Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0881 State: PUBLISHED Published: 2008-02-21T19:00:00 Last Updated: 2024-08-07T08:01:39.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the okulid parameter in an okullar action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27909 - https://www.exploit-db.com/exploits/5159
CVE ID: CVE-2008-0882 State: PUBLISHED Published: 2008-02-21T19:00:00 Last Updated: 2024-08-07T08:01:40.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9625 - ht
ontainer: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9625 - http://secunia.com/advisories/29485 - http://secunia.com/advisories/29251 - http://secunia.com/advisories/28994 - https://bugzilla.redhat.com/show_bug.cgi?id=433758 - http://secunia.com/advisories/29120 - http://www.cups.org/str.php?L2656 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00792.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00832.html - http://www.vupen.com/english/advisories/2008/0924/references - http://www.redhat.com/support
08-February/msg00832.html - http://www.vupen.com/english/advisories/2008/0924/references - http://www.redhat.com/support/errata/RHSA-2008-0157.html - http://www.securitytracker.com/id?1019473 - http://www.ubuntu.com/usn/usn-598-1 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:050 - http://secunia.com/advisories/29132 - http://www.vupen.com/english/advisories/2008/0623 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:051 - http://secunia.com/advisories/29634 - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/29067 - h
a.com/advisories/29634 - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/29067 - http://www.securityfocus.com/bid/27906 - http://www.debian.org/security/2008/dsa-1530 - http://security.gentoo.org/glsa/glsa-200804-01.xml - http://secunia.com/advisories/29603
CVE ID: CVE-2008-0883 State: PUBLISHED Published: 2008-03-06T00:00:00 Last Updated: 2024-08-07T08:01:40.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2289 - http://www.securityfocus.com/bid/28091 - http://secunia.com/advisories/29242 - http://www.gentoo.org/security/en/glsa/glsa-200803-26.xml - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://secunia.com/advisories/29425
6.xml - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://secunia.com/advisories/29425 - http://secunia.com/advisories/31352 - http://secunia.com/advisories/29229 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240106-1 - http://www.adobe.com/support/security/advisories/apsa08-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40987 - http://www.redhat.com/support/errata/RHSA-2008-0641.html - http://www.securitytracker.com/id?1019539 - http://support.novell.com/techcenter/psdb/d8c48c63359fc807624182696d3d149c.html - http://secunia.com/advisories/31136 - http://www.vupen.com/english/advisories/2008/0765/references
CVE ID: CVE-2008-0884 State: PUBLISHED Published: 2008-04-04T00:00:00 Last Updated: 2024-08-07T08:01:40.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Replace function in the capp-lspp-config script in the (1) lspp-eal4-config-ibm and (2) capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux (RHEL) 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a change to world-writable permissions for the /etc/pam.d/system-auth-ac file, which allows local users to gain privileges by modifying this file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2008-0193.htm
s file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2008-0193.html - http://securitytracker.com/id?1019740 - http://www.securityfocus.com/bid/28557 - http://secunia.com/advisories/29642 - https://bugzilla.redhat.com/show_bug.cgi?id=435442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41584
CVE ID: CVE-2008-0885 State: REJECTED Published: 2021-06-11T21:32:48 Last Updated: 2021-06-11T21:32:48 Description: No description available.
CVE ID: CVE-2008-0886 State: REJECTED Published: 2008-02-29T19:00:00Z Last Updated: 2024-09-16T20:58:11.223Z Description: No description available.
