Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6276 - http://www.ibm.com/support/docview.wss?uid=isg1IZ50447 - http://www.osvdb.org/54617 - http://www.ibm.com/support/docview.wss?uid=isg1IZ50121 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802 - http://www.securityfocus.com/bid/35034 - https://www.exploit-db.com/exploits/9306 - http://securitytracker.com/id?1022261 - http://www.vupen.com/english/advisories/2009/1380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50636 - http://www.ibm.com/support/docview.wss?uid=isg1IZ50517 - http://secunia.com/advisories/35146 - http://www.ibm.com/support/docview.wss?uid=isg1IZ50500 - http://www.ibm.com/s
17 - http://secunia.com/advisories/35146 - http://www.ibm.com/support/docview.wss?uid=isg1IZ50500 - http://www.ibm.com/support/docview.wss?uid=isg1IZ50129 - http://www.ibm.com/support/docview.wss?uid=isg1IZ50139
CVE ID: CVE-2009-1787 State: PUBLISHED Published: 2009-05-26T16:00:00 Last Updated: 2024-08-07T05:27:54.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attackers to bypass authentication and gain administrative access via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35003 - http://www.vupen.com/english/advisories/2009/1365 - http://secunia.com/advisories/35125 - https://www.exploit-db.com/exploits/8710
CVE ID: CVE-2009-1788 State: PUBLISHED Published: 2009-05-26T16:00:00 Last Updated: 2024-08-07T05:27:54.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:132 - http://trapkit.de/advisories/TKADV2009-006.txt - http://www.vupen.com/english/advisories/2009/1348 - http
VSA-2009:132 - http://trapkit.de/advisories/TKADV2009-006.txt - http://www.vupen.com/english/advisories/2009/1348 - http://www.mega-nerd.com/libsndfile/ - http://www.vupen.com/english/advisories/2009/1324 - http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/50827 - http://secunia.com/advisories/35247 - http://www.debian.org/security/2009/dsa-1814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50541 - http://secunia.com/advisories/35076 - http://security.gentoo.org/glsa/glsa-200905-09.xml - http://secunia.com/advisories/35126 - http://www.securityfocus.com/bid/34978 - http://secunia.com/advisories/35443
CVE ID: CVE-2009-1789 State: PUBLISHED Published: 2009-05-26T16:00:00 Last Updated: 2024-08-07T05:27:54.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50547 - http://secunia.com/advisories/35104 - http://osvdb.org/54460 - http://www.securityfocus.com/archive/1/5035
ities/50547 - http://secunia.com/advisories/35104 - http://osvdb.org/54460 - http://www.securityfocus.com/archive/1/503574 - http://www.vupen.com/english/advisories/2009/1340 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html - https://www.exploit-db.com/exploits/8695 - http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup - http://secunia.com/advisories/35690 - http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:126 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778 - http://www.securityfocus.com/bid/34985 - https://www.redhat.com/arc
//bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778 - http://www.securityfocus.com/bid/34985 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html - http://secunia.com/advisories/35158 - http://www.debian.org/security/2009/dsa-1826
CVE ID: CVE-2009-1790 State: PUBLISHED Published: 2009-05-26T16:00:00 Last Updated: 2024-08-07T05:27:54.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before 2.11 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35123 - http://jvn.jp/en/jp/JVN28521500/index.html - http://www.securityfocus.com/bid/34999 - http://osvdb.org/54545 - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090512155247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50579 - http://jvndb.jvn.jp/en/c
log.cgi/permalink/20090512155247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50579 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000028.html
CVE ID: CVE-2009-1791 State: PUBLISHED Published: 2009-05-26T17:00:00 Last Updated: 2024-08-07T05:27:54.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:132 - http://www.mega-nerd.com/libsndfile/ - http://www.vupen.com/english/advisories/2009/1324 - http://www.
