Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2578 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:59:55.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/3338/ - http://www.securityfocus.com/archive/1/505092/100/0/threaded
CVE ID: CVE-2009-2579 State: PUBLISHED Published: 2009-08-05T19:00:00 Last Updated: 2024-08-07T05:59:55.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in reward_points.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users to execute arbitrary SQL commands via the sort_order parameter in a reward_points.userlog action to index.php, a different vulnerability than CVE-2005-4429.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35936 - http://secunia.com/advisories/36112 - http://www.securityfocus.com/archive/1/505492/100/0/threaded - http://www.bonsai-sec.com/r
ecunia.com/advisories/36112 - http://www.securityfocus.com/archive/1/505492/100/0/threaded - http://www.bonsai-sec.com/research/vulnerabilities/cs-cart_SQL-injection-0100.txt - http://www.cs-cart.com/changelog206.html
CVE ID: CVE-2009-2580 State: REJECTED Published: 2009-07-23T19:00:00Z Last Updated: 2024-09-16T18:08:59.417Z Description: No description available.
CVE ID: CVE-2009-2581 State: PUBLISHED Published: 2009-07-23T19:00:00 Last Updated: 2024-08-07T05:59:55.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0903-exploits/editeurscripts-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/49237
CVE ID: CVE-2009-2582 State: PUBLISHED Published: 2009-07-23T20:00:00 Last Updated: 2024-08-07T05:59:55.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/505187/100/0/threaded - http://www.akamai.com/html/support/security.html - http://www.securityfocus.com/bid/35778 - http://labs.idefense.com/inte
ttp://www.akamai.com/html/support/security.html - http://www.securityfocus.com/bid/35778 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=813 - http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0351.html - http://www.vupen.com/english/advisories/2009/1985 - http://www.securitytracker.com/id?1022592 - http://secunia.com/advisories/35951
CVE ID: CVE-2009-2583 State: PUBLISHED Published: 2009-07-23T20:00:00 Last Updated: 2024-08-07T05:59:55.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the (1) console and (2) self service interfaces. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35779 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55659 - http://secunia.com/advisories/35931 - http://www.vupen.com/english/advisories/2009/1990 - http://www.securitytracker.com/id?1022597 - http://www-01.i
/35931 - http://www.vupen.com/english/advisories/2009/1990 - http://www.securitytracker.com/id?1022597 - http://www-01.ibm.com/support/docview.wss?uid=swg24023826
CVE ID: CVE-2009-2584 State: PUBLISHED Published: 2009-07-23T20:00:00 Last Updated: 2024-08-07T05:59:56.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lkml.org/lkml/2009/7/20/362 - http://www.ubuntu.com/usn/USN-852-1 - http://lkml.org/lkml/2009/7/20/348 - http://grsecurity.net/~
/lkml/2009/7/20/362 - http://www.ubuntu.com/usn/USN-852-1 - http://lkml.org/lkml/2009/7/20/348 - http://grsecurity.net/~spender/exploit_demo.c - https://exchange.xforce.ibmcloud.com/vulnerabilities/51887 - http://www.securityfocus.com/bid/35753 - http://secunia.com/advisories/37105 - http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/
CVE ID: CVE-2009-2585 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:56.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a member cookie in an account editprofile action, a different vector than CVE-2009-1731. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51623 - http://www.exploit-db.com/exploits/9091 - http://www.osvdb.org/55826 - http://secunia.com/advisories/35728
CVE ID: CVE-2009-2586 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:55.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitrary web script or HTML via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51858 - http://secunia.com/advisories/35924 - http://packetstormsecurity.org/0907-exploits/ezarticles-xss.txt
CVE ID: CVE-2009-2587 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:55.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to assets/js/ddcart.php, the (2) prefix parameter to includes/ajax/getstate.php, the search parameter to (3) index.php and (4) search.php, the (5) redirect parameter to login.php, and the (6) product parameter to productdetail.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51877 - http://secunia.com
: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51877 - http://secunia.com/advisories/35925 - http://packetstormsecurity.org/0907-exploits/dragdopcart-xss.txt - http://www.osvdb.org/56070 - http://www.osvdb.org/56065 - http://www.osvdb.org/56067 - http://www.osvdb.org/56069 - http://www.osvdb.org/56066 - http://www.osvdb.org/56071
