Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
final-with-update.pdf - http://www.securityfocus.com/bid/35411 - http://research.microsoft.com/apps/pubs/default.aspx?id=79323
CVE ID: CVE-2009-2073 State: PUBLISHED Published: 2009-06-15T19:00:00 Last Updated: 2024-08-07T05:36:20.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/53414 - http://www.vupen.com/english/advisories/2009/0982 - http://www.securityfocus.com/bid/34448 - http://secunia.com/advisories/34625 - http://holisticinfo
dvisories/2009/0982 - http://www.securityfocus.com/bid/34448 - http://secunia.com/advisories/34625 - http://holisticinfosec.org/content/view/109/45/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/49775
CVE ID: CVE-2009-2074 State: PUBLISHED Published: 2009-06-16T19:00:00Z Last Updated: 2024-09-16T19:56:16.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocabulary names. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35424 - http://drupal.org/node/488092 - http://lampsecurity.org/drupal-nodeque-xss-vulnerability - http://www.securityfocus.com/bid/35305 - http://drupal.org/node/488104 - http://drupal.
upal-nodeque-xss-vulnerability - http://www.securityfocus.com/bid/35305 - http://drupal.org/node/488104 - http://drupal.org/node/488102
CVE ID: CVE-2009-2075 State: PUBLISHED Published: 2009-06-16T19:00:00Z Last Updated: 2024-09-17T04:00:23.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displaying node titles, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35424 - http://drupal.org/node/488092 - http://www.securityfocus.com/bid/35305 - http://drupal.org/node/488104 - http://drupal.org/node/488102
CVE ID: CVE-2009-2076 State: PUBLISHED Published: 2009-06-16T19:00:00Z Last Updated: 2024-09-16T22:41:14.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature. NOTE: vector 2 is only exploitable by users with administer views permissions. Additional Analyst Notes: - CVE Program Container: References: - http://lampsecurity.org/drupal-views-xss-vulnerability - http://drupal.org/node/488082
Program Container: References: - http://lampsecurity.org/drupal-views-xss-vulnerability - http://drupal.org/node/488082 - http://www.securityfocus.com/bid/35304 - http://secunia.com/advisories/35425 - http://drupal.org/node/488068
CVE ID: CVE-2009-2077 State: PUBLISHED Published: 2009-06-16T19:00:00Z Last Updated: 2024-09-17T01:11:33.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1) read unpublished content from anonymous users when a view is already configured to display the content, and (2) read private content in generated queries. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/488082 - http://www.securityfocus.com/bid/35304 - http://secunia.com/advisories/35425 - http://drupal.org/node/488068
CVE ID: CVE-2009-2078 State: PUBLISHED Published: 2009-06-16T19:00:00Z Last Updated: 2024-09-16T18:55:17.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) node title and (2) node body in a tree root page. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/487828 - http://secunia.com/advisories/35421 - http://drupal.org/node/487810 - http://drupal.org/node/487812 - http://www.securityfocus.com/bid/35287
CVE ID: CVE-2009-2079 State: PUBLISHED Published: 2009-06-16T19:00:00Z Last Updated: 2024-09-17T03:43:02.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via (1) vocabulary names, (2) synonyms, and (3) term names. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/487602 - http://lampsecurity.org/drupal-6-taxonomy-ma
tes: - CVE Program Container: References: - http://drupal.org/node/487602 - http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability - http://drupal.org/node/487620 - http://secunia.com/advisories/35391 - http://www.securityfocus.com/bid/35286 - http://drupal.org/node/487818
CVE ID: CVE-2009-2080 State: PUBLISHED Published: 2009-06-16T19:00:00 Last Updated: 2024-08-07T05:36:21.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51029 - http://secunia.com/advisories/35350 - https://www.exploit-db.com/exploits/8917
CVE ID: CVE-2009-2081 State: PUBLISHED Published: 2009-06-16T19:00:00 Last Updated: 2024-08-07T05:36:20.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8928 - http://www.securityfocus.com/bid/35313
CVE ID: CVE-2009-2082 State: PUBLISHED Published: 2009-06-16T20:26:00Z Last Updated: 2024-09-17T00:51:20.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35018 - http://secunia.com/advisories/35154 - http://packetstorm.linuxsecurity.com/0905-exploits/creativecms-sql.txt - http://osvdb.org/54571
CVE ID: CVE-2009-2083 State: PUBLISHED Published: 2009-06-16T20:26:00Z Last Updated: 2024-09-16T19:56:30.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via "Parent and related terms." Additional Analyst Notes: - CVE Program Container: References: - http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability - http://drupal.org/node/487620 - http://secunia.com/advisories/353
rity.org/drupal-6-taxonomy-manager-xss-vulnerability - http://drupal.org/node/487620 - http://secunia.com/advisories/35391 - http://www.securityfocus.com/bid/35286 - http://drupal.org/node/487818
CVE ID: CVE-2009-2084 State: PUBLISHED Published: 2009-06-16T23:00:00 Last Updated: 2024-08-07T05:36:20.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50126 - http://www.vupen.com/english/advisories/2009/1128 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980 - http://s
- http://www.vupen.com/english/advisories/2009/1128 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980 - http://secunia.com/advisories/34831 - http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50127 - http://www.securityfocus.com/bid/34638 - http://www.debian.org/security/2009/dsa-1776
CVE ID: CVE-2009-2085 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T05:36:20.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans (EJB). Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52076 - http://www-1.ibm.com/support/docview.wss?
uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52076 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK83097 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2009-2086 State: REJECTED Published: 2009-08-13T18:00:00Z Last Updated: 2024-09-16T19:20:44.257Z Description: No description available.
