Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4121 State: PUBLISHED Published: 2008-10-21T16:00:00 Last Updated: 2024-08-07T10:08:33.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in a search.quick action to search.php and (2) the name parameter in a sendtofriend action to sendtofriend.php. Additional Analyst Notes: - CVE Program Container: References: - http://cpcommerce.cpradio.org/ - http://www.securitytracker.com/id?1021070 - http://www.securityfocus.com/archive/1/497545/100/0/threaded - http://www.securityfocus.com/bid/31825 - http
d?1021070 - http://www.securityfocus.com/archive/1/497545/100/0/threaded - http://www.securityfocus.com/bid/31825 - http://secunia.com/advisories/32353 - http://securityreason.com/securityalert/4448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45970 - http://www.datensalat.eu/~fabian/cve/CVE-2008-4121-cpcommerce.html
CVE ID: CVE-2008-4122 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T10:08:33.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499354/100/0/threaded - http://securityreason.com/securityalert/4794 - http://www.securityfocus.com/archive/1/499295/100/0/threaded - http://int21.de/cve/CVE-2008-4122-joomla.html
CVE ID: CVE-2008-4125 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:08:33.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45415 - http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/
CVE ID: CVE-2008-4126 State: PUBLISHED Published: 2008-09-18T17:47:00Z Last Updated: 2024-09-16T19:20:50.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099. Additional Analyst Notes: - CVE Program Container: References: - http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changelog - http://www.openw
ferences: - http://packages.debian.org/changelogs/pool/main/p/python-dns/python-dns_2.3.3-1/changelog - http://www.openwall.com/lists/oss-security/2008/09/11/1 - http://www.openwall.com/lists/oss-security/2008/09/16/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490217
CVE ID: CVE-2008-4127 State: PUBLISHED Published: 2008-09-18T17:47:00 Last Updated: 2024-08-07T10:08:33.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service (failure of subsequent image rendering) via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45225 - http://www.securityfocus.com/archive/1/496483/100/0/threaded - http://www.securityfocus.com/bid/31215 - http://securityreas
p://www.securityfocus.com/archive/1/496483/100/0/threaded - http://www.securityfocus.com/bid/31215 - http://securityreason.com/securityalert/4273
CVE ID: CVE-2008-4128 State: PUBLISHED Published: 2008-09-18T20:00:00 Last Updated: 2024-08-07T10:08:34.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/
party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45226 - http://jbrownsec.blogspot.com/2008/09/cisco-0day-released.html - https://www.exploit-db.com/exploits/6477 - http://www.securityfocus.com/bid/31218
CVE ID: CVE-2008-4129 State: PUBLISHED Published: 2008-09-18T20:00:00 Last Updated: 2024-08-07T10:08:34.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload (aka zip upload) functionality. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200811-02.xml - http://secunia.com/advisories/33144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45228 - http://secunia.com/advisorie
secunia.com/advisories/33144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45228 - http://secunia.com/advisories/31912 - http://secunia.com/advisories/32662 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html - http://www.securityfocus.com/bid/31231 - http://gallery.menalto.com/gallery_2.2.6_released - http://gallery.menalto.com/gallery_1.5.9_released - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html
CVE ID: CVE-2008-4130 State: PUBLISHED Published: 2008-09-18T20:00:00 Last Updated: 2024-08-07T10:08:35.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted Flash animation, related to the ability of the animation to "interact with the embedding page." Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200811-02.xml - http://secunia.com/advisories/33144 - http://secunia.com/advisories/31858 - http://secunia.com/advisories/32662 - https://www.redhat.com/archives/fedora-package-announce/20
.com/advisories/31858 - http://secunia.com/advisories/32662 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45227 - http://www.securityfocus.com/bid/31231 - http://gallery.menalto.com/gallery_2.2.6_released - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html
CVE ID: CVE-2008-4131 State: PUBLISHED Published: 2008-09-19T17:04:00 Last Updated: 2024-08-07T10:08:34.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with (1) the -t option and (2) the :tag command in the (a) vi, (b) ex, (c) vedit, (d) view, and (e) edit programs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31895 - http://securitytracker.com/id?1020898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45218 - http://www.securityfocus.com/bid/31229 - http://www.vupen.com/english/a
ange.xforce.ibmcloud.com/vulnerabilities/45218 - http://www.securityfocus.com/bid/31229 - http://www.vupen.com/english/advisories/2008/2614 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237987-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5884 - http://support.avaya.com/elmodocs2/security/ASA-2008-387.htm - http://secunia.com/advisories/31907
CVE ID: CVE-2008-4132 State: PUBLISHED Published: 2008-09-19T17:04:00 Last Updated: 2024-08-07T10:08:34.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239 allows remote attackers to execute arbitrary code via a long first argument to the Archive method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45184 - http://www.securityfocus.com/bid/31200
CVE ID: CVE-2008-4133 State: PUBLISHED Published: 2008-09-19T17:04:00 Last Updated: 2024-08-07T10:08:34.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31050 - http://secunia.com/advisories/31767 - http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0133.html - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808 - http://securityreason.com/securityalert/4276 - https://exchange.x
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808 - http://securityreason.com/securityalert/4276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44961 - http://www.securitytracker.com/id?1020825 - http://www.securityfocus.com/archive/1/496072/100/0/threaded
CVE ID: CVE-2008-4134 State: PUBLISHED Published: 2008-09-19T17:04:00 Last Updated: 2024-08-07T10:08:34.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45181 - http://www.vupen.com/english/advisories/2008/2611 - http://php-realty.com/ - http://www.securityfocus.com/bid/31213 - https://www.exploit-db.com/exploits/6473 - http://securityreaso
p-realty.com/ - http://www.securityfocus.com/bid/31213 - https://www.exploit-db.com/exploits/6473 - http://securityreason.com/securityalert/4277 - http://secunia.com/advisories/31874