CVE ID: CVE-2009-2588 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:55.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/hotscriptsclone-xss.txt - http://www.vupen.com/english/advisories/2009/1979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51911 - http://secunia.com/advisories/35892 - http://osvd
09/1979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51911 - http://secunia.com/advisories/35892 - http://osvdb.org/56167 - http://osvdb.org/56168 - http://osvdb.org/56169
CVE ID: CVE-2009-2589 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:57.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) feedback.php, (2) index.php, and (3) lostpassword.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56170 - http://www.vupen.com/english/advisories/2009/1978 - http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt - http://osvdb.org/56171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51912 - http:
loits/hutscript-sqlxss.txt - http://osvdb.org/56171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51912 - http://osvdb.org/56172 - http://secunia.com/advisories/35893
CVE ID: CVE-2009-2590 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:55.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51913 - http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt - http://osvdb.org/56175 - http://secunia.com/advisories/35893
CVE ID: CVE-2009-2591 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:55.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51852 - http://www.securityfocus.com/bid/35744
CVE ID: CVE-2009-2592 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:56.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mes_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51827 - http://www.exploit-db.com/exploits/9197
CVE ID: CVE-2009-2593 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:56.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a details action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35787 - http://www.securityfocus.com/bid/35637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51663 - http://www.osvdb.org/55790 - http://www.exploit-db.com/exploits/9129
CVE ID: CVE-2009-2594 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:56.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter in a details action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51664 - http://www.securityfocus.com/bid/35637 - http://www.exploit-db.com/exploits/9129
CVE ID: CVE-2009-2595 State: PUBLISHED Published: 2009-07-24T16:00:00 Last Updated: 2024-08-07T05:59:55.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a ProductSearch action. Additional Analyst Notes: - CVE Program Container: References: - http://www.censura.info/forums/project.php?issueid=151 - http://www.censura.info/forums/showthread.php?t=969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51665 - http://secunia.com/advisories/35795 - http://www.osvdb.org/55791 - http://www.securityfocus.com
/vulnerabilities/51665 - http://secunia.com/advisories/35795 - http://www.osvdb.org/55791 - http://www.securityfocus.com/bid/35920
CVE ID: CVE-2009-2596 State: PUBLISHED Published: 2009-07-27T14:22:00Z Last Updated: 2024-09-17T01:00:55.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to fad_aupath structure members. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35787 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264428-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-39-1 - http://secunia.com/ad
do?assetkey=1-66-264428-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-39-1 - http://secunia.com/advisories/35980
CVE ID: CVE-2009-2597 State: PUBLISHED Published: 2009-07-27T14:22:00Z Last Updated: 2024-09-17T03:18:16.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service (daemon crash) via a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141248-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-258508-1 - http://secunia.com/advisories/35979
CVE ID: CVE-2009-2598 State: PUBLISHED Published: 2009-07-27T14:22:00 Last Updated: 2024-08-07T05:59:55.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the key parameter in a resetpass action to index.php and (2) remote authenticated users to execute arbitrary SQL commands via the ADD parameter in a mailto action to parents/parents.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503943/100/0/threaded - http://www.exploit-db.com/exploits/8844 - http://secunia.com/advi
ww.securityfocus.com/archive/1/503943/100/0/threaded - http://www.exploit-db.com/exploits/8844 - http://secunia.com/advisories/35304
