Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4900 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6944 - http://osvdb.org/49600 - http://www.securityfocus.com/bid/32062 - http://www.vupen.com/english/advisories/2008/2981
CVE ID: CVE-2008-4901 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32030 - https://www.exploit-db.com/exploits/6912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46373 - http://secunia.com/advisories/32519
CVE ID: CVE-2008-4902 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46266 - https://www.exploit-db.com/exploits/6917 - http://secunia.com/advisories/32519
CVE ID: CVE-2008-4903 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) comment[author] (Name) and (2) comment[url] (Website) parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497970 - http://secunia.com/advisories/32272 - http://www.securityfocus.com/bid/31993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46204 - http://securityreason.com/secur
curityfocus.com/bid/31993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46204 - http://securityreason.com/securityalert/4550
CVE ID: CVE-2008-4904 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the search[published_at] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497970 - http://secunia.com/advisories/32272 - http://www.securityfocus.com/bid/31993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46205 - http://securityreason.com/securityalert/4550
CVE ID: CVE-2008-4905 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497970 - http://secunia.com/advisories/32272 - http://securityreason.com/securityalert/4550
CVE ID: CVE-2008-4906 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the l_id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6885 - http://www.securityfocus.com/bid/32004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46236 - http://securityreason.com/securityalert/4551 - http://secunia.com/advisor
ge.xforce.ibmcloud.com/vulnerabilities/46236 - http://securityreason.com/securityalert/4551 - http://secunia.com/advisories/32477 - http://z0rlu.blogspot.com/2008/10/e107-plugin-lyricsmenu-lyricssongphp.html
CVE ID: CVE-2008-4907 State: PUBLISHED Published: 2008-11-04T00:00:00 Last Updated: 2024-08-07T10:31:28.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service (persistent crash) via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsing bug." Additional Analyst Notes: - CVE Program Container: References: - http://www.dovecot.org/list/dovecot-news/2008-October/000089.html - http://secunia.com/advisories/33149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
s/2008-October/000089.html - http://secunia.com/advisories/33149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46227 - http://www.ubuntu.com/usn/usn-666-1 - http://www.securityfocus.com/bid/31997 - http://security.gentoo.org/glsa/glsa-200812-16.xml - http://secunia.com/advisories/32677 - http://secunia.com/advisories/32479
CVE ID: CVE-2008-4908 State: PUBLISHED Published: 2008-11-04T01:00:00 Last Updated: 2024-08-07T10:31:28.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496358 - http://secunia.com/advisories/32487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44841 - http://www.securityfocus.com/bid/30893
CVE ID: CVE-2008-4909 State: PUBLISHED Published: 2008-11-04T01:00:00 Last Updated: 2024-08-07T10:31:28.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in CompactCMS 1.1 and earlier allows remote attackers to perform unauthorized actions as legitimate users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46198 - http://holisticinfosec.org/content/view/90/45/
CVE ID: CVE-2008-4910 State: PUBLISHED Published: 2008-11-04T01:00:00 Last Updated: 2024-08-07T10:31:28.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46119 - http://www.securityfocus.com/bid/31916 - http://www.securityfocus.com/archive/1/497799/100/0/threaded - http://www.securityfocus.com/archive/1/497972/100/0/threaded - http://securityreason.com/securityalert/4542
CVE ID: CVE-2008-4911 State: PUBLISHED Published: 2008-11-04T01:00:00 Last Updated: 2024-08-07T10:31:28.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute arbitrary PHP code via a URL in the data parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2008-04/0196.html - http://www.securityfocus.com/bid/28797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41844
CVE ID: CVE-2008-4912 State: PUBLISHED Published: 2008-11-04T01:00:00 Last Updated: 2024-08-07T10:31:28.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in popup_img.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41798 - http://www.securityfocus.com/bid/28735 - https://www.exploit-db.com/exploits/5426
CVE ID: CVE-2008-4913 State: PUBLISHED Published: 2008-11-04T01:00:00 Last Updated: 2024-08-07T10:31:28.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28985 - http://lokicms.com/ - http://securityreason.com/securityalert/4554 - https://www.exploit-db.com/exploits/5522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42247
CVE ID: CVE-2008-4914 State: PUBLISHED Published: 2009-02-03T19:00:00 Last Updated: 2024-08-07T10:31:28.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service (host crash) via a snapshot with a malformed VMDK delta disk. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33549 - http://www.vmware.com/security/advisories/VMSA-2009-0001.html - http://www.vupen.com/english/advisories/2009/0301 - http://secunia.com/advisories/33776 - http://www.securitytracker.com/id?10216
w.vupen.com/english/advisories/2009/0301 - http://secunia.com/advisories/33776 - http://www.securitytracker.com/id?1021654 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5909
CVE ID: CVE-2008-4915 State: PUBLISHED Published: 2008-11-10T11:00:00 Last Updated: 2024-08-07T10:31:28.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.
