Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4153 State: PUBLISHED Published: 2008-09-19T18:00:00 Last Updated: 2024-08-07T10:08:34.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a node before displaying comments, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45223 - http://www.vupen.com/english/advisories/2008/2615 - http://drupal.org/node/309758 - http://www.securityfocus.com/bid/31236
CVE ID: CVE-2008-4154 State: PUBLISHED Published: 2008-09-19T23:00:00 Last Updated: 2024-08-07T10:08:34.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the we_objectID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44577 - http://secunia.com/advisories/31560 - https://www.exploit-db.com/exploits/6281 - http://securityreason.com/securityalert/4279 - http://www.securityfocus.com/bid/30778
CVE ID: CVE-2008-4155 State: PUBLISHED Published: 2008-09-19T23:00:00 Last Updated: 2024-08-07T10:08:34.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. (dot dot) in the (1) module or (2) action parameter in (a) www/index.php; the (3) module, (4) ss_module, or (5) ss_action parameter in (b) modules/Module/index.php or (c) modules/Themes/index.php; or the (6) module parameter in (d) inc/vmenu.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4280 - https://www.exploit-db.com/exploits/
CVE Program Container: References: - http://securityreason.com/securityalert/4280 - https://www.exploit-db.com/exploits/6288 - http://secunia.com/advisories/31570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44599 - http://www.securityfocus.com/bid/30784
CVE ID: CVE-2008-4156 State: PUBLISHED Published: 2008-09-19T23:00:00 Last Updated: 2024-08-07T10:08:33.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44611 - http://secunia.com/advisories/31562 - http://www.securityfocus.com/bid/30787 - https://www.exploit-db.com/exploits/6284 - http://securityreason.com/securityalert/4281
CVE ID: CVE-2008-4157 State: PUBLISHED Published: 2008-09-22T16:20:00 Last Updated: 2024-08-07T10:08:34.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27519 - http://www.vupen.com/english/advisories/2008/2552 - http://securityreason.com/securityalert/4291 - http://packetstormsecurity.com/files/130754/Vastal-I-tech-phpVID-1.2.3-SQL-Inj
//securityreason.com/securityalert/4291 - http://packetstormsecurity.com/files/130754/Vastal-I-tech-phpVID-1.2.3-SQL-Injection.html - http://osvdb.org/show/osvdb/48018 - http://www.securityfocus.com/bid/31108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45028 - http://tetraph.com/security/sql-injection-vulnerability/vastal-i-tech-phpvid-1-2-3-sql-injection-security-vulnerabilities/ - http://secunia.com/advisories/31761 - http://packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html - http://seclists.org/fulldisclosure/2015/Mar/58 - https://www.exploit-db.com/exploits/6422
CVE ID: CVE-2008-4158 State: PUBLISHED Published: 2008-09-22T16:20:00 Last Updated: 2024-08-07T10:08:34.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) flag and (2) inc parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45027 - http://securityreason.com/securityalert/4290
CVE ID: CVE-2008-4159 State: PUBLISHED Published: 2008-09-22T16:20:00 Last Updated: 2024-08-07T10:08:34.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page (pageid) parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45029 - http://www.securityfocus.com/bid/31116 - https://www.exploit-db.com/exploits/6423 - http://securityreason.com/securityalert/4283
CVE ID: CVE-2008-4160 State: PUBLISHED Published: 2008-09-22T17:00:00 Last Updated: 2024-08-07T10:08:34.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via unknown vectors related to the Solaris Access Control List (ACL) implementation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45236 - http://www.securitytracker.com/id?1020899 - http://secunia.com/advisories/32125 - http://support.avaya.
