Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://support.apple.com/kb/HT3438 - http://svn.python.org/view?rev=61350&view=rev - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46612 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8564 - http://secunia.com/advisories/35750 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11280 - http://svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/st
svn.python.org/view/python/trunk/Objects/stringobject.c?rev=61350&view=diff&r1=61350&r2=61349&p1=python/trunk/Objects/stringobject.c&p2=/python/trunk/Objects/stringobject.c - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2008-5032 State: PUBLISHED Published: 2008-11-10T16:00:00 Last Updated: 2024-08-07T10:40:17.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/11/05/4 - https://exchange.xforce.ibmcloud.com/vulner
ner: References: - http://www.openwall.com/lists/oss-security/2008/11/05/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46375 - http://www.videolan.org/security/sa0810.html - http://www.securityfocus.com/archive/1/498112/100/0/threaded - http://www.openwall.com/lists/oss-security/2008/11/05/5 - http://www.openwall.com/lists/oss-security/2008/11/10/13 - http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=5f63f1562d43f32331006c2c1a61742de031b84d - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14798 - http://secunia.com/advisories/32569 - http://www.trapkit.de/advisories/TKADV2008-012.txt - http://secunia.com/advisories/33315 - http://www.sec
sories/32569 - http://www.trapkit.de/advisories/TKADV2008-012.txt - http://secunia.com/advisories/33315 - http://www.securityfocus.com/bid/32125 - http://security.gentoo.org/glsa/glsa-200812-24.xml
CVE ID: CVE-2008-5033 State: PUBLISHED Published: 2008-11-10T16:00:00 Last Updated: 2024-08-07T10:40:17.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chip_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2.6.25.19, 2.6.26.x before 2.6.26.7, and 2.6.27.x before 2.6.27.3 allows attackers to cause a denial of service (NULL function pointer dereference and OOPS) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:246 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46544 - ht
ww.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46544 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.7 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.19 - http://secunia.com/advisories/32918 - http://www.ubuntu.com/usn/usn-679-1 - http://www.securityfocus.com/bid/32094 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ba2f67afb02c5302b2898949ed6fc3b3d37dcf1
CVE ID: CVE-2008-5034 State: PUBLISHED Published: 2008-11-10T16:00:00Z Last Updated: 2024-09-17T03:27:52.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"' Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://dev.gentoo.org/~rbu/security/debiantemp/printfilters-ppd - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bug
//dev.gentoo.org/~rbu/security/debiantemp/printfilters-ppd - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496417
CVE ID: CVE-2008-5035 State: PUBLISHED Published: 2008-11-10T16:00:00 Last Updated: 2024-08-07T10:40:17.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote attackers to cause a denial of service (daemon crash or hang) via a packet with an invalid length. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4441 - https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01134 - http://www-1.ibm.com/support/docview.wss?uid=isg1MB0248
om/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01134 - http://www-1.ibm.com/support/docview.wss?uid=isg1MB02485 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4442 - http://www.securityfocus.com/bid/32181 - http://www-1.ibm.com/support/docview.wss?uid=isg1MB02482 - http://www.vupen.com/english/advisories/2008/3051 - https://www14.software.ibm.com/webapp/set2/sas/f/hmc/power6/install/v7.Readme.html#MH01133 - http://secunia.com/advisories/32571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46413
CVE ID: CVE-2008-5036 State: PUBLISHED Published: 2008-11-10T22:00:00 Last Updated: 2024-08-07T10:40:17.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/11/05/4 - http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=e3cef651125701a2e33a8d75b815b3e39681a447 - h
curity/2008/11/05/4 - http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=e3cef651125701a2e33a8d75b815b3e39681a447 - http://www.securityfocus.com/archive/1/498111/100/0/threaded - http://www.videolan.org/security/sa0810.html - https://www.exploit-db.com/exploits/7051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46376 - http://www.trapkit.de/advisories/TKADV2008-011.txt - http://www.openwall.com/lists/oss-security/2008/11/05/5 - http://www.openwall.com/lists/oss-security/2008/11/10/13 - http://secunia.com/advisories/32569 - http://secunia.com/advisories/33315 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14329 - http://www.securityfocus.c
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14329 - http://www.securityfocus.com/bid/32125 - http://security.gentoo.org/glsa/glsa-200812-24.xml
CVE ID: CVE-2008-5037 State: PUBLISHED Published: 2008-11-12T20:18:00Z Last Updated: 2024-09-17T01:15:40.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31966 - http://packetstorm.linuxsecurity.com/0810-exploits/elkagroup-sql.txt - http://secunia.com/advisories/25844
