Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
path.com/wiki/Advisories:rPSA-2008-0207 - http://www.securityfocus.com/bid/29747 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b6707a50c7598a83820077393f8823ab791abf8 - http://secunia.com/advisories/30901 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.26-rc6 - http://www.openwall.com/lists/oss-security/2008/06/19/3 - http://secunia.com/advisories/30920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43111 - http://secunia.com/advisories/31107 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html - https://www.redhat.com/archives/fedora-package-
://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html - http://www.vupen.com/english/advisories/2008/1854 - https://issues.rpath.com/browse/RPL-2629 - http://secunia.com/advisories/31202 - http://www.ubuntu.com/usn/usn-625-1 - http://secunia.com/advisories/30719 - http://securitytracker.com/id?1020297
CVE ID: CVE-2008-2751 State: PUBLISHED Published: 2008-06-18T19:29:00 Last Updated: 2024-08-07T09:14:14.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (2) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (3) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, or (4) propertyForm:propertyConten
pertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, or (4) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (a) resourceNode/customResourceNew.jsf; the (5) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, (6) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:resTypeProp:resType, (7) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:factoryClassProp:factoryClass, (8) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiLookupProp:jndiLookup, or (9) propertyForm:propertyContentPage:propertySheet:propertSection
:propertSectionTextField:jndiLookupProp:jndiLookup, or (9) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:descProp:desc parameter to (b) resourceNode/externalResourceNew.jsf; the (10) propertyForm:propertySheet:propertSectionTextField:jndiProp:Jndi, (11) propertyForm:propertySheet:propertSectionTextField:nameProp:name, or (12) propertyForm:propertySheet:propertSectionTextField:descProp:desc parameter to (c) resourceNode/jmsDestinationNew.jsf; the (13) propertyForm:propertySheet:generalPropertySheet:jndiProp:Jndi or (14) propertyForm:propertySheet:generalPropertySheet:descProp:cd parameter to (d) resourceNode/jmsConnectionNew.jsf; the (15) propertyForm:propertySheet:pr
eralPropertySheet:descProp:cd parameter to (d) resourceNode/jmsConnectionNew.jsf; the (15) propertyForm:propertySheet:propertSectionTextField:jndiProp:jnditext or (16) propertyForm:propertySheet:propertSectionTextField:descProp:desc parameter to (e) resourceNode/jdbcResourceNew.jsf; the (17) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:nameProp:name, (18) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:classNameProp:classname, or (19) propertyForm:propertyContentPage:propertySheet:propertSectionTextField:loadOrderProp:loadOrder parameter to (f) applications/lifecycleModulesNew.jsf; or the (20) propertyForm:propertyContentPage:propertySheet:gen
er parameter to (f) applications/lifecycleModulesNew.jsf; or the (20) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:jndiProp:name, (21) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:resTypeProp:resType, or (22) propertyForm:propertyContentPage:propertySheet:generalPropertySheet:dbProp:db parameter to (g) resourceNode/jdbcConnectionPoolNew1.jsf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493370/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42989 - http://securityreason.com/securityalert/3949 - http://www.securityfocus.com/bid/29751
CVE ID: CVE-2008-2752 State: PUBLISHED Published: 2008-06-18T19:29:00 Last Updated: 2024-08-07T09:14:14.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .doc file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43155 - http://www.nullcode.com.ar/ncs/crash/video2.htm - http://www.nullco
exchange.xforce.ibmcloud.com/vulnerabilities/43155 - http://www.nullcode.com.ar/ncs/crash/video2.htm - http://www.nullcode.com.ar/ncs/crash/video.htm - http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-2.doc - http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-1.doc - http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-4.doc - http://www.securityfocus.com/data/vulnerabilities/exploits/crash-word-3.doc - http://www.securityfocus.com/bid/29769
CVE ID: CVE-2008-2753 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) xslIdn parameter to (a) utils/getXsl.aspx, and the (2) part parameter to (b) getXml.aspx and (c) getXls.aspx in utils/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43007 - http://bugreport.ir/index.php?/42 - http://secunia.com/advisories/30610 - https://www.exploit-db.com/exploits/5788 - http://seclists.org/bugtraq/2
php?/42 - http://secunia.com/advisories/30610 - https://www.exploit-db.com/exploits/5788 - http://seclists.org/bugtraq/2008/Jun/0115.html - http://www.securityfocus.com/bid/29673
CVE ID: CVE-2008-2754 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42998 - https://www.exploit-db.com/exploits/5785 - http://www.securityfocus.com/bid/29658
CVE ID: CVE-2008-2755 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43023 - https://www.exploit-db.com/exploits/5789 - http://secunia.com/advisories/30614 - http://www.securityfocus.com/bid/29674
CVE ID: CVE-2008-2756 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43048 - http://secunia.com/advisories/30609 - h
cus.com/bid/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43048 - http://secunia.com/advisories/30609 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2757 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43043 - http://secunia.com/advisories/30643 - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2758 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) pblname and (2) text parameters to (a) admin/search.asp, (3) name parameter to (b) admin/publishers.asp, and other unspecified vectors to (c) anmviewer.asp and (d) editarticleX.asp in admin/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/ad
ned from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30643 - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43042 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2759 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43047 - http://bugreport.ir/index.php?/41 - http://www.securityfocus.
