Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5315 State: PUBLISHED Published: 2013-08-19T23:00:00 Last Updated: 2024-08-06T17:06:52.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Resource Manager in the MEE submodule (mee.module) in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than CVE-2013-4174. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95625 - http://secunia.com/advisories/54144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85964 - https://drupal.org/node/2049239 - h
.com/advisories/54144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85964 - https://drupal.org/node/2049239 - http://drupalcode.org/project/scald.git/commitdiff/32db1ee - http://drupalcode.org/project/scald.git/blobdiff/9ce68f67a25200afa5256f567ef89bc4b9fd705e..974a5e29f502a58e6a955d69a85bb5f16c1c8b3e:/mee/mee.module - http://seclists.org/fulldisclosure/2013/Jul/224 - https://drupal.org/node/2049415 - http://www.securityfocus.com/bid/61426
CVE ID: CVE-2013-5316 State: PUBLISHED Published: 2013-08-20T14:00:00 Last Updated: 2024-08-06T17:06:52.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61587 - http://packetstormsecurity.com/files/122663/Rite-CMS-1.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/86193 - http://www.exploit-db
t-Forgery-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/86193 - http://www.exploit-db.com/exploits/27315
CVE ID: CVE-2013-5317 State: PUBLISHED Published: 2013-08-20T14:00:00 Last Updated: 2024-08-06T17:06:52.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to cms/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61587 - http://packetstormsecurity.com/files/122663/Rite-CMS-1.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/86194 - http://www.exploit-db.com/exploits/27315
CVE ID: CVE-2013-5318 State: PUBLISHED Published: 2013-08-20T14:00:00 Last Updated: 2024-08-06T17:06:52.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Ginkgo CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the rang parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86395 - http://www.exploit-db.com/exploits/27274 - http://secunia.com/advisories/54485
CVE ID: CVE-2013-5319 State: PUBLISHED Published: 2013-08-20T14:00:00Z Last Updated: 2024-09-17T00:56:04.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the Admin Panel in Atlassian JIRA before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via the name parameter to secure/admin/user/DeleteUser!default.jspa. Additional Analyst Notes: - CVE Program Container: References: - http://cxsecurity.com/issue/WLB-2013080065 - http://secunia.com/advisories/54417 - http://packetstormsecurity.com/files/122721 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5151.php -
/54417 - http://packetstormsecurity.com/files/122721 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5151.php - https://jira.atlassian.com/i#browse/JRA-34160 - https://jira.atlassian.com/secure/ReleaseNote.jspa?projectId=10240&version=33790 - http://www.securityfocus.com/bid/61647 - https://jira.atlassian.com/browse/JRA/fixforversion/33790
CVE ID: CVE-2013-5320 State: PUBLISHED Published: 2013-08-20T14:00:00 Last Updated: 2024-08-06T17:06:52.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before 2.3.9.8 allows remote attackers to inject arbitrary web script or HTML via the txtSubject parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54297 - http://packetstormsecurity.com/files/122608/MojoPortal-2.3.9.7-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/61520 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0200.html - http://osvdb.org/95847 - https://www.mojopo
d/61520 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0200.html - http://osvdb.org/95847 - https://www.mojoportal.com/mojoportal-2398-released - https://exchange.xforce.ibmcloud.com/vulnerabilities/86058
CVE ID: CVE-2013-5321 State: PUBLISHED Published: 2013-08-20T14:00:00Z Last Updated: 2024-09-16T23:11:21.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4] parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5) port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php. Additional Analyst Notes: - CVE
hp; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/26406
CVE ID: CVE-2013-5322 State: PUBLISHED Published: 2013-08-20T18:00:00 Last Updated: 2024-08-06T17:06:52.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-003/ - http://www.securityfocus.com/bid/58055 - http://typo3.org/extensions/repository/view/cooluri - http://secunia.com/advisories/52282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82213 - http://osvdb.org/904
http://secunia.com/advisories/52282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82213 - http://osvdb.org/90415
CVE ID: CVE-2013-5323 State: PUBLISHED Published: 2013-08-20T18:00:00 Last Updated: 2024-08-06T17:06:52.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-004/ - http://typo3.org/extensions/repository/view/static_info_tables - http://osvdb.org/90414 - http://www.securityfocus.com/bid/58056 - http://secunia.com/advisories/5228
tatic_info_tables - http://osvdb.org/90414 - http://www.securityfocus.com/bid/58056 - http://secunia.com/advisories/52283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82212
CVE ID: CVE-2013-5324 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T17:06:52.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363. Additional Analyst Notes: - CVE Program Container: Re
ulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00001.html - http://www.adobe.com/support/security/bulletins/apsb13-21.html - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00002.html - http://rhn.redhat.com/errata/RHSA-2013-1256.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00040.html
CVE ID: CVE-2013-5325 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T17:06:52.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19053 - http://www.adobe.com/support/security/bulletins/apsb13-25.html
CVE ID: CVE-2013-5326 State: PUBLISHED Published: 2013-11-13T01:00:00 Last Updated: 2024-08-06T17:06:52.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the logviewer directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-27.html - http://www.kb.cert.org/vuls/id/295276
CVE ID: CVE-2013-5327 State: PUBLISHED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T17:07:52.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-24.html
CVE ID: CVE-2013-5328 State: PUBLISHED Published: 2013-11-13T01:00:00Z Last Updated: 2024-09-17T02:42:47.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe ColdFusion 10 before Update 12 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-27.html