in privileges on the guest OS. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6309 - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.securityfocus.com/bid/32168 - http://lists.vmware.com/pipermail/security-announce/2008/000042.html - http://www.securitytracker.com/id?1021154 - http://www.securityfocus.com/archive/1/498138/100/0/threaded - http://secunia.com/advisories/32612 - http://secunia.com/advisories/32624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46415 - http://www.vmware.com/security/advisories/VMSA-2008-0018.html - http://www.vupen.com/english/advisori
rabilities/46415 - http://www.vmware.com/security/advisories/VMSA-2008-0018.html - http://www.vupen.com/english/advisories/2008/3052
CVE ID: CVE-2008-4916 State: PUBLISHED Published: 2009-04-06T15:00:00 Last Updated: 2024-08-07T10:31:28.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions; VMware Server 1.x before 1.0.8 build 126538 and 2.0.x before 2.0.1 build 156745; VMware Fusion before 2.0.1; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to cause a denial of service (host OS crash) via unk
SXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to cause a denial of service (host OS crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://seclists.org/fulldisclosure/2009/Apr/0036.html - http://www.securityfocus.com/bid/34373 - http://www.vupen.com/english/advisories/2009/0944 - http://lists.vmware.com/pipermail/security-announce/2009/000054.html - http://www.securitytracker.com/id?1021973 - http://www.vmware.com/security/advisories/VMSA-2009-0005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6439
CVE ID: CVE-2008-4917 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:31:28.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware Server 1.0.9 and earlier; VMware ESXi 3.5; and VMware ESX 3.0.2 through 3.5 allows guest OS users to have an unknown impact by sending the virtual hardware a request that triggers an arbitrary physical-memory write operation, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/
to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://kb.vmware.com/kb/1006980 - http://www.securityfocus.com/archive/1/498863/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6246 - http://secunia.com/advisories/32965 - http://kb.vmware.com/kb/1006986 - http://www.securityfocus.com/archive/1/498886/100/0/threaded - http://securitytracker.com/id?1021301 - http://securitytracker.com/id?1021300 - http://www.securityfocus.com/bid/32597
CVE ID: CVE-2008-4918 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:31:28.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is not properly handled in the CFS block page, aka "universal website hijacking." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498043/100/0/threaded - http://www.securityfocus.co
gram Container: References: - http://www.securityfocus.com/archive/1/498043/100/0/threaded - http://www.securityfocus.com/archive/1/497958/100/0/threaded - http://www.vupen.com/english/advisories/2008/2970 - http://www.securityfocus.com/archive/1/497948/100/0/threaded - http://www.securityfocus.com/bid/31998 - http://www.zerodayinitiative.com/advisories/ZDI-08-070/ - http://secunia.com/advisories/32498 - http://www.securityfocus.com/archive/1/497968/100/0/threaded - http://www.securityfocus.com/archive/1/498073/100/0/threaded - http://securityreason.com/securityalert/4556 - http://www.zerodayinitiative.com/advisories/ZDI-08-070 - http://www.gnucitizen.org/blog/new-technique-to-perform-univer
http://www.zerodayinitiative.com/advisories/ZDI-08-070 - http://www.gnucitizen.org/blog/new-technique-to-perform-universal-website-hijacking/ - http://www.sonicwall.com/downloads/SonicOS_Enhanced_4.0.1.1_Release_Notes.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/46232 - http://www.securityfocus.com/archive/1/497989/100/0/threaded
CVE ID: CVE-2008-4919 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:31:28.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31984 - http://secunia.com/advisories/32426 - https://www.exploit-db.com/exploits/6875 - http://securityreason.com/securityalert/4558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46218
CVE ID: CVE-2008-4920 State: REJECTED Published: 2008-11-04T20:00:00 Last Updated: 2017-10-23T16:57:01 Description: No description available.
CVE ID: CVE-2008-4921 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:31:28.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46259 - http://securityreason.com/securityalert/4559 - http://osvdb.org/49494 - http://secunia.com/advisories/32476 - https://www.exploit-db.com/exploits/6959
CVE ID: CVE-2008-4922 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:31:28.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6878 - http://www.securityfocus.com/bid/31987 - http://securityreason.com/securityalert/4560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46214 - http://www.vupen.com/english/advi
.com/securityalert/4560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46214 - http://www.vupen.com/english/advisories/2008/2956
CVE ID: CVE-2008-4923 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:31:28.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6870 - http://secunia.com/advisories/32425 - http://www.securityfocus.com/bid/31974 - http://securityreason.com/securityalert/4561
CVE ID: CVE-2008-4924 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:31:28.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control (BARCODELib.MW6Barcode, Barcode.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31979 - http://secunia.com/advisories/32425 - http://securityreason.com/securityalert/4562 - https://www.exploit-db.com/exploits/6871
CVE ID: CVE-2008-4925 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:31:28.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32425 - http://www.securityfocus.com/bid/31980 - https://www.exploit-db.com/exploits/6872 - http://securityreason.com/securityalert/4563
CVE ID: CVE-2008-4926 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:31:28.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control (MW6PDF417Lib.PDF417, MW6PDF417.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32425 - https://www.exploit-db.com/exploits/6873 - http://www.securityfocus.com/bid/31983
CVE ID: CVE-2008-4927 State: PUBLISHED Published: 2008-11-04T20:00:00Z Last Updated: 2024-09-16T19:00:56.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32077 - http://www.securityfocus.com/data/vulnerabilities/exploits/32077.py
CVE ID: CVE-2008-4928 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2024-08-07T10:31:28.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the redirect function in functions.php in MyBB (aka MyBulletinBoard) 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter in a removesubscriptions action to moderation.php, related to use of the ajax option to request a JavaScript redirect. NOTE: this can be leveraged to execute PHP code and bypass cross-site request forgery (CSRF) protection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31935
RF) protection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31935 - http://archives.neohapsis.com/archives/bugtraq/2008-10/0212.html - http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html - http://www.vupen.com/english/advisories/2008/2967 - http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html - http://www.openwall.com/lists/oss-security/2008/11/01/2
CVE ID: CVE-2008-4929 State: PUBLISHED Published: 2008-11-04T20:00:00 Last Updated: 2025-01-17T15:22:15.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/31936 - http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html - http://www.vupen.com/english/advisories/2008/2967 - http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html -
/www.vupen.com/english/advisories/2008/2967 - http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html - http://www.openwall.com/lists/oss-security/2008/11/01/2