Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Container: References: - http://packetstormsecurity.org/1004-exploits/opencourrier-rfilfi.txt - http://www.exploit-db.com/exploits/12398 - http://www.osvdb.org/64201 - http://www.vupen.com/english/advisories/2010/1003 - http://secunia.com/advisories/39624
CVE ID: CVE-2010-1927 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:12.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) bible.class.php, (2) dossier.class.php, (3) service.class.php, (4) collectivite.class.php, (5) droit.class.php, (6) tache.class.php, (7) emetteur.class.php, (8) utilisateur.class.php, (9) courrier.recherche.tab.class.php, and (10) profil.class.php in obj/. NOTE: some of these details are obtained from th
9) courrier.recherche.tab.class.php, and (10) profil.class.php in obj/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/opencourrier-rfilfi.txt - http://www.osvdb.org/64207 - http://www.exploit-db.com/exploits/12398 - http://www.vupen.com/english/advisories/2010/1003 - http://www.osvdb.org/64206 - http://www.osvdb.org/64204 - http://www.osvdb.org/64205 - http://www.osvdb.org/64208 - http://www.osvdb.org/64202 - http://www.osvdb.org/64210 - http://www.osvdb.org/64203 - http://secunia.com/advisories/39624 - http://www.osvdb.org/64209
CVE ID: CVE-2010-1928 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:12.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58090 - http://secunia.com/advisories/39606 - http://packetstormsecurity.org/1004-exploits/openpl
ud.com/vulnerabilities/58090 - http://secunia.com/advisories/39606 - http://packetstormsecurity.org/1004-exploits/openplanning-rfilfi.txt - http://www.exploit-db.com/exploits/12365
CVE ID: CVE-2010-1929 State: PUBLISHED Published: 2010-06-28T17:00:00 Last Updated: 2024-08-07T02:17:13.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40480 - http://www.vupen.com/english/advisories/2010/1575 - https://exchange.xforce.ibmcloud.com/vulner
ityfocus.com/bid/40480 - http://www.vupen.com/english/advisories/2010/1575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59694 - http://securitytracker.com/id?1024152 - http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities - http://www.exploit-db.com/exploits/14010 - http://secunia.com/advisories/40281 - http://www.osvdb.org/65737 - http://www.securityfocus.com/archive/1/511983/100/0/threaded
CVE ID: CVE-2010-1930 State: PUBLISHED Published: 2010-06-28T17:00:00 Last Updated: 2024-08-07T02:17:13.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (daemon crash) via a long tree parameter in a login request to nps/servlet/webacc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40485 - http://www.vupen.com/english/advisories/2010/1575 - http://securitytracker.com/id?1024152 - http://www.osvdb.org/65738 - http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities - https://e
b.org/65738 - http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/59695 - http://www.exploit-db.com/exploits/14010 - http://secunia.com/advisories/40281 - http://www.securityfocus.com/archive/1/511983/100/0/threaded
CVE ID: CVE-2010-1931 State: PUBLISHED Published: 2010-06-10T00:00:00 Last Updated: 2024-08-07T02:17:12.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 through 4.3.9 allows remote attackers to execute arbitrary SQL commands via the shipKey parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40102 - http://www.securityfocus.com/archive/1/511735/100/0/threaded - http://forums.cubecart.com/index.php?showtopic=41469 - http://www.securityfocus.com/bid/40641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59245 -
showtopic=41469 - http://www.securityfocus.com/bid/40641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59245 - http://osvdb.org/65250 - http://www.coresecurity.com/content/cubecart-php-shopping-cart-sql-injection
CVE ID: CVE-2010-1932 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:17:13.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) file with a Paint Data Section that contains a malformed Encoding field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59421 - http://www.coresecurity.com/content/XnView-MBM-Processing-Heap-Overflow - http://www.vupen.com/english/advisories/2010/1468 - http://secunia.com/advisories/40141 - http://www.securityfocus.com/b