bilities/45236 - http://www.securitytracker.com/id?1020899 - http://secunia.com/advisories/32125 - http://support.avaya.com/elmodocs2/security/ASA-2008-383.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-26-242267-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5639 - http://www.vupen.com/english/advisories/2008/2626 - http://www.securityfocus.com/bid/31250
CVE ID: CVE-2008-4161 State: PUBLISHED Published: 2008-09-22T17:00:00 Last Updated: 2024-08-07T10:08:34.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_inv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and order_by parameters in a search_all action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6490 - http://www.securityfocus.com/bid/31248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45233 - http://secunia.com/advisories/31935 - http://securityreason.com/securityalert/428
e.ibmcloud.com/vulnerabilities/45233 - http://secunia.com/advisories/31935 - http://securityreason.com/securityalert/4287
CVE ID: CVE-2008-4162 State: PUBLISHED Published: 2008-09-22T17:00:00 Last Updated: 2024-08-07T10:08:34.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the g_site_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45075 - http://securityreason.com/securityalert/4289 - http://www.securityfocus.com/archive/1/496236/100/0/threaded
CVE ID: CVE-2008-4163 State: PUBLISHED Published: 2008-09-22T17:00:00 Last Updated: 2024-08-07T10:08:34.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service (UDP client handler termination) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2637 - http://marc.info/?l=bind-announce&m=122180244228376&w=2 - http://marc.info/?l=bind-announce&m=122180244228378&w=2 - http://www.securityfocus.com/bid/31252 - http://marc.info/?l=bind-announce&m=122180376630150&w=2 - ht
180244228378&w=2 - http://www.securityfocus.com/bid/31252 - http://marc.info/?l=bind-announce&m=122180376630150&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45234 - http://www.securitytracker.com/id?1020901 - http://secunia.com/advisories/31924
CVE ID: CVE-2008-4164 State: PUBLISHED Published: 2008-09-22T17:00:00 Last Updated: 2024-08-07T10:08:34.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45413 - https://www.exploit-db.com/exploits/6393 - http://securityreason.com/securityalert/4288
CVE ID: CVE-2008-4165 State: PUBLISHED Published: 2008-09-22T18:00:00 Last Updated: 2024-08-07T10:08:34.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31165 - https://qa.mandriva.com/show_bug.cgi?id=43434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45124 - http://www.mandriva.com/en/security/advisories?name=MDVSA
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45124 - http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:193
CVE ID: CVE-2008-4166 State: PUBLISHED Published: 2008-09-22T18:00:00 Last Updated: 2024-08-07T10:08:34.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a denial of service (application crash) by attempting to URL encode a string containing many instances of an invalid character. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45121 - http://www.securityfocus.com/bid/31155 - http://www.securityfocus.com/archive/1/496301/100/0/threaded
CVE ID: CVE-2008-4167 State: PUBLISHED Published: 2008-09-22T18:00:00 Last Updated: 2024-08-07T10:08:34.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) remove an Administrator account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31161 - https://www.exploit-db.com/exploits/6437 - http://secunia.com/advisories/31774 - http://securityreason.com/securityalert/4282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45119
CVE ID: CVE-2008-4168 State: PUBLISHED Published: 2008-09-22T18:00:00 Last Updated: 2024-08-07T10:08:34.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in verify_login.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the form_username parameter (aka user name field). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31148 - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3809 - http://www.securityfocus.com/archive/1/496302/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45107 - http://securityreason.com/securityalert/4285
CVE ID: CVE-2008-4169 State: PUBLISHED Published: 2008-09-22T18:00:00 Last Updated: 2024-08-07T10:08:34.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4286 - http://www.securityfocus.com/bid/31202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45160 - https://www.exploit-db.com/exploits/6467 - http://secunia.com/advisories/31788
CVE ID: CVE-2008-4170 State: PUBLISHED Published: 2008-09-22T18:00:00 Last Updated: 2024-08-07T10:08:34.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: create_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45193 - http://www.securityfocus.com/bid/31209 - http://www.securityfocus.com/archive/1/496417/100/0/threaded - http://securityreason.com/securityalert/4293
CVE ID: CVE-2008-4171 State: PUBLISHED Published: 2008-09-22T18:00:00 Last Updated: 2024-08-07T10:08:34.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forums.invisionpower.com/index.php?showtopic=276512 - http://www.vupen.com/english/advisories/2008/2487 - http://www.securityfocus.com/bid/31288 - http://www.securitytracker.com/id?1020817
