Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2740 State: PUBLISHED Published: 2009-08-19T17:00:00 Last Updated: 2024-08-07T05:59:57.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/505881/100/0/threaded - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214665
CVE ID: CVE-2009-2741 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T05:59:57.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53189 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56367
CVE ID: CVE-2009-2742 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T05:59:57.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Eclipse Help in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53342 - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK78917 - http://www.vupen.com/english/advisories/2009/2721
CVE ID: CVE-2009-2743 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T05:59:57.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not properly handle an exception occurring after use of wsadmin scripts and configuration of JAAS-J2C Authentication Data, which allows local users to obtain sensitive information by reading the First Failure Data Capture (FFDC) log file. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1PK86137 - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://secunia.com/a
m/support/docview.wss?uid=swg1PK86137 - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://secunia.com/advisories/37796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53343 - http://www.vupen.com/english/advisories/2009/2721 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2009-2744 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T05:59:57.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to cause a denial of service via unknown vectors, related to "an error in fixpacks 6.1.0.23 and 6.1.0.25." Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1PK91709 - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53344 - http://www.vupen.com/english/advisories/2009/2721
CVE ID: CVE-2009-2746 State: PUBLISHED Published: 2009-11-16T19:00:00 Last Updated: 2024-08-07T05:59:57.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK87176 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK99477 - http://secunia.com/advisories/37221 -
wss?uid=swg1PK87176 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK99477 - http://secunia.com/advisories/37221 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54227
CVE ID: CVE-2009-2747 State: PUBLISHED Published: 2011-10-30T10:00:00 Last Updated: 2024-08-07T05:59:57.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via a crafted method call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1PK99480 - http://www.ibm.com/support/docview.wss?uid=swg1PK91414 - https://exchange.xforce.ibmcl
ort/docview.wss?uid=swg1PK99480 - http://www.ibm.com/support/docview.wss?uid=swg1PK91414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54228
CVE ID: CVE-2009-2748 State: PUBLISHED Published: 2011-10-30T10:00:00 Last Updated: 2024-08-07T05:59:57.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54229 - http://www.ibm.com/support/docview.wss?uid=swg1PK92057 - http://www.ibm.com/support/docview.wss?uid=swg1PK99481
CVE ID: CVE-2009-2749 State: PUBLISHED Published: 2009-12-08T17:00:00 Last Updated: 2024-08-07T05:59:57.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM00435 - http://www-01.ibm.com/support/docview.wss?uid=swg27017328 - http://www.securityfocus.com/bid/37392 - http://www.vupen.com/english/advisories/2009/3598 - https
wss?uid=swg27017328 - http://www.securityfocus.com/bid/37392 - http://www.vupen.com/english/advisories/2009/3598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54494
CVE ID: CVE-2009-2750 State: PUBLISHED Published: 2010-02-04T18:00:00 Last Updated: 2024-08-07T05:59:57.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended configuration properties, which allows remote authenticated users to obtain unspecified data access via a property query. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24025456 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55744 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ66279
CVE ID: CVE-2009-2751 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-07T05:59:57.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56089 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR35136 - http://www-01.ibm.com/support/docview.wss?uid=swg21418443
CVE ID: CVE-2009-2752 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-07T05:59:57.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1JR35199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56090 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR35136 - http://www-01.ibm.com/support/docview.wss?uid=swg21418445
