Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4690 State: PUBLISHED Published: 2008-10-22T17:00:00 Last Updated: 2024-08-07T10:24:20.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929. NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00143.html - http://www.redhat.com/support/errata/RHSA-2008-0965.html - htt
ves/fedora-package-announce/2008-December/msg00143.html - http://www.redhat.com/support/errata/RHSA-2008-0965.html - http://www.openwall.com/lists/oss-security/2008/10/09/2 - http://secunia.com/advisories/32967 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:218 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00066.html - http://secunia.com/advisories/33568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46228 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:217 - http://www.securitytracker.com/id?1021105 - http://secunia.com/advisories/32416 - https://ova
ries?name=MDVSA-2008:217 - http://www.securitytracker.com/id?1021105 - http://secunia.com/advisories/32416 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11204
CVE ID: CVE-2008-4691 State: PUBLISHED Published: 2008-10-22T17:00:00 Last Updated: 2024-08-07T10:24:20.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SQLNLS_UNPADDEDCHARLEN function in the New Compiler (aka Starburst derived compiler) component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service (segmentation violation and trap) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1LI73364 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http://www.vupen.com/english/advisories/2008/2
.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http://www.vupen.com/english/advisories/2008/2893 - http://www-01.ibm.com/support/docview.wss?uid=swg27013892 - http://secunia.com/advisories/32368
CVE ID: CVE-2008-4692 State: PUBLISHED Published: 2008-10-22T17:00:00 Last Updated: 2024-08-07T10:24:20.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46021 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http://www-01.ibm.com/support/docview.ws
ftware.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22306 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22307 - http://secunia.com/advisories/31787 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22287 - http://www.vupen.com/english/advisories/2008/2893 - http://www-01.ibm.com/support/docview.wss?uid=swg27013892 - http://secunia.com/advisories/32368
CVE ID: CVE-2008-4693 State: PUBLISHED Published: 2008-10-22T17:00:00 Last Updated: 2024-08-07T10:24:20.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46022 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28489 - http://
db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28489 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ23915 - http://www.vupen.com/english/advisories/2008/2893 - http://www-01.ibm.com/support/docview.wss?uid=swg27013892 - http://secunia.com/advisories/32368
CVE ID: CVE-2008-4694 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T10:24:20.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a redirect that specifies a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32394 - http://secunia.com/advisories/32538 - http://www.opera.com/docs/changelogs/solaris/960/ - http://www.openwall.com/lists/oss-security/2008/10/22/5 - http://securitytracker.com/id?1021016 - http://www.openwall.com/lists/oss-security/2008/10
s/oss-security/2008/10/22/5 - http://securitytracker.com/id?1021016 - http://www.openwall.com/lists/oss-security/2008/10/21/5 - http://secunia.com/advisories/32177 - http://www.opera.com/docs/changelogs/windows/960/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/45722 - http://www.securityfocus.com/bid/31631 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html - http://www.opera.com/docs/changelogs/linux/960/ - http://www.opera.com/docs/changelogs/mac/960/ - http://www.vupen.com/english/advisories/2008/2765 - http://www.opera.com/support/search/view/901/ - http://www.opera.com/docs/changelogs/freebsd/960/ - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4695 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T10:24:20.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from the cache, leading to applet execution within the local-machine context. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31643 - http://secunia.com/advisories/32394 - http://secunia.com/advisories/32538 - http://www.opera.com/docs/changelogs/solaris/960/ - http://www.openwall.com/
394 - http://secunia.com/advisories/32538 - http://www.opera.com/docs/changelogs/solaris/960/ - http://www.openwall.com/lists/oss-security/2008/10/22/5 - http://securitytracker.com/id?1021017 - http://www.openwall.com/lists/oss-security/2008/10/21/5 - http://secunia.com/advisories/32177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45723 - http://www.opera.com/docs/changelogs/windows/960/ - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html - http://www.opera.com/docs/changelogs/linux/960/ - http://www.opera.com/docs/changelogs/mac/960/ - http://www.vupen.com/english/advisories/2008/2765 - http://www.opera.com/support/search/view/902/ - http://www.opera.com/d
