Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
006.html - http://www.vupen.com/english/advisories/2008/2288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44173 - http://www.securityfocus.com/bid/30491 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/31687 - http://security.gentoo.org/glsa/glsa-200807-16.xml - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://secunia.com/advisories/31358 - http://secunia.com/advisories/31332 - http://www.ubuntu.com/usn/usn-632-1 - http://secunia.com/advisories/31518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44174 - http://secunia.com/advisories/31305 - http://bugs.gentoo.org/show_bug.cgi?id=2306
e.ibmcloud.com/vulnerabilities/44174 - http://secunia.com/advisories/31305 - http://bugs.gentoo.org/show_bug.cgi?id=230640 - http://secunia.com/advisories/31365 - http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 - http://secunia.com/advisories/31473 - http://wiki.rpath.com/Advisories:rPSA-2008-0243 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 - http://bugs.gentoo.org/attachment.cgi?id=159422&action=view
CVE ID: CVE-2008-2317 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T08:58:02.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via a reference to the ownerNode property of a copied CSSStyleSheet object of a STYLE element, as originally demonstrated on Apple iPhone before 2.0 and iPod touch before 2.0, a different vulnerability than CVE-2008-1590. Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
nt vulnerability than CVE-2008-1590. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/494777/100/0/threaded - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - http://www.zerodayinitiative.com/advisories/ZDI-08-045/ - http://www.securityfocus.com/bid/30186 - http://secunia.com/advisories/32706 - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://support.apple.com/kb/HT3298 - http://www.vupen.com/english/advisories/2008/2094/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43737 - http://secunia.com/advisories/31074
CVE ID: CVE-2008-2318 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T08:58:01.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43735 - http://www.securitytracker.com/id?1020473 - http://www.securityfocus.com/bid/30191 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00002.html -
3 - http://www.securityfocus.com/bid/30191 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00002.html - http://support.apple.com/kb/HT2352 - http://www.vupen.com/english/advisories/2008/2093/references - http://secunia.com/advisories/31060
CVE ID: CVE-2008-2320 State: PUBLISHED Published: 2008-08-04T01:00:00 Last Updated: 2024-08-07T08:58:02.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long filename to the file management API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30487 - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://lists.apple.com/
30487 - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://www.securitytracker.com/id?1020602 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.vupen.com/english/advisories/2008/2268 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://secunia.com/advisories/35379 - http://www.securityfocus.com/archive/1/495040/100/0/threaded - http://secunia.com/advisories/31326 - http://support.apple.com/kb/HT3613 - http://www.securityfocus.com/bid/30483 - https://exch
ecunia.com/advisories/31326 - http://support.apple.com/kb/HT3613 - http://www.securityfocus.com/bid/30483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44126
CVE ID: CVE-2008-2321 State: PUBLISHED Published: 2008-08-04T01:00:00 Last Updated: 2024-08-07T08:58:01.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unknown vectors involving "processing of arguments." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securitytracker.com/id?1020603 - http://lists.ap
pple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securitytracker.com/id?1020603 - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://www.vupen.com/english/advisories/2008/2268 - http://www.vupen.com/english/advisories/2009/1522 - http://www.vupen.com/english/advisories/2008/3232 - http://www.securityfocus.com/bid/30488 - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44127 - http://secunia.com/advisories/31326 - http://support.apple.com/kb/HT3613 - http://www.securityfocus.com/bid/30483 - http://secunia.com/advisories/32756
CVE ID: CVE-2008-2322 State: PUBLISHED Published: 2008-08-04T01:00:00 Last Updated: 2024-08-07T08:58:01.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF file with a long Type 1 font, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://www.securityfocus.com/bid/30489 - http://www.vupen.com/english/advisories/2008/2268 - http://www.securitytracker.com/id?1
ww.securityfocus.com/bid/30489 - http://www.vupen.com/english/advisories/2008/2268 - http://www.securitytracker.com/id?1020604 - http://secunia.com/advisories/31326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44128 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=730 - http://www.securityfocus.com/bid/30483
