Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6056 State: PUBLISHED Published: 2020-01-27T14:01:24 Last Updated: 2024-08-06T17:29:42.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/plugins/nessus/76122
CVE ID: CVE-2013-6058 State: PUBLISHED Published: 2013-11-14T20:00:00 Last Updated: 2024-08-06T17:29:43.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to blog-by-cat/. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0026.html - http://packetstormsecurity.com/files/123929 - https://www.htbridge.com/advisory/HTB23177 - http://www.securityfocus.com/bid/62937 - http://www.exploit-db.com/exploits/29514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88581
CVE ID: CVE-2013-6074 State: PUBLISHED Published: 2013-11-19T15:00:00 Last Updated: 2024-08-06T17:29:42.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14 allows remote attackers to inject arbitrary web script or HTML via an attached SVG file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88609 - https://forum.open-xchange.com/showthread.php?8059-Open-Xchange-releases-Security-Patch-2013-10-21-for-v7-2-2-and-v7-4-0 - http://osvdb.org/99487 - http://archives.neohapsis.com/archives/bugtr
-Security-Patch-2013-10-21-for-v7-2-2-and-v7-4-0 - http://osvdb.org/99487 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0025.html - http://packetstormsecurity.com/files/123934/Open-Xchange-AppSuite-Script-Insertion.html - http://secunia.com/advisories/55575
CVE ID: CVE-2013-6075 State: PUBLISHED Published: 2013-11-02T18:00:00Z Last Updated: 2024-09-16T22:52:14.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon crash) or (2) remote authenticated users to impersonate arbitrary users and bypass access restrictions via a crafted ID_DER_ASN1_DN ID, related to an "insufficient length check" during identity comparison. Additional Analyst Notes: - CVE Program Container: References: - http://www.strongswan.org/blog/2013/11/01/strongswan-denial-o
onal Analyst Notes: - CVE Program Container: References: - http://www.strongswan.org/blog/2013/11/01/strongswan-denial-of-service-vulnerability-%28cve-2013-6075%29.html - http://download.strongswan.org/security/CVE-2013-6075/strongswan-4.3.3-5.1.0_id_dn_match.patch - http://www.debian.org/security/2012/dsa-2789
CVE ID: CVE-2013-6076 State: PUBLISHED Published: 2013-11-02T18:00:00Z Last Updated: 2024-09-16T19:46:38.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.strongswan.org/blog/2013/11/01/strongswan-denial-of-service-vulnerability-%28cve-2013-6076%29.html
CVE ID: CVE-2013-6077 State: PUBLISHED Published: 2013-11-05T18:00:00Z Last Updated: 2024-09-17T03:07:47.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX138627 - http://osvdb.org/98890
CVE ID: CVE-2013-6078 State: PUBLISHED Published: 2014-06-17T15:00:00 Last Updated: 2024-08-06T17:29:42.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of EMC RSA BSAFE Toolkits and RSA Data Protection Manager (DPM) 20130918 uses the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging unspecified "security concerns," aka the ESA-2013-068 issue. NOTE: this issue has been SPLIT from CVE-2007-6755 because the vendor announcement did not state a specific technical rationale for a change in the algorithm; thus, CV
755 because the vendor announcement did not state a specific technical rationale for a change in the algorithm; thus, CVE cannot reach a conclusion that a CVE-2007-6755 concern was the reason, or one of the reasons, for this change. Additional Analyst Notes: - CVE Program Container: References: - http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/ - http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html - http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect - http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/
CVE ID: CVE-2013-6079 State: PUBLISHED Published: 2013-10-11T22:00:00Z Last Updated: 2024-09-16T18:59:38.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in the (1) registration code field in the activate license window or the (2) HKLM\SOFTWARE\MostGear\EasyLanFolderShare_V1\License registry key. NOTE: it is not clear from the original report whether this issue crosses privilege boundaries. If not, then it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: Refere
ege boundaries. If not, then it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122677 - http://www.exploit-db.com/exploits/26214 - http://osvdb.org/show/osvdb/94390 - http://www.exploit-db.com/exploits/27316
CVE ID: CVE-2013-6080 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6081 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6082 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6083 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6084 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6085 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6086 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6087 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6088 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6089 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6090 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6091 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6092 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6093 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6094 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6095 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6096 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6097 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6098 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6099 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6100 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6101 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6102 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6103 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6104 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6111 State: PUBLISHED Published: 2013-11-02T21:00:00 Last Updated: 2024-08-06T17:29:43.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.x, 1.0.22.7, 1.1.x, 1.24.1, 1.3.25.1 through 1.3.25.4, 1.4.26.1 through 1.4.26.4, 1.5.27.1 through 1.5.27.3, and 1.6.29.1 through 1.6.29.6 for the Apache HTTP Server allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55429 - http://osvdb.org/99081 - https://groups.google.com/d/msg/mod-pagespeed-announce/oo015UHRxMc/JcAuf1hE8L8J
isories/55429 - http://osvdb.org/99081 - https://groups.google.com/d/msg/mod-pagespeed-announce/oo015UHRxMc/JcAuf1hE8L8J - http://www.securitytracker.com/id/1029262
CVE ID: CVE-2013-6114 State: PUBLISHED Published: 2013-11-04T11:00:00 Last Updated: 2024-08-06T17:29:43.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service (application crash) via a (1) large or (2) small value in the subview attribute of a viewer element in a .motn file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/28811/ - http://support.apple.com/kb/HT6041
CVE ID: CVE-2013-6117 State: PUBLISHED Published: 2014-07-11T19:00:00 Last Updated: 2024-08-06T17:29:42.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2013/Nov/62 - http://www.osvdb.org/99783 - http://packetstormsecurity.com/files/124022/Dahua-DVR-Authentication-Bypass.html - http://www.exploit-db.com/exploits/29673 - http://blog.depthsecu
