Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6153 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T11:20:25.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Photo.asp in Jay Patel Pixel8 Web Photo Album 3.0 allows remote attackers to execute arbitrary SQL commands via the AlbumID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33373 - https://www.exploit-db.com/exploits/7627 - http://www.securityfocus.com/bid/33069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47662
CVE ID: CVE-2008-6154 State: PUBLISHED Published: 2009-02-16T18:00:00 Last Updated: 2024-08-07T11:20:25.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idcat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45767 - https://www.exploit-db.com/exploits/6701 - http://secunia.com/advisories/32162 - http://www.securityfocus.com/bid/31649
CVE ID: CVE-2008-6155 State: PUBLISHED Published: 2009-02-16T18:00:00 Last Updated: 2024-08-07T11:20:25.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48808
CVE ID: CVE-2008-6156 State: PUBLISHED Published: 2009-02-16T18:00:00 Last Updated: 2024-08-07T11:20:25.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbitrary SQL commands via the campaignId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31646 - https://www.exploit-db.com/exploits/6702 - http://secunia.com/advisories/32160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45768
CVE ID: CVE-2008-6157 State: PUBLISHED Published: 2009-02-17T17:00:00 Last Updated: 2024-08-07T11:20:25.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48822 - http://www.attrition.org/pipermail/vim/2009-February/002146.html
CVE ID: CVE-2008-6158 State: PUBLISHED Published: 2009-02-17T17:00:00 Last Updated: 2024-08-07T11:20:25.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the admin backend in w3b>cms (aka w3blabor CMS) before 3.2.0 have unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52023 - http://forum.w3bcms.de/viewtopic.php?f=5&t=235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48823
CVE ID: CVE-2008-6159 State: PUBLISHED Published: 2009-02-18T16:00:00 Last Updated: 2024-08-07T11:20:25.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45703 - http://www.bugreport.ir/index_55.htm - http://secunia.com/advisories/32169 - http://www.securityfocus.com/archive/1/497029/100/0/threaded
CVE ID: CVE-2008-6160 State: PUBLISHED Published: 2009-02-18T16:00:00 Last Updated: 2024-08-07T11:20:25.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32191 - http://drupal.org/node/318749 - http://www.securityfocus.com/bid/31658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45762
CVE ID: CVE-2008-6161 State: PUBLISHED Published: 2009-02-18T16:00:00Z Last Updated: 2024-09-17T00:56:14.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32172 - http://sourceforge.net/project/shownotes.php?release_id=631789 - http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2044.post
CVE ID: CVE-2008-6162 State: PUBLISHED Published: 2009-02-18T17:00:00 Last Updated: 2024-08-07T11:20:25.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1 and the usNick cookie to admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6652 - http://www.securityfocus.com/bid/31542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45640
CVE ID: CVE-2008-6163 State: PUBLISHED Published: 2009-02-18T17:00:00 Last Updated: 2024-08-07T11:20:25.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45631 - http://secunia.com/advisories/32114 - http://www.securityfocus.com/bid/31549 - http://forum.openx.org/index.php?s=8d4c74dab4fd4597a7facda7c7414703&showtopic=503422735
CVE ID: CVE-2008-6164 State: PUBLISHED Published: 2009-02-18T17:00:00 Last Updated: 2024-08-07T11:20:25.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31538 - http://www.securityfocus.com/archive/1/496935/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45646
CVE ID: CVE-2008-6165 State: PUBLISHED Published: 2009-02-19T00:00:00 Last Updated: 2024-08-07T11:20:25.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) pseudo and (2) passe parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46067 - http://www.securityfocus.com/bid/31886 - http://secunia.com/advisories/32376 - https://www.exploit-db.com/exploits/6814
