Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0313 State: PUBLISHED Published: 2009-01-28T02:00:00 Last Updated: 2024-08-07T04:31:25.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the x_showmenu.txt temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33474 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://code.google.com/p/winezeug/source/detail?r=253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48320 - http://osvdb.org/51619
CVE ID: CVE-2009-0314 State: PUBLISHED Published: 2009-01-28T11:00:00 Last Updated: 2024-08-07T04:31:25.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33769 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48271 - https://www.redhat.com/archives/fedora-package-annou
:039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48271 - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01195.html - http://www.securityfocus.com/bid/33445 - http://security.gentoo.org/glsa/glsa-200903-41.xml - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://bugzilla.gnome.org/show_bug.cgi?id=569214 - http://secunia.com/advisories/34522 - http://secunia.com/advisories/33759 - https://bugzilla.redhat.com/show_bug.cgi?id=481556
CVE ID: CVE-2009-0315 State: PUBLISHED Published: 2009-01-28T11:00:00 Last Updated: 2024-08-07T04:31:25.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=481560 - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://www.securityfocus.com/bid/33444 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:059
CVE ID: CVE-2009-0316 State: PUBLISHED Published: 2009-01-28T11:00:00 Last Updated: 2024-08-07T04:31:25.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937 - http://bugs.debian.org/cgi-bin/bugreport.c
iner: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305 - http://www.securityfocus.com/bid/33447 - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html - https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045 - http://support.apple.com/kb/HT4077 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48275 - https://bugzilla.
security/advisories?name=MDVSA-2009:047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48275 - https://bugzilla.redhat.com/show_bug.cgi?id=481565
CVE ID: CVE-2009-0317 State: PUBLISHED Published: 2009-01-28T11:00:00 Last Updated: 2024-08-07T04:31:25.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Python language bindings for Nautilus (nautilus-python) allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983). Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/01/26/2 - https://bugzilla.redhat.com/show_bug.cgi?id=481570 - http://www.securityfocus.com/bid/33442
CVE ID: CVE-2009-0318 State: PUBLISHED Published: 2009-01-28T11:00:00 Last Updated: 2024-08-07T04:31:25.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=481572 - http://www.openwall.com/lists/oss-security/2009/01/26/2 - http://bugzilla.gnome.org/show_bug.cgi?id=569648 - http://secunia.com/advisories/3
com/lists/oss-security/2009/01/26/2 - http://bugzilla.gnome.org/show_bug.cgi?id=569648 - http://secunia.com/advisories/33823 - http://www.securityfocus.com/bid/33438 - http://security.gentoo.org/glsa/glsa-200904-03.xml - http://secunia.com/advisories/33707 - https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00211.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:043
CVE ID: CVE-2009-0319 State: PUBLISHED Published: 2009-01-28T18:00:00 Last Updated: 2024-08-07T04:31:25.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_108, allows local users to cause a denial of service (autofs mount outage) or possibly gain privileges via vectors related to "xdr processing problems." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0256 - http://support.avaya.com/elmodocs2/security/ASA-2009-041.htm - http://secunia.com/advisories/33665 - https://oval.cisecurity.org/repository/searc
elmodocs2/security/ASA-2009-041.htm - http://secunia.com/advisories/33665 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5977 - http://www.vupen.com/english/advisories/2009/0363 - http://www.securityfocus.com/bid/33459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48234 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-128624-09-1 - http://www.securitytracker.com/id?1021644 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-249966-1
CVE ID: CVE-2009-0320 State: PUBLISHED Published: 2009-01-28T18:00:00 Last Updated: 2024-08-07T04:31:25.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager (aka taskmgr.exe) to estimate the number of characters that a different user entered at a runas.exe password prompt, related to a "benchmarking attack." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33440 - http://www.securityfocus.com/archive/1/
- CVE Program Container: References: - http://www.securityfocus.com/bid/33440 - http://www.securityfocus.com/archive/1/500393/100/0/threaded
CVE ID: CVE-2009-0321 State: PUBLISHED Published: 2009-01-28T18:00:00 Last Updated: 2024-08-07T04:31:25.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http URI in which the authority (aka hostname) portion is either a (1) . (dot) or (2) .. (dot dot) sequence. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6091 - http://lostmon.blogspot.com/2009/01/safari-for-windows-321-remote-http-uri.html - https://exchange.xforc
%3Adef%3A6091 - http://lostmon.blogspot.com/2009/01/safari-for-windows-321-remote-http-uri.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48284 - http://www.securityfocus.com/bid/33481
CVE ID: CVE-2009-0322 State: PUBLISHED Published: 2009-01-28T18:00:00 Last Updated: 2024-08-07T04:31:25.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1) image_type or (2) packet_size file in /sys/devices/platform/dell_rbu/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://secunia.com/advisories/34502 - http://www.redhat.com/support/errata/RHSA-2009-0331.html - http://www.redhat.com/support/errata/RHS
m/advisories/34502 - http://www.redhat.com/support/errata/RHSA-2009-0331.html - http://www.redhat.com/support/errata/RHSA-2009-0326.html - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html - http://secunia.com/advisories/37471 - http://www.redhat.com/support/errata/RHSA-2009-0360.html - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.13 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10163 - http://www.debian.org/security/2009/dsa-1749 - http://www.debian.org/security/2009/dsa-1794 - http://secu
Adef%3A10163 - http://www.debian.org/security/2009/dsa-1749 - http://www.debian.org/security/2009/dsa-1794 - http://secunia.com/advisories/33758 - http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://www.ubuntu.com/usn/usn-751-1 - http://secunia.com/advisories/34252 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.securityfocus.com/bid/33428 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://secunia.com/advisories/33656 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3