com/files/124022/Dahua-DVR-Authentication-Bypass.html - http://www.exploit-db.com/exploits/29673 - http://blog.depthsecurity.com/2013/11/dahua-dvr-authentication-bypass-cve.html
CVE ID: CVE-2013-6122 State: PUBLISHED Published: 2013-11-12T01:00:00Z Last Updated: 2024-09-16T19:25:24.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly synchronize updates to a global variable, which allows local users to bypass intended access restrictions or cause a denial of service (memory corruption) via crafted arguments to the procfs write handler. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/08/1 - ht
CVE ID: CVE-2013-6123 State: PUBLISHED Published: 2014-01-14T02:00:00 Last Updated: 2024-08-06T17:29:42.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node access, related to the (1) msm_ctrl_cmd_done, (2) msm_ioctl_server, and (3) msm_server_send_ctrl functions. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/ou
itional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/out-bounds-array-access-camera-driver-cve-2013-6123 - https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=60e4af06161d91d5aeaa04c7d6e9f4345a6acdd4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90505 - https://www.codeaurora.org/cgit/quic/la//kernel/msm/commit/?id=7beb04ea945a7178e61d935918d3cb152996b558
CVE ID: CVE-2013-6124 State: PUBLISHED Published: 2014-08-31T10:00:00 Last Updated: 2024-08-06T17:29:43.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a (1) chown or (2) chmod command, as demonstrated by changing the permissions of an arbitrary file via an attack on the sensor-settings file. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/insecure-owner-permission-changes-init-shell-scripts-cve-2013-6124
CVE ID: CVE-2013-6125 State: REJECTED Published: 2015-01-05T02:00:00 Last Updated: 2015-01-05T01:57:00 Description: No description available.
CVE ID: CVE-2013-6126 State: REJECTED Published: 2015-01-05T02:00:00 Last Updated: 2015-01-05T01:57:00 Description: No description available.
CVE ID: CVE-2013-6127 State: PUBLISHED Published: 2013-10-25T20:00:00Z Last Updated: 2024-09-17T00:37:21.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict ReplaceDBFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the two pathname arguments, as demonstrated by a directory traversal attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/28084/ - http://ics-cert.us-cert.gov/advisories/ICSA-13-295-
Container: References: - http://www.exploit-db.com/exploits/28084/ - http://ics-cert.us-cert.gov/advisories/ICSA-13-295-01
CVE ID: CVE-2013-6128 State: PUBLISHED Published: 2013-10-25T20:00:00Z Last Updated: 2024-09-16T20:47:34.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict SaveToFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the single pathname argument, as demonstrated by a directory traversal attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/28085/ - http://ics-cert.us-cert.gov/advisories/ICSA-13-295-01
CVE ID: CVE-2013-6129 State: PUBLISHED Published: 2013-10-19T10:00:00Z Last Updated: 2024-09-16T18:17:47.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013. Additional Analyst Notes: - CVE Program Container: References: - http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/3991423-potential-vbulletin-exploit-vbulletin-4-1-vbulletin-5 - http://www.net-security.org/secworld.php?id=15743
CVE ID: CVE-2013-6141 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T17:29:42.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.op5.com/view.php?id=7677
CVE ID: CVE-2013-6142 State: PUBLISHED Published: 2014-01-15T15:00:00 Last Updated: 2024-08-06T17:29:42.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service (resource consumption) via IP packets containing errors that trigger event-journal messages. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-14-014-01
CVE ID: CVE-2013-6143 State: PUBLISHED Published: 2014-01-31T16:00:00 Last Updated: 2024-08-06T17:29:43.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote attackers to cause a denial of service (temporary outage and CPU consumption) via malformed DNP3 traffic. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-14-006-01
CVE ID: CVE-2013-6144 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6145 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6146 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6147 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6148 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6149 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6150 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6151 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6152 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6153 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6154 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6155 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6156 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6157 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6158 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6159 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6160 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6161 State: REJECTED Published: 2015-04-10T19:00:00 Last Updated: 2015-04-10T19:57:01 Description: No description available.
CVE ID: CVE-2013-6162 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T17:29:43.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89807
CVE ID: CVE-2013-6163 State: PUBLISHED Published: 2013-11-14T20:00:00 Last Updated: 2024-08-06T17:29:42.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to view/parameter.php, (2) p1value parameter to view/main.php, or (3) objectClass parameter to view/objectDetail.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/99368 - http://projectorria.org/index.php/menu_download_en/menu_history_en - http://www.securityfocus.com/bid/63539 - http://secunia.com/ad
ectorria.org/index.php/menu_download_en/menu_history_en - http://www.securityfocus.com/bid/63539 - http://secunia.com/advisories/55451 - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0032.html - http://archives.neohapsis.com/archives/bugtraq/2013-11/0021.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/88583 - http://osvdb.org/99369 - http://osvdb.org/99366 - http://packetstormsecurity.com/files/123916
CVE ID: CVE-2013-6164 State: PUBLISHED Published: 2013-11-14T20:00:00 Last Updated: 2024-08-06T17:29:43.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via the objectId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55451 - http://osvdb.org/99367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88584 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0020.html - http://www.securityfocus.com/bid/63538 - http://projectorria.org/index.php/menu_download_en/menu_history_en - htt
html - http://www.securityfocus.com/bid/63538 - http://projectorria.org/index.php/menu_download_en/menu_history_en - http://www.exploit-db.com/exploits/29517 - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0031.html - http://packetstormsecurity.com/files/123915