Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tainer: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0-site-editor.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/72218
CVE ID: CVE-2011-4768 State: PUBLISHED Published: 2011-12-16T11:00:00Z Last Updated: 2024-09-17T00:26:53.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving Wizard/Edit/Modules/Image and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/ples
y this issue. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/examples/plesk-reports/plesk-10.2.0-site-editor.html
CVE ID: CVE-2011-4769 State: PUBLISHED Published: 2012-01-25T02:00:00 Last Updated: 2024-08-07T00:16:34.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 360 MobileSafe (com.qihoo360.mobilesafe) application 2.x before 2.3.0 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4769-vulnerability-in-360MobileSafe.html
CVE ID: CVE-2011-4770 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-16T22:56:00.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QIWI Wallet (ru.mw) application before 1.14.2 for Android does not properly protect data, which allows remote attackers to read or modify financial information via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4770-vulnerability-in-QIWIWallet.html
CVE ID: CVE-2011-4771 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-16T23:06:42.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scan to PDF Free (com.scan.to.pdf.trial) application 2.0.4 for Android does not properly protect data, which allows remote attackers to read or modify scanned files and a Google account via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4771-vulnerability-in-ScanToPDF.html
CVE ID: CVE-2011-4772 State: PUBLISHED Published: 2012-01-25T02:00:00Z Last Updated: 2024-09-17T02:37:21.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 360 KouXin (com.qihoo360.kouxin) application 1.5.3 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4772-vulnerability-in-360KouXin.html
CVE ID: CVE-2011-4773 State: PUBLISHED Published: 2012-01-25T02:00:00 Last Updated: 2024-08-07T00:16:34.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AnGuanJia (com.anguanjia.safe) application 2.10.343 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4774-vulnerability-in-AnGuanJia.html - http://secunia.com/advisories/48433
CVE ID: CVE-2011-4776 State: PUBLISHED Published: 2011-12-16T11:00:00 Last Updated: 2024-08-07T00:16:34.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/update/settings/ and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72220 - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-sc
http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4777 State: PUBLISHED Published: 2011-12-16T11:00:00Z Last Updated: 2024-09-16T20:51:40.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Panel 10.4.4_build20111103.18 allows remote attackers to inject arbitrary web script or HTML via the login parameter to preferences.html. Additional Analyst Notes: - CVE Program Container: References: - http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE ID: CVE-2011-4778 State: PUBLISHED Published: 2012-01-03T11:00:00 Last Updated: 2024-08-07T00:16:34.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPL-44614. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAGMM - http://www.securitytracker.com/id?1026451
CVE ID: CVE-2011-4779 State: REJECTED Published: 2011-12-20T15:00:00Z Last Updated: 2024-09-17T04:00:22.835Z Description: No description available.
CVE ID: CVE-2011-4780 State: PUBLISHED Published: 2011-12-22T20:00:00 Last Updated: 2024-08-07T00:16:34.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attackers to inject arbitrary web script or HTML via crafted URL parameters, related to the export panels in the (1) server, (2) database, and (3) table sections. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51226 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=bd3735ba584e7a49aee78813845245354b061
pmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=bd3735ba584e7a49aee78813845245354b061f61 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071523.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:198 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071537.html - http://www.phpmyadmin.net/home_page/security/PMASA-2011-20.php
CVE ID: CVE-2011-4782 State: PUBLISHED Published: 2011-12-22T20:00:00 Last Updated: 2024-08-07T00:16:34.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTML via the host parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71938 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=0e707906e69ce90c4852a0fce2a0fac7db86a3cd - http://lists.fedoraproject.org/pipermail/packa
dmin/phpmyadmin%3Ba=commit%3Bh=0e707906e69ce90c4852a0fce2a0fac7db86a3cd - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071523.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:198 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071537.html - http://www.phpmyadmin.net/home_page/security/PMASA-2011-19.php
CVE ID: CVE-2011-4783 State: PUBLISHED Published: 2011-12-27T11:00:00 Last Updated: 2024-08-07T00:16:34.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71936 - http://code.google.com/p/idapython/source/detail?r=361 - http://code.google.com/p/idapython/downloads/detail?name=idapython-1.5.2.3_ida
gle.com/p/idapython/source/detail?r=361 - http://code.google.com/p/idapython/downloads/detail?name=idapython-1.5.2.3_ida6.1_py2.6_win32.zip - http://technet.microsoft.com/en-us/security/msvr/msvr11-015
CVE ID: CVE-2011-4784 State: PUBLISHED Published: 2011-12-27T02:00:00 Last Updated: 2024-08-07T00:16:34.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA Stereoscopic 3D driver before 7.17.12.7565 does not properly handle commands sent to a named pipe, which allows local users to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71930 - http://www.osvdb.org/77974 - http://www.securityfocus.com/bid/51148 - http://technet.microsoft.com/en-us/security/msvr/msvr11-016
CVE ID: CVE-2011-4785 State: PUBLISHED Published: 2012-01-10T11:00:00 Last Updated: 2024-08-07T00:16:34.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 printer with firmware 08.113.0_I35128 allows remote attackers to read arbitrary files via unspecified vectors, a different vulnerability than CVE-2008-4419. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/521160 - http://osvdb.org/78224 - http://secunia.com/advisories/47457 - http
s: - http://www.securityfocus.com/archive/1/521160 - http://osvdb.org/78224 - http://secunia.com/advisories/47457 - http://www.securityfocus.com/archive/1/521160 - http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0116.html - http://www.securityfocus.com/archive/1/521165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72227 - http://www.securityfocus.com/bid/51329
CVE ID: CVE-2011-4786 State: PUBLISHED Published: 2012-01-12T19:00:00Z Last Updated: 2024-09-17T00:01:10.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html - http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html
