Updated: 2024-08-07T05:13:25.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to (1) execute arbitrary Java code, or (2) gain access to machines connected to the switch, by hijacking a session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35108 - http://www.securityfocus.com/archive/1/503827/100/0/threaded
CVE ID: CVE-2009-1473 State: PUBLISHED Published: 2009-05-27T16:00:00 Last Updated: 2024-08-07T05:13:25.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key negotiation, which makes it easier for remote attackers to (a) decrypt network traffic, or (b) conduct man-in-the-middle attacks, by repeating unspecified "client-side calculations." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35241 - http://www.securityfocus.com
Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35241 - http://www.securityfocus.com/bid/35108 - http://www.securityfocus.com/archive/1/503827/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50849
CVE ID: CVE-2009-1474 State: PUBLISHED Published: 2009-05-27T16:00:00 Last Updated: 2024-08-07T05:13:25.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not (2) set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Conta
pture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35241 - http://www.securityfocus.com/bid/35108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50850 - http://www.securityfocus.com/archive/1/503827/100/0/threaded
CVE ID: CVE-2009-1476 State: PUBLISHED Published: 2009-05-26T15:16:00 Last Updated: 2024-08-07T05:13:25.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35076 - http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c - http://www.securitytracker.com/id?1022272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50716 - http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c.diff?r1=1.1
xforce.ibmcloud.com/vulnerabilities/50716 - http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c.diff?r1=1.1&r2=1.2&f=h - http://securityreason.com/achievement_securityalert/62
CVE ID: CVE-2009-1477 State: PUBLISHED Published: 2009-05-27T16:00:00 Last Updated: 2024-08-07T05:13:25.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier for remote attackers to decrypt https sessions by extracting this key from their own switch and then sniffing network traffic to a switch owned by a different customer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50851 - http://www.securi
s: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50851 - http://www.securityfocus.com/bid/35108 - http://www.securityfocus.com/archive/1/503827/100/0/threaded
CVE ID: CVE-2009-1478 State: PUBLISHED Published: 2009-04-29T15:00:00 Last Updated: 2024-08-07T05:13:25.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a denial of service (panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34753 - http://secunia.com/advisories/35098 - http://secunia.com/advisories/34836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50220 - http://support.avaya.com/elmodocs2/security/ASA-2009-171.htm - http://www.vupen.com/english/advi
vulnerabilities/50220 - http://support.avaya.com/elmodocs2/security/ASA-2009-171.htm - http://www.vupen.com/english/advisories/2009/1199 - http://www.vupen.com/english/advisories/2009/1378 - http://www.securitytracker.com/id?1022143 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-257708-1 - http://osvdb.org/54138
CVE ID: CVE-2009-1479 State: PUBLISHED Published: 2009-10-22T15:26:00 Last Updated: 2024-08-07T05:13:25.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507319/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/53932 - http://www.csnc.ch/misc/files/advisories/CVE-2009-1479-Boxalino-Directory_Traversal.txt
CVE ID: CVE-2009-1480 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T05:13:25.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via the fileget parameter in a view action and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8533 - http://www.securityfocus.com/archive/1/502933/100/0/threaded - http://www.securityfocus.com/bid/34707
CVE ID: CVE-2009-1481 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T05:13:25.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50082 - http://www.securityfocus.com/bid/34701 - http://secunia.com/advi
://exchange.xforce.ibmcloud.com/vulnerabilities/50082 - http://www.securityfocus.com/bid/34701 - http://secunia.com/advisories/34897 - http://osvdb.org/53939 - http://downloads.securityfocus.com/vulnerabilities/exploits/34701.vbs
CVE ID: CVE-2009-1482 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T05:13:25.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related to package file errors in the upload_form function, different vectors than CVE-2009-0260. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50356 - http://moinmo.in/SecurityFixes - http://www.vupen.com/eng
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50356 - http://moinmo.in/SecurityFixes - http://www.vupen.com/english/advisories/2009/1119 - http://hg.moinmo.in/moin/1.8/rev/5f51246a4df1 - http://www.securityfocus.com/bid/34631 - http://secunia.com/advisories/35024 - http://secunia.com/advisories/34945 - http://www.debian.org/security/2009/dsa-1791 - http://secunia.com/advisories/34821 - http://www.ubuntu.com/usn/USN-774-1
CVE ID: CVE-2009-1483 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T05:13:25.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in profiles/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49972 - http://www.securityfocus.com/bid/34652 - https://www.exploit-db.com/exploits/8481 - http://secunia.com/
bilities/49972 - http://www.securityfocus.com/bid/34652 - https://www.exploit-db.com/exploits/8481 - http://secunia.com/advisories/34761 - http://www.vupen.com/english/advisories/2009/1111 - http://www.osvdb.org/53813
CVE ID: CVE-2009-1484 State: PUBLISHED Published: 2009-04-29T18:06:00Z Last Updated: 2024-09-16T16:27:32.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34716 - http://secunia.com/advisories/34402
CVE ID: CVE-2009-1485 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T05:13:25.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service (infinite loop) via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=676726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50081 - http://secunia.com/advisories/34799
CVE ID: CVE-2009-1486 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T05:13:25.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the with parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8549 - http://secunia.com/advisories/34904
CVE ID: CVE-2009-1487 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T05:13:25.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the login_user (aka username) parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50090 - http://marc.info/?l=bugtraq&m=124025031126068&w=2 - http://www.vupen.com/english/advisories/2009/1117 - https://www.exploit-db.c
arc.info/?l=bugtraq&m=124025031126068&w=2 - http://www.vupen.com/english/advisories/2009/1117 - https://www.exploit-db.com/exploits/8493
CVE ID: CVE-2009-1488 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T05:13:25.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34610 - http://marc.info/?l=bugtraq&m=124025031126068&w=2 - http://www.vupen.com/english/advisories/2009/1117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50091 - https://www.exploit-db.com/exploits/8493
CVE ID: CVE-2009-1489 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T05:13:25.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50424 - http://marc.info/?l=bugtraq&m=124025031126068&w=2 - http://www.vupen.com/english/advisories/2009/1117 - https://www.exploit-db.com/exploits/8493