Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
wiki-announce/2008-March/000070.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40960 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_11_2/phase3/RELEASE-NOTES - http://www.securitytracker.com/id?1019535 - http://www.vupen.com/english/advisories/2008/0732/references
CVE ID: CVE-2008-1319 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=120468784112145&w=2 - https://www.exploit-db.com/exploits/5213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40997 - h
84112145&w=2 - https://www.exploit-db.com/exploits/5213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40997 - http://secunia.com/advisories/29230 - http://www.securityfocus.com/bid/28097 - http://www.vupen.com/english/advisories/2008/0764/references - http://aluigi.altervista.org/adv/versantcmd-adv.txt - http://www.securityfocus.com/archive/1/489139/100/0/threaded - http://securityreason.com/securityalert/3738
CVE ID: CVE-2008-1320 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (crash) via (1) a long request to FxIAList on TCP port 6162, or (2) an SNMP request with a long community string to FxAgent on UDP port 6161. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28188 - http://www.vupen.com/english/advisories/2008/0839/references - http://securityreason.com/securityalert/3737 - https://exchange.xforc
upen.com/english/advisories/2008/0839/references - http://securityreason.com/securityalert/3737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41082 - http://secunia.com/advisories/29289 - http://www.securityfocus.com/archive/1/489359/100/0/threaded - https://www.exploit-db.com/exploits/5229 - http://aluigi.altervista.org/adv/asgulo-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41086
CVE ID: CVE-2008-1321 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162, or have other impacts via other commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28188 - http://www.vupen.com/english/advisories/2008/0839/references - http://securityreason.com/securityalert/3737 - http://secunia.com/advisories/29289 - http://www.securit
839/references - http://securityreason.com/securityalert/3737 - http://secunia.com/advisories/29289 - http://www.securityfocus.com/archive/1/489359/100/0/threaded - https://www.exploit-db.com/exploits/5229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41084 - http://aluigi.altervista.org/adv/asgulo-adv.txt
CVE ID: CVE-2008-1322 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CPU consumption) or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41080 - http://www.securityfocus.com/bid/28188 - http://www.vupen.com/english/advisories/2008/0839/references - http://securityr
http://www.securityfocus.com/bid/28188 - http://www.vupen.com/english/advisories/2008/0839/references - http://securityreason.com/securityalert/3737 - http://secunia.com/advisories/29289 - http://www.securityfocus.com/archive/1/489359/100/0/threaded - https://www.exploit-db.com/exploits/5229 - http://aluigi.altervista.org/adv/asgulo-adv.txt
CVE ID: CVE-2008-1323 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489294/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41098 - http://securityreason.com/securityalert/3739
CVE ID: CVE-2008-1324 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1325. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489457/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41168 - http://securityreason.com/securityalert/3740 - http://www.securityfocus.
nge.xforce.ibmcloud.com/vulnerabilities/41168 - http://securityreason.com/securityalert/3740 - http://www.securityfocus.com/bid/28218
CVE ID: CVE-2008-1325 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1324. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41151 - http://www.securityfocus.com/bid/28217 - http://www.securityfocus.com/archive/1/489451/100/0/threaded
CVE ID: CVE-2008-1326 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41105 - http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html - http://secunia.com/a
om/vulnerabilities/41105 - http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html - http://secunia.com/advisories/29399
CVE ID: CVE-2008-1327 State: PUBLISHED Published: 2008-03-13T14:00:00 Last Updated: 2024-08-07T08:17:34.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41106 - http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html - http://secunia.com/advi
vulnerabilities/41106 - http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html - http://secunia.com/advisories/29399 - https://lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3%40%3Cissues.struts.apache.org%3E - https://lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db%40%3Cissues.struts.apache.org%3E
CVE ID: CVE-2008-1328 State: PUBLISHED Published: 2008-04-07T18:00:00 Last Updated: 2024-08-07T08:17:34.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary code via unspecified "command arguments." Additional Analyst Notes: - CVE Program Container: References: - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41641 - http://securityreason.com/securityalert/3800 - http://www.securityfocus.com/bid/28616 - http://www.securityfo
