Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3464 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T09:37:27.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted pointers and lengths that bypass intended ProbeForRead and ProbeForWrite restrictions, aka "AFD Kernel Overwrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6757
ulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45578 - http://www.vupen.com/english/advisories/2008/2817 - http://www.securityfocus.com/archive/1/497375/100/0/threaded - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securityfocus.com/bid/31673 - http://blogs.technet.com/swi/archive/2008/10/14/ms08-066-how-to-correctly-validate-and-capture-user-mode-data.aspx - http://www.securitytracker.com/id?1021053 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5825 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - h
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5825 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45582 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-066 - http://secunia.com/advisories/32261
CVE ID: CVE-2008-3465 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2025-01-17T15:33:45.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter, which would not be properly handled by a third-party application that uses this API for a copy operation, aka "GDI Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
ap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vupen.com/english/advisories/2008/3383 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6062 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-071 - http://www.securitytracker.com/id?1021365 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html
CVE ID: CVE-2008-3466 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T09:37:27.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2810 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=745 - http://ww
.com/english/advisories/2008/2810 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=745 - http://www.securityfocus.com/bid/31620 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://secunia.com/advisories/32233 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-059 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - http://www.securitytracker.com/id?1021043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6075
CVE ID: CVE-2008-3467 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3468 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3469 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3470 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3471 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T09:37:26.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a BIFF file with a malformed record that triggers a user-influenced size calculation, aka "File Format Parsing Vulnerability." Additional Analyst Notes: - C
that triggers a user-influenced size calculation, aka "File Format Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45579 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5750 - http://www.zerodayinitiative.com/advisories/ZDI-08-068/ - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securitytracker.com/id?1021044 - http://www.vupen.com/english/advisories/2008/2808 - http://www.securityfocus.com/bid/31705 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https:
.com/en-us/security-updates/securitybulletins/2008/ms08-057 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45581 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - http://secunia.com/advisories/32211
CVE ID: CVE-2008-3472 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T09:37:26.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "HTML Element Cross-Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-0
.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 - http://www.vupen.com/english/advisories/2008/2809 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12364 - http://www.securitytracker.com/id?1021047 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securityfocus.com/bid/31615 - http://www.securityfocus.com/bid/31654 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45558
CVE ID: CVE-2008-3473 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T09:37:27.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Event Handling Cross-Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45562 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://oval.cis
xchange.xforce.ibmcloud.com/vulnerabilities/45562 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13255 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 - http://www.vupen.com/english/advisories/2008/2809 - http://www.securitytracker.com/id?1021047 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securityfocus.com/bid/31616 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45565
CVE ID: CVE-2008-3474 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2025-01-17T15:21:02.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45854 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://doc
s://exchange.xforce.ibmcloud.com/vulnerabilities/45854 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 - http://www.vupen.com/english/advisories/2008/2809 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13299 - http://www.securitytracker.com/id?1021047 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45565
CVE ID: CVE-2008-3475 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T09:37:27.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
2008/10/internet-explorer-6-componentfrompoint.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45563 - http://www.securityfocus.com/archive/1/497380/100/0/threaded - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 - http://www.vupen.com/english/advisories/2008/2809 - http://www.securitytracker.com/id?1021047 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.zerodayinitiative.com/advisories/ZDI-08-069/ - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://exchange.xforce.ibmclo
ative.com/advisories/ZDI-08-069/ - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45565 - http://www.securityfocus.com/bid/31617
CVE ID: CVE-2008-3476 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T09:37:27.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memory, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Objects Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13344 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybu
13344 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 - http://www.vupen.com/english/advisories/2008/2809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45564 - http://www.securitytracker.com/id?1021047 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securityfocus.com/bid/31618 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45565
