Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
g/interchange/5.6/ANNOUNCEMENT-5.6.0.txt - http://secunia.com/advisories/30346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42580 - http://www.vupen.com/english/advisories/2008/1621/references - http://www.securityfocus.com/bid/28987 - http://www.securityfocus.com/bid/29334
CVE ID: CVE-2008-2424 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt - http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt - http://secunia.com/advisories/30346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42583 - http://www.vupen.com/english/advisories/2008/1621/references
CVE ID: CVE-2008-2425 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42800
CVE ID: CVE-2008-2426 State: PUBLISHED Published: 2008-06-02T14:00:00 Last Updated: 2024-08-07T08:58:02.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a PNM image with a crafted header, related to the load function in src/modules/loaders/loader_pnm.c; or (2) a crafted XPM image, related to the load function in src/modules/loader_xpm.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492739/100/0/threaded - https://www.redhat.com/archives/
Container: References: - http://www.securityfocus.com/archive/1/492739/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00030.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42732 - http://secunia.com/advisories/31982 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://www.gentoo.org/security/en/glsa/glsa-200806-03.xml - http://secunia.com/secunia_research/2008-25/advisory/ - http://www.mandriva.com/security/advisories?name=MDVSA-2008:123 - http://www.debian.org/security/2008/dsa-1594 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00113.html - http://secunia.com/advisories/30727 - http:
://www.redhat.com/archives/fedora-package-announce/2008-June/msg00113.html - http://secunia.com/advisories/30727 - http://secunia.com/advisories/30401 - http://www.ubuntu.com/usn/USN-697-1 - http://www.securityfocus.com/bid/29417 - http://secunia.com/advisories/30572 - http://www.vupen.com/english/advisories/2008/1700 - http://secunia.com/advisories/30485 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00052.html - http://securitytracker.com/id?1020146
CVE ID: CVE-2008-2427 State: PUBLISHED Published: 2008-06-24T19:00:00 Last Updated: 2024-08-07T08:58:02.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1897 - http://www.vupen.com/english/advisories/2008/1896 - http://secunia.com/advisories/30789 - http://secunia.com/secunia_research/2008-24/advisory/ - http://www.securityfocus.com/bid/2985
nia.com/advisories/30789 - http://secunia.com/secunia_research/2008-24/advisory/ - http://www.securityfocus.com/bid/29851 - http://securitytracker.com/id?1020340 - http://www.securityfocus.com/archive/1/493505/100/0/threaded - http://securityreason.com/securityalert/3956 - http://secunia.com/advisories/30416 - https://www.exploit-db.com/exploits/5951
CVE ID: CVE-2008-2428 State: PUBLISHED Published: 2008-06-18T19:29:00 Last Updated: 2024-08-07T08:58:02.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) wantusername parameter to account-signup.php, or the (3) receiver parameter to account-inbox.php in a msg action. Additional Analyst Notes: - CVE Program Container: References: - http://www.torrenttrader.org/index.php?showtopic=8879 - http://sourceforge.net/project/shownotes.php?group_id=98584&release_id=545219 - http://secunia.com/advisories/30565 - http://www.securityfocus.com
ject/shownotes.php?group_id=98584&release_id=545219 - http://secunia.com/advisories/30565 - http://www.securityfocus.com/bid/29787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43165 - http://www.securityfocus.com/archive/1/493434/100/0/threaded - http://secunia.com/secunia_research/2008-15/advisory/
CVE ID: CVE-2008-2429 State: PUBLISHED Published: 2008-11-26T01:00:00Z Last Updated: 2024-09-17T00:30:34.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via (1) the catsearch parameter to cal_search.php or (2) the catview parameter to cal_cat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap CVE-2005-1865.2. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30710 - http://secunia.com/secunia_research/2008-28/advisory/
CVE ID: CVE-2008-2430 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T08:58:02.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31317 - http://securityreason.com/securityalert/3976 - http://www.securitytracker.com/id?1020429 - http://security.gentoo.org/glsa/glsa-200807-13.xml - http://www.videolan.org/developers/vlc/NEWS - https://oval.cisecurity.org/repository/search/definit
glsa-200807-13.xml - http://www.videolan.org/developers/vlc/NEWS - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14344 - http://www.vupen.com/english/advisories/2008/1995/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14769 - http://www.securityfocus.com/archive/1/493849/100/0/threaded - http://secunia.com/secunia_research/2008-29/advisory/ - http://secunia.com/advisories/30601 - http://www.securityfocus.com/bid/30058
CVE ID: CVE-2008-2431 State: PUBLISHED Published: 2008-11-26T01:00:00 Last Updated: 2024-08-07T08:58:02.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint ActiveX control (aka ienipp.ocx) with (1) a long third argument to the GetDriverFile method; a long first argument to the (2) GetPrinterURLList or (3) GetPrinterURLList2 method; (4) a long argument to the GetFileList method; a long argument to the (5) GetServerVersion, (6) GetResourceList, or (7) DeleteResource method, related to nipplib.dll; a long uploadPath argument to the (8) UploadPri
