Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4929 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-17T02:52:21.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the firstCode parameter in a helpers action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43415 - http://www.exploit-db.com/exploits/15085
CVE ID: CVE-2010-4930 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41555 - http://osvdb.org/68183 - http://www.securityfocus.com/bid/43377 - http://securityreason.com/securityalert/8455 - http://www.securityfocus.com/archive/1/513890/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulner
yalert/8455 - http://www.securityfocus.com/archive/1/513890/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/61958
CVE ID: CVE-2010-4931 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-16T20:07:27.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder_level parameter. NOTE: this issue has been disputed by a reliable third party Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42456 - http://www.exploit-db.com/exploits/14647 - http://attrition.org/pipermail/vim/2010-August/002391.html
CVE ID: CVE-2010-4932 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-16T19:25:55.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/xss_vulnerability_in_entrans.html - http://secunia.com/advisories/41543
CVE ID: CVE-2010-4933 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43458 - http://www.exploit-db.com/exploits/15091 - http://securityreason.com/securityalert/8457 - http://packetstormsecurity.org/1009-exploits/geeklog138-sql.txt
CVE ID: CVE-2010-4934 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-16T16:48:13.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14637
CVE ID: CVE-2010-4935 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-17T02:05:49.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15126
CVE ID: CVE-2010-4936 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Slide Show (com_slideshow) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1008-exploits/joomlaslideshow-sql.txt - http://securityreason.com/securityalert/8461 - http://www.securityfocus.com/bid/42427
CVE ID: CVE-2010-4937 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) articleid or (2) catid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512975/100/0/threaded - http://adv.salvatorefresta.net/Amblog_1.0_Joomla_Component_Multiple_SQL_Injection_Vulnerabilities-10082010.txt - http://securityreason.com/securityalert/8456 - http://secunia.com/advisories/40932
ction_Vulnerabilities-10082010.txt - http://securityreason.com/securityalert/8456 - http://secunia.com/advisories/40932 - http://www.exploit-db.com/exploits/14596
CVE ID: CVE-2010-4938 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-16T22:56:57.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42455
CVE ID: CVE-2010-4939 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-16T23:40:36.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14639
CVE ID: CVE-2010-4940 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43440 - http://www.exploit-db.com/exploits/15090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61993 - http://packetstormsecurity.org/1009-exploits/wanewsletter-sql.txt - http://securityreason.com/securityalert/8462
CVE ID: CVE-2010-4941 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8463 - http://www.exploit-db.com/exploits/14598 - http://adv.salvatorefresta.net/Teams_1_1028_100809_1711_Joomla_Component_Multiple_Blind_SQL_Injection_Vulnerabilities-10082010.txt - http://secunia.com/advisori
028_100809_1711_Joomla_Component_Multiple_Blind_SQL_Injection_Vulnerabilities-10082010.txt - http://secunia.com/advisories/40933 - http://www.securityfocus.com/archive/1/512974/100/0/threaded
CVE ID: CVE-2010-4942 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62017 - http://packetstormsecurity.org/1009-exploits/exoopportecal-sql.txt - http://securityreason.com/securityalert/8464 - http://www.exploit-db.com/exploits/15110
CVE ID: CVE-2010-4943 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-17T02:52:13.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the class_path parameter to (1) file.php or (2) com_del.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14618
CVE ID: CVE-2010-4944 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62010
CVE ID: CVE-2010-4945 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8465 - http://www.securityfocus.com/bid/33254 - http://packetstormsecurity.org/1008-exploits/joomlacamelcitydb2-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60860 - http://packetstormsecurity.org/0901-exploits/joomlacamel-sq
https://exchange.xforce.ibmcloud.com/vulnerabilities/60860 - http://packetstormsecurity.org/0901-exploits/joomlacamel-sql.txt - http://www.exploit-db.com/exploits/14530
CVE ID: CVE-2010-4946 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-16T21:57:25.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15128
CVE ID: CVE-2010-4947 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-16T20:01:22.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15128
CVE ID: CVE-2010-4948 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-16T19:19:29.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14438
CVE ID: CVE-2010-4949 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML by entering it in an unspecified window. Additional Analyst Notes: - CVE Program Container: References: - http://forum.joomla.org/viewtopic.php?p=2209586 - http://secunia.com/advisories/40751 - http://www.securityfocus.com/bid/41961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60828 - http://www.osvdb.
