Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6408 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45367 - http://www.securityfocus.com/bid/31348 - https://www.exploit-db.com/exploits/6547
CVE ID: CVE-2008-6409 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a brain action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45368 - https://www.exploit-db.com/exploits/6547
CVE ID: CVE-2008-6410 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the show parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6543 - http://secunia.com/advisories/31706 - http://www.securityfocus.com/bid/31348
CVE ID: CVE-2008-6411 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the login cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31270 - https://www.exploit-db.com/exploits/6500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45300
CVE ID: CVE-2008-6412 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows "low privileged" users to gain administrator privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31983 - http://www.vupen.com/english/advisories/2008/2662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45312 - http://www.securitytracker.com/id?1020910 - http://www.securityfocus.com/bid/31328 - http://dialog.vignette.com/hm?g=1.2jds7.bky8.
.securitytracker.com/id?1020910 - http://www.securityfocus.com/bid/31328 - http://dialog.vignette.com/hm?g=1.2jds7.bky8.rs.0.27gqh.htk8&h=1
CVE ID: CVE-2008-6413 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Answers module 5.x-1.x-dev and possibly other 5.x versions, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a Simple Answer to a question. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31146 - http://drupal.org/node/310223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45112 - http://www.vupen.com/english/advisories/2008/2620 - http://seclists.org/fulldisclosure/2008/Sep/0202.html
CVE ID: CVE-2008-6414 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the item_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31362 - https://www.exploit-db.com/exploits/6550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45399
CVE ID: CVE-2008-6415 State: PUBLISHED Published: 2009-03-06T11:00:00 Last Updated: 2024-08-07T11:27:35.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in YoungZSoft CCProxy 6.5 might allow remote attackers to execute arbitrary code via a CONNECTION request with a long hostname. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45304 - http://www.securitytracker.com/id?1020902 - http://jbrownsec.blogspot.com/2008/09/ccproxy-near-stealth-patching.html - http://secunia.com/advisories/31997 - http://www.securityfocus.com/bid/31416
CVE ID: CVE-2008-6416 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "internal pages." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45870 - http://www.greensql.net/node/70 - http://secunia.com/advisories/30475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42771
CVE ID: CVE-2008-6417 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42773 - http://www.greensql.net/node/70 - http://secunia.com/advisories/30475 - http://osvdb.org/45871
CVE ID: CVE-2008-6418 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the info_hash parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30480 - http://www.securityfocus.com/archive/1/492878/100/0/threaded - http://sourceforge.net/project/shownotes.php?group_id=98584&release_id=545219 - http://osvdb.org/45858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42785 - http://www.securityfocus.com/bid/294
tp://osvdb.org/45858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42785 - http://www.securityfocus.com/bid/29451
CVE ID: CVE-2008-6419 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) sgc_id parameter to display_blog.php, (2) scm_mem_id parameter to social_my_profile_download.php, and the (3) catid parameter to social_forum_subcategories.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45861 - https://www.exploit-db.com/exploits/5701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42777 - http://osvdb.org/45860 - http://ww
t-db.com/exploits/5701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42777 - http://osvdb.org/45860 - http://www.securityfocus.com/bid/29452 - http://osvdb.org/45859 - http://secunia.com/advisories/30462
CVE ID: CVE-2008-6420 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.php, (2) webadmin/download.php, and (3) webadmin/download_file.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45864 - https://www.exploit-db.com/exploits/5711 - http://www.securityfocus.com/bid/34149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42781 - http://osvdb.org/45862 - http://osvdb.org/45863 - http://secunia.com/advisories/30462
CVE ID: CVE-2008-6421 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42780 - http://www.securityfocus.com/bid/29462 - https://www.exploit-db.com/exploits/5707 - http://secunia.com/advisories/30462
CVE ID: CVE-2008-6422 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) weapon.php and (2) map.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29449 - https://www.exploit-db.com/exploits/5699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42770 - http://osvdb.org/45869 - http://secunia.com/advisories/30464 - http://osvdb.org/45868
CVE ID: CVE-2008-6423 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arbitrary local files via a .. (dot dot) in the site_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42768 - http://secunia.com/advisories/30496 - http://www.securityfocus.com/bid/29455 - https://www.exploit-db.com/exploits/5704 - http://osvdb.org/45853
CVE ID: CVE-2008-6424 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. (dot dot). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42796 - http://www.securityfocus.com/bid/29459 - http://vuln.sg/FFFTP196b-en.html - http://osvdb.org/45894 - http://www.vupen.com/english/advisories/2008/1708/references
CVE ID: CVE-2008-6425 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the news_id parameter, a different vector than CVE-2008-2456. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51438 - http://www.comicshout.com/ - http://www.securityfocus.com/bid/29464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42758 - http://www.securityfocus.com/archive/1/492918 - https://www.exploit-db.com/exploits/5713
CVE ID: CVE-2008-6426 State: REJECTED Published: 2008-02-21T00:00:00Z Last Updated: 2024-09-17T01:55:38.531Z Description: No description available.