) GetResourceList, or (7) DeleteResource method, related to nipplib.dll; a long uploadPath argument to the (8) UploadPrinterDriver or (9) UploadResource method, related to URIs; (10) a long seventh argument to the UploadResource method; a long string in the (11) second, (12) third, or (13) fourth argument to the GetDriverSettings method, related to the IppGetDriverSettings function in nipplib.dll; or (14) a long eighth argument to the UploadResourceToRMS method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2008-27/advisory/ - http://secunia.com/advisories/30667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44616 - http://www.se
sory/ - http://secunia.com/advisories/30667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44616 - http://www.securityfocus.com/bid/30813
CVE ID: CVE-2008-2432 State: PUBLISHED Published: 2008-11-26T01:00:00Z Last Updated: 2024-09-17T02:01:41.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30667 - http://secunia.com/secunia_research/2008-30/advisory/ - http://www.securityfocus.com/bid/30813
CVE ID: CVE-2008-2433 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T08:58:02.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which makes it easier for remote attackers to hijack sessions via brute-force attacks. NOTE: this can be leveraged for code execution through an unspecified "manipulation of the configuration." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44597 - h
nal Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44597 - http://securityreason.com/securityalert/4191 - http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2402_readme.txt - http://secunia.com/secunia_research/2008-31/advisory/ - http://www.trendmicro.com/ftp/documentation/readme/Readme_WFBS5%200_EN_CriticalPatch1404.txt - http://secunia.com/advisories/31373 - http://www.vupen.com/english/advisories/2008/2421 - http://www.securityfocus.com/bid/30792 - http://www.securitytracker.com/id?1020732 - http://www.securityfocus.com/archive/1/495670/100/0/threaded
CVE ID: CVE-2008-2434 State: PUBLISHED Published: 2008-12-23T18:13:00 Last Updated: 2024-08-07T08:58:02.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to download an arbitrary library file onto a client system via a "custom update server" argument. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/541025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47524 - http://securityreason.com/securityalert/4802 - http://secunia.com/advis
ange.xforce.ibmcloud.com/vulnerabilities/47524 - http://securityreason.com/securityalert/4802 - http://secunia.com/advisories/31337 - http://www.vupen.com/english/advisories/2008/3464 - http://www.securityfocus.com/archive/1/499495/100/0/threaded - http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646 - http://secunia.com/secunia_research/2008-32/ - http://www.securityfocus.com/bid/32965 - http://osvdb.org/50941
CVE ID: CVE-2008-2435 State: PUBLISHED Published: 2008-12-23T18:13:00 Last Updated: 2024-08-07T08:58:02.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers to execute arbitrary code via a crafted notifyOnLoadNative callback function. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/702628 - http://www.securityfocus.com/archive/1/499478/100/0/threaded - http://www.vupen.com/english/advisories/2008/3464 - http://www.securityfocus.com/bid/32950 - http://www.osvdb.org/50843 - http://secunia
.com/english/advisories/2008/3464 - http://www.securityfocus.com/bid/32950 - http://www.osvdb.org/50843 - http://secunia.com/advisories/31583 - http://securitytracker.com/id?1021481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47523 - http://secunia.com/secunia_research/2008-34/ - http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1038646&id=EN-1038646
CVE ID: CVE-2008-2436 State: PUBLISHED Published: 2008-09-05T16:00:00 Last Updated: 2024-08-07T08:58:02.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x before 4.38 and 5.x before 5.08 allow remote attackers to execute arbitrary code via a long argument to the (1) GetPrinterURLList, (2) GetPrinterURLList2, or (3) GetFileList2 function in the Novell iPrint ActiveX control in ienipp.ocx. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4228 - http://www.securitytracker.com/id?1020806 - http://secunia.com/secuni
: - http://securityreason.com/securityalert/4228 - http://www.securitytracker.com/id?1020806 - http://secunia.com/secunia_research/2008-33/advisory - https://exchange.xforce.ibmcloud.com/vulnerabilities/44853 - http://www.securityfocus.com/archive/1/495940/100/0/threaded - http://www.securityfocus.com/bid/30986 - http://www.vupen.com/english/advisories/2008/2481 - http://secunia.com/advisories/31370
CVE ID: CVE-2008-2437 State: PUBLISHED Published: 2008-09-16T22:00:00 Last Updated: 2024-08-07T08:58:02.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Client Server Messaging Security 3.6 allows remote attackers to execute arbitrary code via an HTTP request containing a long ComputerName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_Win_EN_CriticalPatch_B1367_readme.txt - http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Patch1_W
SCE_7.3_Win_EN_CriticalPatch_B1367_readme.txt - http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Patch1_Win_EN_CriticalPatch_B3060_readme.txt - http://securityreason.com/securityalert/4263 - http://www.vupen.com/english/advisories/2008/2555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45072 - http://www.securityfocus.com/archive/1/496281/100/0/threaded - http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2424_readme.txt - http://www.trendmicro.com/ftp/documentation/readme/CSM_3.6_OSCE_7.6_Win_EN_CriticalPatch_B1195_readme.txt - http://secunia.com/advisories/31342 - http://www.securityfocus.com/bid/31139 - http://secunia.com/secunia_
