Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1760 State: PUBLISHED Published: 2008-04-12T20:00:00 Last Updated: 2024-08-07T08:32:01.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php in _blogadata/include. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29684 - http://www.securityfocus.com/bid/28627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41660 - http://www.blogator-script.com/changelog.php - https://w
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41660 - http://www.blogator-script.com/changelog.php - https://www.exploit-db.com/exploits/5365
CVE ID: CVE-2008-1761 State: PUBLISHED Published: 2008-04-12T20:00:00 Last Updated: 2024-08-07T08:32:01.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41625 - http://www.securityfocus.com/bid/28585 - http://secunia.com/advisories/29679 - http://secunia.com/advisories/29735 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html - http://www.opera.com/docs
dvisories/29735 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html - http://www.opera.com/docs/changelogs/linux/927/ - http://secunia.com/advisories/29662 - http://www.opera.com/support/search/view/881/ - http://www.vupen.com/english/advisories/2008/1084/references - http://security.gentoo.org/glsa/glsa-200804-14.xml
CVE ID: CVE-2008-1762 State: PUBLISHED Published: 2008-04-12T20:00:00 Last Updated: 2024-08-07T08:32:01.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/search/view/882/ - http://www.securityfocus.com/bid/28585 - http://secunia.com/advisories/29679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41627 - http://secunia.com/advisories/29735 - http://lists.opensuse.org/open
xchange.xforce.ibmcloud.com/vulnerabilities/41627 - http://secunia.com/advisories/29735 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html - http://www.opera.com/docs/changelogs/linux/927/ - http://secunia.com/advisories/29662 - http://www.vupen.com/english/advisories/2008/1084/references - http://security.gentoo.org/glsa/glsa-200804-14.xml
CVE ID: CVE-2008-1763 State: PUBLISHED Published: 2008-04-12T20:00:00 Last Updated: 2024-08-07T08:32:01.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL commands via the id_art parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41658 - https://www.exploit-db.com/exploits/5368 - http://www.blogator-script.com/changelog.php - http://www.securityfocus.com/archive/1/490500/100/0/threaded - http://www.securityfocus.com/bid/28635
CVE ID: CVE-2008-1764 State: PUBLISHED Published: 2008-04-12T20:00:00 Last Updated: 2024-08-07T08:32:01.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29679 - http://secunia.com/advisories/29735 - http://www.opera.com/docs/changelogs/windows/927/ - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html - http://www.opera.com/docs/changelogs/linux/927/ - http://security.gentoo.org/glsa/glsa-200804-14.xml - https://exchange.xforce
/www.opera.com/docs/changelogs/linux/927/ - http://security.gentoo.org/glsa/glsa-200804-14.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/41834
CVE ID: CVE-2008-1765 State: PUBLISHED Published: 2008-04-23T10:00:00 Last Updated: 2024-08-07T08:32:01.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header. NOTE: the related issue in Photoshop CS3 is already covered by CVE-2007-2244. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28874 - http://www.adobe.com/support/security/advisories/apsa08-04.html - https://www.exploit-db.com/exploits/5479 - h
d/28874 - http://www.adobe.com/support/security/advisories/apsa08-04.html - https://www.exploit-db.com/exploits/5479 - http://www.vupen.com/english/advisories/2008/1317 - http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0551.html - http://secunia.com/advisories/29838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41941 - http://securitytracker.com/id?1019910
CVE ID: CVE-2008-1766 State: PUBLISHED Published: 2008-04-12T20:00:00 Last Updated: 2024-08-07T08:32:01.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to "two minor security-related bugs." Additional Analyst Notes: - CVE Program Container: References: - http://www.phpbb.com/community/viewtopic.php?f=14&t=879735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41886 - http://www.vupen.com/english/advisories/2008/1236/references
CVE ID: CVE-2008-1767 State: PUBLISHED Published: 2008-05-23T14:00:00 Last Updated: 2024-08-07T08:32:01.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:151 - http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - http://www.vupen.com/english/advisories/2008/1
tp://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html - http://www.vupen.com/english/advisories/2008/1580/references - http://www.securitytracker.com/id?1020071 - http://www.securityfocus.com/bid/31681 - http://www.securityfocus.com/bid/29312 - http://www.redhat.com/support/errata/RHSA-2008-0287.html - http://secunia.com/advisories/30393 - http://secunia.com/advisories/30521 - http://secunia.com/advisories/31363 - http://bugzilla.gnome.org/show_bug.cgi?id=527297 - http://www.debian.org/security/2008/dsa-1589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42560 - http://secunia.com/advisories/30315 - http://secunia.com/advisories/32706 - http://www.ubuntu.com/usn/usn