CVE ID: CVE-2009-2753 State: PUBLISHED Published: 2010-03-05T16:00:00 Last Updated: 2024-08-07T05:59:57.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3, allow remote attackers to execute arbitrary code via a crafted parameter size. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38731 - http://www.vupen.com/english/advisories/2010/0508 - http://www.ibm.com/support/docview.wss?uid=swg1IC553
isories/38731 - http://www.vupen.com/english/advisories/2010/0508 - http://www.ibm.com/support/docview.wss?uid=swg1IC55329 - http://www.ibm.com/support/docview.wss?uid=swg1IC55330 - http://www.zerodayinitiative.com/advisories/ZDI-10-022 - http://securitytracker.com/id?1023669 - http://www.securityfocus.com/archive/1/509789/100/0/threaded - http://www.securityfocus.com/bid/38471
CVE ID: CVE-2009-2754 State: PUBLISHED Published: 2010-03-05T16:00:00 Last Updated: 2024-08-07T05:59:57.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code via a crafted parameter size that triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38731 - http://www.securityfocus.com/archiv
Notes: - CVE Program Container: References: - http://secunia.com/advisories/38731 - http://www.securityfocus.com/archive/1/509793/100/0/threaded - http://www.vupen.com/english/advisories/2010/0508 - http://www.ibm.com/support/docview.wss?uid=swg1IC55329 - http://www.ibm.com/support/docview.wss?uid=swg1IC55330 - http://www.zerodayinitiative.com/advisories/ZDI-10-023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56586 - http://www.vupen.com/english/advisories/2010/0509 - http://knowledgebase.emc.com/emcice/login.do?sType=ax1990&sName=1204&id=emc183834 - http://www.securityfocus.com/bid/38472
CVE ID: CVE-2009-2761 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T05:59:57.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional might allow local users to gain privileges via a malicious antivir.exe file in the "C:\Program Files\avira\" directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/55647 - http://www.vupen.com/english/advisories/2008/3130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46568 - http://archives.neohapsis.com/archives/bugtraq/20
08/3130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46568 - http://archives.neohapsis.com/archives/bugtraq/2009-01/0146.html - http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html
CVE ID: CVE-2009-2762 State: PUBLISHED Published: 2009-08-13T16:00:00 Last Updated: 2024-08-07T05:59:57.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array variable in a resetpass (aka rp) action, which bypasses a check that assumes that $key is not an array. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/development/2009/08/2-8-4-security-release/ - http://core.trac.wordpress.org/changeset/11798 - http://www.exploit-db.com/exploits/9410 - https://exchange.xforce.ibmcl
http://core.trac.wordpress.org/changeset/11798 - http://www.exploit-db.com/exploits/9410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52382 - http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.html - http://www.securityfocus.com/bid/36014 - http://www.securitytracker.com/id?1022707 - http://secunia.com/advisories/36237
CVE ID: CVE-2009-2764 State: PUBLISHED Published: 2009-08-14T15:00:00 Last Updated: 2024-08-07T05:59:57.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application crash) via a certain DIV element in conjunction with SCRIPT elements that have empty contents and no reference to a valid external script location. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35941 - http://www.exploit-db.com/exploits/9362
CVE ID: CVE-2009-2765 State: PUBLISHED Published: 2009-08-14T15:00:00 Last Updated: 2024-08-07T05:59:57.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35742 - http://www.exploit-db.com/exploits/9209 - http://www.dd-wrt.com/ - http://www.osvdb.org/55990 - http://www.theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln/ - http://isc.sans.org/diary.html?storyid=6853 - http://
p://www.theregister.co.uk/2009/07/21/critical_ddwrt_router_vuln/ - http://isc.sans.org/diary.html?storyid=6853 - http://securitytracker.com/id?1022596 - http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173 - http://metasploit.com/svn/framework3/trunk/modules/exploits/linux/http/ddwrt_cgibin_exec.rb
CVE ID: CVE-2009-2766 State: PUBLISHED Published: 2009-08-14T15:00:00 Last Updated: 2024-08-07T05:59:57.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9209 - http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173