es/41641 - http://securityreason.com/securityalert/3800 - http://www.securityfocus.com/bid/28616 - http://www.securityfocus.com/archive/1/490463/100/0/threaded - http://www.securitytracker.com/id?1019788 - http://www.vupen.com/english/advisories/2008/1104/references
CVE ID: CVE-2008-1329 State: PUBLISHED Published: 2008-04-07T18:00:00 Last Updated: 2024-08-07T08:17:34.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary commands, related to "insufficient verification of file uploads." Additional Analyst Notes: - CVE Program Container: References: - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41642 - http://securityreason.com/securityalert/3800 - http://www.securityfocus.co
e.xforce.ibmcloud.com/vulnerabilities/41642 - http://securityreason.com/securityalert/3800 - http://www.securityfocus.com/bid/28616 - http://www.securityfocus.com/archive/1/490463/100/0/threaded - http://www.securitytracker.com/id?1019788 - http://www.vupen.com/english/advisories/2008/1104/references
CVE ID: CVE-2008-1330 State: PUBLISHED Published: 2008-03-18T17:00:00 Last Updated: 2024-08-07T08:17:34.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41223 - http://securitytracker.com/id?1019616 - http://secunia.com/advisories/29409 - https://sec
ud.com/vulnerabilities/41223 - http://securitytracker.com/id?1019616 - http://secunia.com/advisories/29409 - https://secure-support.novell.com/KanisaPlatform/Publishing/732/3263374_f.SAL_Public.html - http://www.securityfocus.com/bid/28265
CVE ID: CVE-2008-1331 State: PUBLISHED Published: 2008-04-02T20:00:00 Last Updated: 2024-08-07T08:17:34.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and "obtain OXO resources" via shell metacharacters in the id2 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5662 - http://www1.alcatel-lucent.com/psirt/statements/2008001/OXOrexec.htm - http://secunia.com/advisories/29798 - http://www.vupen.com/english/advisories/2
/psirt/statements/2008001/OXOrexec.htm - http://secunia.com/advisories/29798 - http://www.vupen.com/english/advisories/2008/1057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41560 - http://www.securityfocus.com/bid/28758 - http://www.securityfocus.com/archive/1/492383/100/0/threaded - http://www.securitytracker.com/id?1020082
CVE ID: CVE-2008-1332 State: PUBLISHED Published: 2008-03-20T00:00:00 Last Updated: 2024-08-07T08:17:34.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html - http://se
Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html - http://secunia.com/advisories/29782 - http://security.gentoo.org/glsa/glsa-200804-13.xml - http://downloads.digium.com/pub/security/AST-2008-003.html - http://www.securityfocus.com/bid/28310 - http://www.securityfocus.com/archive/1/489818/100/0/threaded - http://www.debian.org/security/2008/dsa-1525 - http://secunia.com/advisories/29426 - http://www.asterisk.org/node/48466 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html - http://securitytracker.com/id?1019629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41308 - http://www.vupen.com/englis
ecuritytracker.com/id?1019629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41308 - http://www.vupen.com/english/advisories/2008/0928 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514.html - http://secunia.com/advisories/29957 - http://secunia.com/advisories/29456 - http://secunia.com/advisories/29470
CVE ID: CVE-2008-1333 State: PUBLISHED Published: 2008-03-20T00:00:00 Last Updated: 2024-08-07T08:17:34.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly handled by (1) the ast_verbose logging API call, or (2) the astman_append function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41301 - http://www.securityfocus.com/archive/1/489823/100/0/threaded - http://securitytracker.com/id?1019630 - http://www.securityfocus.com/bid/28311 - htt
m/archive/1/489823/100/0/threaded - http://securitytracker.com/id?1019630 - http://www.securityfocus.com/bid/28311 - http://downloads.digium.com/pub/security/AST-2008-004.html - http://www.debian.org/security/2008/dsa-1525 - http://secunia.com/advisories/29426 - http://www.asterisk.org/node/48466 - http://www.vupen.com/english/advisories/2008/0928 - http://secunia.com/advisories/29456
CVE ID: CVE-2008-1334 State: PUBLISHED Published: 2008-03-13T18:00:00 Last Updated: 2024-08-07T08:17:34.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATH_INFO, as demonstrated by (1) %5C (encoded backslash), (2) '%' (percent), and (3) '~' (tilde). NOTE: the '/' (slash) vector is already covered by CVE-2007-5383. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-1/ - http://ww
ontainer: References: - http://www.gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-1/ - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41271
CVE ID: CVE-2008-1335 State: PUBLISHED Published: 2008-03-13T18:00:00 Last Updated: 2024-08-07T08:17:34.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by sending packets from a source machine with a different endianness than the destination machine, a different vulnerability than CVE-2006-0905. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019533 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2008-002.txt.asc - http:
//securitytracker.com/id?1019533 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2008-002.txt.asc - http://secunia.com/advisories/29180 - http://www.securityfocus.com/bid/28045
CVE ID: CVE-2008-1336 State: PUBLISHED Published: 2008-03-13T18:00:00 Last Updated: 2024-08-07T08:17:34.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0 allows remote attackers to execute arbitrary SQL commands via the categ parameter in a links action to index.php, a different vector than CVE-2008-1122. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41207 - http://www.securityfocus.com/archive/1/488997/100/0/threaded - https://www.exploit-db.com/exploits/5206 - http://www.securityfocus.com/archive/1/490886
chive/1/488997/100/0/threaded - https://www.exploit-db.com/exploits/5206 - http://www.securityfocus.com/archive/1/490886/100/0/threaded - https://www.exploit-db.com/exploits/5447
CVE ID: CVE-2008-1337 State: PUBLISHED Published: 2008-03-14T20:00:00 Last Updated: 2024-08-07T08:17:34.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consumption and daemon termination) via an invalid or partial message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489360/100/0/threaded - http://secunia.com/advisories/29316 - http://securityreason.com/securityalert/3741 - http://aluigi.org/poc/timbuto.zip
http://secunia.com/advisories/29316 - http://securityreason.com/securityalert/3741 - http://aluigi.org/poc/timbuto.zip - http://aluigi.altervista.org/adv/timbuto-adv.txt - http://www.vupen.com/english/advisories/2008/0840
CVE ID: CVE-2008-1338 State: PUBLISHED Published: 2008-03-14T20:00:00 Last Updated: 2024-08-07T08:17:34.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a server-DiffFile command with an integer value within a certain range, which causes a loop until all memory is exhausted. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/poc/perforces.zip - http://www.securityfocus.com/bid/28108 - http://www.securityfocus.com/archive/1/489179/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
- http://www.securityfocus.com/archive/1/489179/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41361 - http://secunia.com/advisories/29231 - http://aluigi.altervista.org/adv/perforces-adv.txt - http://securityreason.com/securityalert/3735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41017
CVE ID: CVE-2008-1340 State: PUBLISHED Published: 2008-03-20T00:00:00 Last Updated: 2024-08-07T08:17:34.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption." Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://securityreason.com/securityalert/3755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41250 - http://s
l - http://securityreason.com/securityalert/3755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41250 - http://securitytracker.com/id?1019624 - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.securityfocus.com/bid/28289 - http://www.securityfocus.com/archive/1/489739/100/0/threaded - http://lists.vmware.com/pipermail/security-announce/2008/000008.html - http://www.vupen.com/english/advisories/2008/0905/references - http://www.vmware.com/security/advisories/VMSA-2008-0005.html - http://www.securityfocus.com/bid/28276
CVE ID: CVE-2008-1341 State: PUBLISHED Published: 2008-03-17T16:00:00Z Last Updated: 2024-09-17T04:29:02.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SearchResults.aspx in LaGarde StoreFront 6 before SP8 allows remote attackers to execute arbitrary SQL commands via the CategoryId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29326 - http://www.securityfocus.com/bid/28234 - http://support.storefront.net/Updates/60sp8/default.asp
CVE ID: CVE-2008-1342 State: PUBLISHED Published: 2008-03-17T16:00:00Z Last Updated: 2024-09-16T20:27:11.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the search feature in Polymita BPM-Suite and CollagePortal allow remote attackers to inject arbitrary web script or HTML via the (1) _q and (2) lucene_index_field_value parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29355
CVE ID: CVE-2008-1343 State: PUBLISHED Published: 2008-03-17T16:00:00 Last Updated: 2024-08-07T08:17:34.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41200 - ftp://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt - http://secunia.com/advisories/29370 - http://www.securityfocus.com/bid/28236 - http://www.vupen.com/english/advisories/2008/0871
CVE ID: CVE-2008-1344 State: PUBLISHED Published: 2008-03-17T16:00:00 Last Updated: 2024-08-07T08:17:34.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in a dayview action to plugins/calendar/calendar_backend.php and the (2) page parameter to ajaxp_backend.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28232 - https://www.exploit-db.com/exploits/5246 - http://www.securityfocus.com/archive/1/489678/100/0/threaded - http://secunia.com/advisories/29373 - https:
loits/5246 - http://www.securityfocus.com/archive/1/489678/100/0/threaded - http://secunia.com/advisories/29373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41179