lities/42560 - http://secunia.com/advisories/30315 - http://secunia.com/advisories/32706 - http://www.ubuntu.com/usn/usn-633-1 - http://secunia.com/advisories/32222 - http://security.gentoo.org/glsa/glsa-200806-02.xml - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://support.apple.com/kb/HT3298 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9785 - http://www.vupen.com/english/advisories/2008/2094/references - http://www.vupen.com/english/advisories/2008/2780 - http://secunia.com/advisories/30323 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://s
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://secunia.com/advisories/31074 - http://www.novell.com/linux/security/advisories/2008_13_sr.html - http://secunia.com/advisories/30717
CVE ID: CVE-2008-1768 State: PUBLISHED Published: 2008-04-24T18:00:00 Last Updated: 2024-08-07T08:32:01.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/security/sa0803.php - http://www.securityfocus.com/bid/28903 - http://www.videolan.org/developers/vlc/NEWS - http://security.gentoo.org/glsa/glsa-200804-25.xml - http://wiki.videolan.org/Changelog/0.8.6f - https://oval.cisecurity.org/r
/security.gentoo.org/glsa/glsa-200804-25.xml - http://wiki.videolan.org/Changelog/0.8.6f - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14412 - http://secunia.com/advisories/29800 - http://secunia.com/advisories/29503 - http://www.vupen.com/english/advisories/2008/0985
CVE ID: CVE-2008-1769 State: PUBLISHED Published: 2008-04-24T18:00:00 Last Updated: 2024-08-07T08:32:01.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/security/sa0803.php - http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit%3Bh=cf489d7bff3c1b36b2d5501ecf21129c78104d98 - http://www.videolan.org/developers/vlc/NEWS - http://security.gentoo.org/glsa/glsa-200804-25.xml - http://wiki.videolan.org/Changelog/0.8.6f - http:/
opers/vlc/NEWS - http://security.gentoo.org/glsa/glsa-200804-25.xml - http://wiki.videolan.org/Changelog/0.8.6f - http://www.securityfocus.com/bid/28904 - http://secunia.com/advisories/29800 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14445 - http://secunia.com/advisories/29503 - http://bugs.gentoo.org/show_bug.cgi?id=214627#c3 - http://www.vupen.com/english/advisories/2008/0985
CVE ID: CVE-2008-1770 State: PUBLISHED Published: 2008-06-04T21:00:00 Last Updated: 2024-08-07T08:32:01.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5741 - http://www.securitytracker.com/id?1020194 - http://www.securityfocus.com/archive/1/493077/100/0/threaded - http://secunia.com/advisories/30537 - https://exchange.xforce.ibmclou
ecurityfocus.com/archive/1/493077/100/0/threaded - http://secunia.com/advisories/30537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42879 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062672.html - http://www.vupen.com/english/advisories/2008/1746/references - http://www.securityfocus.com/archive/1/493142/100/0/threaded
CVE ID: CVE-2008-1771 State: PUBLISHED Published: 2008-04-16T15:00:00 Last Updated: 2024-08-07T08:32:01.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on Debian) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a large Content-Length. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1597 - http://sourceforge.net/project/shownotes.php?release_id=593465&group_id=98211 - https://www.redhat.com/archives/fedora-package-announce/2008-Ap
project/shownotes.php?release_id=593465&group_id=98211 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00446.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41850 - http://www.securityfocus.com/bid/28860 - http://secunia.com/advisories/30661 - http://www.vupen.com/english/advisories/2008/1303/references - http://www.securitytracker.com/id?1019908 - http://secunia.com/advisories/29917 - http://secunia.com/advisories/29919
CVE ID: CVE-2008-1772 State: PUBLISHED Published: 2008-04-14T15:00:00 Last Updated: 2024-08-07T08:32:01.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29725 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41812 - https://www.exploit-db.com/exploits/5402 - http://www.osvdb.org/44326
CVE ID: CVE-2008-1773 State: PUBLISHED Published: 2008-04-14T15:00:00 Last Updated: 2024-08-07T08:32:01.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41680 - http://www.securityfocus.com/bid/28660
CVE ID: CVE-2008-1774 State: PUBLISHED Published: 2008-04-14T15:00:00 Last Updated: 2024-08-07T08:32:01.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41709 - http://www.vupen.com/english/advisories/2008/1164/references - https://www.exploit-db.com/exploits/5406 - http://www.securityfocus.com/bid/28681
CVE ID: CVE-2008-1775 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:32:01.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the displayName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41810 - http://secunia.com/advisories/29632
CVE ID: CVE-2008-1776 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:32:01.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41616 - http://www.securityfocus.com/bid/28588
