Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5905 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:28.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service (crash) via a long string in a FEAT command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52805 - http://osvdb.org/80666 - http://packetstormsecurity.org/files/111296/KnFTPd-1.0.0-Denial-Of-Service.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74441 - http://www.exploit-db.com/exploits/18671
CVE ID: CVE-2012-5906 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GreenBrowser 6.1.0117 and 6.1.0216 allow remote attackers to inject arbitrary web script or HTML via (1) the URI in an about: page or (2) the last visited URL in the LastVisitWriteEn function in function.js. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111252/GreenBrowser-6.1.x-Cross-Site-Scripting.html - http://secunia.com/advisories/48559 - http://lostmon.blogspot.com/2012/03/greenbrowser-about-dialog-xss-and.html
html - http://secunia.com/advisories/48559 - http://lostmon.blogspot.com/2012/03/greenbrowser-about-dialog-xss-and.html - http://www.securityfocus.com/bid/52767 - http://osvdb.org/80636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74474
CVE ID: CVE-2012-5907 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:28.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter in a "3" action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74459 - http://www.securityfocus.com/bid/52766 - http://packetstormsecurity.org/files/111291/TomatoCart-1.2.0-Alpha-2-Local-File-Inclusion.html - http://www.mavitunasecurity.com/local-file-inclusion-vulnerabilit
1/TomatoCart-1.2.0-Alpha-2-Local-File-Inclusion.html - http://www.mavitunasecurity.com/local-file-inclusion-vulnerability-in-tomatocart/ - http://osvdb.org/80689
CVE ID: CVE-2012-5908 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:28.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to inject arbitrary web script or HTML via the conditions[usergroup][] parameter in a search action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74397 - http://osvdb.org/80633 - http://www.securityfocus.com/bid/52743 - http://packetstormsecurity.org/files/111238/MyBB-1.6.6-Cross-Site-Scripting-SQL-Injecti
ww.securityfocus.com/bid/52743 - http://packetstormsecurity.org/files/111238/MyBB-1.6.6-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2012-5909 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:28.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to execute arbitrary SQL commands via the conditions[usergroup][] parameter in a search action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74396 - http://www.securityfocus.com/bid/52743 - http://packetstormsecurity.org/files/111238/MyBB-1.6.6-Cross-Site-Scripting-SQL-Injection.html - http://osvdb.org/80634
CVE ID: CVE-2012-5910 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80671 - http://packetstormsecurity.org/files/111294/B2Evolution-CMS-4.1.3-SQL-Injection.html - http://www.securityfocus.com/bid/52783 - http://vulnerability-lab.com/get_content.php?id=482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74457 - http://b2evolution.net/news/20
com/get_content.php?id=482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74457 - http://b2evolution.net/news/2012/04/06/b2evolution-4-1-4-stable
CVE ID: CVE-2012-5911 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80672 - http://packetstormsecurity.org/files/111294/B2Evolution-CMS-4.1.3-SQL-Injection.html - http://www.securityfocus.com/bid/52783 - http://vulnerability-lab.com/get_content.php?id=482 - http://b2evolution.net/news/2012/04/06/b2evolution-4-1-4-stable - https://exchange.xforce.ibmc
/get_content.php?id=482 - http://b2evolution.net/news/2012/04/06/b2evolution-4-1-4-stable - https://exchange.xforce.ibmcloud.com/vulnerabilities/74458
CVE ID: CVE-2012-5912 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) page.php or (2) single.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/80668 - http://www.exploit-db.com/exploits/18670 - http://packetstormsecurity.org/files/111274/PicoPublisher-2.0-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74402 - http://osvdb.org/80667 - http://www.securityfocus.com/bid/52808
CVE ID: CVE-2012-5913 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirect_to parameter to wp-login.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74475 - http://packetstormsecurity.org/files/111249/WordPress-Integrator-1.32-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/52739 - http://osvdb.org/80628 - http://www.darks
