Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ings. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4121 - http://www.gulftech.org/?node=research&article_id=00121-08042008 - http://www.securityfocus.com/archive/1/495116/100/0/threaded - http://dev.plogger.org/changeset/569 - https://www.exploit-db.com/exploits/6204 - http://www.securityfocus.com/bid/30547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44233
CVE ID: CVE-2008-3564 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) p, (2) cat, and (3) archive parameters. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44203 - https://www.exploit-db.com/exploits/6203 - http://ww
ces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44203 - https://www.exploit-db.com/exploits/6203 - http://www.securityfocus.com/bid/30538 - http://securityreason.com/securityalert/4122
CVE ID: CVE-2008-3565 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to (1) day.php, (2) week.php, (3) month.php, (4) search.php, (5) report.php, and (6) help.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30531/exploit - https://exchange.xforce.ibm
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30531/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/44188 - http://www.securityfocus.com/bid/30531 - http://secunia.com/advisories/31355
CVE ID: CVE-2008-3566 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter to (1) the default URI or (2) index.php, or (3) the PATH_INFO to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31349 - http://www.securityfocus.com/bid/30509 - http://downloads.securityfocus.com/vul
- http://secunia.com/advisories/31349 - http://www.securityfocus.com/bid/30509 - http://downloads.securityfocus.com/vulnerabilities/exploits/30509.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44178
CVE ID: CVE-2008-3567 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44207 - http://forums.winamp.com/showthread.php?threadid=295505 - http://secunia.com/advisories/31371 - h
ulnerabilities/44207 - http://forums.winamp.com/showthread.php?threadid=295505 - http://secunia.com/advisories/31371 - http://blog.watchfire.com/wfblog/2008/09/winamp-nowplayi.html - http://www.securityfocus.com/bid/30539
CVE ID: CVE-2008-3568 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in UNAK-CMS 1.5.5 allows remote attackers to include and execute arbitrary local files via a full pathname in the Dirroot parameter, a different vulnerability than CVE-2006-4890.1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44212 - http://securityreason.com/securityalert/4123 - http://www.securityfocus.com/bid/30533 - http://www.securityfoc
s/44212 - http://securityreason.com/securityalert/4123 - http://www.securityfocus.com/bid/30533 - http://www.securityfocus.com/archive/1/495090/100/0/threaded
CVE ID: CVE-2008-3569 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to (1) iart.php and (2) ming.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44214 - http://www.securityfocus.com/bid/30535 - http://securityreason.com/securityalert/4127 - http://www.securityfocus.com/archive/1/495096/100/0/threaded
CVE ID: CVE-2008-3570 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute arbitrary PHP code via a URL in the abg_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44195 - http://securityreason.com/securityalert/4124
CVE ID: CVE-2008-3571 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 1900. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44211 - https://www.exploit-db.com/exploits/6196 - http://www.securityfocus.com/bid/30522 - http://www.vupen.com/english/advisories/2008/2308 - http://secunia.com/advisories/31329
CVE ID: CVE-2008-3572 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.rooksecurity.com/blog/?p=19 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44189 - http://www.securityfocus.com/bid/30516 - http://securityreason.com/securityalert/4129 - http://marc.info/?l=bugtraq&m=121769609623356&w=2
CVE ID: CVE-2008-3573 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44192 - http://www.rooksecurity.com/blog/?p=17 - http://www
nces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44192 - http://www.rooksecurity.com/blog/?p=17 - http://www.securityfocus.com/bid/30518
CVE ID: CVE-2008-3574 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) lang_footer parameter to (a) data/inc/footer.php; the (2) pluck_version, (3) lang_install22, (4) titelkop, (5) lang_kop1, (6) lang_kop2, (7) lang_modules, (8) lang_kop4, (9) lang_kop15, (10) lang_kop5, and (11) titelkop parameters to (b) data/inc/header.php; the pluck_version and titelkop parameters to (c) data/inc/header2.php; and the (14) lang_theme6 p