CVE ID: CVE-2008-2323 State: PUBLISHED Published: 2008-08-04T01:00:00 Last Updated: 2024-08-07T08:58:01.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to cause a denial of service (resource consumption) via crafted textual content in messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020606 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://www.vupen.com/english/advisories/2008/2268 - http://secunia.com/advisories/31326 - http://www.securityfocus.com/bid/30490 - http://www.securityfocus.com/b
008/2268 - http://secunia.com/advisories/31326 - http://www.securityfocus.com/bid/30490 - http://www.securityfocus.com/bid/30483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44130
CVE ID: CVE-2008-2324 State: PUBLISHED Published: 2008-08-04T01:00:00 Last Updated: 2024-08-07T08:58:02.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://www.vupen.com/english/advisories/2008/2268 - http://www.securityfocus.com/bid/30492 - http://secunia.com/advisories/31326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44132 -
focus.com/bid/30492 - http://secunia.com/advisories/31326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44132 - http://www.securitytracker.com/id?1020605 - http://www.securityfocus.com/bid/30483
CVE ID: CVE-2008-2325 State: PUBLISHED Published: 2008-08-04T01:00:00 Last Updated: 2024-08-07T08:58:01.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office file, related to insufficient "bounds checking." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://www.vupen.com/english/advisories/2008/2268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44135 - http://www.securityfocus.com/b
glish/advisories/2008/2268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44135 - http://www.securityfocus.com/bid/30493 - http://secunia.com/advisories/31326 - http://www.securitytracker.com/id?1020607 - http://www.securityfocus.com/bid/30483
CVE ID: CVE-2008-2326 State: PUBLISHED Published: 2008-09-10T16:00:00 Last Updated: 2024-08-07T08:58:02.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31822 - http://www.securitytracker.com/id?1020845 - http://support.apple.com/kb/HT2990 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html - http://www.securi
port.apple.com/kb/HT2990 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html - http://www.securityfocus.com/bid/31091 - http://www.vupen.com/english/advisories/2008/2524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45005
CVE ID: CVE-2008-2327 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T08:58:01.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265030-1 - http://secunia.com/advisories/31670 - http://www.mandriva.com/security/advisories?name=MDVSA-200
ssetkey=1-26-265030-1 - http://secunia.com/advisories/31670 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:184 - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - http://www.securityfocus.com/archive/1/496033/100/0/threaded - http://secunia.com/advisories/31838 - http://bugs.gentoo.org/show_bug.cgi?id=234080 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://secunia.com/advisories/31982 - http://secunia.com/advisories/31698 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00121.html - http://www.vupen.com/english/advisories/2008/2971 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - h
0121.html - http://www.vupen.com/english/advisories/2008/2971 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2776 - http://www.vmware.com/security/advisories/VMSA-2008-0017.html - http://www.redhat.com/support/errata/RHSA-2008-0863.html - http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html - http://secunia.com/advisories/31623 - http://www.vupen.com/english/advisories/2008/2584 - http://security-tracker.debian.net/tracker/CVE-2008-2327 - http://www.securitytracker.com/id?1020750 - http://www.securityfocus.com/archive/1/497962/100/0/threaded - http://www.vupen.com/english/advisories/2008/3107 - http://secunia.com/advi
yfocus.com/archive/1/497962/100/0/threaded - http://www.vupen.com/english/advisories/2008/3107 - http://secunia.com/advisories/31610 - http://www.securityfocus.com/bid/30832 - http://security-tracker.debian.net/tracker/DTSA-160-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11489 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://www.vupen.com/english/advisories/2008/3232 - http://secunia.com/advisories/31882 - http://www.redhat.com/support/errata/RHSA-2008-0848.html - http://secunia.com/advisories/31668 - http://www.vupen.com/english/advisories/2009/2143 - http://secunia.com/advisories/32706 - https://oval.cisecu
es/31668 - http://www.vupen.com/english/advisories/2009/2143 - http://secunia.com/advisories/32706 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5514 - http://www.debian.org/security/2008/dsa-1632 - http://support.apple.com/kb/HT3318 - http://security-tracker.debian.net/tracker/DSA-1632-1 - http://support.apple.com/kb/HT3298 - http://www.ubuntu.com/usn/usn-639-1 - http://www.redhat.com/support/errata/RHSA-2008-0847.html - http://support.apple.com/kb/HT3276 - http://www.vupen.com/english/advisories/2008/2438 - https://bugzilla.redhat.com/show_bug.cgi?id=458674 - http://secunia.com/advisories/32756 - http://security.gentoo.org/glsa/glsa-200809-07.xml
t.com/show_bug.cgi?id=458674 - http://secunia.com/advisories/32756 - http://security.gentoo.org/glsa/glsa-200809-07.xml - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00102.html
CVE ID: CVE-2008-2329 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T08:58:02.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://securitytracker.com/id?
