Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-5269 State: PUBLISHED Published: 2014-01-02T11:00:00Z Last Updated: 2024-09-17T02:21:11.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ProjectForge before 3.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a validation message. Additional Analyst Notes: - CVE Program Container: References: - http://www.projectforge.org/pf-en/News - https://www.projectforge.org/jira/browse/PF-185
CVE ID: CVE-2011-5270 State: PUBLISHED Published: 2014-01-21T01:00:00Z Last Updated: 2024-09-16T17:32:39.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability requirement, which allows remote authenticated users to perform publish actions by leveraging the Contributor role. Additional Analyst Notes: - CVE Program Container: References: - https://core.trac.wordpress.org/changeset/17710 - http://codex.wordpress.org/Version_3.0.6
CVE ID: CVE-2011-5271 State: PUBLISHED Published: 2019-11-12T13:12:09 Last Updated: 2024-08-07T00:30:46.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pacemaker before 1.1.6 configure script creates temporary files insecurely Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-5271 - http://www.openwall.com/lists/oss-security/2014/02/11/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91120 - http://www.securityfocus.com/bid/65472
CVE ID: CVE-2011-5272 State: PUBLISHED Published: 2014-03-20T19:00:00Z Last Updated: 2024-09-16T16:33:53.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vps_note parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT due to different researchers. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/08/13/1 - http://www.openwall.com/lists/oss-security/2011/08/24/10 - https://bugs.debian.org/cgi-bin/bugreport
rity/2011/08/13/1 - http://www.openwall.com/lists/oss-security/2011/08/24/10 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637498 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
CVE ID: CVE-2011-5273 State: PUBLISHED Published: 2014-03-20T19:00:00Z Last Updated: 2024-09-16T16:13:59.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the pkg parameter in a do_install action to dtc/. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637629 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca2
-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
CVE ID: CVE-2011-5274 State: PUBLISHED Published: 2014-03-20T19:00:00Z Last Updated: 2024-09-16T16:47:43.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkg_directory parameter in a do_install action to dtc/. Additional Analyst Notes: - CVE Program Container: References: - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=541d8457a6989a1a925bb866ed972a5f07c2de64 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3
9a1a925bb866ed972a5f07c2de64 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bh=dec9970db76b82295e9003ca34cecab8d629da4f%3Bhb=65a7a1b166ea3c4325efd4da80a78498c829aa5a - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637630
CVE ID: CVE-2011-5275 State: PUBLISHED Published: 2014-03-20T19:00:00Z Last Updated: 2024-09-16T23:11:36.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637618 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
CVE ID: CVE-2011-5276 State: PUBLISHED Published: 2014-03-20T19:00:00Z Last Updated: 2024-09-16T20:53:26.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the database_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=541d8457a6989a1a925bb866ed972a5f07c2de64 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637632 - http://www.debian.org/security/2011/dsa-236
d972a5f07c2de64 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637632 - http://www.debian.org/security/2011/dsa-2365 - http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bh=dec9970db76b82295e9003ca34cecab8d629da4f%3Bhb=65a7a1b166ea3c4325efd4da80a78498c829aa5a
CVE ID: CVE-2011-5277 State: PUBLISHED Published: 2014-04-08T14:00:00 Last Updated: 2024-08-07T00:30:46.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the (1) afs_type, (2) afs_background, (3) afs_showonline, (4) afs_bar_left, (5) afs_bar_center, (6) afs_full_line1, (7) afs_full_line2, (8) afs_full_line3, (9) afs_full_line4, (10) afs_full_line5, or (11) afs_full_line6 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informat
arameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70473 - http://www.exploit-db.com/exploits/17961 - http://secunia.com/advisories/46352 - http://osvdb.org/76295 - http://www.securityfocus.com/bid/50051/info
CVE ID: CVE-2011-5278 State: PUBLISHED Published: 2014-04-08T14:00:00 Last Updated: 2024-08-07T00:30:46.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/70473 - http://www.exploit-db.com/exploits/17961 - http://secunia.com/advisories/46352 - http://osvdb.org/76295 - http://www.securityfocus.com/bid/50051/info
CVE ID: CVE-2011-5279 State: PUBLISHED Published: 2014-04-23T20:00:00 Last Updated: 2024-08-07T00:30:46.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (IIS) 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n (newline) character in an HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/247 - http://seclists.org/fulldisclosure/2014/Apr/128 - http://seclists.org/fulldisclosure/2012/Apr/0 - http://seclists.org/fulldisclosure/2014/Apr/108
