Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2847 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 allows remote attackers to execute arbitrary SQL commands via the categori parameter in a pocategorisell action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29799 - https://www.exploit-db.com/exploits/5853 - http://secunia.com/advisories/30722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43203
CVE ID: CVE-2008-2848 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30758 - http://www.securityfocus.com/bid/29830 - http://bugs.developer.mindtouch.com/view.php?id=4200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43189
CVE ID: CVE-2008-2849 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote authenticated users, with create post permissions, to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43168 - http://www.securityfocus.com/bid/29807 - http://drupal.org/node/272191 - http://secunia.com/advisories/30764
CVE ID: CVE-2008-2850 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:15.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified cookies, related to improper use of the Drupal database API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29807 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43169 - http://drupal.org/node/272191 - http://secunia.com/advisories/30764
CVE ID: CVE-2008-2851 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown impact via unspecified vectors related to "parsing of http headers." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=607827 - http://secunia.com/advisories/30759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43187 - http://www.securityfocus.com/bid/29809
CVE ID: CVE-2008-2852 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CGIWrap before 4.1, when an Internet Explorer based browser is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to failure to set the charset in error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29811 - http://cgiwrap.sourceforge.net/changes.html - http://jvn.jp/en/jp/JVN45389864/index.html - http://secunia.com/advisories/30765 - https://exchange.xforce.ibmcloud.com/vul
p://jvn.jp/en/jp/JVN45389864/index.html - http://secunia.com/advisories/30765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43176 - http://sourceforge.net/project/shownotes.php?group_id=8209&release_id=607349
CVE ID: CVE-2008-2853 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute arbitrary SQL commands via the cat_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43194 - http://www.securityfocus.com/bid/29806 - http://secunia.com/advisories/30726 - https://www.exploit-db.com/exploits/5855
CVE ID: CVE-2008-2854 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:15.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[preloc] parameter to (1) modules/core/logger/init.php and (2) AJAX/newscat.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43181 - https://www.exploit-db.com/exploits/5864
CVE ID: CVE-2008-2855 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29818 - https://www.exploit-db.com/exploits/5860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43186
CVE ID: CVE-2008-2856 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:15.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29818 - https://www.exploit-db.com/exploits/5860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43185
CVE ID: CVE-2008-2857 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5821
CVE ID: CVE-2008-2858 State: PUBLISHED Published: 2008-06-25T10:00:00Z Last Updated: 2024-09-16T20:31:37.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the eml parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30690
CVE ID: CVE-2008-2859 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an "imap command." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020335 - http://www.securityfocus.com/bid/29805 - http://www.vupen.com/english/advisories/2008/1874/references - http://secunia.com/advisories/30739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43171 - http://www.netwinsite.c
tp://secunia.com/advisories/30739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43171 - http://www.netwinsite.com/surgemail/help/updates.htm
CVE ID: CVE-2008-2860 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43218 - https://www.exploit-db.com/exploits/5867
CVE ID: CVE-2008-2861 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) button parameters to ansFAQ.asp and the (3) id and (4) txtEmail parameters to login.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3957 - https://www.exploit-db.com/exploits/5859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43191 - http://www.securityfocus.com/bid/298
db.com/exploits/5859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43191 - http://www.securityfocus.com/bid/29812 - http://www.securityfocus.com/archive/1/493473/100/0/threaded - http://secunia.com/advisories/30762
CVE ID: CVE-2008-2862 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to ansFAQ.asp and the (2) template_id parameter to preview.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3957 - https://www.exploit-db.com/exploits/5859 - http://osvdb.org/46461 - http://www.bugreport.ir/?/45 - http://www.securityfocus.com/bid/29812 - https://exchange.xforce.ibmcloud.com/vulnera
1 - http://www.bugreport.ir/?/45 - http://www.securityfocus.com/bid/29812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43190 - http://www.securityfocus.com/archive/1/493473/100/0/threaded - http://secunia.com/advisories/30762
CVE ID: CVE-2008-2863 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3957 - https://www.exploit-db.com/exploits/5859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43193 - http://www.bugreport.ir/?/45 - http://www.secur
oits/5859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43193 - http://www.bugreport.ir/?/45 - http://www.securityfocus.com/bid/29812 - http://www.securityfocus.com/archive/1/493473/100/0/threaded - http://secunia.com/advisories/30762
CVE ID: CVE-2008-2864 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger.asp or (2) common2.asp in cms/include/, which reveals the database path. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3957 - https://www.exploit-db.com/exploits/5859 - http://www.bugreport.ir/?/45 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43192 - http://www.securityfocus.com/archive/1/493473/100/0/threaded
