Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1041 State: PUBLISHED Published: 2010-03-22T17:23:00Z Last Updated: 2024-09-17T01:00:30.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/63079 - http://www.vupen.com/english/advisories/2010/0656 - http://www-01.ibm.com/support/docview.wss?uid=isg1PM03804 - http://www-01.ibm.com/support/docview.wss?uid=swg27018205&a
http://www-01.ibm.com/support/docview.wss?uid=isg1PM03804 - http://www-01.ibm.com/support/docview.wss?uid=swg27018205&aid=1 - http://www-01.ibm.com/support/docview.wss?uid=swg1IO11283 - http://securitytracker.com/id?1023726 - http://secunia.com/advisories/39025 - http://www.securityfocus.com/bid/38833
CVE ID: CVE-2010-1042 State: PUBLISHED Published: 2010-03-22T17:23:00 Last Updated: 2024-08-07T01:06:52.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57205 - http://www.securityfocus.com/bid/38790
CVE ID: CVE-2010-1043 State: PUBLISHED Published: 2010-03-22T18:17:00 Last Updated: 2024-08-07T01:06:52.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62161 - http://www.exploit-db.com/exploits/11359 - http://secunia.com/advisories/38524
CVE ID: CVE-2010-1044 State: PUBLISHED Published: 2010-03-22T18:17:00 Last Updated: 2024-08-07T01:06:52.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56102 - http://www.securityfocus.com/bid/38082 - http://packetstormsecurity.org/1002-exploits/oputils_5-sql.txt
CVE ID: CVE-2010-1045 State: PUBLISHED Published: 2010-03-22T18:17:00 Last Updated: 2024-08-07T01:06:52.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11352 - http://secunia.com/advisories/38466 - http://www.vupen.com/english/advisories/2010/0322
CVE ID: CVE-2010-1046 State: PUBLISHED Published: 2010-03-22T18:17:00 Last Updated: 2024-08-07T01:06:52.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) userid (username) and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62162 - http://secunia.com/advisories/38440 - http://www.vupen.com/english/advisories/2010/0318 - http://www.exploit-db.com/exploits/11356
CVE ID: CVE-2010-1047 State: PUBLISHED Published: 2010-03-22T18:17:00 Last Updated: 2024-08-07T01:06:52.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a singer action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56110 - http://www.exploit-db.com/exploits/11329 - http://secunia.com/advisories/38469 - http://packetstormsecurity.org/1002-exploits/masa2elmc-sql.txt - http://osvdb.org/62133
CVE ID: CVE-2010-1048 State: PUBLISHED Published: 2010-03-22T18:17:00 Last Updated: 2024-08-07T01:06:52.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter (aka the Comment Box) in a noentryid action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38430 - http://www.vupen.com/english/advisories/2010/0317 - http://www.exploit-db.com/exploits/11357
CVE ID: CVE-2010-1049 State: PUBLISHED Published: 2010-03-22T18:17:00 Last Updated: 2024-08-07T01:06:52.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the (1) noentryid parameter to blog/index.php and the (2) p parameter to index2.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38430 - http://www.vupen.com/english/advisories/2010/0317 - http://www.exploit-db.com/exploits/11357
CVE ID: CVE-2010-1050 State: PUBLISHED Published: 2010-03-22T18:17:00 Last Updated: 2024-08-07T01:06:52.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38494 - http://packetstormsecurity.org/1002-exploits/audistats-sql.txt - http://www.exploit-db.com/exploits/11334
CVE ID: CVE-2010-1051 State: PUBLISHED Published: 2010-03-22T18:17:00Z Last Updated: 2024-09-16T23:20:56.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38494
CVE ID: CVE-2010-1052 State: PUBLISHED Published: 2010-03-22T18:17:00Z Last Updated: 2024-09-16T20:21:34.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) year and (2) mday parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38494
CVE ID: CVE-2010-1053 State: PUBLISHED Published: 2010-03-22T18:17:00 Last Updated: 2024-08-07T01:14:04.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Zen Time Tracking 2.2 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to (a) userlogin.php and (b) managerlogin.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56146 - http://www.exploit-db.com/exploits/11345 - http://secunia.com/advisori
