Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
-1790 - http://secunia.com/advisories/35037 - http://www.vupen.com/english/advisories/2009/1077 - http://secunia.com/advisories/35064 - http://www.vupen.com/english/advisories/2009/1066 - http://secunia.com/advisories/34481 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 - http://www.redhat.com/support/errata/RHSA-2009-0431.html - http://www.vupen.com/english/advisories/2009/1065 - http://www.redhat.com/support/errata/RHSA-2009-0430.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.html - http://secunia.com/advisories/35618 - https://bugzilla.redhat.com/show_bug.cgi?id=495887 - http://secunia.com/advisories/35
p://secunia.com/advisories/35618 - https://bugzilla.redhat.com/show_bug.cgi?id=495887 - http://secunia.com/advisories/35065 - http://www.redhat.com/support/errata/RHSA-2009-0480.html - http://poppler.freedesktop.org/releases.html - http://www.securityfocus.com/bid/34568 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - http://www.kb.cert.org/vuls/id/196617 - http://www.vupen.com/english/advisories/2010/1040 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html - http://rhn.redhat.com/errata/RHSA-2009-0458.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html - http://secunia.com/advisories/34991 - http://www.mandriva.c
m/archives/fedora-package-announce/2009-June/msg01291.html - http://secunia.com/advisories/34991 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:101 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:087 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35685 - http://www.vupen.com/english/advisories/2009/1076 - http://secunia.com/advisories/34756 - http://secunia.com/advisories/34291 - http://secunia.com/advisories/34755 - http://secunia.com/advisories/34852 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg0127
suse-security-announce/2009-07/msg00002.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.html - http://secunia.com/advisories/34959 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11323 - http://secunia.com/advisories/34746 - http://www.redhat.com/support/errata/RHSA-2009-0429.html - http://www.securitytracker.com/id?1022073
CVE ID: CVE-2009-0801 State: PUBLISHED Published: 2009-03-04T16:00:00Z Last Updated: 2024-09-17T03:55:01.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33858 - http://www.kb.cert.org/vuls/id/435052
CVE ID: CVE-2009-0802 State: PUBLISHED Published: 2009-03-04T16:00:00Z Last Updated: 2024-09-16T23:05:39.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33858 - http://www.kb.cert.org/vuls/id/43
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33858 - http://www.kb.cert.org/vuls/id/435052
CVE ID: CVE-2009-0803 State: PUBLISHED Published: 2009-03-04T16:00:00Z Last Updated: 2024-09-16T18:59:32.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmoothWall SmoothGuardian, as used in SmoothWall Firewall, NetworkGuardian, and SchoolGuardian 2008, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header. Additional Analyst Notes: - CVE Program Container: R
causes a client to send HTTP requests with a modified Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33858 - http://www.kb.cert.org/vuls/id/435052 - http://www.kb.cert.org/vuls/id/MAPG-7M6SM7
CVE ID: CVE-2009-0804 State: PUBLISHED Published: 2009-03-04T16:00:00Z Last Updated: 2024-09-16T19:40:17.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33858 - http://www.kb.cert.org/vuls/id/4
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33858 - http://www.kb.cert.org/vuls/id/435052 - http://www.kb.cert.org/vuls/id/MAPG-7N9GN8
CVE ID: CVE-2009-0805 State: PUBLISHED Published: 2009-03-04T17:00:00Z Last Updated: 2024-09-16T19:46:38.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://xoops.peak.ne.jp/md/news/index.php?page=article&storyid=476&easiestml_lang=xlang%3Aen - http://xoops.peak.ne.jp/md/news/ - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000013.html - http://secunia.com/advisories/33986 - http://www.securityfocus.com/bid/33896 - ht
contents/2009/JVNDB-2009-000013.html - http://secunia.com/advisories/33986 - http://www.securityfocus.com/bid/33896 - http://jvn.jp/en/jp/JVN91591874/index.html
CVE ID: CVE-2009-0806 State: PUBLISHED Published: 2009-03-04T17:00:00Z Last Updated: 2024-09-17T00:51:31.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=663706 - http://www.securityfocus.com/bid/33897 - http://secunia.com/advisories/34044
CVE ID: CVE-2009-0807 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T04:48:52.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: zFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48866 - https://www.exploit-db.com/exploits/8092
CVE ID: CVE-2009-0808 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T04:48:52.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SimpleCMMS before 0.1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=661656&group_id=245458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48883 - http://www.vupen.com/english/advisories/2009/0490