CVE ID: CVE-2008-1777 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:32:01.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a long HTTP HEAD request to TCP port 8028. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28572 - http://www.vupen.com/english/advisories/2008/1075 - http://www.offensive-security.com/0day/novel-edir.py.txt - http://www.securitytracker.com/id?1019783 - http://secunia.com/advisories/29639
CVE ID: CVE-2008-1778 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:32:01.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cause a denial of service (application exit), corrupt data, or trigger incorrect calculations via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41765 - http://www.securitytracker.com/id?1019833 - http://secunia.com/advisories/29728 - https://oval.cisecurit
ilities/41765 - http://www.securitytracker.com/id?1019833 - http://secunia.com/advisories/29728 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4950 - http://www.vupen.com/english/advisories/2008/1193/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-233921-1
CVE ID: CVE-2008-1779 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:32:01.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41762 - http://www.vupen.com/english/advisories/2008/1192/references - http://www.vupen.com/english/advisories/2008/1325/references - http://secunia.com/advisories/29783 - http://www.securitytracker.com/id?1019831 - http://support.avaya.com/elmodocs2/securit
://secunia.com/advisories/29783 - http://www.securitytracker.com/id?1019831 - http://support.avaya.com/elmodocs2/security/ASA-2008-173.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4848 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-235901-1 - http://www.securityfocus.com/bid/28732 - http://secunia.com/advisories/29817
CVE ID: CVE-2008-1780 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:32:01.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications in separate labeling zones to bypass labeling restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28734 - http://www.vupen.com/english/advisories/2008/1194/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-235421-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41764 - http://www.securitytracker.com/id?1
ssetkey=1-26-235421-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41764 - http://www.securitytracker.com/id?1019832 - http://secunia.com/advisories/29730
CVE ID: CVE-2008-1781 State: REJECTED Published: 2008-04-15T16:00:00Z Last Updated: 2024-09-16T19:20:25.474Z Description: No description available.
CVE ID: CVE-2008-1782 State: PUBLISHED Published: 2008-04-15T10:00:00 Last Updated: 2024-08-07T08:32:01.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41701 - https://www.exploit-db.com/exploits/5399 - http://www.vupen.com/english/advisories/2008/1140/references - http://www.securityfocus.com/bid/28674
CVE ID: CVE-2008-1783 State: PUBLISHED Published: 2008-04-15T10:00:00 Last Updated: 2024-08-07T08:32:01.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41678 - https://www.exploit-db.com/exploits/5387 - http://www.vupen.com/english/advisories/2008/1118/references - http://www.securityfocus.com/bid/28642
CVE ID: CVE-2008-1784 State: PUBLISHED Published: 2008-04-15T10:00:00 Last Updated: 2024-08-07T08:32:01.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2) editu.php, and (3) uidx.php in siteadmin/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28641 - https://www.exploit-db.com/exploits/5388 - http://www.vupen.com/english/advisories/2008/1117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41679 - http://secunia.com/advisories/29689
CVE ID: CVE-2008-1785 State: PUBLISHED Published: 2008-04-15T10:00:00 Last Updated: 2024-08-07T08:32:01.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1119/references - https://www.exploit-db.com/exploits/5384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41674
CVE ID: CVE-2008-1786 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:32:01.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41853 - http://www.kb.cert.org/vul
Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41853 - http://www.kb.cert.org/vuls/id/684883 - http://secunia.com/advisories/29837 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=174256 - http://www.securityfocus.com/archive/1/490959/100/0/threaded - http://www.vupen.com/english/advisories/2008/1249/references - http://www.securityfocus.com/bid/28809 - http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/16/ca-dsm-gui-cm-ctrls-activex-control-vulnerability.aspx - http://www.securitytracker.com/id?1019872
CVE ID: CVE-2008-1787 State: PUBLISHED Published: 2008-04-15T17:00:00 Last Updated: 2024-08-07T08:32:01.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) text and (2) ul parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41689 - http://www.securityfocus.com/bid/28608 - http://downloads.
https://exchange.xforce.ibmcloud.com/vulnerabilities/41689 - http://www.securityfocus.com/bid/28608 - http://downloads.securityfocus.com/vulnerabilities/exploits/28608.html