) data/inc/header.php; the pluck_version and titelkop parameters to (c) data/inc/header2.php; and the (14) lang_theme6 parameter to (d) data/inc/themeinstall.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44237 - http://www.securityfocus.com/archive/1/495110/100/0/threaded - http://www.securityfocus.com/bid/30542 - http://securityreason.com/securityalert/4125
CVE ID: CVE-2008-3575 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[gsLanguage] parameter, a different vector than CVE-2006-4477 and CVE-2004-0132. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4130 - http://www.securityfocus.com/archive/1/494755/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44480
CVE ID: CVE-2008-3576 State: PUBLISHED Published: 2008-08-10T21:00:00 Last Updated: 2024-08-07T09:45:18.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted string. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34161 - http://security.gentoo.org/glsa/glsa-200903-09.xml - http://sourceforge.net/project/shownotes.php?release_id=617243 - http://secunia.com/advisories
glsa/glsa-200903-09.xml - http://sourceforge.net/project/shownotes.php?release_id=617243 - http://secunia.com/advisories/31350 - http://www.securityfocus.com/bid/30525 - http://www.vupen.com/english/advisories/2008/2285 - http://www.openttd.org/index.php - http://bugs.gentoo.org/show_bug.cgi?id=233929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44168
CVE ID: CVE-2008-3577 State: PUBLISHED Published: 2008-08-10T21:00:00 Last Updated: 2024-08-07T09:45:18.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttd_main function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34161 - http://security.gentoo.org/glsa/glsa-200903-09.xml - http://sourceforge.net/project/shownotes.php?release_id=617243 - https://exchange.xforce.ibmcloud.c
glsa-200903-09.xml - http://sourceforge.net/project/shownotes.php?release_id=617243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44436 - http://www.securityfocus.com/bid/30525 - http://www.vupen.com/english/advisories/2008/2285 - http://bugs.gentoo.org/show_bug.cgi?id=233929
CVE ID: CVE-2008-3578 State: PUBLISHED Published: 2008-08-10T21:00:00 Last Updated: 2024-08-07T09:45:18.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: HydraIRC 0.3.164 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long irc:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2309 - https://www.exploit-db.com/exploits/6201 - http://secunia.com/advisories/31376 - http://securityreason.com/securityalert/4126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44204 - http://www.securityfocus.com/bid/30523
CVE ID: CVE-2008-3579 State: PUBLISHED Published: 2008-08-10T21:00:00 Last Updated: 2024-08-07T09:45:18.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk-upgrade.php, which allows remote attackers to obtain sensitive information by creating and downloading a backup archive of the entire @Mail directory tree. NOTE: this can be leveraged for remote exploitation of CVE-2008-3395. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/3127
d party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44145
CVE ID: CVE-2008-3580 State: PUBLISHED Published: 2008-08-10T21:00:00 Last Updated: 2024-08-07T09:45:18.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to visit.php, or the PATH_INFO to the default URI under (2) report/, (3) addreview/, or (4) refer/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4131 - https://www.exploit-db.com/exploits/6192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44219 - http://secunia.com/advisories/31245 - http://www.securityfocus.com/bid/30520 -
orce.ibmcloud.com/vulnerabilities/44219 - http://secunia.com/advisories/31245 - http://www.securityfocus.com/bid/30520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44160
CVE ID: CVE-2008-3581 State: PUBLISHED Published: 2008-08-10T21:00:00 Last Updated: 2024-08-07T09:45:18.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web script or HTML via the login_message parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44161 - https://www.exploit-db.com/exploits/6192 - http://secunia.com/advisories/31245 - http://www.securityfocus.com/bid/30520
CVE ID: CVE-2008-3582 State: PUBLISHED Published: 2008-08-10T21:00:00 Last Updated: 2024-08-07T09:45:18.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44197 - http://securityreason.com/securityalert/4132 - http://www.securityfocus.com/bid/30529 - http://www.securityfocus.com/archive/1/495086/100/0/threaded
CVE ID: CVE-2008-3583 State: PUBLISHED Published: 2008-08-10T21:00:00 Last Updated: 2024-08-07T09:45:18.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long URL in the SRC attribute of an IMG element. NOTE: this might be related to CVE-2008-3360. NOTE: it was later reported that 2.08 Beta 4 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30521 - https://www.exploit-db.com/exploits/6195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44215
