Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6049 State: REJECTED Published: 2009-02-04T15:10:00 Last Updated: 2017-10-23T16:57:01 Description: No description available.
CVE ID: CVE-2008-6050 State: PUBLISHED Published: 2009-02-04T15:10:00 Last Updated: 2024-08-07T11:13:13.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the item parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7504 - http://www.securityfocus.com/bid/32897
CVE ID: CVE-2008-6051 State: PUBLISHED Published: 2009-02-04T15:10:00 Last Updated: 2024-08-07T11:13:14.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: MetaCart Free stores metacart.mdb under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499123/100/0/threaded
CVE ID: CVE-2008-6052 State: PUBLISHED Published: 2009-02-04T15:10:00 Last Updated: 2024-08-07T11:13:13.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: PreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0812-exploits/prelearn-disclose.txt - http://secunia.com/advisories/33197 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47437
CVE ID: CVE-2008-6053 State: PUBLISHED Published: 2009-02-04T15:10:00 Last Updated: 2024-08-07T11:13:14.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47438 - http://packetstorm.linuxsecurity.com/0812-exploits/preresume-disclose.txt - http://secunia.com/advisories/33197
CVE ID: CVE-2008-6054 State: PUBLISHED Published: 2009-02-04T15:10:00 Last Updated: 2024-08-07T11:13:14.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47436 - http://packetstorm.linuxsecurity.com/0812-exploits/precourier-disclose.txt - http://secunia.com/advisories/33197
CVE ID: CVE-2008-6055 State: PUBLISHED Published: 2009-02-04T15:10:00Z Last Updated: 2024-09-17T00:10:33.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0812-exploits/preaspclass-disclose.txt - http://secunia.com/advisories/33197
CVE ID: CVE-2008-6056 State: PUBLISHED Published: 2009-02-04T15:10:00 Last Updated: 2024-08-07T11:20:23.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to emailrecipe.aspx, (2) id parameter to recipedetail.aspx, and the (3) catid parameter to validatefieldlength.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32837 - http://www.securityfocus.com/archive/1/499217/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47366
CVE ID: CVE-2008-6057 State: PUBLISHED Published: 2009-02-04T15:10:00 Last Updated: 2024-08-07T11:20:23.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47421
CVE ID: CVE-2008-6058 State: PUBLISHED Published: 2009-02-05T00:00:00Z Last Updated: 2024-09-16T23:16:07.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Syslserve 1.058 and earlier, and probably 1.059, allows remote attackers to cause a denial of service (hang) via a crafted UDP Syslog packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.princeofnigeria.org/blogs/index.php/2009/01/15/syslserve-1-058-denial-of-service-vulner - http://www.syslserve.com/changelog.html - http://secunia.com/advisories/33566 - http://www.securityfocus.com/bid/33311
CVE ID: CVE-2008-6059 State: PUBLISHED Published: 2009-02-05T00:00:00 Last Updated: 2024-08-07T11:20:23.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.webkit.org/show_bug.cgi?id=10957 - http://trac.webkit.org/changeset/38566/trunk/WebCore/xml/XMLHttpRequest.cpp - http://www.securityfoc
_bug.cgi?id=10957 - http://trac.webkit.org/changeset/38566/trunk/WebCore/xml/XMLHttpRequest.cpp - http://www.securityfocus.com/bid/33804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48575
CVE ID: CVE-2008-6060 State: PUBLISHED Published: 2009-02-05T01:00:00 Last Updated: 2024-08-07T11:20:23.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw - http://www.vupen.com/english/advisories/2008/0067 - http://www.kb.cert.org/vuls/id/249337 - http://www.securityfocus.com/archive/1/485
en.com/english/advisories/2008/0067 - http://www.kb.cert.org/vuls/id/249337 - http://www.securityfocus.com/archive/1/485722/100/100/threaded - http://www.securityfocus.com/bid/27109
CVE ID: CVE-2008-6061 State: PUBLISHED Published: 2009-02-05T01:00:00 Last Updated: 2024-08-07T11:20:23.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27107 - http://www.vupen.com/english/advisories/2008/0066 - http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw - http://secunia.com/advisories/28311 - http://www.kb.
/0066 - http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw - http://secunia.com/advisories/28311 - http://www.kb.cert.org/vuls/id/249337 - http://www.securityfocus.com/archive/1/485722/100/100/threaded
CVE ID: CVE-2008-6062 State: PUBLISHED Published: 2009-02-05T01:00:00 Last Updated: 2024-08-07T11:20:24.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may overlap CVE-2007-6242, CVE-2007-6244, or CVE-2007-6637. Additional Analyst Notes: - CVE Program Container: References: - http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw - http://www.adobe.com/support/security/bulletins/ap
rences: - http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw - http://www.adobe.com/support/security/bulletins/apsb07-20.html - http://www.kb.cert.org/vuls/id/249337 - http://www.securityfocus.com/archive/1/485722/100/100/threaded
CVE ID: CVE-2008-6063 State: PUBLISHED Published: 2009-02-05T01:00:00 Last Updated: 2024-08-07T11:20:23.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486088/100/0/threaded
CVE ID: CVE-2008-6064 State: PUBLISHED Published: 2009-02-05T01:00:00 Last Updated: 2024-08-07T11:20:24.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4888 - http://www.securityfocus.com/bid/27233
CVE ID: CVE-2008-6065 State: PUBLISHED Published: 2009-02-05T02:00:00 Last Updated: 2024-08-07T11:20:24.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased in a CREATE OR REPLACE DIRECTORY statement, which allows remote authenticated users with CREATE ANY DIRECTORY privileges to gain SYSDBA privileges by aliasing the pathname of the password directory, and then overwriting the password file through UTL_FILE operations, a related issue to CVE-2006-7141. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracleforensics.com/wordpress/index.
