Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=da135eaedc3b - https://sourceforge.net/p/graphicsmagick/bugs/518/ - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4232-1/
CVE ID: CVE-2017-15931 State: PUBLISHED Published: 2017-10-27T18:00:00 Last Updated: 2024-08-05T20:04:50.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/commit/c6d0076c924891ad9948a62d89d0bcdaf965f0cd - http://www.securityfocus.com/bid/101609 - https://github.com/radare/radare2/issues/8731
CVE ID: CVE-2017-15932 State: PUBLISHED Published: 2017-10-27T18:00:00 Last Updated: 2024-08-05T20:04:50.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/commit/44ded3ff35b8264f54b5a900cab32ec489d9e5b9 - https://github.com/radare/radare2/issues/8743 - http://www.securityfocus.com/bid/101614
CVE ID: CVE-2017-15933 State: PUBLISHED Published: 2017-10-27T19:00:00 Last Updated: 2024-08-05T20:13:05.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacity_per_device/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsj730sos/cve/blob/master/Eonweb_module_capacity_per_device_index.php-SQL%20injection%20vulnerability - http://www.securityfocus.com/bid/101615
CVE ID: CVE-2017-15934 State: PUBLISHED Published: 2017-10-27T20:00:00 Last Updated: 2024-08-05T20:13:05.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d
CVE ID: CVE-2017-15935 State: PUBLISHED Published: 2017-10-27T20:00:00 Last Updated: 2024-08-05T20:13:05.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d
CVE ID: CVE-2017-15936 State: PUBLISHED Published: 2017-10-27T20:00:00 Last Updated: 2024-08-05T20:13:05.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent definitions page, the script will get executed. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d
CVE ID: CVE-2017-15937 State: PUBLISHED Published: 2017-10-27T20:00:00 Last Updated: 2024-08-05T20:13:05.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked (e.g., a /var/www pathname typically means Linux or UNIX). Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d
CVE ID: CVE-2017-15938 State: PUBLISHED Published: 2017-10-27T21:00:00 Last Updated: 2024-08-05T20:13:05.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=1b86808a86077722ee4f4
/security.gentoo.org/glsa/201801-01 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=1b86808a86077722ee4f42ff97f836b12420bb2a - https://blogs.gentoo.org/ago/2017/10/24/binutils-invalid-memory-read-in-find_abstract_instance_name-dwarf2-c/ - http://www.securityfocus.com/bid/101610 - https://sourceware.org/bugzilla/show_bug.cgi?id=22209
CVE ID: CVE-2017-15939 State: PUBLISHED Published: 2017-10-27T21:00:00 Last Updated: 2024-08-05T20:13:05.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_b
CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_bug.cgi?id=22205 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=a54018b72d75abf2e74bf36016702da06399c1d9 - http://www.securityfocus.com/bid/101613 - https://blogs.gentoo.org/ago/2017/10/24/binutils-null-pointer-dereference-in-concat_filename-dwarf2-c-incomplete-fix-for-cve-2017-15023/
CVE ID: CVE-2017-15940 State: PUBLISHED Published: 2017-12-11T17:00:00 Last Updated: 2024-08-05T20:13:05.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040006 - http://www.securityfocus.com/bid/102076 - https://security.paloaltonetworks.com/CVE-2017-15940
CVE ID: CVE-2017-15941 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-05T20:13:05.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102446 - http://www.securitytracker.com/id/1040147 - https://security.paloaltonetworks.com/CVE-2017-15941
CVE ID: CVE-2017-15942 State: PUBLISHED Published: 2017-12-11T17:00:00 Last Updated: 2024-08-05T20:13:06.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related to the management interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040004 - http://www.securityfocus.com/bid/102075 - https://security.paloaltonetworks.com/CVE-2017-15942
CVE ID: CVE-2017-15943 State: PUBLISHED Published: 2017-12-11T17:00:00 Last Updated: 2024-08-05T20:13:06.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, and 7.1.x before 7.1.14 allows remote attackers to conduct server-side request forgery (SSRF) attacks and consequently obtain sensitive information via vectors related to parsing of external entities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040005 - http://www.securityfocus.com/bid/102074
CVE Program Container: References: - http://www.securitytracker.com/id/1040005 - http://www.securityfocus.com/bid/102074 - https://security.paloaltonetworks.com/CVE-2017-15943
CVE ID: CVE-2017-15944 State: PUBLISHED Published: 2017-12-11T17:00:00.000Z Last Updated: 2025-10-21T23:45:57.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/44597/ - http://www.securitytracker.com/id/1040007 - http://www.securityfocus.com/bid/102079 - https://www.exploit-db.com/exploits/43342/ - https://security.paloaltonetworks.com/CVE-2017-15944
CVE ID: CVE-2017-15945 State: PUBLISHED Published: 2017-10-27T21:00:00 Last Updated: 2024-08-05T20:13:05.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/630822 - https://security.gentoo.org/glsa/201711-04
CVE ID: CVE-2017-15946 State: PUBLISHED Published: 2017-10-28T00:00:00 Last Updated: 2024-08-05T20:13:05.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the com_tag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the `tag` parameter to index.php. The request method to execute is GET. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101942 - https://www.vulnerability-lab.com/get_content.php?id=2061
CVE ID: CVE-2017-15947 State: PUBLISHED Published: 2017-10-28T00:00:00Z Last Updated: 2024-09-16T19:24:43.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2072
CVE ID: CVE-2017-15948 State: PUBLISHED Published: 2017-10-28T00:00:00Z Last Updated: 2024-09-16T23:37:01.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2067