=MDVSA-2009:132 - http://www.mega-nerd.com/libsndfile/ - http://www.vupen.com/english/advisories/2009/1324 - http://www.mega-nerd.com/erikd/Blog/CodeHacking/libsndfile/ - http://secunia.com/advisories/35247 - http://www.debian.org/security/2009/dsa-1814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50541 - http://secunia.com/advisories/35076 - http://security.gentoo.org/glsa/glsa-200905-09.xml - http://www.securityfocus.com/bid/34978 - http://secunia.com/advisories/35443
CVE ID: CVE-2009-1792 State: PUBLISHED Published: 2009-05-29T18:00:00 Last Updated: 2024-08-07T05:27:54.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35105 - http://secunia.com/advisories/35256 - http://www.coresecurity.com/content/StoneTrip-S3DPlayers - http://www.securityfocus.com/archive/1/503887/100/0/t
35256 - http://www.coresecurity.com/content/StoneTrip-S3DPlayers - http://www.securityfocus.com/archive/1/503887/100/0/threaded
CVE ID: CVE-2009-1796 State: PUBLISHED Published: 2009-05-26T22:00:00 Last Updated: 2024-08-07T05:27:54.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54705 - http://www.vupen.com/english/advisories/2009/1411 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-256588-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50704 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38
/exchange.xforce.ibmcloud.com/vulnerabilities/50704 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38-1 - http://secunia.com/advisories/35221 - http://www.securitytracker.com/id?1022273 - http://www.securityfocus.com/bid/35082
CVE ID: CVE-2009-1797 State: PUBLISHED Published: 2009-12-28T19:00:00Z Last Updated: 2024-09-17T04:04:00.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to hijack the authentication of (1) administrator or (2) device users for requests that create new administrative users or have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://holisticinfosec.org/content/view/111/45/ - http://nam-en.apc.com/cgi-bi
s: - CVE Program Container: References: - http://holisticinfosec.org/content/view/111/45/ - http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887 - http://www.kb.cert.org/vuls/id/166739 - http://secunia.com/advisories/37744
CVE ID: CVE-2009-1798 State: PUBLISHED Published: 2009-12-28T19:00:00Z Last Updated: 2024-09-17T03:48:35.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the login_username vector for Forms/login1 is already covered by CVE-2009-4406. Additional Analyst Notes: - CVE Program Container: References: - http://holisticinfosec.org/content/view/111/45/ - http://nam-en.apc.com/cgi-bin/nam_en.cf
ogram Container: References: - http://holisticinfosec.org/content/view/111/45/ - http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887 - http://www.kb.cert.org/vuls/id/166739 - http://secunia.com/advisories/37744
CVE ID: CVE-2009-1799 State: PUBLISHED Published: 2009-05-28T14:00:00 Last Updated: 2024-08-07T05:27:54.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1 alpha, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) gallery_category or (2) gallery_show parameter to example.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8636 - http://marc.info/?l=bugtraq&m=124171333011782&w=2 - http://www.securityfocus.com/bid/34875 - https://exchange.xforce.ibmcloud.com/
c.info/?l=bugtraq&m=124171333011782&w=2 - http://www.securityfocus.com/bid/34875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50378
CVE ID: CVE-2009-1800 State: PUBLISHED Published: 2009-05-28T14:00:00Z Last Updated: 2024-09-16T17:19:18.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows remote attackers to execute arbitrary code via a long argument to the CreateChinagames method, as exploited in the wild in April and May 2009. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/34871.html - http://hi.baidu.com/wi4r/blog/item/8b1c06
es: - http://downloads.securityfocus.com/vulnerabilities/exploits/34871.html - http://hi.baidu.com/wi4r/blog/item/8b1c06fb2e3de8819f514671.html - http://www.securityfocus.com/bid/34871 - http://www.cisrt.org/enblog/read.php?245 - http://secunia.com/advisories/35005 - http://bbs.pediy.com/showthread.php?t=87615
CVE ID: CVE-2009-1801 State: PUBLISHED Published: 2009-05-28T14:00:00 Last Updated: 2024-08-07T05:27:54.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to inject arbitrary web script or HTML via the (1) display parameter to reports.php, the (2) order and (3) extdisplay parameters to config.php, and the (4) sort parameter to recordings/index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilitie
on. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50361 - http://osvdb.org/54260 - http://osvdb.org/54261 - http://freepbx.org/trac/ticket/3660 - http://secunia.com/advisories/34772 - http://www.securityfocus.com/bid/34857 - http://osvdb.org/54259
CVE ID: CVE-2009-1802 State: PUBLISHED Published: 2009-05-28T14:00:00Z Last Updated: 2024-09-17T00:26:13.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54262 - http://freepbx.org/trac/ticket/3660 - http://secunia.com/advisories/34772 - http://www.securityfocus.com/bid/34857
CVE ID: CVE-2009-1803 State: PUBLISHED Published: 2009-05-28T14:00:00Z Last Updated: 2024-09-16T22:51:26.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/54263 - http://freepbx.org/trac/ticket/3660 - http://secunia.com/advisories/34772 - http://www.securityfocus.com/bid/34857
CVE ID: CVE-2009-1804 State: PUBLISHED Published: 2009-05-28T14:00:00 Last Updated: 2024-08-07T05:27:54.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34868 - https://www.exploit-db.com/exploits/8635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50373
