Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://www.securityfocus.com/bid/33138 - http://secunia.com/advisories/33386 - http://securityreason.com/securityalert/4888
CVE ID: CVE-2008-5882 State: PUBLISHED Published: 2009-01-09T18:00:00 Last Updated: 2024-08-07T11:13:13.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS) before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4889 - http://secunia.com/advisories/33127 - http://support.citrix.com/article/CTX119315 - http://www.securitytracker.com/id?1021411 - http://www.securit
ies/33127 - http://support.citrix.com/article/CTX119315 - http://www.securitytracker.com/id?1021411 - http://www.securityfocus.com/bid/32832 - http://www.securityfocus.com/archive/1/499559/100/0/threaded
CVE ID: CVE-2008-5883 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4897 - https://www.exploit-db.com/exploits/6734 - http://www.securityfocus.com/bid/31733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45829
CVE ID: CVE-2008-5884 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: AyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malformed header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45678 - https://www.exploit-db.com/exploits/6668 - http://www.securityfocus.com/archive/1/497045/100/0/threaded - http://securityreason.com/securityalert/4900 - http://www.securityfocus.com/bid/31572
CVE ID: CVE-2008-5885 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/quote.mdb. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4898 - http://secunia.com/advisories/33130 - https://www.exploit-db.com/exploits/7446 - https://exchange.xforc
rityalert/4898 - http://secunia.com/advisories/33130 - https://www.exploit-db.com/exploits/7446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47325
CVE ID: CVE-2008-5886 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: TAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for _private/discussion.mdb. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4899 - https://www.exploit-db.com/exploits/7445 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47348
CVE ID: CVE-2008-5887 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499218/100/0/threaded - http://www.phplist.com/?lid=273 - http://secunia.com/advisories/33186 - http://securityreason.com/securityalert/4901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47395 - http://www.securityfocus.com/bid/32841
CVE ID: CVE-2008-5888 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) hitcounter.asp, (2) user_delete.asp, and (3) user_update.asp; (4) the userid parameter to admin_login.asp (aka the USERNAME field in admin.asp); and (5) the PassWord parameter to admin_login.asp (aka the PASSWORD field in admin.asp). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.co
from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4902 - https://www.exploit-db.com/exploits/7486 - http://secunia.com/advisories/33154 - http://www.securityfocus.com/bid/32854
CVE ID: CVE-2008-5889 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7486 - http://www.securityfocus.com/bid/32855
CVE ID: CVE-2008-5890 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32843 - https://www.exploit-db.com/exploits/7517 - http://sourceforge.net/project/shownotes.php?release_id=646897 - http://secunia.com/advisories/33161
CVE ID: CVE-2008-5891 State: PUBLISHED Published: 2009-01-12T19:27:00Z Last Updated: 2024-09-16T19:15:32.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32843 - http://sourceforge.net/project/shownotes.php?release_id=646897 - http://secunia.com/advisories/33161
CVE ID: CVE-2008-5892 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1) the ID parameter to admin_dblayers.asp in an update action, (2) the adminid parameter to admin_loginCheck.asp (aka the USERNAME field in admin_main.asp), and (3) the PassWord parameter to admin_loginCheck.asp (aka the PASSWORD field in admin_main.asp). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.
ed from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4903 - http://secunia.com/advisories/33155 - https://www.exploit-db.com/exploits/7485 - http://www.securityfocus.com/bid/32857
CVE ID: CVE-2008-5893 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTML via the tablename parameter in an update action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4903 - http://secunia.com/advisories/33155 - https://www.exploit-db.com/exploits/7485 - http://www.securityfocus.com/bid/32857
CVE ID: CVE-2008-5894 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7458 - http://www.securityfocus.com/bid/32815 - http://securityreason.com/securityalert/4904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47349 - http://secunia.com/advisories/33176
CVE ID: CVE-2008-5895 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4905 - http://www.securityfocus.com/bid/32836 - https://www.exploit-db.com/exploits/7476 - http://secunia.com/advisories/33176
CVE ID: CVE-2008-5896 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CARateMySite.mdb. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47350 - https://www.exploit-db.com/exploits/7472
advisories/33100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47350 - https://www.exploit-db.com/exploits/7472 - http://securityreason.com/securityalert/4906
CVE ID: CVE-2008-5897 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAFreeWallpaper.mdb. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33100 - https://www.exploit-db.com/exploits/7470 - https://exchange.xforce.ibmcloud.com/vulnerabilities
a.com/advisories/33100 - https://www.exploit-db.com/exploits/7470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47352
CVE ID: CVE-2008-5898 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CADirectory.mdb. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47353 - http://securityreason.com/securityalert/49
visories/33100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47353 - http://securityreason.com/securityalert/4907 - https://www.exploit-db.com/exploits/7468
CVE ID: CVE-2008-5899 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAFFAPage.mdb. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47354 - https://www.exploit-db.com/exploits/7469
CVE ID: CVE-2008-5900 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAArticles.mdb. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33100 - http://securityreason.com/securityalert/4909 - https://www.exploit-db.com/exploits/7471 - https://exchang