CVE ID: CVE-2017-15949 State: PUBLISHED Published: 2017-10-28T00:00:00Z Last Updated: 2024-09-17T00:35:35.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the log_id parameter to admin/editgroup.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2076
CVE ID: CVE-2017-15950 State: PUBLISHED Published: 2017-10-31T14:00:00 Last Updated: 2024-08-05T20:13:06.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Oct/64 - http://packetstormsecurity.com/files/162008/SyncBreeze-10.1.16-Buffer-Overflow.html
CVE ID: CVE-2017-15951 State: PUBLISHED Published: 2017-10-28T02:00:00 Last Updated: 2024-08-05T20:13:06.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=363b02dab09b3226f3bd1420dad9c72b79a42a76 - https://github.com/torvalds/linux/commit/363b0
/torvalds/linux.git/commit/?id=363b02dab09b3226f3bd1420dad9c72b79a42a76 - https://github.com/torvalds/linux/commit/363b02dab09b3226f3bd1420dad9c72b79a42a76 - http://www.securityfocus.com/bid/101621 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10
CVE ID: CVE-2017-15953 State: PUBLISHED Published: 2017-10-28T21:00:00 Last Updated: 2024-08-05T20:13:06.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE (.cue) file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/extramaster/bchunk/issues/2 - https://github.com/hessu/bchunk/issues/1 - https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html - https://www.debian.org/security/2017/dsa-4026
CVE ID: CVE-2017-15954 State: PUBLISHED Published: 2017-10-28T21:00:00 Last Updated: 2024-08-05T20:13:06.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processing a malformed CUE (.cue) file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hessu/bchunk/issues/1 - https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html - https://www.debian.org/security/2017/dsa-4026 - https://github.com/extramaster/bchunk/issues/3
CVE ID: CVE-2017-15955 State: PUBLISHED Published: 2017-10-28T21:00:00 Last Updated: 2024-08-05T20:13:06.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE (.cue) file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hessu/bchunk/issues/2 - https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html - https://www.debian.org/security/2017/dsa-4026 - https://github.com/extramaster/bchunk/issues/4
CVE ID: CVE-2017-15956 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144456/ConverTo-Video-Downloader-And-Converter-1.4.1-Arbitrary-File-Download.html
CVE ID: CVE-2017-15957 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144431/Ingenious-School-Management-System-2.3.0-Arbitrary-File-Upload.html - https://www.exploit-db.com/exploits/43102/
CVE ID: CVE-2017-15958 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144430/D-Park-Pro-Domain-Parking-Script-1.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43101/
CVE ID: CVE-2017-15959 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different vulnerability than CVE-2007-6576. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43100/ - https://packetstormsecurity.com/files/144428/Adult-Script-Pro-2.2.4-SQL-Injection.html
CVE ID: CVE-2017-15960 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144429/Article-Directory-Script-3.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43099/
CVE ID: CVE-2017-15961 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43098/ - https://packetstormsecurity.com/files/144432/iProject-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2017-15962 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: iStock Management System 1.0 allows Arbitrary File Upload via user/profile. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144433/iStock-Management-System-1.0-Arbitrary-File-Upload.html - https://www.exploit-db.com/exploits/43097/
CVE ID: CVE-2017-15963 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144434/iTech-Gigs-Script-1.21-SQL-Injection.html - https://www.exploit-db.com/exploits/43096/
CVE ID: CVE-2017-15964 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144082/Job-Board-Software-1.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43095/
CVE ID: CVE-2017-15965 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144435/Joomla-NS-Download-Shop-2.2.6-SQL-Injection.html - http://www.securityfocus.com/bid/101624 - https://www.exploit-db.com/exploits/43094/
CVE ID: CVE-2017-15966 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101694 - https://packetstormsecurity.com/files/144436/Joomla-Zh-YandexMap-6.1.1.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43093/
CVE ID: CVE-2017-15967 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144437/Mailing-List-Manager-Pro-3.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43092/
CVE ID: CVE-2017-15968 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43091/ - https://packetstormsecurity.com/files/144438/MyBuilder-Clone-1.0-SQL-Injection.html
CVE ID: CVE-2017-15969 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_catalog/category. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43090/ - https://packetstormsecurity.com/files/144439/PG-All-Share-Video-1.0-SQL-Injection.html
CVE ID: CVE-2017-15970 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144440/PHP-CityPortal-2.0-SQL-Injection.html - https://www.exploit-db.com/exploits/43089/
CVE ID: CVE-2017-15971 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15972. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43088/ - https://packetstormsecurity.com/files/144441/Same-Sex-Dating-Software-Pro-1.0-SQL-Injection.html
CVE ID: CVE-2017-15972 State: PUBLISHED Published: 2017-10-29T06:00:00 Last Updated: 2024-08-05T20:13:06.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15971. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43087/ - https://packetstormsecurity.com/files/144442/SoftDatepro-Dating-Social-Network-1.3-SQL-Injection.html