CVE ID: CVE-2008-2865 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a show_article action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29777 - https://www.exploit-db.com/exploits/5842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43147
CVE ID: CVE-2008-2866 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T09:14:14.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticle[ID] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43200 - https://www.exploit-db.com/exploits/5865
CVE ID: CVE-2008-2867 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:14.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43342 - http://www.securityfocus.com/bid/29921 - http://www.vupen.com/english/advisories/2008/1922/references - http://secunia.com/advisories/30793
CVE ID: CVE-2008-2868 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:15.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the iEve parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43325 - http://www.securityfocus.com/bid/29919 - http://secunia.com/advisories/30774 - http://www.securitytracker.com/id?1020358 - http://www.vupen.com/english/advisories/2008/1924 - https://www.exploit-db.com/exploits/5927
CVE ID: CVE-2008-2869 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:14.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30798 - http://www.vupen.com/english/advisories/2008/1921/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43343 - https://www.exploit-db.com/exploits/5930 - http://www.securityfocus.com/bid/29923
CVE ID: CVE-2008-2870 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:14.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the (1) eventID parameter to event_info.php and the (2) userID parameter to list_user.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5925 - http://www.securityfocus.com/bid/29916 - http://www.vupen.com/english/advisories/2008/1925/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43318
CVE ID: CVE-2008-2871 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:14.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitrary web script or HTML via the (1) sitetitle, (2) sitenav, (3) sitemain, and (4) sitealt parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43314
CVE ID: CVE-2008-2872 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:14.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sayfa parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30787 - https://www.exploit-db.com/exploits/5895 - http://www.securityfocus.com/bid/29875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43295
CVE ID: CVE-2008-2873 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:15.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request to Db/urun.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30787 - https://www.exploit-db.com/exploits/5895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43296
CVE ID: CVE-2008-2874 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:15.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjoke_id parameter, a different vector than CVE-2008-1050. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43359 - http://secunia.com/advisories/30810 - https://www.exploit-db.com/exploits/5934 - http://www.vupen.com/english/advisories/2008/1951/references
CVE ID: CVE-2008-2875 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:14.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL commands via the hal parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43361 - https://www.exploit-db.com/exploits/5932 - http://www.securityfocus.com/bid/29930 - http://www.vupen.com/english/advisories/2008/1949/references
CVE ID: CVE-2008-2876 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:14:15.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the zone parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1950/references - http://www.securityfocus.com/archive/1/500380/30/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/43360 - http://www.securityfocus.com/bid/30705 - https://www.exploit-db.com/exploits/5933 - http://www.securityfocus
ies/43360 - http://www.securityfocus.com/bid/30705 - https://www.exploit-db.com/exploits/5933 - http://www.securityfocus.com/archive/1/495503 - http://www.securityfocus.com/bid/29934
CVE ID: CVE-2008-2877 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:21:33.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mod_root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43310 - https://www.exploit-db.com/exploits/5921
CVE ID: CVE-2008-2878 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:21:33.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493472/100/0/threaded - http://secunia.com/advisories/30763 - http://www.bugreport.ir/?/44 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43178 - http://securityreason.com/securi
://www.bugreport.ir/?/44 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43178 - http://securityreason.com/securityalert/3959 - http://www.securityfocus.com/bid/29813
CVE ID: CVE-2008-2879 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:21:33.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a menu. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493568/100/0/threaded - http://securityreason.com/securityalert/3958 - http://secunia.com/advisories/30834 - http://www.securityfocus.com/bid/29884
CVE ID: CVE-2008-2880 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:21:33.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long SRC property value. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27995 - http://www.vupen.com/english/advisories/2008/1946/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43338
CVE ID: CVE-2008-2881 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:21:33.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5924 - http://e-rdc.org/v1/news.php?readmore=101
CVE ID: CVE-2008-2882 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:21:33.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified other impact via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30787 - https://www.exploit-db.com/exploits/5895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43296 - http://securityreason.com/securityalert/3962
CVE ID: CVE-2008-2883 State: PUBLISHED Published: 2008-06-26T17:00:00 Last Updated: 2024-08-07T09:21:33.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroom[jm_dir] parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1130 - http://secunia.com/advisories/30806 - https://www.exploit-db.com/exploits/5876 - http://www.jamroom.net/