Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-6485 State: REJECTED Published: 2020-07-10T14:20:39 Last Updated: 2020-07-10T14:20:39 Description: No description available.
CVE ID: CVE-2012-6486 State: REJECTED Published: 2020-07-10T14:21:19 Last Updated: 2020-07-10T14:21:19 Description: No description available.
CVE ID: CVE-2012-6487 State: REJECTED Published: 2020-07-10T14:22:01 Last Updated: 2020-07-10T14:22:01 Description: No description available.
CVE ID: CVE-2012-6488 State: REJECTED Published: 2020-07-10T14:22:39 Last Updated: 2020-07-10T14:22:39 Description: No description available.
CVE ID: CVE-2012-6489 State: REJECTED Published: 2020-07-10T14:23:20 Last Updated: 2020-07-10T14:23:20 Description: No description available.
CVE ID: CVE-2012-6490 State: REJECTED Published: 2020-07-10T14:24:16 Last Updated: 2020-07-10T14:24:16 Description: No description available.
CVE ID: CVE-2012-6491 State: REJECTED Published: 2020-07-10T14:24:59 Last Updated: 2020-07-10T14:24:59 Description: No description available.
CVE ID: CVE-2012-6492 State: REJECTED Published: 2020-07-10T14:25:45 Last Updated: 2020-07-10T14:25:45 Description: No description available.
CVE ID: CVE-2012-6493 State: PUBLISHED Published: 2014-02-04T17:00:00 Last Updated: 2024-08-06T21:28:39.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/23924 - http://osvdb.org/88923 - http://archives.neohapsis.com/archives/bugtraq/2013-01/0014.html - https://community.rapid7.com/docs/DOC-2155#release1 - http://packetstormsecurity
om/archives/bugtraq/2013-01/0014.html - https://community.rapid7.com/docs/DOC-2155#release1 - http://packetstormsecurity.com/files/119260/Nexpose-Security-Console-Cross-Site-Request-Forgery.html
CVE ID: CVE-2012-6494 State: PUBLISHED Published: 2020-01-25T18:41:34 Last Updated: 2024-08-06T21:28:39.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80982
CVE ID: CVE-2012-6495 State: PUBLISHED Published: 2013-01-03T01:00:00Z Last Updated: 2024-09-16T23:26:18.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged with CVE-2012-6081 to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://moinmo.in/MoinMoinRelease1.9 - http://moinmo.in/SecurityFixes - http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f
- http://moinmo.in/MoinMoinRelease1.9 - http://moinmo.in/SecurityFixes - http://hg.moinmo.in/moin/1.9/rev/7e7e1cbb9d3f - http://www.debian.org/security/2012/dsa-2593 - https://bugs.launchpad.net/ubuntu/+source/moin/+bug/1094599 - http://www.openwall.com/lists/oss-security/2012/12/29/6 - http://www.openwall.com/lists/oss-security/2012/12/30/4 - http://secunia.com/advisories/51696 - http://ubuntu.com/usn/usn-1680-1
CVE ID: CVE-2012-6496 State: PUBLISHED Published: 2013-01-04T02:00:00 Last Updated: 2024-08-06T21:28:39.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic finders in applications that can use unexpected data types in certain find_by_ method calls. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=889649 - http://rhn.redhat.com/errata/RHSA-2013-0155.html - http://blo
es: - https://bugzilla.redhat.com/show_bug.cgi?id=889649 - http://rhn.redhat.com/errata/RHSA-2013-0155.html - http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts/ - http://rhn.redhat.com/errata/RHSA-2013-0220.html - http://security.gentoo.org/glsa/glsa-201401-22.xml - http://rhn.redhat.com/errata/RHSA-2013-0154.html - https://groups.google.com/group/rubyonrails-security/msg/23daa048baf28b64?dmode=source&output=gplain - http://www.securityfocus.com/bid/57084 - http://rhn.redhat.com/errata/RHSA-2013-0544.html
CVE ID: CVE-2012-6497 State: PUBLISHED Published: 2013-01-04T02:00:00 Last Updated: 2024-08-06T21:28:39.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Authlogic gem for Ruby on Rails, when used with certain versions before 3.2.10, makes potentially unsafe find_by_id method calls, which might allow remote attackers to conduct CVE-2012-6496 SQL injection attacks via a crafted parameter in environments that have a known secret_token value, as demonstrated by a value contained in secret_token.rb in an open-source product. Additional Analyst Notes: - CVE Program Container: References: - http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-
gram Container: References: - http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts/ - http://openwall.com/lists/oss-security/2013/01/03/12 - http://phenoelit.org/blog/archives/2012/12/21/let_me_github_that_for_you/index.html - http://www.securityfocus.com/bid/57084
CVE ID: CVE-2012-6498 State: PUBLISHED Published: 2013-01-08T15:00:00Z Last Updated: 2024-09-16T21:03:49.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file, as exploited in the wild in October 2012. Additional Analyst Notes: - CVE Program Container: References: - http://www.youtube.com/watch?v=CfvTCSS3LGY - http://thaicert.or.th/alerts/admin/2012/al2012ad025.html
CVE ID: CVE-2012-6499 State: PUBLISHED Published: 2013-01-12T02:00:00Z Last Updated: 2024-09-16T16:14:17.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_to parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51357 - http://www.exploit-db.com/exploits/18350 - http://www.osvdb.org/82584
CVE ID: CVE-2012-6500 State: PUBLISHED Published: 2013-01-12T02:00:00Z Last Updated: 2024-09-16T19:00:55.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fileget parameter in a profile action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51360 - http://www.exploit-db.com/exploits/18347 - http://www.osvdb.org/82585