CVE ID: CVE-2008-3584 State: PUBLISHED Published: 2008-09-11T14:00:00 Last Updated: 2024-08-07T09:45:18.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service (system crash) via a crafted PPPoE packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020749 - http://support.apple.com/kb/HT3467 - http://www.securityfocus.com/bid/30838 - http://secunia.com/advisories/31597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44679 - ftp://ftp.netbsd.org/pub/NetBS
cunia.com/advisories/31597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44679 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-010.txt.asc - http://www.vupen.com/english/advisories/2009/0633
CVE ID: CVE-2008-3585 State: PUBLISHED Published: 2008-08-11T23:00:00 Last Updated: 2024-08-07T09:45:18.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PozScripts GreenCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) product_desc.php and (2) store_info.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4133 - https://www.exploit-db.com/exploits/6189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44164 - http://www.securityfocus.com/bid/30506
CVE ID: CVE-2008-3586 State: PUBLISHED Published: 2008-08-11T23:00:00 Last Updated: 2024-08-07T09:45:18.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the EZ Store (com_ezstore) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44196 - http://www.securityfocus.com/bid/30527 - https://www.exploit-db.com/exploits/6199
CVE ID: CVE-2008-3587 State: PUBLISHED Published: 2008-08-11T23:00:00 Last Updated: 2024-08-07T09:45:18.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject arbitrary web script or HTML via the r parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44186 - http://securityreason.com/securityalert/4134 - http://www.securityfocus.com/archive/1/495059/100/0/threaded
CVE ID: CVE-2008-3588 State: PUBLISHED Published: 2008-08-11T23:00:00 Last Updated: 2024-08-07T09:45:18.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to comments.php, (2) cid parameter to index.php, and the (3) urltitle parameter to entries.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6190 - http://securityreason.com/securityalert/4135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44163
CVE ID: CVE-2008-3589 State: PUBLISHED Published: 2008-08-11T23:00:00 Last Updated: 2024-08-07T09:45:18.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4136 - https://www.exploit-db.com/exploits/6194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44162 - http://www.securityfocus.com/bid/30526 - http://secunia.com/advisories/31327
CVE ID: CVE-2008-3590 State: PUBLISHED Published: 2008-08-11T23:00:00Z Last Updated: 2024-09-17T01:20:52.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31368
CVE ID: CVE-2008-3591 State: PUBLISHED Published: 2008-08-11T23:00:00 Last Updated: 2024-08-07T09:45:18.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the sym_auth cookie in a /publish/filemanager/ request to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6177 - http://securityreason.com/securityalert/4137 - http://www.securityfocus.com/bid/30477 - http://secunia.com/advisories/31293 - http://overture21.com/forum/comments.php?DiscussionID=1823
CVE ID: CVE-2008-3592 State: PUBLISHED Published: 2008-08-11T23:00:00 Last Updated: 2024-08-07T09:45:18.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing the uploaded file via a direct request, as demonstrated using workspace/masters/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6177 - https://exchange.xforce.ibmcloud.com/vulnerabi
ogram Container: References: - https://www.exploit-db.com/exploits/6177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44432 - http://securityreason.com/securityalert/4137 - http://secunia.com/advisories/31293 - http://overture21.com/forum/comments.php?DiscussionID=1823
CVE ID: CVE-2008-3593 State: PUBLISHED Published: 2008-08-11T23:00:00 Last Updated: 2024-08-07T09:45:18.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in SyzygyCMS 0.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44157 - https://www.exploit-db.com/exploits/6200 - http://www.securityfocus.com/bid/30530 - http://securityreason.com/securityalert/4138
CVE ID: CVE-2008-3594 State: PUBLISHED Published: 2008-08-11T23:00:00 Last Updated: 2024-08-07T09:45:18.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Edition, and E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44159 - https://www.exploit-db.com/exploits/6193 - http://securityreason.com/securityalert/4139 - http://www.securityfocus.com/bid/30524 - http://secunia.com/advisories/3127
tp://securityreason.com/securityalert/4139 - http://www.securityfocus.com/bid/30524 - http://secunia.com/advisories/31273