tps://exchange.xforce.ibmcloud.com/vulnerabilities/43047 - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - http://secunia.com/advisories/30640 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2760 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30641 - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43046 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2761 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the text parameter in (1) searchbanners.asp and (2) listadvertisers.asp, and other unspecified fields. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30641 - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - h
: - http://secunia.com/advisories/30641 - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43045 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2762 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43051 - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2763 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43050 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2764 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors ("all fields"). Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/41 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43049 - http://www.securityfocus.com/bid/29672 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2765 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43052 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2766 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) admin/search.asp and (2) gallery.asp. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43053 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2767 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43055 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2768 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors ("all fields"). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43054 - http://bugreport.ir/index.php?/41 - http://www.securityfocus.com/bid/29672 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/395
ityfocus.com/bid/29672 - http://marc.info/?l=bugtraq&m=121322052622903&w=2 - http://securityreason.com/securityalert/3950
CVE ID: CVE-2008-2769 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple Machines phpRaider 1.0.6 and 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the pConfig_auth[smf_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42996 - http://forums.phpraider.com/showthread.php?t=1087#v1_0_7b_-_May_29__2008 - http://securityreason.com/securityalert/3947 - http://www.securityfocus.com/archive/1/493275/100/0/th
b_-_May_29__2008 - http://securityreason.com/securityalert/3947 - http://www.securityfocus.com/archive/1/493275/100/0/threaded
CVE ID: CVE-2008-2770 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MycroCMS 0.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the entry_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29671 - https://www.exploit-db.com/exploits/5787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43002
CVE ID: CVE-2008-2771 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with "access content" permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30622 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43006 - http://drupal.org/node/269473 - http://www.securityfocus.com/bid/29675
CVE ID: CVE-2008-2772 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary PHP code via unspecified URL arguments, possibly related to a missing "whitelist of callbacks." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43020 - http://drupal.org/node/269321 - http://secunia.com/advisories/30632
CVE ID: CVE-2008-2773 State: PUBLISHED Published: 2008-06-18T22:00:00 Last Updated: 2024-08-07T09:14:14.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Image module 5.x before 5.x-1.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30631 - http://drupal.org/node/269389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43013 - http://www.securityfocus.com/bid/29683
CVE ID: CVE-2008-2774 State: PUBLISHED Published: 2008-06-19T20:00:00 Last Updated: 2024-08-07T09:14:14.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execute arbitrary SQL commands via the category_id parameter, a different vector than CVE-2007-4736. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5678 - http://www.vupen.com/english/advisories/2008/1677 - http://secunia.com/advisories/30392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42646
CVE ID: CVE-2008-2775 State: PUBLISHED Published: 2008-06-19T20:00:00 Last Updated: 2024-08-07T09:14:14.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42663 - http://www.securityfocus.com/bid/29403 - http://secunia.com/advisories/30382
CVE ID: CVE-2008-2776 State: PUBLISHED Published: 2008-06-19T20:00:00 Last Updated: 2024-08-07T09:14:14.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42662 - http://www.securityfocus.com/bid/29403 - http://secunia.com/advisories/30382
CVE ID: CVE-2008-2777 State: PUBLISHED Published: 2008-06-19T20:00:00 Last Updated: 2024-08-07T09:14:14.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ortro before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1679/references - http://www.ortro.net/changelog#release_1.3.1_2008.05.27 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42657 - http://secunia.com/advisories/30398
CVE ID: CVE-2008-2778 State: PUBLISHED Published: 2008-06-19T20:00:00 Last Updated: 2024-08-07T09:14:14.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to execute arbitrary SQL commands via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1676/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42647 - https://www.exploit-db.com/exploits/5677 - http://www.securityfocus.com/bid/29393