CVE ID: CVE-2009-2087 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T05:36:20.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK
ences: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK79275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52078 - http://secunia.com/advisories/34461 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2009-2088 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T05:36:20.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when SPNEGO Single Sign-on (SSO) and disableSecurityPreInvokeOnFilters are configured, allows remote attackers to bypass authentication via a request for a "secure URL," related to a certain invokefilterscompatibility property. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
rences: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52079 - http://www-01.ibm.com/support/docview.wss?uid=swg24022479 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK77465 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2009-2089 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T05:36:20.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when tracing is enabled and a 6.1 to 7.0 migration has occurred, allows remote authenticated users to obtain sensitive information by reading a Migration Trace file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www.securityfocus.com/bid/36156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52081 - http://www-1.ibm.com/support/
securityfocus.com/bid/36156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52081 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK80337 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2009-2090 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T05:36:20.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 allows remote attackers to bypass intended Java Management Extensions (JMX) Management Beans (aka MBeans) access restrictions, and cause a denial of service (daemon stop), via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52082 - http://secunia.com/advisorie
.securityfocus.com/bid/36153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52082 - http://secunia.com/advisories/34461 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK86328
CVE ID: CVE-2009-2091 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T05:36:20.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36157 - http://secunia.com/advisories/34461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52083 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-1.ibm.co
rce.ibmcloud.com/vulnerabilities/52083 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK83308
CVE ID: CVE-2009-2092 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T05:36:20.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52375 - http://www.securityfocus.com/bid/36155 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK89385 - http://www-01.ibm.com/support/docview
tyfocus.com/bid/36155 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK89385 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2009-2093 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T05:36:21.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2292 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608 - http://www-1.ibm.com/support/docview.wss?u
?uid=swg1JR32609 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52393 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607 - http://www-01.ibm.com/support/docview.wss?uid=swg21382117 - http://secunia.com/advisories/36295 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176
CVE ID: CVE-2009-2094 State: PUBLISHED Published: 2009-08-13T18:00:00 Last Updated: 2024-08-07T05:36:21.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/52398 - http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286
CVE ID: CVE-2009-2095 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allow_url_fopen is disabled, directory traversal attacks are possible to include and execute arbitrary local files. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8948
CVE ID: CVE-2009-2096 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8962 - http://secunia.com/advisories/35452
CVE ID: CVE-2009-2097 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog (aka Smart Catalog) allows remote attackers to execute arbitrary SQL commands via the search_text parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.davidsopas.com/2009/06/15/zoki-catalog-sql-injection/ - http://www.securityfocus.com/archive/1/504311/100/0/threaded - http://secunia.com/advisories/35476
CVE ID: CVE-2009-2098 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35387 - https://www.exploit-db.com/exploits/8966 - http://osvdb.org/55177
CVE ID: CVE-2009-2099 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:21.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35379 - https://www.exploit-db.com/exploits/8959 - http://osvdb.org/55113 - http://secunia.com/advisories/35454
CVE ID: CVE-2009-2100 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35378 - http://osvdb.org/55176 - https://www.exploit-db.com/exploits/8946
CVE ID: CVE-2009-2101 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .. (dot dot) in the deleteTorrent parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51088 - https://www.exploit-db.com/exploits/8931
CVE ID: CVE-2009-2102 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote attackers to execute arbitrary SQL commands via the fileid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8968 - http://www.securityfocus.com/bid/35384 - http://osvdb.org/55112 - http://secunia.com/advisories/35465
CVE ID: CVE-2009-2103 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:21.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Frontend MP3 Player (fe_mp3player) 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35394 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/ - http://typo3.org/extensions/repository/view/fe_mp3player/0.2.4/ - http://osvdb.org/55123 - http://secunia.com/advisories/35484
CVE ID: CVE-2009-2104 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:21.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-009/ - http://osvdb.org/55122 - http://typo3.org/extensions/repository/view/ve_guestbook/2.7.2/ - http://www.securityfocus.com/bid/35397 - http://secunia.com/advisories/35483
CVE ID: CVE-2009-2105 State: PUBLISHED Published: 2009-06-17T17:00:00 Last Updated: 2024-08-07T05:36:20.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the References database (t3references) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/t3references/0.1.2/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-008/ - http://osvdb.org/55120 - http://www.securityfocus.com/bid/35392 - http://secunia.com/advisories/35485