sories/33100 - http://securityreason.com/securityalert/4909 - https://www.exploit-db.com/exploits/7471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47351
CVE ID: CVE-2008-5901 State: PUBLISHED Published: 2009-01-12T19:27:00 Last Updated: 2024-08-07T11:13:13.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyziforum.mdb. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47330 - http://securityreason.com/securityalert/4908 - https://www.exploit-db.com/exploits/7449
CVE ID: CVE-2008-5902 State: PUBLISHED Published: 2009-01-15T17:00:00 Last Updated: 2024-08-07T11:13:13.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://openwall.com/lists/oss-security/2009/01/12/3 - http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf
CVE ID: CVE-2008-5903 State: PUBLISHED Published: 2009-01-15T17:00:00 Last Updated: 2024-08-07T11:13:13.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via vectors that manipulate the value of the edit_pos structure member. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://www.securityfocus.com/bid/33371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48093 - http://openwall.com/lists/oss-security/2009/01/12/3 - http://packetst
change.xforce.ibmcloud.com/vulnerabilities/48093 - http://openwall.com/lists/oss-security/2009/01/12/3 - http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf
CVE ID: CVE-2008-5904 State: PUBLISHED Published: 2009-01-15T17:00:00 Last Updated: 2024-08-07T11:13:13.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://openwall.com/lists/oss-security/2009/01/12/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48094 - http://packetstormsecurity.org/08
s-security/2009/01/12/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48094 - http://packetstormsecurity.org/0812-advisories/VA_VD_87_08_XRDP.pdf
CVE ID: CVE-2008-5905 State: PUBLISHED Published: 2009-01-15T17:00:00 Last Updated: 2024-08-07T11:13:13.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/01/08/1 - http://www.securityfocus.com/bid/31927 - http://www.ubuntu.com/usn/USN-711-1 - http://secunia.com/advisories/32447 - http://secunia.com/advisories/32442 - http://secunia.com/advisorie
usn/USN-711-1 - http://secunia.com/advisories/32447 - http://secunia.com/advisories/32442 - http://secunia.com/advisories/34003 - http://security.gentoo.org/glsa/glsa-200902-05.xml - https://bugs.gentoo.org/show_bug.cgi?id=244741 - http://secunia.com/advisories/33675 - http://ktorrent.org/?q=node/23 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178 - http://www.vupen.com/english/advisories/2008/2911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46117
CVE ID: CVE-2008-5906 State: PUBLISHED Published: 2009-01-15T17:00:00 Last Updated: 2024-08-07T11:13:13.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/01/08/1 - http://www.securityfocus.com/bid/31927 - http://www.ubuntu.com/usn/USN-711-1 - http://secunia.com/advisories/32447 - http://secunia.com/advisories/32442 - http://secunia.com/advisories/34003 - http://security.gentoo.o
/advisories/32447 - http://secunia.com/advisories/32442 - http://secunia.com/advisories/34003 - http://security.gentoo.org/glsa/glsa-200902-05.xml - https://bugs.gentoo.org/show_bug.cgi?id=244741 - http://secunia.com/advisories/33675 - http://ktorrent.org/?q=node/23 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46118 - http://www.vupen.com/english/advisories/2008/2911
CVE ID: CVE-2008-5907 State: PUBLISHED Published: 2009-01-15T17:00:00 Last Updated: 2024-08-07T11:13:13.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://libpng.sourceforge.net/index.html - http://secur
Additional Analyst Notes: - CVE Program Container: References: - http://libpng.sourceforge.net/index.html - http://security.gentoo.org/glsa/glsa-200903-28.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/48128 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://secunia.com/advisories/34388 - http://www.debian.org/security/2009/dsa-1750 - http://openwall.com/lists/oss-security/2009/01/09/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:051 - http://secunia.com/advisories/34320 - http://sourceforge.net/mailarchive/forum.php?thread_name=4B6F0239C13D0245820603C036D180BC79FBAA%40CABOTUKEXCH01.cabot.local&forum_name=png-mng-implement
CVE ID: CVE-2008-5908 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T11:13:13.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653455. Additional Analyst Notes: - CVE Program Container: References: - http://opensolaris.org/os/bug_reports/request_sponsor/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/48146
CVE ID: CVE-2008-5909 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T11:13:13.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in conv_lpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improper handling of temporary files, aka Bug ID 6655641. Additional Analyst Notes: - CVE Program Container: References: - http://opensolaris.org/os/bug_reports/request_sponsor/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/48148 - http://www.securityfocus.com/bid/33396
CVE ID: CVE-2008-5910 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T11:13:13.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653462. Additional Analyst Notes: - CVE Program Container: References: - http://opensolaris.org/os/bug_reports/request_sponsor/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/48150 - http://www.securityfocus.com/bid/33395
CVE ID: CVE-2008-5911 State: PUBLISHED Published: 2009-01-20T15:26:00 Last Updated: 2024-08-07T11:13:13.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021500 - http://www.securitytracker.com/id?102149
VE Program Container: References: - http://www.securitytracker.com/id?1021500 - http://www.securitytracker.com/id?1021498 - http://secunia.com/advisories/33360 - http://docs.real.com/docs/security/SecurityUpdate121508HS.pdf - http://www.vupen.com/english/advisories/2008/3521 - http://www.securitytracker.com/id?1021501 - http://www.securitytracker.com/id?1021499
CVE ID: CVE-2008-5912 State: PUBLISHED Published: 2009-01-20T16:00:00 Last Updated: 2024-08-07T11:13:13.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing attack." NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Addi