Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
es: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7482 - http://www.securityfocus.com/bid/32850
CVE ID: CVE-2008-5777 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47344 - https://www.exploit-db.com/exploits/7480 - http://securityreason.com/securityalert/4832 - http://www.securityfocus.com/bid/32846
CVE ID: CVE-2008-5778 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the linkid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33075 - https://www.exploit-db.com/exploits/7489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47377 - http://securityreason.com/securityalert/4852 - http://osvdb.org/50724 - http://www.securityfocus.com/bid/32859
CVE ID: CVE-2008-5779 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33075 - https://www.exploit-db.com/exploits/7474 - http://www.securityfocus.com/bid/32835 - http://securityreason.com/securityalert/4849 - http://osvdb.org/50723
CVE ID: CVE-2008-5780 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing passwords via a direct request for blog.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47359 - https://www.exploit-db.com/exploits/7466 - http://securityreason.com/securityalert/4842
CVE ID: CVE-2008-5781 State: PUBLISHED Published: 2008-12-30T20:00:00 Last Updated: 2024-08-07T11:04:44.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7483 - http://securityreason.com/securityalert/4850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47358 - http://www.securityfocus.com/bid/32851
CVE ID: CVE-2008-5782 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3063 - http://securityreason.com/securityalert/4845 - http://www.securityfocus.com/bid/32221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46494 - https://www.exploit-db.com/exploits/7072
CVE ID: CVE-2008-5783 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3066 - https://www.exploit-db.com/exploits/7069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46481 - http://securityreason.com/securityalert/4843 - http://www.securityfocus.com/bid/32216 - http://secunia.com/advisories/32603
CVE ID: CVE-2008-5784 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46479 - https://www.exploit-db.com/exploits/7063 - http://www.securityfocus.com/bid/32216 - http://www.vupen.com/english/advisories/2008/3071 - http://secunia.com/advisories/32603
CVE ID: CVE-2008-5785 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32214 - http://securityreason.com/securityalert/4846 - http://www.vupen.com/english/advisories/2008/3071 - https://www.exploit-db.com/exploits/7061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46478
CVE ID: CVE-2008-5786 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.infrae.com/newsitems/silva_security_bulletin_08-11-07 - http://www.osvdb.org/49659 - http://www.securityfocus.com/bid/32183 - http://holisticinfosec.org/content/view/91/45/ - https://exchange.x
org/49659 - http://www.securityfocus.com/bid/32183 - http://holisticinfosec.org/content/view/91/45/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/46427 - http://secunia.com/advisories/32585
CVE ID: CVE-2008-5787 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, in conjunction with a show action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32146 - http://securityreason.com/securityalert/4851 - http://www.securityfocus.com/archive/1/498092/100/0/threaded - https://www.exploit-db.com/exploits/7019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46404 - http://secun
d - https://www.exploit-db.com/exploits/7019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46404 - http://secunia.com/advisories/32590
CVE ID: CVE-2008-5788 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32201 - http://securityreason.com/securityalert/4833 - http://secunia.com/advisories/32637 - https://www.exploit-db.com/exploits/7052 - http://www.vupen.com/english/advisories/2008/3076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46475
CVE ID: CVE-2008-5789 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) mosConfig_absolute_path parameter to (a) add_tmsp.php, (b) edit_tmsp.php and (c) tmsp.php in includes/tmsp/; and the (2) GLOBALS[mosConfig_absolute_path] parameter to (d) includes/tmsp/subscription.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32194 - https://exchange.
