Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0586 State: PUBLISHED Published: 2010-03-25T20:31:00 Last Updated: 2024-08-07T00:52:19.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=20070 - http://secunia.com/advisories/
ntainer: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=20070 - http://secunia.com/advisories/39069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6625 - http://osvdb.org/63177 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtml
CVE ID: CVE-2010-0587 State: PUBLISHED Published: 2010-03-05T16:00:00Z Last Updated: 2024-09-17T03:07:37.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field, aka Bug ID CSCtc38985. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023670 - http://www.securityfocus.com/bid/38496 - http://www.cisco.com/en/US/products/products_security
ytracker.com/id?1023670 - http://www.securityfocus.com/bid/38496 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
CVE ID: CVE-2010-0588 State: PUBLISHED Published: 2010-03-05T16:00:00Z Last Updated: 2024-09-16T18:14:35.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP (1) RegAvailableLines or (2) FwdStatReq message with an invalid Line number, aka Bug ID CSCtc47823. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38501 - http://securitytracker.com/id?1023670 - http://www.cisco.com/en/US/products/products_security_advis
ocus.com/bid/38501 - http://securitytracker.com/id?1023670 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
CVE ID: CVE-2010-0589 State: PUBLISHED Published: 2010-04-15T17:00:00 Last Updated: 2024-08-07T00:52:19.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b25d01.shtml - http://www.zerodayinitiative.com/advisories/ZDI-10-072/ - http://www.securityfocus.com/bi
visory09186a0080b25d01.shtml - http://www.zerodayinitiative.com/advisories/ZDI-10-072/ - http://www.securityfocus.com/bid/39478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57812 - http://securitytracker.com/id?1023881
CVE ID: CVE-2010-0590 State: PUBLISHED Published: 2010-03-05T16:00:00Z Last Updated: 2024-09-16T19:57:03.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CMSIPUtility component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(3a)su1 and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP Register message, aka Bug ID CSCtc37188. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023670 - http://www.securityfocus.com/bid/38495 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
CVE ID: CVE-2010-0591 State: PUBLISHED Published: 2010-03-05T16:00:00Z Last Updated: 2024-09-16T18:19:04.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID CSCtc62362. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023670 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml - http://www.securityfocus.co
670 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml - http://www.securityfocus.com/bid/38498
CVE ID: CVE-2010-0592 State: PUBLISHED Published: 2010-03-05T16:00:00Z Last Updated: 2024-09-16T19:20:58.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a, 6.x before 6.1(3), 7.0x before 7.0(2), 7.1x before 7.1(2), and 8.x before 8.0(1) allows remote attackers to cause a denial of service (service failure) via a malformed message, aka Bug ID CSCsu31800. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023670 - http://www.securityfocus.com/bid/38497 - http://www.cisco.com/en/US/products/products_security_advisory091
/id?1023670 - http://www.securityfocus.com/bid/38497 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
CVE ID: CVE-2010-0593 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T00:52:19.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business Internet Video Camera before 1.1.2.6, WVC200 Wireless-G PTZ Internet Video Camera before 1.1.1.15, WVC210 Wireless-G PTZ Internet Video Camera before 1.1.1.15, and WVC2300 Wireless-G Business Internet Video Camera before 1.1.2.6 do not properly restrict read access to passwords, which allows context-dependent attackers to obtain sensitive information, related to (1) access by remote authenticated users to a PVC2300 or WVC2300 via a crafted URL, (
sensitive information, related to (1) access by remote authenticated users to a PVC2300 or WVC2300 via a crafted URL, (2) leveraging setup privileges on a WVC200 or WVC210, and (3) leveraging administrative privileges on an RVS4000, aka Bug ID CSCte64726. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b27511.shtml - http://www.securitytracker.com/id?1023906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58034 - http://www.vupen.com/english/advisories/2010/0965 - http://osvdb.org/63978 - http://www.securityfocus.com/bid/39612 - http://secunia.com/advisories/39510
CVE ID: CVE-2010-0594 State: PUBLISHED Published: 2010-05-04T15:00:00Z Last Updated: 2024-09-17T00:26:45.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Router and Security Device Manager (SDM) allows remote attackers to inject arbitrary web script or HTML via unknown vectors, aka Bug ID CSCtb38467. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000014.html - http://jvn.jp/en/jp/JVN14313132/index.html
CVE ID: CVE-2010-0595 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T00:52:19.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other accounts, which makes it easier for remote attackers to obtain privileged access, aka Bug ID CSCtb83495. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024027 - http://www.cisco.com/en/US/prod
st Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024027 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml - http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf - http://www.kb.cert.org/vuls/id/757804 - http://www.securityfocus.com/bid/40380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58893 - http://secunia.com/advisories/39904
CVE ID: CVE-2010-0596 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T00:52:19.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges, via a (1) HTTP or (2) HTTPS request, aka Bug ID CSCtb83607. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024027 - http://www.cisco.com/en/US/products/products_security_advisory0
r: References: - http://securitytracker.com/id?1024027 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml - http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf - http://www.kb.cert.org/vuls/id/757804 - http://secunia.com/advisories/39904
CVE ID: CVE-2010-0597 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T00:52:19.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges or cause a denial of service (device reload), via a (1) XML RPC or (2) XML RPC over HTTPS request, aka Bug ID CSCtb83618. Additional Analyst Notes: - CVE Program Container: References: - http://s
RPC over HTTPS request, aka Bug ID CSCtb83618. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024027 - http://www.securityfocus.com/bid/40386 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml - http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf - http://www.kb.cert.org/vuls/id/757804 - http://secunia.com/advisories/39904
CVE ID: CVE-2010-0598 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T00:52:19.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83631. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024027 - http://www.cisco.com/en/US/products/produc