http://www.vupen.com/english/advisories/2010/1468 - http://secunia.com/advisories/40141 - http://www.securityfocus.com/bid/40852 - http://www.securitytracker.com/id?1024100
CVE ID: CVE-2010-1934 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:14.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) categorie.class.php, (2) profil.class.php, (3) collectivite.class.php, (4) ressource.class.php, (5) droit.class.php, (6) utilisateur.class.php, and (7) planning.class.php in obj/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64191 - http://www.osvdb.org/64187 - http://www.osvdb
Notes: - CVE Program Container: References: - http://www.osvdb.org/64191 - http://www.osvdb.org/64187 - http://www.osvdb.org/64186 - http://secunia.com/advisories/39606 - http://www.osvdb.org/64188 - http://www.osvdb.org/64192 - http://packetstormsecurity.org/1004-exploits/openplanning-rfilfi.txt - http://www.exploit-db.com/exploits/12365 - http://www.osvdb.org/64189
CVE ID: CVE-2010-1935 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:13.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/openpresse-lfi.txt - http://www.osvdb.org/64194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58090 - http://secunia.com/adviso
xt - http://www.osvdb.org/64194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58090 - http://secunia.com/advisories/39605 - http://www.exploit-db.com/exploits/12364
CVE ID: CVE-2010-1936 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:13.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58129 - http://secunia.com/advisories/39623 - http://www.exploit-db.com/exploits/12396 - http:/
loud.com/vulnerabilities/58129 - http://secunia.com/advisories/39623 - http://www.exploit-db.com/exploits/12396 - http://packetstormsecurity.org/1004-exploits/opencominterne-lfi.txt
CVE ID: CVE-2010-1937 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-17T03:07:22.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug #3001896. Additional Analyst Notes: - CVE Program Container: References: - http://sblim.cvs.sourceforge.net/viewvc/sblim/sfcb/httpAdapter.c?r1=1.84&r2=1.85 - http://sourceforge.net/tracker/index.php?func=detail&aid=3001896&group_id=128809&atid=712784 - http://secunia.com/advisories/4001
urceforge.net/tracker/index.php?func=detail&aid=3001896&group_id=128809&atid=712784 - http://secunia.com/advisories/40018 - http://www.vupen.com/english/advisories/2010/1312 - http://marc.info/?l=bugtraq&m=127549079109192&w=2
CVE ID: CVE-2010-1938 State: PUBLISHED Published: 2010-05-28T18:00:00 Last Updated: 2024-08-07T02:17:13.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd. Additional Analyst Notes: - CVE Program Container: References: - http://blog.pi3.com.pl/?p=111 - http://securityreason.com/securityalert/7450 - http://www.securityfocus.com/
ferences: - http://blog.pi3.com.pl/?p=111 - http://securityreason.com/securityalert/7450 - http://www.securityfocus.com/bid/40403 - http://site.pi3.com.pl/adv/libopie-adv.txt - http://securitytracker.com/id?1024040 - http://www.debian.org/security/2011/dsa-2281 - http://security.FreeBSD.org/advisories/FreeBSD-SA-10:05.opie.asc - http://secunia.com/advisories/39966 - http://www.exploit-db.com/exploits/12762 - http://securityreason.com/achievement_securityalert/87 - http://securitytracker.com/id?1025709 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932 - http://secunia.com/advisories/39963 - http://secunia.com/advisories/45136
CVE ID: CVE-2010-1939 State: PUBLISHED Published: 2010-05-13T22:00:00 Last Updated: 2024-08-07T02:17:12.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to create a popup window for a crafted HTML document, and then calling the parent window's close method, which triggers improper handling of a deleted window object. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39670 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6748 - http://reviews.cnet.com/8301-13727_7
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6748 - http://reviews.cnet.com/8301-13727_7-20004709-263.html - http://www.vupen.com/english/advisories/2010/1097 - http://www.securityfocus.com/bid/39990 - http://h07.w.interia.pl/Safari.rar - http://www.osvdb.org/64482 - http://securitytracker.com/id?1023958 - http://www.kb.cert.org/vuls/id/943165
CVE ID: CVE-2010-1940 State: PUBLISHED Published: 2010-05-14T20:00:00 Last Updated: 2024-08-07T02:17:14.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39670 - https://exchange.xforce.ibmcloud.com/vulnera