CVE ID: CVE-2008-6166 State: PUBLISHED Published: 2009-02-19T00:00:00 Last Updated: 2024-08-07T11:20:25.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6827 - http://secunia.com/advisories/32365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46076 - http://www.securityfocus.com/bid/31902
CVE ID: CVE-2008-6167 State: PUBLISHED Published: 2009-02-19T15:02:00 Last Updated: 2024-08-07T11:20:25.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lng parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6821 - http://www.securityfocus.com/bid/31895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46079
CVE ID: CVE-2008-6168 State: PUBLISHED Published: 2009-02-19T15:02:00 Last Updated: 2024-08-07T11:20:25.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified argument, probably the search string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46080 - https://www.exploit-db.com/exploits/6821 - http://www.securityfocus.com/bid/31895
CVE ID: CVE-2008-6169 State: PUBLISHED Published: 2009-02-19T15:02:00 Last Updated: 2024-08-07T11:20:25.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/460
Container: References: - http://secunia.com/advisories/32388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46044 - http://drupal.org/node/324862
CVE ID: CVE-2008-6170 State: PUBLISHED Published: 2009-02-19T15:02:00 Last Updated: 2024-08-07T11:20:25.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permissions to inject arbitrary web script or HTML via the book page title. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/324824 - http://www.securityfocus.com/bid/31882 - http://secunia.com/advisories/32441 - http://secunia.com/advisories/32297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46052 - https://
ries/32441 - http://secunia.com/advisories/32297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46052 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00783.html - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00826.html - http://www.vupen.com/english/advisories/2008/2913
CVE ID: CVE-2008-6171 State: PUBLISHED Published: 2009-02-19T15:02:00 Last Updated: 2024-08-07T11:20:25.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/324824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46049 - http://secunia.com/advisories/32441 - http://www.securityfocus.com/bid/31900 - http://drupal.org/files/sa-2008-067/SA-2008-067-5.11.patch - https://www.redh
- http://www.securityfocus.com/bid/31900 - http://drupal.org/files/sa-2008-067/SA-2008-067-5.11.patch - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00783.html - http://secunia.com/advisories/32389 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00826.html - http://www.vupen.com/english/advisories/2008/2913
CVE ID: CVE-2008-6172 State: PUBLISHED Published: 2009-02-19T16:00:00 Last Updated: 2024-08-07T11:20:25.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46081 - http://www.securityfocus.com/bid/31892 - http://secunia.com/advisories/32367 - https://www.exploit-db.com/exploits/6817
CVE ID: CVE-2008-6173 State: PUBLISHED Published: 2009-02-19T16:00:00 Last Updated: 2024-08-07T11:20:25.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46072 - http://downloads.securityfocus.com/vulnerabilities/exploits/31898.html - http://www.securityfocus.com/bid/31898
CVE ID: CVE-2008-6174 State: PUBLISHED Published: 2009-02-19T16:00:00 Last Updated: 2024-08-07T11:20:25.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/postlister/index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the liste parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitrustgroup.com/advisories/web-application-security-jetbox2.html - http://www.securityfocus.com/bid/31890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46082
CVE ID: CVE-2008-6175 State: PUBLISHED Published: 2009-02-19T16:00:00 Last Updated: 2024-08-07T11:20:25.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument to the opendir SFTP command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46064 - http://secunia.com/advisories/32374 - http://www.securityfocus.com/bid/31884 - https://www.exploit-db.com/exploits/6815
CVE ID: CVE-2008-6176 State: REJECTED Published: 2009-02-19T16:00:00 Last Updated: 2009-04-29T09:00:00 Description: No description available.