CVE ID: CVE-2009-1805 State: PUBLISHED Published: 2009-06-01T19:00:00 Last Updated: 2024-08-07T05:27:54.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745, VMware Fusion 2.x before 2.0.2 build 147997, VMware ESXi 3.5, and VMware ESX 3.0.2, 3.0.3, and 3.5, when the Descheduled Time Accounting Service is not running, allows guest OS users on Windows to cause a denial of service via unknown vectors. Additional Analyst Notes: - CV
nning, allows guest OS users on Windows to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35269 - http://www.securityfocus.com/bid/35141 - http://www.vmware.com/security/advisories/VMSA-2009-0007.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6130 - http://www.securityfocus.com/archive/1/503912/100/0/threaded - http://www.vupen.com/english/advisories/2009/1452 - http://www.securitytracker.com/id?1022300
CVE ID: CVE-2009-1806 State: PUBLISHED Published: 2009-05-28T20:14:00 Last Updated: 2024-08-07T05:27:54.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server (VIOS) partitions. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=isg1MB03011 - http://www.securityfocus.com/bid/35113 - https://exc
ences: - http://www-1.ibm.com/support/docview.wss?uid=isg1MB03011 - http://www.securityfocus.com/bid/35113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50910 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4671 - http://www-933.ibm.com/support/fixcentral/firmware/readme?fixid=MH01181
CVE ID: CVE-2009-1807 State: PUBLISHED Published: 2009-05-28T20:14:00 Last Updated: 2024-08-07T05:27:54.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1392 - http://www.cisrt.org/enblog/read.php?245
CVE ID: CVE-2009-1808 State: PUBLISHED Published: 2009-05-28T20:14:00 Last Updated: 2024-08-07T05:27:54.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAPER SystemParametersInfo call with an improperly terminated pvParam argument, followed by an SPI_GETDESKWALLPAPER SystemParametersInfo call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ragestorm.net/blogs/?p=78 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50903 - http://www.securityfocus.com/bid/35120 - http://www.securitytracker.com/id?1022330 - http://secunia.com/advi
ies/50903 - http://www.securityfocus.com/bid/35120 - http://www.securitytracker.com/id?1022330 - http://secunia.com/advisories/35323
CVE ID: CVE-2009-1809 State: PUBLISHED Published: 2009-05-29T16:24:00 Last Updated: 2024-08-07T05:27:54.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the year parameter to modules/kalender.php, (2) the Page parameter in a List action to modules/ereignis.php, (3) the Kontext parameter in a Search action to modules/kategorie.php, or (4) the image parameter to modules/image.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34997 - http://www.vupen.com/english/advisories/2009/1344 - https:
ainer: References: - http://www.securityfocus.com/bid/34997 - http://www.vupen.com/english/advisories/2009/1344 - https://www.exploit-db.com/exploits/8707 - http://secunia.com/advisories/35112
CVE ID: CVE-2009-1810 State: PUBLISHED Published: 2009-05-29T16:24:00 Last Updated: 2024-08-07T05:27:54.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to (2) kategorie.php, (3) medium.php, (4) person.php, or (5) schlagwort.php in modules/, related to classes/class.perform.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34997 - ht
erform.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34997 - http://www.vupen.com/english/advisories/2009/1344 - https://www.exploit-db.com/exploits/8707 - http://www.collector.ch/drupal5/?q=node/39 - http://secunia.com/advisories/35111
CVE ID: CVE-2009-1811 State: PUBLISHED Published: 2009-05-29T16:24:00 Last Updated: 2024-08-07T05:27:54.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HTML via (1) the Page parameter in a List action to modules/ereignis.php, (2) the Kontext parameter in a Search action to modules/kategorie.php, (3) the image parameter to modules/image.php, or (4) the ID parameter in a Detail action to modules/sitzung.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35136 - http://www.vupen.com/english/advi
st Notes: - CVE Program Container: References: - http://secunia.com/advisories/35136 - http://www.vupen.com/english/advisories/2009/1345 - https://www.exploit-db.com/exploits/8708 - http://www.securityfocus.com/bid/34998
CVE ID: CVE-2009-1812 State: PUBLISHED Published: 2009-05-29T16:24:00 Last Updated: 2024-08-07T05:27:54.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to (2) kategorie.php, (3) budget.php, (4) zahlung.php, or (5) adresse.php in modules/, related to classes/class.perform.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advi
es/class.perform.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1345 - https://www.exploit-db.com/exploits/8708 - http://secunia.com/advisories/35110 - http://www.collector.ch/drupal5/?q=node/39 - http://www.securityfocus.com/bid/34998
CVE ID: CVE-2009-1813 State: PUBLISHED Published: 2009-05-29T16:24:00 Last Updated: 2024-08-07T05:27:54.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via (1) the uNev parameter (aka the username field) or (2) the uJelszo parameter (aka the Password field). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1327 - https://www.exploit-db.com/exploits/8683 - http://osvdb.org/54475 - http://www.securityfocus.com/bid/34970 - http://secunia.com/advisories/35088 - https://exchange.xforce.
svdb.org/54475 - http://www.securityfocus.com/bid/34970 - http://secunia.com/advisories/35088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50552
CVE ID: CVE-2009-1814 State: PUBLISHED Published: 2009-05-29T16:24:00 Last Updated: 2024-08-07T05:27:54.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1342 - https://www.exploit-db.com/exploits/8706 - http://www.securityfocus.com/bid/34996 - http://secunia.com/advisories/18269