- http://secunia.com/advisories/33656 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=81156928f8fe31621e467490b9d441c0285998c3 - http://secunia.com/advisories/34981 - http://secunia.com/advisories/34394 - http://www.debian.org/security/2009/dsa-1787 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7734 - http://secunia.com/advisories/34680 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/34762 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-0323 State: PUBLISHED Published: 2009-01-28T20:00:00 Last Updated: 2024-08-07T04:31:25.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag, which is not properly handled by the ProcessStartGI function; and unspecified vectors in (3) html2thot.c and (4) xml2thot.c, related to the msgBuffer variable. NOTE: these are different vectors than CVE-2008-6005. Additional Analyst Notes: - CVE Program Co
the msgBuffer variable. NOTE: these are different vectors than CVE-2008-6005. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500492/100/0/threaded - http://www.coresecurity.com/content/amaya-buffer-overflows - https://www.exploit-db.com/exploits/7902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48325
CVE ID: CVE-2009-0324 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the (1) idp parameter to reports/projects.php, the (2) idc parameter to reports/contacts.php, and the (3) idu parameter to reports/users.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33329 - https://www.exploit-db.com/exploits/7814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48080 - http://bibciter.sourceforge.net/?p=35 - http://secunia.com/advis
://exchange.xforce.ibmcloud.com/vulnerabilities/48080 - http://bibciter.sourceforge.net/?p=35 - http://secunia.com/advisories/33555
CVE ID: CVE-2009-0325 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.push55.co.uk/poclibrary/ninjadesignscouk-1.txt - https://www.exploit-db.com/exploits/7831 - http://secunia.com/advisories/33573 - http://www.securityfocus.com/bid/33351 - http://www.push55.co.uk/index.php?s=ad&id=6
CVE ID: CVE-2009-0326 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48095 - http://www.securityfocus.com/bid/33271
CVE ID: CVE-2009-0327 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arbitrary SQL commands via the version parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7798 - http://www.securityfocus.com/bid/33301 - http://www.seraphimtech.net/repository/Changes.txt - http://secunia.com/advisories/33595 - http://freshmeat.net/projects/freebiblesearch/?branch_id=77256&release_id=292446
CVE ID: CVE-2009-0328 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:26.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48082 - http://secunia.com/advisories/33602
CVE ID: CVE-2009-0329 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the PcCookBook (com_pccookbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipe_id parameter in a viewrecipe action to index.php, a different vector than CVE-2008-0844. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7824 - http://www.securityfocus.com/bid/33346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48088
CVE ID: CVE-2009-0330 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Simple Content Management System (SCMS) 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48081 - http://www.securityfocus.com/bid/33330 - https://www.exploit-db.com/exploits/7818
CVE ID: CVE-2009-0331 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery (ESPG) 1.72 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. NOTE: the vulnerability may be in my little homepage Comment script. If so, then this should not be treated as a vulnerability in ESPG. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7819 - http://www.securityfocus.com/bid/33335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4808
b.com/exploits/7819 - http://www.securityfocus.com/bid/33335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48087
CVE ID: CVE-2009-0332 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/edit.php, (2) admin/add.php, (3) lib/book_search.php, and possibly other components. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=654214 - http://sourceforge.net/tracker/index.php?func=detail&aid=2219743&group_id=209711&atid=1010816 - http://secunia.com/advisories/33583 - https://exchange.
index.php?func=detail&aid=2219743&group_id=209711&atid=1010816 - http://secunia.com/advisories/33583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48084
CVE ID: CVE-2009-0333 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the WebAmoeba (WA) Ticket System (com_waticketsystem) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33577 - http://www.securityfocus.com/bid/33353 - https://www.exploit-db.com/exploits/7833
CVE ID: CVE-2009-0334 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7806 - http://secunia.com/advisories/33572 - http://www.securityfocus.com/bid/33325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48074
CVE ID: CVE-2009-0335 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7806 - http://secunia.com/advisories/33572 - http://www.securityfocus.com/bid/33325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48073
CVE ID: CVE-2009-0336 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48075
CVE ID: CVE-2009-0337 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7806 - http://secunia.com/advisories/33572
CVE ID: CVE-2009-0338 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web script or HTML via the CategoryID parameter in a refer action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500146/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/48053 - http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12 - http://www.securityfocus.com/bid/33314 - http://secunia.com/advisori
serve.com/index.php?_m=news&_a=viewnews&newsid=12 - http://www.securityfocus.com/bid/33314 - http://secunia.com/advisories/33601
CVE ID: CVE-2009-0339 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500146/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/48054 - http://dmxready.helpserve.com/index.php?_m=news&_a=viewnews&newsid=12 - http://www.securityfocus.com/bid/33314 - http://secunia.com/advisories/33601
CVE ID: CVE-2009-0340 State: PUBLISHED Published: 2009-01-29T18:09:00 Last Updated: 2024-08-07T04:31:25.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the olang parameter to (1) mail.php and (2) mailbar.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48089 - https://www.exploit-db.com/exploits/7813 - http://www.securityfocus.com/bid/33327