CVE ID: CVE-2008-6427 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5698 - http://www.vupen.com/english/advisories/2008/1923/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42751 - https://www.exploit-db.com/exploits/5928 - http://www.securityfocus.com/archive/1/492917/100/0/thr
lnerabilities/42751 - https://www.exploit-db.com/exploits/5928 - http://www.securityfocus.com/archive/1/492917/100/0/threaded - http://e-rdc.org/v1/news.php?readmore=91 - http://secunia.com/advisories/30465 - http://osvdb.org/45916
CVE ID: CVE-2008-6428 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42774 - http://secunia.com/advisories/30466 - http://kayalang.org/about/news
CVE ID: CVE-2008-6429 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_request action to index2.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42772 - https://www.exploit-db.com/exploits/5708 - http://osvdb.org/45856 - http://secunia.com/advisories/30493
CVE ID: CVE-2008-6430 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30490 - https://www.exploit-db.com/exploits/5714 - http://www.securityfocus.com/bid/29468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42783 - http://osvdb.org/45852
CVE ID: CVE-2008-6431 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright and (3) verandproname parameters to newtem/footer/bsd01footer.php, and the (4) topads and (5) myplugin parameters to newtem/header/bsd01header.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42590 - http://osvdb.org/45614 - http://osvdb.org/45613 - http://se
https://exchange.xforce.ibmcloud.com/vulnerabilities/42590 - http://osvdb.org/45614 - http://osvdb.org/45613 - http://secunia.com/advisories/30369 - http://www.securityfocus.com/bid/29339 - http://osvdb.org/45612 - http://www.securityfocus.com/archive/1/492449/100/0/threaded
CVE ID: CVE-2008-6432 State: REJECTED Published: 2008-10-31T17:00:00Z Last Updated: 2024-09-17T03:07:13.223Z Description: No description available.
CVE ID: CVE-2008-6433 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29346 - http://osvdb.org/45615 - http://secunia.com/advisories/30367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49224 - http://holisticinfosec.org/content/view/67/45/
CVE ID: CVE-2008-6434 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29346 - http://secunia.com/advisories/30367 - http://osvdb.org/45616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49225 - http://holisticinfosec.org/content/view/67/45/
CVE ID: CVE-2008-6435 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[home], (2) lang[admin_menu], and (3) lang[admin_menu_page_overview] parameters to cms/includes/header.inc.php; and the (4) lang[login_username] and (5) lang[login_password] parameters to cms/includes/login.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492446/100/0/threaded - http://www.securityfocus.com/bid/293
ainer: References: - http://www.securityfocus.com/archive/1/492446/100/0/threaded - http://www.securityfocus.com/bid/29338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42585
CVE ID: CVE-2008-6436 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42595 - http://osvdb.org/45627 - http://www.vupen.com/english/advisories/2008/1628/references - http://www.xerox.com/downloads/usa/en/c/cert_XRX08_004.pdf - http://www.securityfocus.
advisories/2008/1628/references - http://www.xerox.com/downloads/usa/en/c/cert_XRX08_004.pdf - http://www.securityfocus.com/bid/29345
CVE ID: CVE-2008-6437 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to error.php, and the (2) nickname and (3) randomid parameters to part/menu.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42586 - http://www.securityfocus.com/archive/1/492445/100/0/threaded - http://secunia.com/advisories/30372 - http://osvdb.org/45608 - http://osvdb.org/45
com/archive/1/492445/100/0/threaded - http://secunia.com/advisories/30372 - http://osvdb.org/45608 - http://osvdb.org/45607 - http://www.securityfocus.com/bid/29337
CVE ID: CVE-2008-6438 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2008-2455. NOTE: it was later reported that 2.1.4 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2468 - http://secunia.com/advisories/30212 - https://www.exploit-db.com/exploits/5666 - http://www.securityfocus.com/archive/1/492506/
secunia.com/advisories/30212 - https://www.exploit-db.com/exploits/5666 - http://www.securityfocus.com/archive/1/492506/100/0/threaded - https://www.exploit-db.com/exploits/6346 - https://www.exploit-db.com/exploits/6856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42715 - http://www.securityfocus.com/bid/29344 - http://osvdb.org/51408
CVE ID: CVE-2008-6439 State: PUBLISHED Published: 2009-03-06T18:00:00 Last Updated: 2024-08-07T11:27:35.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42596 - http://www.securityfocus.com/bid/29342 - http://www.securityfocus.com/archive/1/492478/100/0/threaded - http://secunia.com/advisories/30366
CVE ID: CVE-2008-6440 State: PUBLISHED Published: 2009-03-06T18:00:00Z Last Updated: 2024-09-16T21:07:47.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (1) /display and (2) /kb URIs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29335 - http://secunia.com/advisories/30344 - http://www.cerb4.com/blog/2008/05/15/important-security-patch-40-build-599/
CVE ID: CVE-2008-6441 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed package (PKG), and possibly (3) the LEVEL parameter in a WELCOME command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/48291 - http://www.securityfocus.com/archive/1/496297/100/0/threaded - http://www.securityfocus.com/bid/31141 - http://archives.neohapsis.com/archives/fulldisclosure
1/496297/100/0/threaded - http://www.securityfocus.com/bid/31141 - http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0190.html - http://www.osvdb.org/48290 - http://secunia.com/advisories/31854 - http://aluigi.altervista.org/adv/unrealcfs-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45090
CVE ID: CVE-2008-6442 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43881 - http://www.securityfocus.com/bid/30223 - http://downloads.securityfocus.com/vulnerabilities/exploi
lnerabilities/43881 - http://www.securityfocus.com/bid/30223 - http://downloads.securityfocus.com/vulnerabilities/exploits/30223.html
CVE ID: CVE-2008-6443 State: PUBLISHED Published: 2009-03-09T14:00:00 Last Updated: 2024-08-07T11:27:35.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30318/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/43944 - http://www.securityfocus.com/bid/30318