sclosure/2014/Apr/128 - http://seclists.org/fulldisclosure/2012/Apr/0 - http://seclists.org/fulldisclosure/2014/Apr/108 - http://hi.baidu.com/yuange1975/item/b2cc7141c22108e91e19bc2e - http://seclists.org/fulldisclosure/2012/Apr/13
CVE ID: CVE-2011-5280 State: PUBLISHED Published: 2014-06-02T15:00:00Z Last Updated: 2024-09-17T04:14:28.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/04/28/3 - http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git%3Ba=commitdiff%3Bh=ae04b50a71f3e96ee1bc59b76fca97cf0fe976f7 - http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git%3Ba=commitdiff%3Bh=5b04b249db166ec38c1ee99a9eadcaa300c0f454
CVE ID: CVE-2011-5282 State: PUBLISHED Published: 2020-01-21T15:05:30 Last Updated: 2024-08-07T00:30:46.930Z Vendors: mIRC Products: mIRC Problem Types: data leak Description: mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled. Additional Analyst Notes: - CVE Program Container: References: - http://www.mirc.com/news.html
CVE ID: CVE-2011-5283 State: PUBLISHED Published: 2014-12-31T22:00:00 Last Updated: 2024-08-07T00:30:46.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to inject arbitrary web script or HTML via the IP parameter in a Run action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99404 - http://packetstormsecurity.com/files/129698/SmoothWall-3.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://osvdb.org/show/osvdb/70496 - http
es/129698/SmoothWall-3.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://osvdb.org/show/osvdb/70496 - http://www.exploit-db.com/exploits/16006
CVE ID: CVE-2011-5284 State: PUBLISHED Published: 2014-12-31T22:00:00 Last Updated: 2024-08-07T00:30:46.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to hijack the authentication of administrators for requests that perform a reboot via a request to cgi-bin/shutdown.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/70497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99403 - http://packetstormsecurity.com/files/129698/SmoothWall-3.1-Cross-
//exchange.xforce.ibmcloud.com/vulnerabilities/99403 - http://packetstormsecurity.com/files/129698/SmoothWall-3.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://www.exploit-db.com/exploits/16006
CVE ID: CVE-2011-5285 State: PUBLISHED Published: 2015-01-01T02:00:00Z Last Updated: 2024-09-16T18:18:13.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BugFree 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the ActionType parameter to Bug.php, the ReportMode parameter to (2) Report.php or (3) ReportLeft.php, or the PATH_INFO to (4) AdminProjectList.php, (5) AdminGroupList.php, or (6) AdminUserLogList.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23048
CVE ID: CVE-2011-5286 State: PUBLISHED Published: 2015-01-01T02:00:00Z Last Updated: 2024-09-17T00:31:01.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the rA array parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23033
CVE ID: CVE-2011-5287 State: PUBLISHED Published: 2015-01-01T02:00:00Z Last Updated: 2024-09-16T17:03:01.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in HESK before 2.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) hesk_settings[tmp_title] or (2) hesklang[ENCODING] parameter to inc/header.inc.php; the hesklang[attempt] parameter to (3) inc/assignment_search.inc.php, (4) inc/attachments.inc.php, (5) inc/common.inc.php, (6) inc/database.inc.php, (7) inc/prepare_ticket_search.inc.php, (8) inc/print_tickets.inc.php, (9) inc/show_admin_nav.inc.php, (10) inc/show_search_form.inc.php, or (11) inc/ti
nc.php, (8) inc/print_tickets.inc.php, (9) inc/show_admin_nav.inc.php, (10) inc/show_search_form.inc.php, or (11) inc/ticket_list.inc.php; or (12) the PATH_INFO to language/en/text.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23030
CVE ID: CVE-2011-5288 State: PUBLISHED Published: 2015-01-01T02:00:00Z Last Updated: 2024-09-17T00:31:51.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allow remote attackers to execute arbitrary code via a long argument to the (1) cmdExport, (2) cmdImport, (3) cmdOpen, or (4) cmdSave method. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23020
CVE ID: CVE-2011-5289 State: PUBLISHED Published: 2015-01-01T02:00:00Z Last Updated: 2024-09-17T00:42:21.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote attackers to write to arbitrary files via a pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23013
CVE ID: CVE-2011-5290 State: PUBLISHED Published: 2015-01-01T02:00:00Z Last Updated: 2024-09-16T20:01:37.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100_EDA1811C.ocx in IDrive Online Backup 3.4.0 allows remote attackers to write to arbitrary files via a pathname in the first argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23025
CVE ID: CVE-2011-5291 State: PUBLISHED Published: 2015-01-01T02:00:00Z Last Updated: 2024-09-17T00:51:47.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23019
CVE ID: CVE-2011-5292 State: PUBLISHED Published: 2015-01-01T02:00:00Z Last Updated: 2024-09-16T17:23:31.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EaseWeFtp.FtpLibrary ActiveX control in EaseWeFtp.ocx in Easewe FTP OCX 4.5.0.9 does not restrict access to certain methods, which allows remote attackers to execute arbitrary files via a pathname in the first argument to the (1) Execute or (2) Run method, (3) write to arbitrary files via a pathname in the argument to the CreateLocalFile method, (4) create arbitrary directories via a pathname in the argument to the CreateLocalFolder method, or (5) delete arbitrary files via a pathname in the argument to the DeleteLocalFil