CVE ID: CVE-2009-0809 State: PUBLISHED Published: 2009-03-04T17:00:00Z Last Updated: 2024-09-16T20:28:01.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34037 - http://www.vupen.com/english/advisories/2009/0525 - http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332 - http://www.securityfocus.com/bi
glish/advisories/2009/0525 - http://www-01.ibm.com/support/docview.wss?uid=swg1HD80332 - http://www.securityfocus.com/bid/33895
CVE ID: CVE-2009-0810 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T04:48:52.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48881 - http://www.securityfocus.com/bid/33875 - https://www.exploit-db.com/exploits/8101 - http://www.vupen.com/english/advisories/2009/0523
CVE ID: CVE-2009-0811 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T04:48:52.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48955 - http://www.securityfocus.com/bid/33920 - http://retrogod.altervista.org/9sg_sopcastia.html - http://www.securityfocus.com/archive/1/501252/100/0/threaded
CVE ID: CVE-2009-0812 State: PUBLISHED Published: 2009-03-04T17:00:00 Last Updated: 2024-08-07T04:48:52.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute arbitrary code via a crafted Intel Hex Code (.hex) file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48970 - http://www.securityfocus.com/archive/1/501300/100/0/threaded - https://www.exploit-d
bmcloud.com/vulnerabilities/48970 - http://www.securityfocus.com/archive/1/501300/100/0/threaded - https://www.exploit-db.com/exploits/8121 - http://www.securityfocus.com/bid/33932 - http://secunia.com/advisories/34021
CVE ID: CVE-2009-0813 State: PUBLISHED Published: 2009-03-05T02:00:00 Last Updated: 2024-08-07T04:48:52.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49028 - http://secunia.com/advisories/34103 - http://www.vupen.com/english/advisorie
xforce.ibmcloud.com/vulnerabilities/49028 - http://secunia.com/advisories/34103 - http://www.vupen.com/english/advisories/2009/0591
CVE ID: CVE-2009-0814 State: PUBLISHED Published: 2009-03-05T02:00:00 Last Updated: 2024-08-07T04:48:52.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/501382/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/49024 - http://www.securityfocus.com/bid/33957
CVE ID: CVE-2009-0815 State: PUBLISHED Published: 2009-03-05T02:00:00 Last Updated: 2024-08-07T04:48:52.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by including the hash in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/02/10/6 - http://www.debian.org/security/2009/dsa-1720 - http://www.securitytracker.com/id?1021710 - http://typo3.org/teams/security/se
//www.debian.org/security/2009/dsa-1720 - http://www.securitytracker.com/id?1021710 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/
CVE ID: CVE-2009-0816 State: PUBLISHED Published: 2009-03-05T02:00:00 Last Updated: 2024-08-07T04:48:52.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/02/10/6 - http://www.debian.org/security/2009/dsa-1720 - http://www.securitytracker.com/id?1021709 - http://typo3.org/teams/security/security-bulletins
/security/2009/dsa-1720 - http://www.securitytracker.com/id?1021709 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/
CVE ID: CVE-2009-0817 State: PUBLISHED Published: 2009-03-05T02:00:00 Last Updated: 2024-08-07T04:48:52.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Protected Node module 5.x before 5.x-1.4 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users with "administer site configuration" permissions to inject arbitrary web script or HTML via the Password page info field, which is not properly handled by the protected_node_enterpassword function in protected_node.module. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/385950 - http://secunia.com/advisories/34060 - https:
tes: - CVE Program Container: References: - http://drupal.org/node/385950 - http://secunia.com/advisories/34060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48980 - http://www.vupen.com/english/advisories/2009/0572 - http://osvdb.org/52300 - http://lampsecurity.org/node/28 - http://drupal.org/node/386606 - http://drupal.org/node/386604
CVE ID: CVE-2009-0818 State: PUBLISHED Published: 2009-03-05T02:00:00 Last Updated: 2024-08-07T04:48:52.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the taxonomy_theme_admin_table_builder function (taxonomy_theme_admin.inc) in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the "administer taxonomy" permission, or the ability to create pages when tagging is enabled, to inject arbitrary web script or HTML via the Vocabulary name (name parameter) to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: Re
: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52285 - http://secunia.com/advisories/34080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48979 - http://www.securityfocus.com/bid/33923 - http://drupal.org/node/386940 - http://drupal.org/node/386942