CVE ID: CVE-2009-2599 State: PUBLISHED Published: 2009-07-27T14:22:00 Last Updated: 2024-08-07T05:59:57.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL commands via the seller parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35287 - http://www.exploit-db.com/exploits/8834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50867
CVE ID: CVE-2009-2600 State: PUBLISHED Published: 2009-07-27T14:22:00 Last Updated: 2024-08-07T05:59:57.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50861
CVE ID: CVE-2009-2601 State: PUBLISHED Published: 2009-07-27T14:22:00 Last Updated: 2024-08-07T05:59:56.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_profile action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35160 - http://www.exploit-db.com/exploits/8847
CVE ID: CVE-2009-2602 State: PUBLISHED Published: 2009-07-27T14:22:00 Last Updated: 2024-08-07T05:59:56.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for admin.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8849 - http://secunia.com/advisories/35312
CVE ID: CVE-2009-2603 State: PUBLISHED Published: 2009-07-27T14:22:00 Last Updated: 2024-08-07T05:59:55.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) tid parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50874 - http://secunia.com/advisories/35300 - http://www.exploit-db.com/exploits/8840
CVE ID: CVE-2009-2604 State: PUBLISHED Published: 2009-07-27T14:22:00 Last Updated: 2024-08-07T05:59:56.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) userid (aka username) and (2) PassWord parameters to admin.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50862 - http://www.exploit-db.com/exploits/8825
CVE ID: CVE-2009-2605 State: PUBLISHED Published: 2009-07-27T14:22:00 Last Updated: 2024-08-07T05:59:57.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary SQL commands via (1) trupuser and (2) truppassword cookies to uploadcp/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35273 - http://www.exploit-db.com/exploits/8831 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50866 - http://osvdb.org/54809
CVE ID: CVE-2009-2606 State: PUBLISHED Published: 2009-07-27T14:22:00 Last Updated: 2024-08-07T05:59:56.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8852 - http://secunia.com/advisories/35317
CVE ID: CVE-2009-2607 State: PUBLISHED Published: 2009-07-27T18:00:00 Last Updated: 2024-08-07T05:59:56.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com_pinboard component for Joomla! allows remote attackers to execute arbitrary SQL commands via the task parameter in a showpic action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51359 - http://www.exploit-db.com/exploits/9017 - http://www.securityfocus.com/bid/35493
CVE ID: CVE-2009-2608 State: PUBLISHED Published: 2009-07-27T18:00:00 Last Updated: 2024-08-07T05:59:56.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35511 - http://secunia.com/advisories/35590 - http://www.securityfocus.com/archive/1/504595/100/0/threaded - http://www.exploit-db.com/exploits/9023
CVE ID: CVE-2009-2609 State: PUBLISHED Published: 2009-07-27T18:00:00 Last Updated: 2024-08-07T05:59:56.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the amoCourse (com_amocourse) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51358 - http://www.exploit-db.com/exploits/9016
CVE ID: CVE-2009-2610 State: PUBLISHED Published: 2009-07-27T18:00:00Z Last Updated: 2024-09-17T04:09:09.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via the title field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35557 - http://drupal.org/node/501360 - http://drupal.org/node/502112 - http://osvdb.org/55326 - http://www.securityfocus.com/bid/35491 - http://drupal.org/node/501356
CVE ID: CVE-2009-2611 State: PUBLISHED Published: 2009-07-27T18:00:00 Last Updated: 2024-08-07T05:59:55.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in infusions/last_seen_users_panel/last_seen_users_panel.php in MyFusion (aka MyF) 6 Beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the settings[locale] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9018
CVE ID: CVE-2009-2612 State: PUBLISHED Published: 2009-07-27T18:00:00Z Last Updated: 2024-09-17T00:11:38.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35614
CVE ID: CVE-2009-2613 State: PUBLISHED Published: 2009-07-27T18:00:00Z Last Updated: 2024-09-16T16:12:41.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) z_loginfailed.asp, (2) z_admin_login.asp, (3) z_forgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35598
CVE ID: CVE-2009-2614 State: PUBLISHED Published: 2009-07-27T18:00:00Z Last Updated: 2024-09-17T00:42:08.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35598