http://www.securityfocus.com/bid/41961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60828 - http://www.osvdb.org/66628
CVE ID: CVE-2010-4950 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-16T18:08:29.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ - http://typo3.org/extensions/repository/view/event/0.3.7/
CVE ID: CVE-2010-4951 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-17T03:23:21.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbox) extension before 1.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ - http://www.securityfocus.com/bid/42373 - http://typo3.org/extensions/repository/view/vx_xajax_shoutbox/1.0.1/
CVE ID: CVE-2010-4952 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ - http://typo3.org/extensions/repository/view/festat/0.2.4/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61056 - http://www.securityfocus.com/bid/42366
CVE ID: CVE-2010-4953 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61057
CVE ID: CVE-2010-4954 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8466 - http://packetstormsecurity.org/1009-exploits/xtcommercegambio-sql.txt - http://www.exploit-db.com/exploits/15039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61899
CVE ID: CVE-2010-4955 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60935 - http://www.exploit-db.com/exploits/14559 - http://securityreason.com/securityalert/8467 - http://packetstormsecurity.org/1008-exploits/apboard-sql.txt
CVE ID: CVE-2010-4956 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ - http://www.securityfocus.com/bid/42369 - http://osvdb.org/67030 - http://typo3.org/extensions/repository/view/ke_questionnaire/2.2.3/ - http://secunia.com/advisories/40950 - https://exchange.xf
typo3.org/extensions/repository/view/ke_questionnaire/2.2.3/ - http://secunia.com/advisories/40950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61043
CVE ID: CVE-2010-4957 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61042 - http://www.securityfocus.com/bid/42369 - http://osvdb.org/67031 - http://typo3.org/extensions/repository/view/ke_questionnaire/2.2.3 - http://secunia.
id/42369 - http://osvdb.org/67031 - http://typo3.org/extensions/repository/view/ke_questionnaire/2.2.3 - http://secunia.com/advisories/40950
CVE ID: CVE-2010-4958 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40902 - http://securityreason.com/securityalert/8468 - http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt - http://www.securityfocus.com/archive/1/512888/100/0/threaded - http://www.vupen.com/english/advisories/2010/2026 - http://www.htbridge.ch/advisory/xss_vulnerability_in_pr
0/threaded - http://www.vupen.com/english/advisories/2010/2026 - http://www.htbridge.ch/advisory/xss_vulnerability_in_prado_portal.html
CVE ID: CVE-2010-4959 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60631 - http://secunia.com/advisories/40705 - http://securityreason.com/securityalert/8469 - http://www.packetstormsecurity.com/1007-exploits/prepodcastportal-sql.txt - http://www.osvdb.org/66511
CVE ID: CVE-2010-4960 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mh_branchenbuch) extension before 0.9.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61054 - http://typo3.org/extensions/repository/view/mh_branchenbuch/0.9.1/ - http://secunia.com/advisories/40951 - http://
054 - http://typo3.org/extensions/repository/view/mh_branchenbuch/0.9.1/ - http://secunia.com/advisories/40951 - http://www.securityfocus.com/bid/42365 - http://osvdb.org/67032
CVE ID: CVE-2010-4961 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61059 - http://www.securityfocus.com/bid/42381 - http://typo3.org/extensions/repository/view/webkitpdf/1.1.4
CVE ID: CVE-2010-4962 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/ - http://typo3.org/extensions/repository/view/webkitpdf/1.1.4/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61058 - http://www.securityfocus.com/bid/42381
CVE ID: CVE-2010-4963 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the order_by parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_bxr.html - http://secunia.com/advisories/40875 - http://www.securityfocus.com/archive/1/512887/100/0/threaded - http://dev.hulihanapplications.com/issues/show/203 - http://securityreason.com/securityalert/8470 - http://packetstormsecurity.org/1008-exploi
ications.com/issues/show/203 - http://securityreason.com/securityalert/8470 - http://packetstormsecurity.org/1008-exploits/bxr-sqlxssxsrf.txt - http://www.vupen.com/english/advisories/2010/2023
CVE ID: CVE-2010-4964 State: PUBLISHED Published: 2011-10-16T18:00:00Z Last Updated: 2024-09-16T17:14:57.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: recorder_test.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/09/10/1 - http://newsoft-tech.blogspot.com/2010/09/d-link-dcs-2121-and-state-of-embedded.html - http://www.openwall.com/lists/oss-security/2011/09/14/4
CVE ID: CVE-2010-4965 State: PUBLISHED Published: 2011-10-16T18:00:00Z Last Updated: 2024-09-17T02:20:45.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: /etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server. Additional Analyst Notes: - CVE Program Container: References: - http://newsoft-tech.blogspot.com/2010/09/d-link-dcs-2121-and-state-of-embedded.html
CVE ID: CVE-2010-4966 State: PUBLISHED Published: 2011-10-21T10:00:00Z Last Updated: 2024-09-16T23:35:58.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action. Additional Analyst Notes: - CVE Program Container: References: - http://1337day.com/exploits/13067