http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://securitytracker.com/id?1020874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45163
CVE ID: CVE-2008-2330 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T08:58:01.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system administrator, related to the mkfifo function, aka an "insecure file operation issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen
ives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31882 - http://securitytracker.com/id?1020874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45164
CVE ID: CVE-2008-2331 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T08:58:01.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intended by an administrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://
.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://securitytracker.com/id?1020875 - http://secunia.com/advisories/31882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45165
CVE ID: CVE-2008-2332 State: PUBLISHED Published: 2008-09-16T23:00:00 Last Updated: 2024-08-07T08:58:02.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31189 - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - htt
pple.com/archives/security-announce//2008/Sep/msg00005.html - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://www.vupen.com/english/advisories/2008/2584 - http://www.vupen.com/english/advisories/2008/3107 - http://secunia.com/advisories/31882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45167 - http://www.securitytracker.com/id?1020876 - http://secunia.com/advisories/32706 - http://support.apple.com/kb/HT3298 - http://support.apple.com/kb/HT3276
CVE ID: CVE-2008-2333 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1627/references - http://www.securityfocus.com/archive/1/492475/100/0/threaded - http://www.securityfocus.com/bid/29340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42594 - http://www.securitytracker.com/id?1020108
.com/bid/29340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42594 - http://www.securitytracker.com/id?1020108 - http://www.barracudanetworks.com/ns/support/tech_alert.php - http://secunia.com/advisories/30362 - http://www.irmplc.com/index.php/168-Advisory-027
CVE ID: CVE-2008-2334 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:01.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) forumid parameter to (a) admin/philboard_admin-forumedit.asp, (b) admin/philboard_admin-forum.asp, and (c) W1L3D4_foruma_yeni_konu_ac.asp; the (2) id parameter to (d) W1L3D4_konuoku.asp and (e) W1L3D4_konuya_mesaj_yaz.asp; and the (3) topic parameter to W1L3D4_konuya_mesaj_yaz.asp, different vectors than CVE-2008-1939, CVE-2007-2641, and CVE-2007-0920. NOTE: the provenance of this information is u
p, different vectors than CVE-2008-1939, CVE-2007-2641, and CVE-2007-0920. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42452 - http://www.securityfocus.com/bid/29229 - http://www.securityfocus.com/bid/29229/exploit - http://secunia.com/advisories/30278
CVE ID: CVE-2008-2335 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:02.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 1.2.3 is also affected. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42450 - http://www.exploit-db.com/exploits/27519 - http://www.vupen.com/english/advisories/2008/255
.com/vulnerabilities/42450 - http://www.exploit-db.com/exploits/27519 - http://www.vupen.com/english/advisories/2008/2552 - http://tetraph.com/security/xss-vulnerability/vastal-i-tech-phpvid-1-2-3-multiple-xss-cross-site-scripting-security-vulnerabilities/ - http://secunia.com/advisories/30152 - http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html - http://seclists.org/fulldisclosure/2015/Mar/59 - http://www.securityfocus.com/bid/29238 - https://www.exploit-db.com/exploits/6422 - http://holisticinfosec.org/content/view/65/45/ - http://osvdb.org/show/osvdb/45171 - http://packetstormsecurity.com/files/130755/Vastal-I-tech-phpVID-1.2.3-Cross-Site-Scripting.h
vdb.org/show/osvdb/45171 - http://packetstormsecurity.com/files/130755/Vastal-I-tech-phpVID-1.2.3-Cross-Site-Scripting.html
CVE ID: CVE-2008-2336 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:02.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5626 - http://secunia.com/advisories/30273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42465 - http://www.securityfocus.com/bid/29249
CVE ID: CVE-2008-2337 State: PUBLISHED Published: 2008-05-19T10:00:00 Last Updated: 2024-08-07T08:58:02.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kategoria parameter to (a) galeria.php and the (2) id_phot parameter to (b) popup/koment.php and (c) popup/opis.php in, different vectors than CVE-2006-3163. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42474 - http://www.securityfocus.com/bid/29250 - https://www.exploit-db.com/exploits/5631