hange.xforce.ibmcloud.com/vulnerabilities/56146 - http://www.exploit-db.com/exploits/11345 - http://secunia.com/advisories/38471
CVE ID: CVE-2010-1054 State: PUBLISHED Published: 2010-03-23T17:00:00 Last Updated: 2024-08-07T01:14:04.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL commands via the RP parameter to (1) fa_default.asp and (2) en_default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/parscms-sql.txt - http://www.securityfocus.com/bid/38734 - http://osvdb.org/62999 - http://osvdb.org/63000 - http://www.securityfocus.com/archive/1/510066/100/0/threaded - http://secunia.com/advisories/39007
CVE ID: CVE-2010-1055 State: PUBLISHED Published: 2010-03-23T17:00:00 Last Updated: 2024-08-07T01:14:04.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the config[forum_installed] parameter to (1) forum/adminLogin.php and (2) forum/userLogin.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://evilc0de.blogspot.com/2010/03/osdate-rfi-vuln.html - http://secunia.com/advisories/
gram Container: References: - http://evilc0de.blogspot.com/2010/03/osdate-rfi-vuln.html - http://secunia.com/advisories/38943 - http://osvdb.org/63005 - http://www.exploit-db.com/exploits/11755 - http://osvdb.org/63006 - http://www.securityfocus.com/bid/38738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56909
CVE ID: CVE-2010-1056 State: PUBLISHED Published: 2010-03-23T17:00:00 Last Updated: 2024-08-07T01:14:04.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38982 - http://packetstormsecurity.org/1003-exploits/joomlarokdownloads-lfi.txt - http://www.securityfocus.com/bid/38741 - http://osvdb.org/62972 - http://www.rockettheme.com/extensions-updates/638-r
- http://www.securityfocus.com/bid/38741 - http://osvdb.org/62972 - http://www.rockettheme.com/extensions-updates/638-rokdownloads-10-released - http://www.exploit-db.com/exploits/11760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56898
CVE ID: CVE-2010-1057 State: PUBLISHED Published: 2010-03-23T17:00:00 Last Updated: 2024-08-07T01:14:05.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a ..// (dot dot slash slash) in the LANG_CODE parameter to common.inc.php in (1) codelib/cfg/, (2) codelib/sys/, (3) staff/, and (4) staff/app/; and (5) staff/file.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibm
om third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56858 - http://osvdb.org/62926 - http://secunia.com/advisories/38947 - http://www.exploit-db.com/exploits/11722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56865 - http://www.securityfocus.com/bid/38731 - http://www.vupen.com/english/advisories/2010/0611
CVE ID: CVE-2010-1058 State: PUBLISHED Published: 2010-03-23T17:00:00 Last Updated: 2024-08-07T01:14:05.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the LANG_CODE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11754 - http://www.securityfocus.com/bid/38731 - http://secunia.com/advisories/38938 - http://packetstormsecurity.org/1003-exploits/addressbookscript-lfi.txt - http://osvdb.org/630
nia.com/advisories/38938 - http://packetstormsecurity.org/1003-exploits/addressbookscript-lfi.txt - http://osvdb.org/63003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56910
CVE ID: CVE-2010-1059 State: PUBLISHED Published: 2010-03-23T17:00:00Z Last Updated: 2024-09-16T22:56:43.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANG_CODE parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38731 - http://secunia.com/advisories/38938 - http://
Program Container: References: - http://www.securityfocus.com/bid/38731 - http://secunia.com/advisories/38938 - http://osvdb.org/63004
CVE ID: CVE-2010-1060 State: PUBLISHED Published: 2010-03-23T17:00:00 Last Updated: 2024-08-07T01:14:05.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the LANG_CODE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38968 - http://www.securityfocus.com/bid/38731 - http://packetstormsecurity.org/1003-exploits/shorturl-lfi.txt - http://www.exploit-db.com/exploits/11775
CVE ID: CVE-2010-1061 State: PUBLISHED Published: 2010-03-23T17:00:00Z Last Updated: 2024-09-16T16:48:20.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANG_CODE parameter to (1) url/app/common.inc.php and (2) codelib/cfg/common.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38968 - http://www.