CVE ID: CVE-2008-3477 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T09:37:27.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to heap-based buffer overflows, integer overflows, array index errors, and memory corruption, aka "Calendar Object Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence
n Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=746 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securitytracker.com/id?1021044 - http://www.vupen.com/english/advisories/2008/2808 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - http://www.securityfocus.com/bid/31702 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45581 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45566 - https://oval.cisecurity.org/repository/s
s/TA08-288A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45566 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5870 - http://secunia.com/advisories/32211
CVE ID: CVE-2008-3478 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3479 State: PUBLISHED Published: 2008-10-15T00:00:00 Last Updated: 2024-08-07T09:37:27.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45538 - http://sec
p://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45538 - http://secunia.com/advisories/32260 - http://marc.info/?l=bugtraq&m=122479227205998&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45537 - http://www.securitytracker.com/id?1021052 - http://dvlabs.tippingpoint.com/advisory/TPTI-08-07 - http://www.us-cert.gov/cas/techalerts/TA08-288A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5998 - http://www.securityfocus.com/bid/31637 - http://www.vupen.com/english/advisories/2008/2816
CVE ID: CVE-2008-3480 State: PUBLISHED Published: 2008-08-29T17:00:00 Last Updated: 2024-08-07T09:37:27.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Anzio Web Print Object (WePO) ActiveX control 3.2.19 and 3.2.24, as used in Anzio Print Wizard, allows remote attackers to execute arbitrary code via a long mainurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2417 - http://secunia.com/advisories/31554 - http://www.securityfocus.com/bid/30545 - http://www.coresecurity.com/content/anzio-web-print-object-buffer-overflow - http://securityreason.com/securityalert/4197 - h
//www.coresecurity.com/content/anzio-web-print-object-buffer-overflow - http://securityreason.com/securityalert/4197 - https://www.exploit-db.com/exploits/6278 - http://www.securityfocus.com/archive/1/495630/100/0/threaded
CVE ID: CVE-2008-3481 State: PUBLISHED Published: 2008-08-05T19:20:00 Last Updated: 2024-08-07T09:37:27.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4108 - https://www.exploit-db.com/exploits/6178
CVE ID: CVE-2008-3482 State: PUBLISHED Published: 2008-08-05T20:00:00 Last Updated: 2024-08-07T09:37:27.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN33706820/index.html - http://secunia.com/advisories/31304 - http://www.vupen.com/english/advisories/2008/2257/references - https://exchange.xforce.ibmcloud.com/vulnerabilitie
304 - http://www.vupen.com/english/advisories/2008/2257/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/44118 - http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html - http://panasonic.net/pcc/support/netwkcam/support/info_xss.html
CVE ID: CVE-2008-3483 State: PUBLISHED Published: 2008-08-05T20:00:00 Last Updated: 2024-08-07T09:37:27.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrary web script or HTML via error messages in the "/admin.aspx - System Log" page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30429 - http://www.portcullis.co.uk/281.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/42858 - http://secunia.com/advisories/31242 - http://www.screwturn.eu/Wiki.ashx#History_2
CVE ID: CVE-2008-3484 State: PUBLISHED Published: 2008-08-05T21:00:00 Last Updated: 2024-08-07T09:37:27.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30502 - http://securityreason.com/securityalert/4109 - https://www.exploit-db.com/exploits/6187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44166
CVE ID: CVE-2008-3485 State: PUBLISHED Published: 2008-08-06T17:05:00 Last Updated: 2024-08-07T09:37:27.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a malicious icabar.exe placed in the search path. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44490 - http://securityreason.com/securityalert/4110 - http://www.securityfocus.com/bid/30446 - http://www.securityfocus.com/archive/1/494952/100/0/threaded
CVE ID: CVE-2008-3486 State: PUBLISHED Published: 2008-08-06T17:05:00 Last Updated: 2024-08-07T09:37:27.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier, when the charset is utf-8, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang part of serialized data in an _data cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31295 - http://securityreason.com/securityalert/4108 - http://www.securityfocus.com/bid/30480 - https://exchange.xfo
ies/31295 - http://securityreason.com/securityalert/4108 - http://www.securityfocus.com/bid/30480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44133 - https://www.exploit-db.com/exploits/6178
CVE ID: CVE-2008-3487 State: PUBLISHED Published: 2008-08-06T17:05:00 Last Updated: 2024-08-07T09:37:26.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44239 - https://www.exploit-db.com/exploits/6182 - http://securityreason.com/securityalert/4111
CVE ID: CVE-2008-3488 State: PUBLISHED Published: 2008-08-06T17:05:00 Last Updated: 2024-08-07T09:37:27.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Novell iManager before 2.7 SP1 (2.7.1) allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020611 - http://www.vupen.com/english/advisories/2008/2284 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5031820.html - http://secunia.com/advisories/31333 - http://www.securityfocus.com/bid/30497
CVE ID: CVE-2008-3489 State: PUBLISHED Published: 2008-08-06T17:05:00 Last Updated: 2024-08-07T09:37:27.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in checkCookie function in includes/functions.inc.php in PHPX 3.5.16 allows remote attackers to execute arbitrary SQL commands via a PXL cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44240 - http://www.securityfocus.com/bid/30478 - http://securityreason.com/securityalert/4112 - https://www.exploit-db.com/exploits/6176
CVE ID: CVE-2008-3490 State: PUBLISHED Published: 2008-08-06T17:05:00 Last Updated: 2024-08-07T09:37:27.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to execute arbitrary SQL commands via the mail_id parameter in a veiw action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44165 - http://www.securityfocus.com/bid/30503 - http://securityreason.com/securityalert/4113 - https://www.exploit-db.com/exploits/6184 - http://secunia.com/advisories/31346