CVE ID: CVE-2008-5038 State: PUBLISHED Published: 2008-11-12T20:18:00 Last Updated: 2024-08-07T10:40:17.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name" requests that cause one thread to operate on memory after it has been freed in another thread, which triggers memory corruption, aka Novell Bug 373852. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell
ry corruption, aka Novell Bug 373852. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3426981 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=748 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html - http://secunia.com/advisories/32395 - http://www.securityfocus.com/bid/31956 - http://osvdb.org/48206 - http://www.securitytracker.com/id?1021117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46138 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html - http://www.vupen.com/english/advisories/2008/2937
CVE ID: CVE-2008-5039 State: PUBLISHED Published: 2008-11-12T20:18:00 Last Updated: 2024-08-07T10:40:17.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via the tid parameter in a team action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31952 - http://securityreason.com/securityalert/4575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46154 - http://www.securityfocus.com/archive/1/497855/100/0/threaded
CVE ID: CVE-2008-5040 State: PUBLISHED Published: 2008-11-12T20:18:00 Last Updated: 2024-08-07T10:40:17.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1) myforum_login and (2) myforum_pass cookies to 1. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4577 - http://www.securityfocus.com/bid/31955 - https://www.exploit-db.com/exploits/6857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46157
CVE ID: CVE-2008-5041 State: PUBLISHED Published: 2008-11-12T21:00:00 Last Updated: 2024-08-07T10:40:17.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sweex RO002 Router with firmware Ts03-072 has "rdc123" as its default password for the "rdc123" account, which makes it easier for remote attackers to obtain access. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46517 - http://www.securityfocus.com/bid/32249 - http://osvdb.org/49865 - http://secunia.com/advisories/32623
CVE ID: CVE-2008-5042 State: PUBLISHED Published: 2008-11-12T21:00:00 Last Updated: 2024-08-07T10:40:17.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46501 - http://www.securityfocus.com/bid/32223 - https://www.exploit-db.com/exploits/7070 - http://securityreason.com/securityalert/4574 - http://secunia.com/advisories/32601 - http://www.vupen.com/english/advisories/2008/3065
CVE ID: CVE-2008-5043 State: PUBLISHED Published: 2008-11-12T23:00:00 Last Updated: 2024-08-07T10:40:16.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via (1) the elementid parameter in a generatedreportresults action to the ReportTree program, (2) the jnlpname parameter to the Launch program, or (3) the :tasklabel parameter to the ReportRequest program, related to the name of a report. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archi
he name of a report. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498168/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46495 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065520.html - http://secunia.com/advisories/32683 - http://securityreason.com/securityalert/4578 - http://www.securityfocus.com/bid/32233 - http://www.vupen.com/english/advisories/2008/3145
CVE ID: CVE-2008-5044 State: PUBLISHED Published: 2008-11-12T23:00:00 Last Updated: 2024-08-07T10:40:17.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46506 - http://www.securityfocus.com/bid/32206 - http://www.securityfocus.com/archive/1/498165/100/0/threaded - http://securityreason.com/securityalert/4576 - http
206 - http://www.securityfocus.com/archive/1/498165/100/0/threaded - http://securityreason.com/securityalert/4576 - http://killprog.com/whk.zip
CVE ID: CVE-2008-5045 State: PUBLISHED Published: 2008-11-13T00:00:00 Last Updated: 2024-08-07T10:40:16.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to cause a denial of service (crash) via a 200 server response that is exactly 1024 characters long. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46319 - http://securityreason.com/securityalert/4583 - https://www.exploit-db.com/exploits/6926 - http://www.securityfocus.com/bid/32080
CVE ID: CVE-2008-5046 State: PUBLISHED Published: 2008-11-13T01:00:00 Last Updated: 2024-08-07T10:40:16.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL commands via the manufacturers_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32165 - https://www.exploit-db.com/exploits/7030 - http://securityreason.com/securityalert/4589 - http://secunia.com/advisories/32613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46416
CVE ID: CVE-2008-5047 State: PUBLISHED Published: 2008-11-13T01:00:00 Last Updated: 2024-08-07T10:40:16.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32195 - http://securityreason.com/securityalert/4580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46454 - https://www.exploit-db.com/exploits/7043 - http://secunia.com/advisories/32646