6-7141. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracleforensics.com/wordpress/index.php/2008/10/10/create-any-directory-to-sysdba/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/48814 - http://www.securityfocus.com/bid/31738 - http://www.securityfocus.com/archive/1/497286/100/0/threaded - http://www.oracleforensics.com/wordpress/wp-content/uploads/2008/10/create-any-directory-to-sysdba.pdf
CVE ID: CVE-2008-6066 State: PUBLISHED Published: 2009-02-05T02:00:00 Last Updated: 2024-08-07T11:20:25.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) modules.php, (2) ManagerResource.class.php, (3) ManagerRightsResource.class.php, (4) RegForm.class.php, (5) RegResource.class.php, and (6) RegRightsResource.class.php in classes/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://w
obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30673/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/44454 - http://www.securityfocus.com/bid/30673
CVE ID: CVE-2008-6067 State: REJECTED Published: 2009-02-05T02:00:00 Last Updated: 2009-03-17T09:00:00 Description: No description available.
CVE ID: CVE-2008-6068 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T11:20:23.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JoomlaDate (com_joomladate) component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a viewProfile action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42873 - http://secunia.com/advisories/30441
CVE ID: CVE-2008-6069 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T11:20:23.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30561 - http://www.securityfocus.com/archive/1/493126/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42883
CVE ID: CVE-2008-6070 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T11:20:24.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PALM image, a different vulnerability than CVE-2007-0770. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=604837 - http://secunia.com/advisories/30549 - http://www
ces: - http://sourceforge.net/project/shownotes.php?release_id=604837 - http://secunia.com/advisories/30549 - http://www.securityfocus.com/bid/29583 - http://sourceforge.net/project/shownotes.php?release_id=604837&group_id=73485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42904 - http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/palm.c
CVE ID: CVE-2008-6071 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T11:20:24.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PICT image. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=604837 - http://secunia.com/advisories/30549 - http://www.securityfocus.com/bid/29583 - h
oject/shownotes.php?release_id=604837 - http://secunia.com/advisories/30549 - http://www.securityfocus.com/bid/29583 - http://sourceforge.net/project/shownotes.php?release_id=604837&group_id=73485 - http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/pict.c - https://exchange.xforce.ibmcloud.com/vulnerabilities/42906 - http://sourceforge.net/project/shownotes.php?release_id=604785
CVE ID: CVE-2008-6072 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T11:20:24.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service (crash) via unspecified vectors in (1) XCF and (2) CINEON images. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=604837 - http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/xcf.c - http://secunia.com/advisories/30549 - http://www.securityfocus.com/bid/29583 - http://sourceforge.net/project/s
/xcf.c - http://secunia.com/advisories/30549 - http://www.securityfocus.com/bid/29583 - http://sourceforge.net/project/shownotes.php?release_id=604837&group_id=73485 - http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/cineon.c - http://sourceforge.net/project/shownotes.php?release_id=604785
CVE ID: CVE-2008-6073 State: PUBLISHED Published: 2009-02-06T01:00:00 Last Updated: 2024-08-07T11:20:24.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: StorageCrypt 2.0.1 does not properly encrypt disks, which allows local users to obtain sensitive information via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42905
CVE ID: CVE-2008-6074 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:24.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the importFunction parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46043 - http://secunia.com/advisories/32379 - http://www.securityfocus.com/archive/1/497742/100/0/threaded - http://www.securityfocus.com/bi
ia.com/advisories/32379 - http://www.securityfocus.com/archive/1/497742/100/0/threaded - http://www.securityfocus.com/bid/31876
CVE ID: CVE-2008-6075 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:24.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in aspkat.asp in Bahar Download Script 2.0 allows remote attackers to execute arbitrary SQL commands via the kid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.rasihbahar.com/download/down.asp?id=479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46032 - http://www.securityfocus.com/bid/31852
CVE ID: CVE-2008-6076 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:23.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6802 - http://www.securityfocus.com/bid/31870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46033
CVE ID: CVE-2008-6077 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:24.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to execute arbitrary SQL commands via the colpick parameter in a singleread action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6808 - http://www.securityfocus.com/bid/31878 - http://secunia.com/advisories/32378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46045
CVE ID: CVE-2008-6078 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:24.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45990 - http://www.securityfocus.com/bid/31837 - http://www.vupen.com/english/advisories/2008/2887 - https://www.exploit-db.com/exploits/6796
CVE ID: CVE-2008-6079 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:24.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=634778 - http://www.debian.org/security/2010/dsa-2029 - http://www.vupen.com/english/advisories/2010/0803 - http://bugs.debian.org/cgi-bin/bugrep
n.org/security/2010/dsa-2029 - http://www.vupen.com/english/advisories/2010/0803 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46037 - http://www.securityfocus.com/bid/31880 - http://secunia.com/advisories/32354 - http://www.vupen.com/english/advisories/2008/2898 - http://secunia.com/advisories/39340
CVE ID: CVE-2008-6080 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:24.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32377 - http://www.securityfocus.com/bid/31877 - https://www.exploit-db.com/exploits/6809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46039
CVE ID: CVE-2008-6081 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:25.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41938 - https://www.exploit-db.com/exploits/5468
CVE ID: CVE-2008-6082 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:24.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32269 - http://www.securityfocus.com/bid/31757 - http://www.osvdb.org/49177 - https://www.exploit-db.com/exploits/6753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45871
CVE ID: CVE-2008-6083 State: PUBLISHED Published: 2009-02-06T11:00:00 Last Updated: 2024-08-07T11:20:24.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497752/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46063 - https://www.exploit-db.com/exploits/6816 - http://www.securityfocus.com/bid/31885