CVE ID: CVE-2008-6177 State: PUBLISHED Published: 2009-02-19T16:00:00 Last Updated: 2024-08-07T11:20:25.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in LightBlog 9.8, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) username parameter to view_member.php, (2) username_post parameter to login.php, and the (3) Lightblog_username cookie parameter to check_user.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46030 - http://secunia.com/advisories/32345 - http://www.securityfocus
ps://exchange.xforce.ibmcloud.com/vulnerabilities/46030 - http://secunia.com/advisories/32345 - http://www.securityfocus.com/bid/31851 - https://www.exploit-db.com/exploits/6797
CVE ID: CVE-2008-6178 State: PUBLISHED Published: 2009-02-19T16:00:00 Last Updated: 2024-08-07T11:20:25.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 CMS, Nuke ET, and other products, allows remote attackers to execute arbitrary code by creating a file with PHP sequences preceded by a ZIP header, uploading this file via a FileUpload action with the application/zip content type, and then accessing this file via a direct request to the file in UserFiles/File/, probably a related issue to CVE-2005-4094. NOTE: some of these details are obt
t request to the file in UserFiles/File/, probably a related issue to CVE-2005-4094. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31812 - http://secunia.com/advisories/33973 - http://www.vupen.com/english/advisories/2009/0447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48769 - https://www.exploit-db.com/exploits/8060
CVE ID: CVE-2008-6179 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter, a different vector than CVE-2007-4069. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31744 - https://www.exploit-db.com/exploits/6746 - http://secunia.com/advisories/32173
CVE ID: CVE-2008-6180 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31728 - http://secunia.com/advisories/32214 - http://www.vupen.com/english/advisories/2008/2797 - https://www.exploit-db.com/exploits/6739 - http://www.pepelux.org/exploits/newlife-es.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities
om/exploits/6739 - http://www.pepelux.org/exploits/newlife-es.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/45820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45821 - http://www.securityfocus.com/archive/1/497283/100/0/threaded
CVE ID: CVE-2008-6181 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Mad4Joomla Mailforms (com_mad4joomla) component before 1.1.8.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.mad4media.de/mad4joomla-mailforms.html - http://secunia.com/advisories/32239 - https://www.exploit-db.com/exploits/6724 - http://www.mad4media.de/mad4joomla-mailforms-faq.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45815 - http://www.se
.mad4media.de/mad4joomla-mailforms-faq.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45815 - http://www.securityfocus.com/bid/31712
CVE ID: CVE-2008-6182 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gallery parameter in a view action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45816 - http://www.securityfocus.com/bid/31714 - http://secunia.com/advisories/32240
CVE ID: CVE-2008-6183 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in My PHP Indexer 1.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) d and (2) f parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45830 - http://secunia.com/advisories/32215 - http://www.securityfocus.com/bid/31726 - http://www.vupen.com/english/advisories/2008/2796
CVE ID: CVE-2008-6184 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the OwnBiblio (com_ownbiblio) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalogue action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45814 - http://secunia.com/advisories/32235 - http://www.securityfocus.com/bid/31725 - https://www.exploit-db.com/exploits/6730
CVE ID: CVE-2008-6185 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service (crash) via multiple POP3 requests with a long PASS command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6719 - http://www.vupen.com/english/advisories/2008/2802 - http://www.securityfocus.com/bid/31697 - http://secunia.com/advisories/32202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45812
CVE ID: CVE-2008-6186 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in RaidenFTPD 2.4 build 3620 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via long (1) CWD and (2) MLST commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32216 - http://www.vupen.com/english/advisories/2008/2804 - https://www.exploit-db.com/exploits/6742 - http://www.securityfocus.com/bid/31741
CVE ID: CVE-2008-6187 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via the release_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32217 - http://www.securityfocus.com/bid/31674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45811 - http://gforge.org/tracker/index.php?func=detail&aid=5553&group_id=1&atid=105 - https://www.exploit-db.com/exploits/6707
CVE ID: CVE-2008-6188 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_edit[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://gforge.org/tracker/index.php?func=detail&aid=5554&group_id=1&atid=105 - http://secunia.com/advisories/32217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48851 - http://www.securityfocus.com/bid/31674 - https://www.exploit-db.com/exploits/6708
CVE ID: CVE-2008-6189 State: PUBLISHED Published: 2009-02-19T18:00:00 Last Updated: 2024-08-07T11:20:25.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/index.php, (2) news/index.php, and (3) top/topusers.php, which is not properly handled in database-pgsql.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32217 - http://gforge.org/tracker/index.php?func=detail&aid=5552&group_id=1&atid=105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45802