CVE ID: CVE-2008-0887 State: PUBLISHED Published: 2008-04-06T23:00:00 Last Updated: 2024-08-07T08:01:40.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00163.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10813 - http://www.mandriva.com/security/adv
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10813 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:132 - http://www.ubuntu.com/usn/USN-669-1 - http://secunia.com/advisories/29606 - http://secunia.com/advisories/29759 - https://bugzilla.redhat.com/show_bug.cgi?id=435773 - http://secunia.com/advisories/30967 - http://osvdb.org/35531 - http://securitytracker.com/id?1019749 - http://security.gentoo.org/glsa/glsa-200804-12.xml - http://rhn.redhat.com/errata/RHSA-2008-0197.html - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - http://secunia.com/advisories/29742 - http://www.redhat.com/support/errata/RHSA-2008-0218.html - ht
8-07/msg00001.html - http://secunia.com/advisories/29742 - http://www.redhat.com/support/errata/RHSA-2008-0218.html - http://secunia.com/advisories/29595 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00206.html - http://www.securityfocus.com/bid/28575 - http://secunia.com/advisories/32691
CVE ID: CVE-2008-0888 State: PUBLISHED Published: 2008-03-17T21:00:00 Last Updated: 2025-08-26T12:17:22.176Z Vendors: info-zip Products: unzip Problem Types: n/a Description: The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29415 - http://www.securityfocus.com/archive/1/489967/100/0/threaded - http://secunia.com/advisories/29427 - http://www.vupen.com/en
://www.securityfocus.com/archive/1/489967/100/0/threaded - http://secunia.com/advisories/29427 - http://www.vupen.com/english/advisories/2008/1744 - http://secunia.com/advisories/29440 - http://www.debian.org/security/2008/dsa-1522 - http://secunia.com/advisories/29432 - https://issues.rpath.com/browse/RPL-2317 - http://wiki.rpath.com/Advisories:rPSA-2008-0116 - http://www.vmware.com/security/advisories/VMSA-2008-0009.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://secunia.com/advisories/29392 - http://secunia.com/advisories/29681 - http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:068 - http://lists.opensuse.org/opensuse-security-announ
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:068 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html - http://www.vupen.com/english/advisories/2008/0913/references - http://secunia.com/advisories/30535 - http://www.ipcop.org/index.php?name=News&file=article&sid=40 - http://support.apple.com/kb/HT4077 - http://www.securityfocus.com/archive/1/493080/100/0/threaded - http://security.gentoo.org/glsa/glsa-200804-06.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9733 - http://secunia.com/advisories/29406 - http://secunia.com/advisories/29495 - http://secunia.com/advisories/31204 - http://www.securitytracker.c
isories/29406 - http://secunia.com/advisories/29495 - http://secunia.com/advisories/31204 - http://www.securitytracker.com/id?1019634 - http://www.redhat.com/support/errata/RHSA-2008-0196.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41246 - http://www.ubuntu.com/usn/usn-589-1 - http://www.securityfocus.com/bid/28288 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0116
CVE ID: CVE-2008-0889 State: PUBLISHED Published: 2008-03-20T00:00:00 Last Updated: 2024-08-07T08:01:40.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions for the redhat-idm-console script, which allows local users to execute arbitrary code by modifying the script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019677 - http://www.redhat.com/support/errata/RHSA-2008-0191.html - http://secunia.com/advisories/29482 - http://www.securityfocus.com/bid/28327
CVE ID: CVE-2008-0890 State: PUBLISHED Published: 2008-03-12T00:00:00 Last Updated: 2024-08-07T08:01:40.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41152 - http://www.securityfocus.com/bid/28204 - http://www.securitytracker.com/id?1019577 - http://www.redhat.com/support/errata/RHSA-2008-0173.html
CVE ID: CVE-2008-0891 State: PUBLISHED Published: 2008-05-29T16:00:00 Last Updated: 2024-08-07T08:01:40.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004 - http://secunia.com/advisories/3085
are.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004 - http://secunia.com/advisories/30852 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42666 - http://secunia.com/advisories/30460 - http://secunia.com/advisories/30825 - http://www.vupen.com/english/advisories/2008/1680 - http://www.securitytracker.com/id?1020121 - http://www.ubuntu.com/usn/usn-620-1 - http://secunia.com/advisories/30868 - http://www.openssl.org/news/secadv_20080528.txt - http://security.gentoo.org/glsa/glsa-200806-08.xml - http://sourcefor
http://www.openssl.org/news/secadv_20080528.txt - http://security.gentoo.org/glsa/glsa-200806-08.xml - http://sourceforge.net/project/shownotes.php?release_id=615606 - http://secunia.com/advisories/31288 - http://secunia.com/advisories/30405 - http://www.securityfocus.com/bid/29405 - http://www.vupen.com/english/advisories/2008/1937/references - http://secunia.com/advisories/31228 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:107 - http://www.kb.cert.org/vuls/id/661475
CVE ID: CVE-2008-0892 State: PUBLISHED Published: 2008-04-16T18:00:00 Last Updated: 2024-08-07T08:01:40.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41840 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676 - http://secunia.com/advisories/30114 - htt