CVE ID: CVE-2009-2767 State: PUBLISHED Published: 2009-08-14T15:00:00 Last Updated: 2024-08-07T05:59:57.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36200 - http://lkml.org/lkml/2009/8/4/40 - http://www.vupen.com/english/advisories/2009/2197 - http://www.ubuntu.com/usn/USN-852-1 - http://www.openwall.com/lists/oss-secu
ww.vupen.com/english/advisories/2009/2197 - http://www.ubuntu.com/usn/USN-852-1 - http://www.openwall.com/lists/oss-security/2009/08/06/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70d715fd0597f18528f389b5ac59102263067744 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52317 - http://lkml.org/lkml/2009/8/4/28 - http://secunia.com/advisories/37105
CVE ID: CVE-2009-2768 State: PUBLISHED Published: 2009-08-14T15:00:00 Last Updated: 2024-08-07T05:59:57.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an "uninitialized cred pointer." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36278 - http://www.openwall.com/lists/oss-security/2009/08/13/1 - http://lkml.org/lkml/20
http://secunia.com/advisories/36278 - http://www.openwall.com/lists/oss-security/2009/08/13/1 - http://lkml.org/lkml/2009/6/22/91 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52909 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905 - http://www.securityfocus.com/bid/36037 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666
CVE ID: CVE-2009-2769 State: PUBLISHED Published: 2009-08-14T17:00:00 Last Updated: 2024-08-07T05:59:57.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36033 - http://www.exploit-db.com/exploits/9297
CVE ID: CVE-2009-2770 State: PUBLISHED Published: 2009-08-14T17:00:00 Last Updated: 2024-08-07T05:59:57.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded value of admin for the myadminname cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51860 - http://www.exploit-db.com/exploits/9219
CVE ID: CVE-2009-2771 State: PUBLISHED Published: 2009-08-14T17:00:00Z Last Updated: 2024-09-17T01:51:34.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/fas-xss.txt - http://osvdb.org/56580 - http://secunia.com/advisories/36025
CVE ID: CVE-2009-2772 State: PUBLISHED Published: 2009-08-14T17:00:00 Last Updated: 2024-08-07T05:59:57.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to (1) quick_search.php and (2) viewprofile.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35906 - http://packetstormsecurity.org/0907-exploits/pgroomate-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/52032 - http://osvdb.org/56538 - http://osvdb.org/56537 - http://www.securityfocus.com/bid/358
cloud.com/vulnerabilities/52032 - http://osvdb.org/56538 - http://osvdb.org/56537 - http://www.securityfocus.com/bid/35814
CVE ID: CVE-2009-2773 State: PUBLISHED Published: 2009-08-14T17:00:00 Last Updated: 2024-08-07T05:59:57.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35972 - http://www.exploit-db.com/exploits/9269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52015 - http://osvdb.org/56573
CVE ID: CVE-2009-2774 State: PUBLISHED Published: 2009-08-14T17:00:00 Last Updated: 2024-08-07T05:59:57.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52641 - http://www.exploit-db.com/exploits/9287 - http://secunia.com/advisories/35972
CVE ID: CVE-2009-2775 State: PUBLISHED Published: 2009-08-14T17:00:00 Last Updated: 2024-08-07T05:59:57.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9288 - http://www.securityfocus.com/bid/35843
CVE ID: CVE-2009-2776 State: PUBLISHED Published: 2009-08-14T17:00:00Z Last Updated: 2024-09-17T01:02:00.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36028 - http://osvdb.org/56575 - http://packetstormsecurity.org/0907-exploits/smartasp-sql.txt
CVE ID: CVE-2009-2777 State: PUBLISHED Published: 2009-08-14T17:00:00 Last Updated: 2024-08-07T05:59:57.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL commands via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36017 - http://www.vupen.com/english/advisories/2009/2023 - http://www.exploit-db.com/exploits/9262 - http://www.osvdb.org/56578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52034
CVE ID: CVE-2009-2778 State: PUBLISHED Published: 2009-08-14T17:00:00 Last Updated: 2024-08-07T05:59:57.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject arbitrary web script or HTML via the key parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52035 - http://secunia.com/advisories/36017 - http://www.vupen.com/english/advisories/2009/2023 - http://www.exploit-db.com/exploits/9262
CVE ID: CVE-2009-2779 State: PUBLISHED Published: 2009-08-17T16:00:00Z Last Updated: 2024-09-17T01:16:35.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36095 - http://osvdb.org/56639 - http://packetstormsecurity.org/0907-exploits/ajmatrixdna-sql.txt