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46438 - http://securityreason.com/securityalert/4827 - https://www.exploit-db.com/exploits/7040
CVE ID: CVE-2008-5790 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions) component 1.0 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[mosConfig_absolute_path] parameter to (a) add.php and (b) competitions.php in includes/competitions/, and the (2) mosConfig_absolute_path parameter to (c) includes/settings/settings.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7039 - http://www.securityfocus.com/bid/
tes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7039 - http://www.securityfocus.com/bid/32192
CVE ID: CVE-2008-5791 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown impact and attack vectors, related to the (1) bankwire module, (2) cheque module, and other components. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=638105 - http://www.securityfocus.com/bid/32184 - http://secunia.com/advisories/32486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46425 - http://www.prestashop.com/download/changel
visories/32486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46425 - http://www.prestashop.com/download/changelog_1.1.0.1.txt
CVE ID: CVE-2008-5792 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: the researcher also points out the analogous directory traversal issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/index_57.htm - http://www.securityfocus.com/archive/1/498161/100/0/threaded - http://www.securityfocus.com/bid/32205 - http://secunia.com/advisories/32628 - https:/
archive/1/498161/100/0/threaded - http://www.securityfocus.com/bid/32205 - http://secunia.com/advisories/32628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46476 - http://www.vupen.com/english/advisories/2008/3073 - http://securityreason.com/securityalert/4853 - https://www.exploit-db.com/exploits/7059
CVE ID: CVE-2008-5793 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[mosConfig_absolute_path] parameter to (a) install.clickheat.php, (b) Cache.php and (c) Clickheat_Heatmap.php in Recly/Clickheat/, and (d) Recly/common/GlobalVariables.php; and the (2) mosConfig_absolute_path parameter to (e) _main.php and (f) main.php in includes/heatmap, and (g) includes/overview/main.php. Additional An
_path parameter to (e) _main.php and (f) main.php in includes/heatmap, and (g) includes/overview/main.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46439 - http://www.securityfocus.com/bid/32190 - https://www.exploit-db.com/exploits/7038
CVE ID: CVE-2008-5794 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46452 - http://securityreason.com/securityalert/4834 - http://www.securityfocus.com/bid/32158
CVE ID: CVE-2008-5795 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46467 - http://www.securityfocus.com/bid/32228 - http://secunia.com/advisories/32638 - http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/
CVE ID: CVE-2008-5796 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46468 - http://www.securityfocus.com/bid/32228 - http://secunia.com/advisories/32638 - http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/
CVE ID: CVE-2008-5797 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46469 - http://www.securityfocus.com/bid/32230 - http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/
CVE ID: CVE-2008-5798 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CMS Poll system (cms_poll) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46470 - http://www.securityfocus.com/bid/32231 - http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/
CVE ID: CVE-2008-5799 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46471 - http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/ - http://www.securityfocus.com/bid/32237
CVE ID: CVE-2008-5800 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Wir ber uns [sic] (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46472 - http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/ - http://www.securityfocus.com/bid/32237
CVE ID: CVE-2008-5801 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Dictionary (rtgdictionary) extension 0.1.9 and earlier for TYPO3 allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46473 - http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/ - http://www.securityfocus.com/bid/32234
CVE ID: CVE-2008-5802 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7048 - http://www.securityfocus.com/bid/32197 - http://www.vupen.com/english/advisories/2008/3078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46453 - http://secunia.com/advisories/32641
CVE ID: CVE-2008-5803 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka username field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47751 - http://securityreason.com/securityalert/4855 - http://secunia.com/advisories/32641 - https://www.exploit-db.com/exploits/7041 - http://www.securityfocus.com
ert/4855 - http://secunia.com/advisories/32641 - https://www.exploit-db.com/exploits/7041 - http://www.securityfocus.com/bid/32188
CVE ID: CVE-2008-5804 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46485 - http://secunia.com/advisories/32639 - http://www.securityfocus.com/bid/32198 - http://securityreason.com/securityalert/4828
CVE ID: CVE-2008-5805 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46428 - http://www.securityfocus.com/bid/32191 - https://www.exploit-db.com/exploits/7047 - http://www.vupen.com/english/advisories/2008/3079
CVE ID: CVE-2008-5806 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka admin field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48317 - http://securityreason.com/securityalert/4837 - http://secunia.com/advisories/32586 - http://www.securityfocus.com/bid/32161 - https://ww
eason.com/securityalert/4837 - http://secunia.com/advisories/32586 - http://www.securityfocus.com/bid/32161 - https://www.exploit-db.com/exploits/7023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46428
CVE ID: CVE-2008-5807 State: PUBLISHED Published: 2008-12-31T11:00:00 Last Updated: 2024-08-07T11:04:44.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) Testproject Names and (2) Testplan Names in planEdit.php, and possibly (3) Testcaseprefixes in projectview.tpl. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32599 - http://sourceforge.net/project/shownotes.php?release_id=638751 - http://www.securityfocus.com/bid/32173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46431
CVE ID: CVE-2008-5808 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source (MTOS), and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to "application management." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47019 - http://www.securityfocus.com/bid/32604 -
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47019 - http://www.securityfocus.com/bid/32604 - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000067.html - http://secunia.com/advisories/32935 - http://jvn.jp/en/jp/JVN02216739/index.html - http://www.movabletype.jp/blog/_movable_type_423.html
CVE ID: CVE-2008-5809 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T11:04:44.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000083.html - http://www.securityfocus.com/bid/32794 - http://www.futomi.com/library/info/2008/20081212.html - http://jvn.jp/en/jp/
- http://www.securityfocus.com/bid/32794 - http://www.futomi.com/library/info/2008/20081212.html - http://jvn.jp/en/jp/JVN07468800/index.html