://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676 - http://secunia.com/advisories/30114 - http://www.securitytracker.com/id?1019856 - http://www.securityfocus.com/bid/28802 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01433676 - http://www.redhat.com/support/errata/RHSA-2008-0201.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html - http://www.vupen.com/english/advisories/2008/1449/references - http://www.redhat.com/support/errata/RHSA-2008-0199.html - http://secunia.com/advisories/29761 - http://secunia.com/advisories/29826 - https://bugzilla.redhat.com/show_bug.cgi?id=437301
CVE ID: CVE-2008-0893 State: PUBLISHED Published: 2008-04-16T18:00:00 Last Updated: 2024-08-07T08:01:39.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which allows remote attackers to perform administrative actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00386.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41843 - http://www.securitytracker.com/id?1019857 - http://www.securityfocus.com/bid/28802 - http://www.redhat.com/support/errata/RH
://www.securitytracker.com/id?1019857 - http://www.securityfocus.com/bid/28802 - http://www.redhat.com/support/errata/RHSA-2008-0201.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00380.html - http://secunia.com/advisories/29761 - https://bugzilla.redhat.com/show_bug.cgi?id=437320 - http://secunia.com/advisories/29826
CVE ID: CVE-2008-0894 State: PUBLISHED Published: 2008-02-21T21:00:00 Last Updated: 2024-08-07T08:01:40.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service (crash) via a crafted (1) bitmap (BMP) or (2) GIF file, a related issue to CVE-2008-0420. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488264/100/0/threaded - http://www.securitytracker.com/id?1019487 - https://bugzilla.mozilla.org/show_bug.cgi?id=408076 - http://securityreason.com/securityalert/3685 - http://www.securityfocus.com/bid/27947
CVE ID: CVE-2008-0895 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29041 - http://dev2dev.bea.com/pub/advisory/265 - http://www.vupen.com/english/advisories/2008/0612/references - http://www.securitytracker.com/id?1019443
CVE ID: CVE-2008-0896 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/266 - http://www.vupen.com/english/advisories/2008/0613 - http://www.securitytracker.com/id?1019453 - http://secunia.com/advisories/29041
CVE ID: CVE-2008-0897 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:39.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended access restrictions and receive messages from a standalone JMS Topic or secured Distributed Topic member destination, related to durable subscriptions. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/267 - http://www.securitytracker.com/id?1019444 - http://secunia.com/advisories/29041 - http://www.vupen.com/english/advisories/20
://www.securitytracker.com/id?1019444 - http://secunia.com/advisories/29041 - http://www.vupen.com/english/advisories/2008/0612/references
CVE ID: CVE-2008-0898 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a client cannot send a message to a member of a distributed queue, which allows remote authenticated users to bypass intended access restrictions for protected distributed queues. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019447 - http://secunia.com/advisories/29041 - http://www.vupen.com/english/advisories/2008/0612/references - http://
d?1019447 - http://secunia.com/advisories/29041 - http://www.vupen.com/english/advisories/2008/0612/references - http://dev2dev.bea.com/pub/advisory/268
CVE ID: CVE-2008-0899 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019448 - http://secunia.com/advisories/29041 - http://www.vupen.com/english/advisories/2008/0612/references - http://dev2dev.bea.com/pub/advisory/269
CVE ID: CVE-2008-0900 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019439 - http://dev2dev.bea.com/pub/advisory/270 - http://secunia.com/advisories/29041 - http://www.vupen.com/english/advisories/2008/0612/references
CVE ID: CVE-2008-0901 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/271 - http://secunia.com/advisories/29041 - http://www.vupen.com/english/advisories/2008/0612/references - http://www.s21sec.com/avisos/s21sec-040-en.txt - http://www.securitytracker
om/english/advisories/2008/0612/references - http://www.s21sec.com/avisos/s21sec-040-en.txt - http://www.securitytracker.com/id?1019449 - http://www.securityfocus.com/archive/1/488686/100/0/threaded
CVE ID: CVE-2008-0902 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/273 - http://secunia.com/advisories/29041 - http://www.vupen.com/english/advisories/2008/0612/references
CVE ID: CVE-2008-0903 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service (web server crash) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/275 - http://secunia.com/advisories/29041 - http://www.securitytracker.com/id?1019450 - http://www.vupen.com/english/advisories/2008/0608/references
CVE ID: CVE-2008-0904 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019437 - http://osvdb.org/41881 - http://www.vupen.com/english/advisories/2008/0607/references - http://secunia.com/advisories/28991 - http://dev2dev.bea.com/pub/advisory/276
CVE ID: CVE-2008-0905 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27910 - https://www.exploit-db.com/exploits/5162 - http://secunia.com/advisories/29047
CVE ID: CVE-2008-0906 State: PUBLISHED Published: 2008-02-22T21:00:00 Last Updated: 2024-08-07T08:01:40.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40720 - http://www.securityfocus.com/bid/27912 - https://www.exploit-db.com/exploits/5161