CVE ID: CVE-2013-5329 State: PUBLISHED Published: 2013-11-13T01:00:00 Last Updated: 2024-08-06T17:06:52.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1518.html - http:/
ditional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1518.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00016.html - http://www.adobe.com/support/security/bulletins/apsb13-26.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00019.html
CVE ID: CVE-2013-5330 State: PUBLISHED Published: 2013-11-13T01:00:00 Last Updated: 2024-08-06T17:06:52.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1518.html - http:/
CVE ID: CVE-2013-5331 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:06:52.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg
Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html - http://rhn.redhat.com/errata/RHSA-2013-1818.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html - http://helpx.adobe.com/security/products/flash-player/apsb13-28.html
CVE ID: CVE-2013-5332 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:06:52.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html - http://rhn.redhat.com/errata/RHSA-20
r: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00075.html - http://rhn.redhat.com/errata/RHSA-2013-1818.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00084.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00008.html - http://helpx.adobe.com/security/products/flash-player/apsb13-28.html
CVE ID: CVE-2013-5333 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:06:52.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5334. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/shockwave/apsb13-29.html
CVE ID: CVE-2013-5334 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:06:52.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5333. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/shockwave/apsb13-29.html
CVE ID: CVE-2013-5335 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5336 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5337 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5338 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5339 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5340 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5341 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5342 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5343 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5344 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5345 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5346 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5347 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5348 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5349 State: PUBLISHED Published: 2014-01-09T00:00:00 Last Updated: 2024-08-06T17:06:52.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted JPEG tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a large JPEG tag value and a small size. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55555 - http://secunia.com/secunia_research/2013-14/ - http://www.securitytracker.com/id/1029527 - https://support.google.com/picasa/answer/53209
CVE ID: CVE-2013-5350 State: PUBLISHED Published: 2014-01-24T15:00:00 Last Updated: 2024-08-06T17:06:52.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object. Additional Analyst Notes: - CVE Program Container: References: - https://www.openpne.jp/archives/12293/ - http://jvn.jp/en/jp/JVN69986880/index.html - http:/
am Container: References: - https://www.openpne.jp/archives/12293/ - http://jvn.jp/en/jp/JVN69986880/index.html - http://secunia.com/advisories/54043 - http://secunia.com/secunia_research/2014-1/ - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000009
CVE ID: CVE-2013-5351 State: PUBLISHED Published: 2014-02-14T19:00:00 Last Updated: 2024-08-06T17:06:52.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89808 - http://secunia.com/advisories/54959 - http://www.irfanview.com/main_history.htm - http://secunia.com/secunia_research/2013-13/ - http://osvdb.org/101065
CVE ID: CVE-2013-5352 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T17:06:52.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary PHP code via the (1) activities_text parameter to services/activities/set or (2) comments_text parameter to services/comments/set, which is not properly handled when executing the preg_replace function with the e modifier. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2013-8/ - http://osvdb.org/100605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89503 - http://www.osvdb.org/10060
3-8/ - http://osvdb.org/100605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89503 - http://www.osvdb.org/100606 - http://www.securityfocus.com/bid/64102 - http://secunia.com/advisories/53936
CVE ID: CVE-2013-5353 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T17:06:52.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89502 - http://www.securityfocus.com/bid/64102 - http://secunia.com/secunia_research/2013-9/ - http://secunia
rabilities/89502 - http://www.securityfocus.com/bid/64102 - http://secunia.com/secunia_research/2013-9/ - http://secunia.com/advisories/53936 - http://osvdb.org/100604
CVE ID: CVE-2013-5354 State: PUBLISHED Published: 2013-12-09T16:00:00 Last Updated: 2024-08-06T17:06:52.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) fb_user_id or (2) tw_user_id parameter to signup. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100603 - http://www.securityfocus.com/bid/64102 - http://secunia.com/secunia_research/2013-10 - http://secunia.com/advisories/53936
CVE ID: CVE-2013-5355 State: PUBLISHED Published: 2013-12-09T16:00:00 Last Updated: 2024-08-06T17:06:52.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow remote attackers to hijack the authentication of administrators for requests that (1) change configuration settings or (2) create new administrative users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64102 - http://secunia.com/secunia_research/2013-11 - http://osvdb.org/100608 - http://secunia.com/advisories/53936
CVE ID: CVE-2013-5356 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T17:06:52.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allows remote attackers to bypass authentication via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89505 - http://www.securityfocus.com/bid/64102 - http://secunia.com/secunia_research/2013-12/ - http://secunia.com/advisories/53936