ator-1.32-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/52739 - http://osvdb.org/80628 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-010.txt
CVE ID: CVE-2012-5914 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the sed_import function in system/functions.php in Neocrome Seditio build 160 and 161 allow remote attackers to inject arbitrary web script or HTML via the (1) newmsg or (2) rtext parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html - http://secunia.com/advisories/48637 -
/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html - http://secunia.com/advisories/48637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74463 - http://www.securityfocus.com/bid/52802 - http://www.neocrome.net/page.php?id=2470 - http://osvdb.org/80688
CVE ID: CVE-2012-5915 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Neocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information via direct request to (1) view.php, (2) plugins/contact/lang/contact.en.lang.php, (3) system/lang/en/main.lang.php, (4) system/lang/en/message.lang.php, or (5) system/core/view/view.inc.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html - https://exc
://packetstormsecurity.org/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74464
CVE ID: CVE-2012-5916 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:28.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Neocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct request to (1) docs/new/seditio-createnew-160.sql, (2) docs/upgrade/sedito_convert_to_utf8.optional.sql, or (3) system/install/install.parser.sql. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/74464
CVE ID: CVE-2012-5917 State: PUBLISHED Published: 2012-11-17T21:00:00 Last Updated: 2024-08-06T21:21:27.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: SnackAmp 3.1.3 allows remote attackers to cause a denial of service (application crash) via a long string in an aiff file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18692 - http://www.securityfocus.com/bid/52842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74528 - http://osvdb.org/80805
CVE ID: CVE-2012-5918 State: PUBLISHED Published: 2012-11-19T11:00:00Z Last Updated: 2024-09-16T22:30:54.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18344
CVE ID: CVE-2012-5919 State: PUBLISHED Published: 2012-11-19T11:00:00 Last Updated: 2024-08-06T21:21:27.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) find or (2) replace fields to havalite/findReplace.php; (3) username parameter to havalite/hava_login.php, (4) the Edit Article module, or (5) hava_post.php in the postAuthor module; (6) postId parameter to hava_post.php; (7) userId parameter to hava_user.php; or (8) linkId parameter to hava_link.php. Additional Analyst Notes: - CVE Program Container: References: - http://o
php; or (8) linkId parameter to hava_link.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75082 - http://secunia.com/advisories/48646 - http://osvdb.org/81324 - http://www.vulnerability-lab.com/get_content.php?id=520 - http://packetstormsecurity.org/files/112089/Havalite-CMS-1.0.4-Cross-Site-Scripting.html
CVE ID: CVE-2012-5920 State: PUBLISHED Published: 2012-11-20T00:00:00 Last Updated: 2024-08-06T21:21:27.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as used in JBoss Operations Network (ON) 3.1.1 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2012-4563. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80331 - https://developers.google.com/web-toolkit/release-notes#Release_Notes_2_4_0 -
orce.ibmcloud.com/vulnerabilities/80331 - https://developers.google.com/web-toolkit/release-notes#Release_Notes_2_4_0 - http://www.securityfocus.com/bid/57538 - http://rhn.redhat.com/errata/RHSA-2013-0187.html - http://www.openwall.com/lists/oss-security/2012/10/31/1
CVE ID: CVE-2012-5930 State: PUBLISHED Published: 2012-12-24T18:00:00Z Last Updated: 2024-09-16T17:27:44.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the modifyAccounts method, which allows remote attackers to change the passwords of administrative accounts via a crafted application/x-amf request. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=K6-PmbPjduA~ - https://www.netiq.com/support/kb/doc.php?id=7011385 - http://retrogod.altervista.org/9sg_novell_netiq_i_adv.