CVE Program Container: References: - http://secunia.com/advisories/39670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58620
CVE ID: CVE-2010-1941 State: PUBLISHED Published: 2010-05-18T16:00:00Z Last Updated: 2024-09-17T04:00:13.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NEC WebSAM DeploymentManager 5.13 and earlier, as used in SigmaSystemCenter 2.1 Update2 and earlier, BladeSystemCenter, ExpressSystemCenter, and VirtualPCCenter 2.2 and earlier, allows remote attackers to cause a denial of service (OS shutdown or restart) via unknown vectors related to Client Service for DPM and crafted packets to port 56010. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN90872372/index.html - http://secunia.com/advisories/39802 - http://os
am Container: References: - http://jvn.jp/en/jp/JVN90872372/index.html - http://secunia.com/advisories/39802 - http://osvdb.org/64700 - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000019.html - http://www.nec.co.jp/security-info/secinfo/nv10-004.html - http://www.securityfocus.com/bid/40196
CVE ID: CVE-2010-1942 State: PUBLISHED Published: 2010-05-18T16:00:00 Last Updated: 2024-08-07T02:17:14.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application Server, and Interstage List Manager, allows attackers to obtain sensitive information or force invalid requests to be processed via unknown vectors related to unspecified invalid requests and settings on the load balancing device. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2010/J
alancing device. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000018.html - http://software.fujitsu.com/jp/security/vulnerabilities/jvn-90248889.html - http://osvdb.org/64703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58634 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-201001e.html - http://www.securityfocus.com/bid/40189 - http://www.vupen.com/english/advisories/2010/1165 - http://secunia.com/advisories/39803 - http://jvn.jp/en/jp/JVN90248889/index.html
CVE ID: CVE-2010-1943 State: PUBLISHED Published: 2010-05-18T16:00:00Z Last Updated: 2024-09-16T18:49:42.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NEC CapsSuite Small Edition PatchMeister 2.0 Update2 and earlier allows remote attackers to cause a denial of service (OS shutdown or restart) via vectors related to Client Service for PTM and crafted packets to port 56015. Additional Analyst Notes: - CVE Program Container: References: - http://www.nec.co.jp/security-info/secinfo/nv10-005.html - http://www.securityfocus.com/bid/40190 - http://www.ipa.go.jp/about/press/20100517_2.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000020.html -
0190 - http://www.ipa.go.jp/about/press/20100517_2.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000020.html - http://www.vupen.com/english/advisories/2010/1166 - http://osvdb.org/64701 - http://secunia.com/advisories/39800 - http://jvn.jp/en/jp/JVN82749282/index.html
CVE ID: CVE-2010-1944 State: PUBLISHED Published: 2010-05-18T18:00:00 Last Updated: 2024-08-07T02:17:14.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation.class.php, (2) courrierautorisation.class.php, (3) droit.class.php, (4) profil.class.php, (5) temp_defunt_sansemplacement.class.php, (6) utils.class.php, (7) cimetiere.class.php, (8) defunt.class.php, (9) emplacement.class.php, (10) tab_emplacement.class.php, (11) temp_emplacement.class.php, (12) voie.cl
funt.class.php, (9) emplacement.class.php, (10) tab_emplacement.class.php, (11) temp_emplacement.class.php, (12) voie.class.php, (13) collectivite.class.php, (14) defunttransfert.class.php, (15) entreprise.class.php, (16) temp_autorisation.class.php, (17) travaux.class.php, (18) zone.class.php, (19) courrier.class.php, (20) dossier.class.php, (21) plans.class.php, (22) temp_defunt.class.php, and (23) utilisateur.class.php in obj/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64238 - http://www.osvdb.org/64231 - http://www.osvdb.org/64223 - http://www.osvdb.org/64237 - http://www.osvdb.org/64228 - http://www.osvdb.org/64230 - http://www.osvdb.org/64244