tp://www.vupen.com/english/advisories/2008/2765 - http://www.opera.com/support/search/view/902/ - http://www.opera.com/docs/changelogs/freebsd/960/ - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4696 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T10:24:20.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32394 - http://www.opera.com/docs/changelogs/mac/961/ - http://www.vupen.com/english/advisories/2008/2873 - http://www.openwall.com/lists/oss-security/2
s/changelogs/mac/961/ - http://www.vupen.com/english/advisories/2008/2873 - http://www.openwall.com/lists/oss-security/2008/10/21/6 - http://secunia.com/advisories/32538 - http://secunia.com/advisories/32299 - http://www.opera.com/docs/changelogs/solaris/961/ - http://www.security-assessment.com/files/advisories/2008-10-22_Opera_Stored_Cross_Site_Scripting.pdf - http://www.openwall.com/lists/oss-security/2008/10/22/5 - http://www.securityfocus.com/bid/31869 - http://www.opera.com/docs/changelogs/windows/961/ - https://www.exploit-db.com/exploits/6801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46003 - http://www.opera.com/docs/changelogs/linux/961/ - http://lists.opensuse.org/open
ce.ibmcloud.com/vulnerabilities/46003 - http://www.opera.com/docs/changelogs/linux/961/ - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html - http://www.opera.com/support/search/view/903/ - http://securityreason.com/securityalert/4504 - http://www.opera.com/docs/changelogs/freebsd/961/ - http://www.securityfocus.com/archive/1/497646/100/0/threaded - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4697 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T10:24:21.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32394 - http://www.opera.com/docs/changelogs/mac/961/ - http://www.vupen.com/english/advisories/2008/2873 - http://www.openwall.com/lists/oss-security/2008/10/21/6 - http
61/ - http://www.vupen.com/english/advisories/2008/2873 - http://www.openwall.com/lists/oss-security/2008/10/21/6 - http://secunia.com/advisories/32538 - http://secunia.com/advisories/32299 - http://www.opera.com/docs/changelogs/solaris/961/ - http://www.openwall.com/lists/oss-security/2008/10/22/5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46004 - http://www.opera.com/docs/changelogs/windows/961/ - http://www.opera.com/docs/changelogs/linux/961/ - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html - http://www.opera.com/docs/changelogs/freebsd/961/ - http://www.opera.com/support/search/view/904/ - http://www.securityfocus.com/bid/31842 - http://security.g
reebsd/961/ - http://www.opera.com/support/search/view/904/ - http://www.securityfocus.com/bid/31842 - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4698 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T10:24:20.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32394 - http://www.opera.com/docs/changelogs/mac/961/ - http://www.vupen.com/english/advisories/2008/2873 - http://www.openwall.com/lists/oss-security/2008/10/21/6 - http://www.opera.com/support/search/view/905/ - http://secunia.com/advisori
enwall.com/lists/oss-security/2008/10/21/6 - http://www.opera.com/support/search/view/905/ - http://secunia.com/advisories/32538 - http://secunia.com/advisories/32299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46005 - http://www.opera.com/docs/changelogs/solaris/961/ - http://www.openwall.com/lists/oss-security/2008/10/22/5 - http://www.opera.com/docs/changelogs/windows/961/ - http://www.opera.com/docs/changelogs/linux/961/ - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html - http://www.opera.com/docs/changelogs/freebsd/961/ - http://www.securityfocus.com/bid/31842 - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4699 State: PUBLISHED Published: 2008-10-22T21:00:00 Last Updated: 2024-08-07T10:24:20.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45009 - http://secunia.com/advisories/31809 - http://www.securitytracker.com/id?1020842 - http://jbrownsec.blogspot.com/2008/09/peachtree-accounting-is-not-safe.html - http://s
.securitytracker.com/id?1020842 - http://jbrownsec.blogspot.com/2008/09/peachtree-accounting-is-not-safe.html - http://securityreason.com/securityalert/4471 - http://www.securityfocus.com/bid/31096
CVE ID: CVE-2008-4700 State: PUBLISHED Published: 2008-10-22T21:00:00 Last Updated: 2024-08-07T10:24:20.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the libera_staff_pass cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4472 - http://secunia.com/advisories/31811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45011 - http://www.securityfocus.com/bid/31102 - https://www.exploit-db.com/exploits/6416