CVE ID: CVE-2011-4787 State: PUBLISHED Published: 2012-01-12T19:00:00Z Last Updated: 2024-09-16T20:31:29.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html - http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html
CVE ID: CVE-2011-4788 State: PUBLISHED Published: 2012-01-13T02:00:00 Last Updated: 2024-08-07T00:16:34.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=132672509901841&w=2 - http://marc.info/?l=bugtraq&m=132672509901841&w=2 - http://zerodayinitiative.com/advisories/ZDI-12-015/ - http://archives.neohapsis.com/archives/bugtraq/2012-01/0088.html
CVE ID: CVE-2011-4789 State: PUBLISHED Published: 2012-01-13T02:00:00 Last Updated: 2024-08-07T00:16:35.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/78309 - http://zerodayinitiative.com/advisories/ZDI-12-016/ - http://www.securityfocus.com/bid/51398 - ht
tp://osvdb.org/78309 - http://zerodayinitiative.com/advisories/ZDI-12-016/ - http://www.securityfocus.com/bid/51398 - http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03216705 - http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03216705
CVE ID: CVE-2011-4790 State: PUBLISHED Published: 2012-02-02T00:00:00Z Last Updated: 2024-09-16T16:48:57.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03171149 - http://securitytracker.com/id?1026601 - http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03171149 - http://secunia.com/advisories/47826 - http://secunia.com/advisories/47738
CVE ID: CVE-2011-4791 State: PUBLISHED Published: 2012-02-03T02:00:00Z Last Updated: 2024-09-16T19:01:14.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/521472 - http://zerodayinitiative.com/advisories/ZDI-11-112/ - http://www.securityfocus.com/archive/1/521472
CVE ID: CVE-2011-4792 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4793 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4794 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4795 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4796 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4797 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4798 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4799 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2011-4800 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T23:01:04.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" (dot dot colon forward slash) in the (1) list, (2) put, or (3) get commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0454.html - http://secunia.com/advisories/47021 - http://www.serv-u.com/releasenotes/ - http://www.exploit-db.com/exploits/18182
CVE ID: CVE-2011-4801 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T17:28:46.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System (ASAS) Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18117 - https://support.authenex.com/index.php?/Knowledgebase/Article/View/124/0/asas3103update2 - http://www.foregroundsecurity.com/security-advisories/101-authenex-a-keyasas-web-m
/Article/View/124/0/asas3103update2 - http://www.foregroundsecurity.com/security-advisories/101-authenex-a-keyasas-web-management-control-3102-time-based-sql-injection
CVE ID: CVE-2011-4802 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-07T00:16:34.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index.php; the id parameter to (4) info.php, (5) perms.php, (6) param_ihm.php, (7) note.php, and (8) fiche.php in user/; and (9) rowid parameter to admin/boxes.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520619/100/0/thr
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520619/100/0/threaded - http://osvdb.org/77346 - http://osvdb.org/77340 - https://github.com/Dolibarr/dolibarr/commit/d08d28c0cda1f762a47cc205d4363de03df16675 - http://osvdb.org/77341 - https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_dolibarr.html - https://github.com/Dolibarr/dolibarr/commit/63820ab37537fdff842539425b2bf2881f0d8e91 - https://github.com/Dolibarr/dolibarr/commit/762f98ab4137749d0993612b4e3544a4207e78a1 - http://osvdb.org/77345 - https://github.com/Dolibarr/dolibarr/commit/c539155d6ac2f5b6ea75b87a16f298c0090e535a - http://osvdb.org/77347 - http://osvdb.org/77344
.com/Dolibarr/dolibarr/commit/c539155d6ac2f5b6ea75b87a16f298c0090e535a - http://osvdb.org/77347 - http://osvdb.org/77344 - http://www.securityfocus.com/bid/50777 - http://osvdb.org/77343 - http://osvdb.org/77342
CVE ID: CVE-2011-4803 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T23:10:22.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18039
CVE ID: CVE-2011-4804 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T21:07:30.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48944 - http://foobla.com/news/latest/obsuggest-1.8-security-release.html - http://secunia.com/advisories/46844
CVE ID: CVE-2011-4805 State: PUBLISHED Published: 2011-12-14T00:00:00 Last Updated: 2024-08-07T00:16:35.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary web script or HTML via the service parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520560/100/0/threaded - http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a - https://service.sap.com/sap/support/notes/1562292 - http://dsecrg.com/pages/vul/show.php?id=333
CVE ID: CVE-2011-4806 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T23:10:39.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) var1 and (2) keyword parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18045
CVE ID: CVE-2011-4807 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-17T00:55:43.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the var1 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18045
CVE ID: CVE-2011-4808 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-17T03:23:34.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a fnd_home action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://joomlaextensions.co.in/index.php?option=com_jeshop&view=category_detail&Itemid=118&id=38 - http://secunia.com/advisories/46656 - http://www.osvdb.org/76727 - http://www.exploit-db.com/exploits/18050
CVE ID: CVE-2011-4809 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T19:52:33.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) language[], (2) university[], (3) persent[], (4) company_name[], (5) designation[], (6) music[], (7) books[], (8) movies[], (9) games[], (10) syp[], (11) ft[], and (12) fa[] parameters in a save task for a profile to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Pr
to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://joomlaextensions.co.in/index.php?option=com_jeshop&view=category_detail&Itemid=118&id=38 - http://secunia.com/advisories/46656 - http://www.osvdb.org/76726 - http://www.exploit-db.com/exploits/18050
CVE ID: CVE-2011-4810 State: PUBLISHED Published: 2011-12-14T00:00:00Z Last Updated: 2024-09-16T18:24:44.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php and (2) downloads.php, and (3) the report parameter to admin/reports.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18088