ment to the CreateLocalFolder method, or (5) delete arbitrary files via a pathname in the argument to the DeleteLocalFile method. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23015
CVE ID: CVE-2011-5293 State: PUBLISHED Published: 2015-01-01T02:00:00Z Last Updated: 2024-09-17T01:40:31.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23020
CVE ID: CVE-2011-5294 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T23:10:42.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files via a pathname in the first argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23016
CVE ID: CVE-2011-5295 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T03:14:09.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Download method in a certain ActiveX control in MDIEEx.dll in Gogago YouTube Video Converter 1.1.6 allows remote attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23012
CVE ID: CVE-2011-5296 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T17:23:34.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23001
CVE ID: CVE-2011-5297 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T02:48:12.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TTChat 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter to default.php or (2) the username parameter to chat_form.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22996
CVE ID: CVE-2011-5298 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T03:44:11.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Argyle Social 2011-04-26 allow remote attackers to hijack the authentication of administrators for requests that (1) modify credentials via the role parameter to users/create/, (2) modify rules via the terms field in stream_filter_rule JSON data to settings-ajax/stream_filter_rules/create, or (3) modify efforts via the title field in effort JSON data to publish-ajax/efforts/create. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridg
ata to publish-ajax/efforts/create. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22978
CVE ID: CVE-2011-5299 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T17:07:39.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in poMMo Aardvark PR16.1 allow remote attackers to inject arbitrary web script or HTML via (1) the referer parameter to index.php, (2) the site_name parameter to admin/setup/config/general.php, (3) the group_name parameter to admin/subscribers/subscribers_groups.php, or (4) the field_name parameter to admin/setup/setup_fields.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22976
CVE ID: CVE-2011-5300 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T03:23:46.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark PR16.1 allows remote attackers to hijack the authentication of administrators for requests that modify credentials via certain admin_ parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22976
CVE ID: CVE-2011-5301 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T03:03:46.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the story_url parameter to add_story.php, (2) the email parameter to editprofile.php, (3) the title parameter to adm/content_add.php, or (4) the username parameter to adm/admin_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22970
CVE ID: CVE-2011-5302 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T17:08:39.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in adm/admin_edit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22970
CVE ID: CVE-2011-5303 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-17T03:33:49.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Spitfire CMS 1.0.436 allows remote attackers to inject arbitrary web script or HTML via a cms_username cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22903
CVE ID: CVE-2011-5304 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T20:42:43.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Sodahead Polls plugin before 2.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via (1) the poll_id parameter to customizer.php or (2) the customize parameter to poll.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/sodahead-polls/changelog/ - https://www.htbridge.com/advisory/HTB22893 - https://www.htbridge.com/advisory/HTB22894
CVE ID: CVE-2011-5305 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T20:22:22.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow remote attackers to inject arbitrary web script or HTML via (1) the rcopy parameter to cgi-bin/admin/rubrikadmin.cgi, (2) the typ parameter to cgi-bin/admin/artikeladmin.cgi, or (3) the suchbegriff parameter to cgi-bin/admin/shophilfe_suche.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22878
CVE ID: CVE-2011-5306 State: PUBLISHED Published: 2015-01-01T11:00:00Z Last Updated: 2024-09-16T20:59:05.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in CosmoShop ePRO 10.05.00 allows remote attackers to hijack the authentication of administrators for requests that modify settings via a setup action. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22878