CVE ID: CVE-2008-4701 State: PUBLISHED Published: 2008-10-22T21:00:00 Last Updated: 2024-08-07T10:24:20.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the libera_staff_user cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45011 - http://www.secur
s: - http://secunia.com/advisories/31811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45011 - http://www.securityfocus.com/bid/31102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46071
CVE ID: CVE-2008-4702 State: PUBLISHED Published: 2008-10-22T21:00:00 Last Updated: 2024-08-07T10:24:21.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) user[language] and (2) user[template] parameters to (a) init.inc.php, and (b) the user[language] parameter to isadmin.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45060 - http://securityreason.com/securityalert/4419 - https://www.exploit-db.com/exploits/6425
CVE ID: CVE-2008-4703 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41806 - http://www.securityfocus.com/bid/28778 - https://www.exploit-db.com/exploits/5446
CVE ID: CVE-2008-4704 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:21.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45859 - https://www.exploit-db.com/exploits/6751 - http://securityreason.com/securityalert/4473
CVE ID: CVE-2008-4705 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in success_story.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45867 - https://www.exploit-db.com/exploits/6754 - http://securityreason.com/securityalert/4477 - http://secunia.com/advisories/32268
CVE ID: CVE-2008-4706 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL commands via the mapid parameter in a showdetails action to (1) vbgooglemaphse.php and (2) mapa.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32054 - https://www.exploit-db.com/exploits/6593 - http://securityreason.com/securityalert/4480 - http://www.securityfocus.com/bid/31453
CVE ID: CVE-2008-4707 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized directories via a .. (dot dot) in the lien_2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45497 - http://securityreason.com/securityalert/4493 - https://www.exploit-db.com/exploits/6617
CVE ID: CVE-2008-4708 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admin_session cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45498 - http://securityreason.com/securityalert/4495 - http://www.securityfocus.com/bid/31462
CVE ID: CVE-2008-4709 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news_read.php in Pilot Group (PG) eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31455 - https://www.exploit-db.com/exploits/6613 - http://secunia.com/advisories/31969 - http://securityreason.com/securityalert/4496
CVE ID: CVE-2008-4710 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45405 - http://drupal.org/node/312923
CVE ID: CVE-2008-4711 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.blog.php, (2) view.event.php, (3) view.group.php, (4) view.music.php, (5) view.picture.php, and (6) view.video.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45486 - http://www.securityfocus.com/bid/31444 - http://securityreason.co
//exchange.xforce.ibmcloud.com/vulnerabilities/45486 - http://www.securityfocus.com/bid/31444 - http://securityreason.com/securityalert/4486
CVE ID: CVE-2008-4712 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pages/showblog.php in LnBlog 0.9.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the plugin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32032 - http://securityreason.com/securityalert/4481 - http://www.securityfocus.com/bid/31459 - https://www.exploit-db.com/exploits/6601
CVE ID: CVE-2008-4713 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:21.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands via the qID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45428 - https://www.exploit-db.com/exploits/6578 - http://securityreason.com/securityalert/4482
CVE ID: CVE-2008-4714 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:20.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6580 - http://www.securityfocus.com/bid/31427 - http://securityreason.com/securityalert/4497
CVE ID: CVE-2008-4715 State: PUBLISHED Published: 2008-10-23T17:00:00 Last Updated: 2024-08-07T10:24:21.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Jpad (com_jpad) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41983 - http://www.securityfocus.com/bid/28923 - https://www.exploit-db.com/exploits/5493 - http://securityreason.com/securityalert/4485
CVE ID: CVE-2008-4716 State: PUBLISHED Published: 2008-10-23T18:00:00 Last Updated: 2024-08-07T10:24:20.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4500 - http://secunia.com/advisories/32027 - http://www.securityfocus.com/bid/31446 - https://www.exploit-db.com/exploits/6605