tion. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38968 - http://www.securityfocus.com/bid/38731
CVE ID: CVE-2010-1062 State: PUBLISHED Published: 2010-03-23T17:00:00 Last Updated: 2024-08-07T01:14:05.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the LANG_CODE parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11773 - http://packetstormsecurity.org/1003-exploits/frecf-lfi.txt - http://www.securityfocus.com/b
loit-db.com/exploits/11773 - http://packetstormsecurity.org/1003-exploits/frecf-lfi.txt - http://www.securityfocus.com/bid/38731 - http://secunia.com/advisories/38967
CVE ID: CVE-2010-1063 State: PUBLISHED Published: 2010-03-23T17:00:00Z Last Updated: 2024-09-17T00:21:55.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANG_CODE parameter to (1) codelib/cfg/common.inc.php, (2) form/app/common.inc.php, and (3) staff/app/common.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References:
details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38731 - http://secunia.com/advisories/38967
CVE ID: CVE-2010-1064 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/ajxgaleri.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38033 - http://www.exploit-db.com/exploits/11023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55446 - http://packetstormsecurity.org/1001-exploits/erolife-disclose.txt
CVE ID: CVE-2010-1065 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11015 - http://secunia.com/advisories/38039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55452
CVE ID: CVE-2010-1066 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for control/db_backup.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11025 - http://secunia.com/advisories/38065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55445 - http://packetstormsecurity.org/1001-exploits/awcm-backup.txt
CVE ID: CVE-2010-1067 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: E-membres 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/bdEMembres.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55503 - http://secunia.com/advisories/38062
CVE ID: CVE-2010-1068 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers to inject arbitrary web script or HTML via the (1) domainid or (2) classid parameter in a class action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38097 - http://www.exploit-db.com/exploits/11092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55509 - http://packetstormsecurity.org/1001-exploits/surgeftp-xss.txt
CVE ID: CVE-2010-1069 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11080 - http://packetstormsecurity.org/1001-exploits/proarcadescripttogame-sql.txt - http://www.securityfocus.com/bid/37703 - http://secunia.com/advisories/38040
CVE ID: CVE-2010-1070 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ImagoScripts Deviant Art Clone allows remote attackers to execute arbitrary SQL commands via the seid parameter in a forums viewcat action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38096 - http://www.exploit-db.com/exploits/11002 - http://www.vupen.com/english/advisories/2010/0031 - http://packetstormsecurity.org/1001-exploits/imagoscriptsdac-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55379 - http://osvdb.org/6
/1001-exploits/imagoscriptsdac-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55379 - http://osvdb.org/61482
CVE ID: CVE-2010-1071 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profil.php in phpMDJ 1.0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11083 - http://packetstormsecurity.org/1001-exploits/phpmdj103-sql.txt - http://secunia.com/advisories/33480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55516 - http://www.securityfocus.com/bid/37698
CVE ID: CVE-2010-1072 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1001-exploits/sniggabocms-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55472 - http://greyhathackers.wordpress.com/2010/01/07/sniggabo-cms-v2-21-xss-vulnerability/ - http://www.exploit-db.com/exploits/11049 - http://secunia.com/advisories/38029
CVE ID: CVE-2010-1073 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the jEmbed-Embed Anything (com_jembed) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a summary action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38112 - http://www.exploit-db.com/exploits/11026 - http://www.vupen.com/english/advisories/2010/0047 - http://osvdb.org/61510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55443
CVE ID: CVE-2010-1074 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T01:14:05.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to watchdog logging. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61587 - http://secunia.com/advisories/38121 - http://www.securityfocus.com/bid/37649 - http://drupal.org/node/676214 - http://drupal.org/node/676216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55453 - http://www.vupen.com/e
14 - http://drupal.org/node/676216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55453 - http://www.vupen.com/english/advisories/2010/0063