CVE ID: CVE-2008-5048 State: PUBLISHED Published: 2008-11-13T01:00:00 Last Updated: 2024-08-07T10:40:16.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Atepmon.sys in ISecSoft Anti-Trojan Elite 4.2.1 and earlier, and possibly 4.2.2, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via long inputs to the 0x00222494 IOCTL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46464 - http://www.ntinternals.org/ntiadv0802/ntiadv0802.html - http://www.securityfocus.com/bid/32202
CVE ID: CVE-2008-5049 State: PUBLISHED Published: 2008-11-13T01:00:00 Last Updated: 2024-08-07T10:40:16.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other versions including 3.3.3, allows local users to gain privileges via long inputs to the (1) 0x002224A4, (2) 0x002224C0, and (3) 0x002224CC IOCTL. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7054 - http://securityreason.com/securityalert/4582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46465 - http://secunia.com/advisories/32634 - http://www.ntinterna
https://exchange.xforce.ibmcloud.com/vulnerabilities/46465 - http://secunia.com/advisories/32634 - http://www.ntinternals.org/ntiadv0802/ntiadv0802.html - http://www.securityfocus.com/bid/32202
CVE ID: CVE-2008-5050 State: PUBLISHED Published: 2008-11-13T01:00:00 Last Updated: 2024-08-07T10:40:16.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3085 - http://securityreason.com/securityalert/4579 - http://secunia.com/advisories/33937 - http://www.debian.org/security/2008/dsa
://securityreason.com/securityalert/4579 - http://secunia.com/advisories/33937 - http://www.debian.org/security/2008/dsa-1680 - http://secunia.com/advisories/32765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46462 - http://www.securityfocus.com/bid/32207 - http://secunia.com/advisories/33016 - http://support.apple.com/kb/HT3438 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065530.html - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.securitytracker.com/id?1021159 - http://secunia.com/advisories/32872 - http://security.gentoo.org/glsa/glsa-200812-21.xml - http://www.securityfocus.com/archive/1/498169/100/0/threaded - https
ttp://security.gentoo.org/glsa/glsa-200812-21.xml - http://www.securityfocus.com/archive/1/498169/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html - http://sourceforge.net/project/shownotes.php?release_id=637952&group_id=86638 - http://www.vupen.com/english/advisories/2009/0422 - http://www.ubuntu.com/usn/usn-672-1 - http://secunia.com/advisories/32663 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:229 - http://secunia.com/advisories/33317 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://secunia.com/advisories/32699 - https://www.redhat.com/archives/fedora-package-announce/2008-November/ms
02.html - http://secunia.com/advisories/32699 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html
CVE ID: CVE-2008-5051 State: PUBLISHED Published: 2008-11-13T01:00:00 Last Updated: 2024-08-07T10:40:16.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PostID parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4581 - https://www.exploit-db.com/exploits/7078 - http://www.securityfocus.com/bid/32236 - http://www.securityfocus.com/archive/1/498234/100/0/threaded - http://www.vupen.com/english/advisories/2008/3094
CVE ID: CVE-2008-5052 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3146 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
com/english/advisories/2008/3146 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9449 - http://www.securityfocus.com/bid/32281 - https://bugzilla.mozilla.org/show_bug.cgi?id=454113 - http://www.mozilla.org/security/announce/2008/mfsa2008-52.html - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html - http://www.us-cert.gov/cas/techalerts/TA08-319A.html - http://www.securitytracker.com/id?1021183 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:228 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:235
CVE ID: CVE-2008-5053 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/7096 - http://securityreason.com/securityalert/4584 - http://www.securityfocus.com/bid/32265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46559 - http://osvdb.org/49859 - http://www.vupen.co
om/bid/32265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46559 - http://osvdb.org/49859 - http://www.vupen.com/english/advisories/2008/3119
CVE ID: CVE-2008-5054 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters to customer_login.php and the (3) user_name and (4) user_pass parameters to admin/index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32147 - https://www.exploit-db.com/exploits/7015 - http://secunia.com/advisories/32594
http://www.securityfocus.com/bid/32147 - https://www.exploit-db.com/exploits/7015 - http://secunia.com/advisories/32594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46396
CVE ID: CVE-2008-5055 State: PUBLISHED Published: 2008-11-13T11:00:00 Last Updated: 2024-08-07T10:40:16.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the department_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3125 - http://www.securityfocus.com/bid/32268 - http://activecampaign.com/support/forum/showthread.php?t=4554 - http://secunia.com/advisories/32703 - http://holisticinfosec.org/content/view/93/45/ - http://osvdb.org
ead.php?t=4554 - http://secunia.com/advisories/32703 - http://holisticinfosec.org/content/view/93/45/ - http://osvdb.org/49825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46557