_readme.txt - http://secunia.com/advisories/31342 - http://www.securityfocus.com/bid/31139 - http://secunia.com/secunia_research/2008-35/ - http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_Win_EN_CriticalPatch_B1361_readme.txt - http://www.securitytracker.com/id?1020860
CVE ID: CVE-2008-2438 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T08:58:02.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted command to TCP port 2954, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1187 - http://www.securityfocus.com/archive/1/503024 - http://osvdb.org/54107 - http://www.securityfocus.com/archive/1/503024 - http://www.securityfocus.com/archive/1/503039/100/0/thread
b.org/54107 - http://www.securityfocus.com/archive/1/503024 - http://www.securityfocus.com/archive/1/503039/100/0/threaded - http://www.securityfocus.com/bid/34738 - http://secunia.com/secunia_research/2008-38/
CVE ID: CVE-2008-2439 State: PUBLISHED Published: 2008-10-03T15:00:00 Last Updated: 2024-08-07T08:58:02.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1372, OfficeScan 8.0 SP1 before build 1222, OfficeScan 8.0 SP1 Patch 1 before build 3087, and Worry-Free Business Security 5.0 before build 1220 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP request. NOTE: some of these details are obtained from third party information. Additional A
versal sequences in an HTTP request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2711 - http://www.securityfocus.com/bid/31531 - http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_Win_EN_CriticalPatch_B1372_Readme.txt - http://www.securitytracker.com/id?1020975 - http://www.trendmicro.com/ftp/documentation/readme/Readme_WFBS5.0_EN_CriticalPatch1414.txt - http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3087_Readme.txt - http://secunia.com/advisories/32097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4559
lPatch_3087_Readme.txt - http://secunia.com/advisories/32097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45597 - http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_SP1_Win_EN_CriticalPatch_B2439_Readme.txt - http://www.securityfocus.com/archive/1/496970/100/0/threaded - http://secunia.com/advisories/31343 - http://www.vupen.com/english/advisories/2008/2712 - http://secunia.com/secunia_research/2008-39/
CVE ID: CVE-2008-2441 State: PUBLISHED Published: 2008-09-04T16:00:00 Last Updated: 2024-08-07T08:58:02.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure ACS 3.x before 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x before 4.1(4) Build 13 Patch 11, and 4.2.x before 4.2(0) Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows remote authenticated users to cause a denial of service (CSRadius and CSAuth service crash) or possibly execute arbitrary code via a crafted RADIUS (1) EAP-Response/Identity, (2) EAP-Response/MD5, or (3) EAP-Response/TLS Message Attribute packet. Additional
ted RADIUS (1) EAP-Response/Identity, (2) EAP-Response/MD5, or (3) EAP-Response/TLS Message Attribute packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020814 - http://www.cisco.com/warp/public/707/cisco-sr-20080903-csacs.shtml - http://secunia.com/advisories/31731 - http://securityreason.com/securityalert/4216 - http://www.securityfocus.com/archive/1/495937/100/0/threaded - http://www.securityfocus.com/bid/30997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44871
CVE ID: CVE-2008-2443 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42399 - https://www.exploit-db.com/exploits/5610 - http://secunia.com/advisories/30244 - http://www.vupen.com/english/advisories/2008/1524/references
CVE ID: CVE-2008-2444 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL commands via the langsel parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42391 - http://www.securityfocus.com/bid/29193 - http://secunia.com/advisories/30186
CVE ID: CVE-2008-2445 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a show action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42383 - https://www.exploit-db.com/exploits/5606 - http://www.securityfocus.com/bid/29188 - http://secunia.com/advisories/30235
CVE ID: CVE-2008-2446 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) userid parameter to (a) profile.php in a "show moreinfo" action; the (2) bildid parameter to (b) picturegallery.php in a shownext action; the (3) id parameter to (c) filebase.php in a freigeben action, (d) schedule.php in a del action, and (e) profile.php in an observe action; and the (4) pmid parameter in a delete action and (5) folderid p
a del action, and (e) profile.php in an observe action; and the (4) pmid parameter in a delete action and (5) folderid parameter in a showfolder action to (f) message.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5606 - http://www.securityfocus.com/bid/29188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42385 - http://secunia.com/advisories/30235
CVE ID: CVE-2008-2447 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42384 - http://secunia.com/advisories/30232 - http://www.securityfocus.com/bid/29185
CVE ID: CVE-2008-2448 State: PUBLISHED Published: 2008-05-27T14:00:00 Last Updated: 2024-08-07T08:58:02.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) admin/duzenle.asp and (b) admin_oku.asp; the (2) kid parameter to (c) kategori.asp and (d) admin_kategori.asp; and unspecified parameters to (e) uye.asp and (f) oku.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42390 - http://www.securityfocus.com/bid/29189 - https://