CVE ID: CVE-2012-6501 State: PUBLISHED Published: 2013-01-12T02:00:00 Last Updated: 2024-08-06T21:28:39.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KillProcess method in the HP PKI ActiveX control (HPPKI.ocx) before 1.2.0.1 allows remote attackers to cause a denial of service (kill process) via the partial or full name of a process. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47122 - http://www.osvdb.org/78272 - http://www.securityfocus.com/bid/51341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72250
CVE ID: CVE-2012-6502 State: PUBLISHED Published: 2013-01-22T15:00:00Z Last Updated: 2024-09-17T02:32:50.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a \\127.0.0.1\C$\ sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.nsfocus.com/en/2012/advisories_1228/119.html
CVE ID: CVE-2012-6503 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NinjaXplorer component before 1.0.7 for Joomla! has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ninjaforge.com/blog/318-security-vulnerability-discovered-in-ninjaxplorer-upgrade-immediately - http://www.osvdb.org/81630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75161 - http://www.securityfocus.com/bid/53256 - http://secunia.com/advisories/48958
CVE ID: CVE-2012-6504 State: PUBLISHED Published: 2013-01-24T01:00:00Z Last Updated: 2024-09-17T00:21:10.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48988 - http://www.securityfocus.com/bid/53261 - http://www.exploit-db.com/exploits/18788 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0206.html - http://www.osvdb.org/81494
CVE ID: CVE-2012-6505 State: PUBLISHED Published: 2013-01-24T01:00:00Z Last Updated: 2024-09-16T21:56:33.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48988 - http://www.securityfocus.com/bid/53261 - http://www.exploit-db.com/exploits/18788 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0206.html - http://www.osvdb.org/81494
CVE ID: CVE-2012-6506 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/81493 - http://plugins.trac.wordpress.org/changeset?reponame=&old=537613%40zingiri-web-shop&new=537613%40zingiri-web-shop - http://wordpress.org/extend/plugins/zingiri-web-shop/ch
e=&old=537613%40zingiri-web-shop&new=537613%40zingiri-web-shop - http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/ - http://www.securityfocus.com/bid/53278 - http://secunia.com/advisories/48991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75178 - http://www.exploit-db.com/exploits/18787 - http://www.osvdb.org/81492
CVE ID: CVE-2012-6507 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin.php in ChurchCMS 0.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pass parameters in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-04/0178.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75110 - http://www.securityfocus.com/bid/53209 - http://packetstormsecurity.org/files/112106/ChurchCMS-0.0.1-SQL-Injection.html
CVE ID: CVE-2012-6508 State: PUBLISHED Published: 2013-01-24T01:00:00Z Last Updated: 2024-09-16T19:50:56.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; (2) create a user or (3) create a sub user via a sub_accounts action in the home module to USERS/index.php; or (4) change profile information via an edit action in the profile module to USERS/index.php. Additional Analyst Notes: - CVE Program Conta
e information via an edit action in the profile module to USERS/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/112226/Car-Portal-CMS-3.0-CSRF-XSS-Shell-Upload.html - http://www.vulnerability-lab.com/get_content.php?id=502 - http://secunia.com/advisories/49010
CVE ID: CVE-2012-6509 State: PUBLISHED Published: 2013-01-24T01:00:00Z Last Updated: 2024-09-16T22:01:55.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53267 - http://packetstormsecurity.org/files/112226/Car-Portal-CMS-3.0-CSRF-XSS-Shell-Upload.html - http://www.vulnerability-lab.com/get_content.php?id=502
CVE ID: CVE-2012-6510 State: PUBLISHED Published: 2013-01-24T01:00:00Z Last Updated: 2024-09-16T19:15:37.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PWRS or (2) Description field when posting a new vehicle; (3) news title when creating news; (4) Name when creating a sub user; (5) group name when creating a group; or (6) dealer name, (7) first name, or (8) last name when changing a profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53267 - http://packetstormsecuri
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53267 - http://packetstormsecurity.org/files/112226/Car-Portal-CMS-3.0-CSRF-XSS-Shell-Upload.html - http://www.vulnerability-lab.com/get_content.php?id=502
CVE ID: CVE-2012-6511 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in organizer/page/users.php in the Organizer plugin 1.2.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) delete_id parameter or (2) extension parameter in an "Update Setting" action to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75105 - http://packetstormsecurity.org/files/112086/WordPress-Organizer-1.2.1-Cross-Site-Scripting-Path-Disclosure.h
ies/75105 - http://packetstormsecurity.org/files/112086/WordPress-Organizer-1.2.1-Cross-Site-Scripting-Path-Disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75106 - http://websecurity.com.ua/5782