CVE ID: CVE-2008-4172 State: PUBLISHED Published: 2008-09-22T18:00:00 Last Updated: 2024-08-07T10:08:34.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote attackers to execute arbitrary SQL commands via the lnkid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45210 - http://www.securityfocus.com/bid/31214 - http://packetstormsecurity.org/0809-exploits/carsvehicle-sql.txt
CVE ID: CVE-2008-4173 State: PUBLISHED Published: 2008-09-22T18:00:00 Last Updated: 2024-08-07T10:08:34.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31238 - https://www.exploit-db.com/exploits/6486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45231 - http://secunia.com/advisories/31931 - http://securityreason.com/securityalert/4292
CVE ID: CVE-2008-4174 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) currentpath, (2) invert, (3) search, and (4) sort parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0809-exploits/dynamicmp3-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45111 - http://www.securityfocus.com/bid/31151
CVE ID: CVE-2008-4175 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45155 - https://www.exploit-db.com/exploits/6466 - http://secunia.com/advisories/31853 - http://www.securityfocus.com/bid/31191 - http://securit
oit-db.com/exploits/6466 - http://secunia.com/advisories/31853 - http://www.securityfocus.com/bid/31191 - http://securityreason.com/securityalert/4299
CVE ID: CVE-2008-4176 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL commands via the oyun parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45098 - https://www.exploit-db.com/exploits/6453 - http://securityreason.com/securityalert/4309
CVE ID: CVE-2008-4177 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45151 - http://www.securityfocus.com/bid/31192 - http://securityreason.com/securityalert/4310 - https://www.exploit-db.com/exploits/6465
CVE ID: CVE-2008-4178 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:35.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6947 - http://www.vupen.com/english/advisories/2008/2993 - http://www.vupen.com/english/advisories/2008/2992 - https://exchange.xforce.
ww.vupen.com/english/advisories/2008/2993 - http://www.vupen.com/english/advisories/2008/2992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45128 - http://packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt - http://www.securityfocus.com/bid/31169 - https://www.exploit-db.com/exploits/6950 - http://packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt - https://www.exploit-db.com/exploits/6951 - http://www.vupen.com/english/advisories/2008/2995 - https://www.exploit-db.com/exploits/6946 - http://secunia.com/advisories/31812 - http://www.vupen.com/english/advisories/2008/2994 - http://packetstormsecurity.org/0809-exploits/newdownline-sql.txt
CVE ID: CVE-2008-4179 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) page_id parameter to smileys.php and the (2) q parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45074 - http://securityreason.com/securityalert/4289 - http://www.securityfocus.com/archive/1/496236/100/0/threaded - http://secunia.com/advisories/31859
CVE ID: CVE-2008-4180 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute force attacks against passwords via a username in the g_dbuser parameter and a password in the g_dbpwd parameter, and possibly a "localhost" g_dbhost parameter value, related to a "Mysql Remote Brute Force Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4289 - http://www.securityfocus.com/archive/1/496236/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerab
lert/4289 - http://www.securityfocus.com/archive/1/496236/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45076
CVE ID: CVE-2008-4181 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for cPanel, when cPanel PHP Register Globals is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) or absolute pathname in the fantasticopath parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - ht
NC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45147 - http://www.securityfocus.com/bid/31196 - http://securityreason.com/securityalert/4301 - https://www.exploit-db.com/exploits/6461 - http://www.netenberg.com/forum/index.php?topic=6768.0 - http://secunia.com/advisories/31863
CVE ID: CVE-2008-4182 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions before 2.3.1, and possibly other Horde Project products, allows remote attackers to inject arbitrary web script or HTML via the User field in an IMAP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45131 - http://secunia.com/advisories/34703 - http://lists.horde.org/archives/announce/2008/
bmcloud.com/vulnerabilities/45131 - http://secunia.com/advisories/34703 - http://lists.horde.org/archives/announce/2008/000465.html - http://www.securityfocus.com/bid/31168 - http://packetstormsecurity.org/0809-exploits/turba-xss.txt - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
CVE ID: CVE-2008-4183 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T10:08:34.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup via a direct request to a backup/backup-yyyy-dd-mm.sql filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.integramod.com/forum/viewtopic.php?f=3&t=5089 - http://www.securityfocus.com/bid/31149 - http://securityreason.com/securityalert/4300 - https://www.exploit-db.com/exploits/6390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45096 - h
tyalert/4300 - https://www.exploit-db.com/exploits/6390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45096 - http://secunia.com/advisories/31749