CVE ID: CVE-2009-0819 State: PUBLISHED Published: 2009-03-05T02:00:00 Last Updated: 2024-08-07T04:48:52.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-32.html - http://dev.mysql.com/doc/refman/6.0/en/news-6-0-10.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49050 - http:
://dev.mysql.com/doc/refman/6.0/en/news-6-0-10.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49050 - http://secunia.com/advisories/34115 - http://www.vupen.com/english/advisories/2009/0594 - http://bugs.mysql.com/bug.php?id=42495 - http://www.securityfocus.com/bid/33972 - http://www.securitytracker.com/id?1021786 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7544
CVE ID: CVE-2009-0820 State: PUBLISHED Published: 2009-03-05T02:00:00Z Last Updated: 2024-09-16T17:24:15.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php. NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132. Additional Analyst Notes: - CVE Program Container: References: - http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328 - http://www.vupen.com/english/advisories/2009/0491 - http://secuni
iewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328 - http://www.vupen.com/english/advisories/2009/0491 - http://secunia.com/advisories/33991 - http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/check.php?r1=318&r2=332 - http://sourceforge.net/project/shownotes.php?release_id=662749
CVE ID: CVE-2009-0821 State: PUBLISHED Published: 2009-03-05T02:00:00Z Last Updated: 2024-09-16T16:17:46.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print function, as demonstrated by a window.print(window.print()) in the onclick attribute of an INPUT element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33969 - http://downloads.securityfocus.com/vulnerabilities/exploits/33969.html
CVE ID: CVE-2009-0824 State: PUBLISHED Published: 2009-03-14T18:00:00 Last Updated: 2024-08-07T04:48:52.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to cause a denial of service (system crash) via a crafted IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34288 - http
IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34288 - http://www.slysoft.com/download/changes_clonedvd.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/49232 - http://secunia.com/advisories/34289 - http://secunia.com/advisories/34269 - http://secunia.com/advisories/34287 - http://www.slysoft.com/download/changes_anydvd.txt - http://en.securitylab.ru/lab/PT-2009-11 - http://www.securityfocus.com/bid/34103 - http://osvdb.org/52679 - http://www.securityfocus.com/archive/1/501713/100/0/threaded
CVE ID: CVE-2009-0825 State: PUBLISHED Published: 2009-03-09T21:00:00 Last Updated: 2024-08-07T04:48:52.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/showfiles.php?group_id=133415 - http://www.securityfocus.com/archive/1/501547/100/0/threaded - http://www.securityfocus.com/bid/34021 - http://sourceforge.net/project/shownotes.php?group_id=133415&release_id=658540 - http://en.securitylab.ru/lab/PT-2009-13 - https://exchange.xforc
oject/shownotes.php?group_id=133415&release_id=658540 - http://en.securitylab.ru/lab/PT-2009-13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49115 - http://secunia.com/advisories/34178
CVE ID: CVE-2009-0826 State: PUBLISHED Published: 2009-03-05T20:00:00 Last Updated: 2024-08-07T04:48:52.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7689 - http://secunia.com/advisories/33384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47799
CVE ID: CVE-2009-0827 State: PUBLISHED Published: 2009-03-05T20:00:00 Last Updated: 2024-08-07T04:48:52.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33378 - http://osvdb.org/51185 - https://www.exploit-db.com/exploits/7690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47797
CVE ID: CVE-2009-0828 State: PUBLISHED Published: 2009-03-05T20:00:00 Last Updated: 2024-08-07T04:48:52.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information, including user credentials, via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7699 - http://www.securityfocus.com/bid/33166 - http://secunia.com/advisories/33420
CVE ID: CVE-2009-0829 State: PUBLISHED Published: 2009-03-05T20:00:00 Last Updated: 2024-08-07T04:48:52.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1) MyBox and (2) selectFavorites parameters to (a) quotes.php and the (3) QuoteName and (4) QuoteText parameters to (b) quotesadd.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33166 - http://secunia.com/advisories/33420
CVE ID: CVE-2009-0830 State: PUBLISHED Published: 2009-03-05T20:00:00 Last Updated: 2024-08-07T04:48:52.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject arbitrary web script or HTML via the (1) QuoteName and (2) QuoteText parameters to quotesadd.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33166 - http://secunia.com/advisories/33420