CVE Program Container: References: - http://securitytracker.com/id?1024027 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml - http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf - http://www.kb.cert.org/vuls/id/757804 - http://secunia.com/advisories/39904
CVE ID: CVE-2010-0599 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T00:52:19.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt XML RPC sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83505. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024027 - http://www.cisco.com/en/US/products/pro
: - CVE Program Container: References: - http://securitytracker.com/id?1024027 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml - http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf - http://www.kb.cert.org/vuls/id/757804 - http://secunia.com/advisories/39904
CVE ID: CVE-2010-0600 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T00:52:19.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which allows remote attackers to read passwords and unspecified other account details via a (1) XML RPC or (2) XML RPC over HTTPS session, aka Bug ID CSCtb83512. Additional Analyst Notes: - CVE Program Container: References: - http://security
r HTTPS session, aka Bug ID CSCtb83512. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024027 - http://www.securityfocus.com/bid/40384 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml - http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf - http://www.kb.cert.org/vuls/id/757804 - http://secunia.com/advisories/39904
CVE ID: CVE-2010-0601 State: PUBLISHED Published: 2010-05-14T20:00:00 Last Updated: 2024-08-07T00:52:19.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug ID CSCsl39126. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/64680 - http://www.securityfocus.com/bid/40117 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c519.shtml
CVE ID: CVE-2010-0602 State: PUBLISHED Published: 2010-05-14T20:00:00 Last Updated: 2024-08-07T00:52:20.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug ID CSCsk32606. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/64688 - http://www.securityfocus.com/bid/40120 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c519.shtml
CVE ID: CVE-2010-0603 State: PUBLISHED Published: 2010-05-14T20:00:00 Last Updated: 2024-08-07T00:52:19.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via a malformed session attribute, aka Bug ID CSCsk40030. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40121 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c519.shtml
CVE ID: CVE-2010-0604 State: PUBLISHED Published: 2010-05-14T20:00:00 Last Updated: 2024-08-07T00:52:19.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via unknown SIP traffic, as demonstrated by "SIP testing," aka Bug ID CSCsk38165. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40122 - http://osvdb.org/64686 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c519.shtml
CVE ID: CVE-2010-0605 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:52:19.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11380 - http://www.securityfocus.com/bid/38166 - http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-SQLi.pdf - http://osticket.com/forums/project.php?issueid=176 - http://secunia.com/advisories/38515
CVE ID: CVE-2010-0606 State: PUBLISHED Published: 2010-02-11T17:00:00Z Last Updated: 2024-09-16T18:55:15.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38166 - http://osticket.com/forums/project.php?issueid=176 - http://secunia.com/advisories/38515 - http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-ReflectedXSS.pdf
CVE ID: CVE-2010-0607 State: PUBLISHED Published: 2010-02-11T17:00:00Z Last Updated: 2024-09-17T01:26:33.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web script or HTML via the Stat_Radio parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38463 - http://osvdb.org/62211 - http://packetstormsecurity.org/1002-exploits/sterlite-xss.txt - http://marc.info/?l=full-disclosure&m=126531284626756&w=2
CVE ID: CVE-2010-0608 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:52:19.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the forums[] parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38368 - http://www.securityfocus.com/bid/37988 - http://packetstormsecurity.org/1001-exploits/novaboard112-sql.txt - http://www.exploit-db.com/exploits/11278 - http://www.osvdb.org/62002
CVE ID: CVE-2010-0609 State: PUBLISHED Published: 2010-02-11T17:00:00Z Last Updated: 2024-09-16T18:34:53.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in header.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the nova_name cookie parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38368 - http://www.osvdb.org/62003
CVE ID: CVE-2010-0610 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:52:19.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the blog parameter in an images action to index.php. NOTE: a separate vector for the id parameter to detail.php may also exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56135 - http://packetstormsecurity.org/1002-exploits/joomlaphotoblog-bsql.txt - http://www
.ibmcloud.com/vulnerabilities/56135 - http://packetstormsecurity.org/1002-exploits/joomlaphotoblog-bsql.txt - http://www.exploit-db.com/exploits/11337
CVE ID: CVE-2010-0611 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:52:19.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/baalsystems-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56147 - http://www.exploit-db.com/exploits/11346 - http://www.securityfocus.com/bid/38139
CVE ID: CVE-2010-0612 State: PUBLISHED Published: 2010-02-11T17:00:00Z Last Updated: 2024-09-17T04:20:18.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in DocumentManager before 4.0 has unknown impact and attack vectors, related to file rights. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/62032 - http://secunia.com/advisories/38441 - http://freshmeat.net/projects/dmanager/releases/311735
CVE ID: CVE-2010-0613 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:52:19.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary local files via directory traversal sequences in a base64-encoded f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38518 - http://www.securityfocus.com/bid/38709
CVE ID: CVE-2010-0614 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:52:19.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter in the (1) question action, and possibly the (2) sub_par or (3) num_quest actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/62177 - http://secunia.com/advisories/38478 - http://www.securityfocus.com/bid/38116 - http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56152 -
ormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56152 - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/ - http://www.securityfocus.com/archive/1/509370/100/0/threaded
CVE ID: CVE-2010-0615 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:52:19.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the reports comment box in a continue_assess action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/62178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56154 - http://secunia.com/advisories/38478 - http://www.securityfocus.com/bid/38116 - http://packetstormsecurity.org/10