PmbPjduA~ - https://www.netiq.com/support/kb/doc.php?id=7011385 - http://retrogod.altervista.org/9sg_novell_netiq_i_adv.htm - http://retrogod.altervista.org/9sg_novell_netiq_i.htm
CVE ID: CVE-2012-5931 State: PUBLISHED Published: 2012-12-24T18:00:00Z Last Updated: 2024-09-16T22:26:00.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=K6-PmbPjduA~ - https://www.netiq.com/support/kb/doc.php?id=7011385 - http://retrogod.altervista.org/9sg_novell_netiq_i_adv.htm
CVE ID: CVE-2012-5932 State: PUBLISHED Published: 2012-12-24T18:00:00Z Last Updated: 2024-09-17T00:42:11.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=K6-PmbPjduA~ - https://www.netiq.com/support/kb/doc.php?id=7011385 - http://retrogod.altervista.org/9sg_novell_netiq_ii.htm - http://retrogod.altervista.org/9sg_novell_netiq_ldapagn
11385 - http://retrogod.altervista.org/9sg_novell_netiq_ii.htm - http://retrogod.altervista.org/9sg_novell_netiq_ldapagnt_adv.htm
CVE ID: CVE-2012-5936 State: PUBLISHED Published: 2013-07-03T10:00:00 Last Updated: 2024-08-06T21:21:27.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80401 - http://www-01.ibm.com/support/docview.wss?uid=swg21627985 - http://www-01.ibm.com/support/docview.wss?uid=swg21640830
CVE ID: CVE-2012-5937 State: PUBLISHED Published: 2013-04-12T19:00:00 Last Updated: 2024-08-06T21:21:28.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80403 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC85189 - http://www.ibm.com/support/docview.wss?uid=swg216
es/80403 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC85189 - http://www.ibm.com/support/docview.wss?uid=swg21633925
CVE ID: CVE-2012-5938 State: PUBLISHED Published: 2013-03-20T14:00:00 Last Updated: 2024-08-06T21:21:28.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to bypass intended access restrictions via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80493 - http://www.ibm.com/support/docview.wss?uid=swg21628844
CVE ID: CVE-2012-5939 State: PUBLISHED Published: 2013-03-06T11:00:00 Last Updated: 2024-08-06T21:21:28.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80494 - http://www-01.ibm.com/support/docview.wss?uid=swg21625935 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391
CVE ID: CVE-2012-5940 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T21:21:27.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza, when SSL is not enabled, allows remote attackers to discover credentials by sniffing the network during the authentication process. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21624568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80535
CVE ID: CVE-2012-5941 State: PUBLISHED Published: 2013-02-20T11:00:00 Last Updated: 2024-08-06T21:21:27.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80536 - http://www-01.ibm.com/support/docview.wss?uid=swg21624568
CVE ID: CVE-2012-5942 State: PUBLISHED Published: 2013-03-06T11:00:00 Last Updated: 2024-08-06T21:21:27.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21625935 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80537
CVE ID: CVE-2012-5943 State: PUBLISHED Published: 2013-03-26T21:00:00 Last Updated: 2024-08-06T21:21:27.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving mail, aka SPR JDOE8ZZS9. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80538 - http://www-01.ibm.com/support/docview.wss?uid=swg21628658
CVE ID: CVE-2012-5945 State: PUBLISHED Published: 2013-04-30T01:00:00 Last Updated: 2024-08-06T21:21:27.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allow remote attackers to execute arbitrary code via a long (1) ComboList or (2) ColComboList property value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80561 - http://www-01.ibm.com/support/docview.wss?uid=swg21635515
CVE ID: CVE-2012-5946 State: PUBLISHED Published: 2013-04-30T01:00:00 Last Updated: 2024-08-06T21:21:27.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via a long TabCaption string. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21635476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80562
CVE ID: CVE-2012-5947 State: PUBLISHED Published: 2013-04-30T01:00:00 Last Updated: 2024-08-06T21:21:28.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21635511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80563
CVE ID: CVE-2012-5948 State: PUBLISHED Published: 2013-04-23T10:00:00 Last Updated: 2024-08-06T21:21:28.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) WebProcess.srv, (2) the html/en/default/ directory, (3) Widget/resource, (4) birt/frameset, or (5) ganttlib/gantt-jws.jnlp. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21628847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80628
CVE ID: CVE-2012-5949 State: PUBLISHED Published: 2013-04-23T10:00:00 Last Updated: 2024-08-06T21:21:27.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject content, and conduct phishing attacks, via vectors involving (1) the html/en/default/ directory, (2) birt/frameset, (3) WebProcess.srv, (4) sqa/html/en/default/reportTemplate/reportTemplateOrderCols.jsp, or (5) a/html/en/default/om2/omObjectFinder.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21628851 - ht
nal Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21628851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80629 - http://www-01.ibm.com/support/docview.wss?uid=swg21628852
CVE ID: CVE-2012-5950 State: PUBLISHED Published: 2013-04-23T10:00:00 Last Updated: 2024-08-06T21:21:28.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to hijack the authentication of arbitrary users for requests that modify data records via vectors involving (1) the html/en/default/ directory or (2) sqa/html/en/default/process/comm/saveProps.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21628849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80630