CVE ID: CVE-2008-4135 State: PUBLISHED Published: 2008-09-19T17:04:00 Last Updated: 2024-08-07T10:08:34.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symbian OS S60 3rd edition on the Nokia E90 Communicator 07.40.1.2 Ra-6 and Nseries N82 allows remote attackers to cause a denial of service (device crash) via multiple deauthentication (DeAuth) frames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45158 - http://secunia.com/advisories/31857 - http://www.vupen.com/english/advisories/2008/2599 - http://securityreason.com/securityalert/4278 - https://www.exploit-db.co
://www.vupen.com/english/advisories/2008/2599 - http://securityreason.com/securityalert/4278 - https://www.exploit-db.com/exploits/6459
CVE ID: CVE-2008-4136 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Michael Roth Software Personal FTP Server (PFT) 6.0f allows remote attackers to cause a denial of service (service crash) via multiple RETR commands, possibly involving long filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020897 - http://shinnok.evonet.ro/vulns_html/pftp.html - http://www.securityfocus.com/bid/31173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45129 - http://secunia.com/advisories/31852 - https://www.exploit-db.com/exploits/6458
CVE ID: CVE-2008-4137 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footer_file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6475 - http://www.securityfocus.com/bid/31217 - http://www.vupen.com/english/advisories/2008/2610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45213 - http://www.securityfocus.com/bid/31217/exploit
CVE ID: CVE-2008-4138 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45215 - https://www.exploit-db.com/exploits/6478 - http://secunia.com/advisories/31916 - http://www.securityfocus.com/bid/31222 - http://osvdb.org/48166 - http://www.vupen.com/english/advisories/2008/
/31916 - http://www.securityfocus.com/bid/31222 - http://osvdb.org/48166 - http://www.vupen.com/english/advisories/2008/2609
CVE ID: CVE-2008-4139 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/496435/100/0/threaded - http://secunia.com/advisories/31701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45194 - http://www.securityfocus.com/bid/31210
CVE ID: CVE-2008-4140 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31216 - http://secunia.com/advisories/31938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45441 - http://www.securityfocus.com/archive/1/496477/100/0/threaded
CVE ID: CVE-2008-4141 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the web_root parameter to (1) includes/function_core.php and (2) templates/layout_lyrics.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31225 - http://packetstormsecurity.org/0809-exploits/x10media-rfi.txt - http://securityreason.com/securityalert/4294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45224 -
a-rfi.txt - http://securityreason.com/securityalert/4294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45224 - http://secunia.com/advisories/31920 - https://www.exploit-db.com/exploits/6480 - http://www.vupen.com/english/advisories/2008/2608
CVE ID: CVE-2008-4142 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the es_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6483 - http://www.vupen.com/english/advisories/2008/2607 - http://www.exploit-db.com/exploits/15410 - http://secunia.com/advisories/31923 - http://www.securityfocus.com/bid/31119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45220 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
/31119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62994
CVE ID: CVE-2008-4143 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category_search.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0809-exploits/razorcommerce-sql.txt - http://secunia.com/advisories/31733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45145
CVE ID: CVE-2008-4144 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44966 - http://secunia.com/advisories/31740 - https://www.exploit-db.com/exploits/6364 - http://www.securityfocus.com/bid/31015
CVE ID: CVE-2008-4145 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2606 - https://www.exploit-db.com/exploits/6485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45245
CVE ID: CVE-2008-4146 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field and (2) change the visit-counter value via a modified counter field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2606 - https://www.exploit-db.com/exploits/6482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45246 - http://securityreason.com/securityalert/4295
CVE ID: CVE-2008-4147 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an attached file that has a modified Content-Type. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/309802 - http://www.securityfocus.com/bid/31232 - http://secunia.com/advisories/31889 - http://www.vupen.com/english/advisories/2008/2617 - https://exchange.xforce.ibmcloud.co
//secunia.com/advisories/31889 - http://www.vupen.com/english/advisories/2008/2617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45212
CVE ID: CVE-2008-4148 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to composing queries without using the Drupal database API. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2616 - http://www.securityfocus.com/bid/31230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45216 - http://secunia.com/advisories/31877 - http:/
om/bid/31230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45216 - http://secunia.com/advisories/31877 - http://drupal.org/node/309769
CVE ID: CVE-2008-4149 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/309861 - http://www.vupen.com/english/advisories/2008/2618 - http://www.securityfocus.com/bid/31224 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064527.html - http://secunia.com/advisories/31914 - https:/
//lists.grok.org.uk/pipermail/full-disclosure/2008-September/064527.html - http://secunia.com/advisories/31914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45221
CVE ID: CVE-2008-4150 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4296 - https://www.exploit-db.com/exploits/6488 - http://www.securityfocus.com/bid/31240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45217
CVE ID: CVE-2008-4151 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (dot dot) in the neturl parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45238 - http://www.securityfocus.com/archive/1/496511/100/0/threaded - http://securityreason.com/securityalert/4297 - https://www.exploit-db.com/exploits/6487 - http://www.securityfocus.com/bid/31237
CVE ID: CVE-2008-4152 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via a node title. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45222 - http://secunia.com/advisories/31908 - http://www.vupen.com/english/advisories/2008/2615 - http://drupal.org/node/309758 - http://www.securityfocus.com/bid/31236