4223 - http://www.osvdb.org/64237 - http://www.osvdb.org/64228 - http://www.osvdb.org/64230 - http://www.osvdb.org/64244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58267 - http://www.osvdb.org/64239 - http://www.osvdb.org/64225 - http://www.exploit-db.com/exploits/12476 - http://www.osvdb.org/64227 - http://packetstormsecurity.org/1005-exploits/opencimetiere-rfi.txt - http://www.securityfocus.com/bid/39883 - http://www.osvdb.org/64245 - http://www.osvdb.org/64242 - http://www.osvdb.org/64234 - http://www.osvdb.org/64232 - http://secunia.com/advisories/39687 - http://www.osvdb.org/64229 - http://www.osvdb.org/64235 - http://www.osvdb.org/64233 - http://www.osvdb.org/64241 - http:/
tp://www.osvdb.org/64229 - http://www.osvdb.org/64235 - http://www.osvdb.org/64233 - http://www.osvdb.org/64241 - http://www.osvdb.org/64240 - http://www.osvdb.org/64236 - http://www.vupen.com/english/advisories/2010/1050 - http://www.osvdb.org/64226 - http://www.osvdb.org/64243 - http://www.osvdb.org/64224
CVE ID: CVE-2010-1945 State: PUBLISHED Published: 2010-05-18T18:00:00 Last Updated: 2024-08-07T02:17:13.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) action.class.php, (2) architecte.class.php, (3) avis.class.php, (4) bible.class.php, and (5) blocnote.class.php in obj/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64197 - http://www.exploit-db.com/exploits/12366 - http://packetstormsecurity.org/1004-exploits/openfoncier-rfilf
db.org/64197 - http://www.exploit-db.com/exploits/12366 - http://packetstormsecurity.org/1004-exploits/openfoncier-rfilfi.txt - http://secunia.com/advisories/39607 - http://www.osvdb.org/64196 - http://www.osvdb.org/64200 - http://www.osvdb.org/64199 - http://www.osvdb.org/64198
CVE ID: CVE-2010-1946 State: PUBLISHED Published: 2010-05-18T18:00:00 Last Updated: 2024-08-07T02:17:13.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) autorisation_normale.class.php, (2) collectivite.class.php, (3) dossier.class.php, (4) norme_simplifiee.class.php, (5) registre.class.php, (6) autorisation_unique.class.php, (7) demande_avis.class.php, (8) droit.class.php, (9) organisme.class.php, (10) service.class.php, (11) categorie_donnee.class.php, (12) destin
.php, (8) droit.class.php, (9) organisme.class.php, (10) service.class.php, (11) categorie_donnee.class.php, (12) destinataire.class.php, (13) profil.class.php, (14) tabdyn_visu.class.php, (15) categorie_personne.class.php, (16) dispense.class.php, (17) modificatif.class.php, (18) reference.class.php, and (19) utilisateur.class.php in obj/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/63955 - http://www.osvdb.org/63954 - http://www.osvdb.org/63959 - http://www.osvdb.org/63947 - http://www.osvdb.org/63949 - http://www.osvdb.org/63953 - http://www.osvdb.org/63962 - http://www.osvdb.org/63951 - http://www.osvdb.org/63961 - http://www.osvdb.org/63946 - ht
- http://www.osvdb.org/63962 - http://www.osvdb.org/63951 - http://www.osvdb.org/63961 - http://www.osvdb.org/63946 - http://www.osvdb.org/63945 - http://secunia.com/advisories/39534 - http://packetstormsecurity.org/1004-exploits/openregistrecil-rfilfi.txt - http://www.securityfocus.com/bid/39611 - http://www.osvdb.org/63956 - http://www.osvdb.org/63950 - http://www.osvdb.org/63960 - http://www.osvdb.org/63957 - http://www.osvdb.org/63952 - http://www.osvdb.org/63963 - http://www.osvdb.org/63958 - http://www.exploit-db.com/exploits/12313 - http://www.osvdb.org/63948
CVE ID: CVE-2010-1947 State: PUBLISHED Published: 2010-05-18T18:00:00 Last Updated: 2024-08-07T02:17:13.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter. NOTE: this may be related to CVE-2007-2069. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39534 - http://packetstormsecurity.org/1004-exploits/openregistrecil-rfilfi.txt - http://www.securityfocus.com/bid/39611 - http://www.os
acketstormsecurity.org/1004-exploits/openregistrecil-rfilfi.txt - http://www.securityfocus.com/bid/39611 - http://www.osvdb.org/63964 - http://www.exploit-db.com/exploits/12313
CVE ID: CVE-2010-1948 State: PUBLISHED Published: 2010-05-18T18:00:00 Last Updated: 2024-08-07T02:17:12.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12366 - http://www.osvdb.org/64195 - http://packetstormsecurity.org/1004-exploits/openfoncier-rfilfi.txt - http://secunia.com/advisories/39607
CVE ID: CVE-2010-1949 State: PUBLISHED Published: 2010-05-18T19:00:00 Last Updated: 2024-08-07T02:17:14.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39536 - http://www.exploit-db.com/exploits/12305