CVE ID: CVE-2012-6512 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:40.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Organizer plugin 1.2.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors to (1) plugin_hook.php, (2) page/index.php, (3) page/dir.php (4) page/options.php, (5) page/resize.php, (6) page/upload.php, (7) page/users.php, or (8) page/view.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75107 - http://packetstormsecurity.org/files/112086/WordPress-Organizer-1.2.1-Cross-Site-Scripting-Path-Disclosure.html - http
- http://packetstormsecurity.org/files/112086/WordPress-Organizer-1.2.1-Cross-Site-Scripting-Path-Disclosure.html - http://websecurity.com.ua/5782
CVE ID: CVE-2012-6513 State: PUBLISHED Published: 2013-01-24T01:00:00Z Last Updated: 2024-09-16T23:02:05.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php/Admin_Preferences in gpEasy CMS 2.3.3 allows remote attackers to inject arbitrary web script or HTML via the jsoncallback parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48994 - http://www.securityfocus.com/bid/53269 - http://hauntit.blogspot.com/2012/03/en-gpeasy-233-html-injection-xss.html
CVE ID: CVE-2012-6514 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the nBill (com_nbill) component 2.3.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the message parameter in an income action to administrator/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53275 - http://hauntit.blogspot.com/2012/04/en-nbill-lite-joomla-component-html.html - http://secunia.com/advisories/49004 - http://packetstormsecurity.org/files/112235/Joomla-nBill-Lite-Cross-Site-Scrip
l - http://secunia.com/advisories/49004 - http://packetstormsecurity.org/files/112235/Joomla-nBill-Lite-Cross-Site-Scripting.html
CVE ID: CVE-2012-6515 State: PUBLISHED Published: 2013-01-24T01:00:00Z Last Updated: 2024-09-17T03:12:28.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in the lesson_info module to index.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://hauntit.blogspot.com/2012/04/en-efront-3610-cms-information.html - http://secunia.com/advisories/49003 - http://www.securityfocus.com/bid/53272
CVE ID: CVE-2012-6516 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via the q parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18778 - http://www.securityfocus.com/bid/53235 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0190.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75146
CVE ID: CVE-2012-6517 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) question parameter to in /modules/poll/add.php or (2) question or (3) answer parameter to modules/poll/edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75229 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html - http://www.securityfocus.com/bid/53266 - h
es/75229 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html - http://www.securityfocus.com/bid/53266 - http://www.vulnerability-lab.com/get_content.php?id=518 - http://www.osvdb.org/81561 - http://packetstormsecurity.org/files/112224/DIY-CMS-1.0-Poll-XSS-CSRF-SQL-Injection.html
CVE ID: CVE-2012-6518 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18804 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html - http://www.securityfocus.com/bid/53266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75230 - http://secunia.com/advisories/49011 - ht
us.com/bid/53266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75230 - http://secunia.com/advisories/49011 - http://www.osvdb.org/81562 - http://www.vulnerability-lab.com/get_content.php?id=518 - http://packetstormsecurity.org/files/112224/DIY-CMS-1.0-Poll-XSS-CSRF-SQL-Injection.html
CVE ID: CVE-2012-6519 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18804 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0213.html - http://www.securityfocus.com/bid/53266 - http://secunia.com/advisories/49011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75228 - http://www.osvdb.org/81560 - http://www.vulnerability-
11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75228 - http://www.osvdb.org/81560 - http://www.vulnerability-lab.com/get_content.php?id=518 - http://packetstormsecurity.org/files/112224/DIY-CMS-1.0-Poll-XSS-CSRF-SQL-Injection.html
CVE ID: CVE-2012-6520 State: PUBLISHED Published: 2013-01-24T01:00:00 Last Updated: 2024-08-06T21:28:39.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. NOTE: this issue could not be reproduced by third parties. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73980 - http://www.openwall.com/lists/oss-security/2012/04/13/4 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0046.html - http://www.darksecurity
s/oss-security/2012/04/13/4 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0046.html - http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt - http://www.openwall.com/lists/oss-security/2012/04/12/12 - http://www.securityfocus.com/bid/52425 - http://www.openwall.com/lists/oss-security/2012/04/15/1
CVE ID: CVE-2012-6521 State: PUBLISHED Published: 2013-01-24T01:00:00Z Last Updated: 2024-09-16T20:59:09.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/115253/Elefant-CMS-1.2.0-Cross-Site-Scripting.html - http://secunia.com/advisories/48118