Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ityfocus.com/bid/32422 - http://securityreason.com/securityalert/4663 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065840.html - http://wiki.rpath.com/Advisories:rPSA-2008-0336 - http://www.securitytracker.com/id?1021275 - http://www.openwall.com/lists/oss-security/2008/11/24/1 - http://secunia.com/advisories/34144 - http://www.vupen.com/english/advisories/2008/3231 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11351 - http://secunia.com/advisories/32840 - https://bugzilla.redhat.com/show_bug.cgi?id=472737 - http://www.redhat.com/support/errata/RHSA-2009-0313.html - http://www.wireshark.org/security/wnpa-sec-2008-07.html - http
ttp://www.redhat.com/support/errata/RHSA-2009-0313.html - http://www.wireshark.org/security/wnpa-sec-2008-07.html - http://www.securityfocus.com/archive/1/498562/100/0/threaded
CVE ID: CVE-2008-5286 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/12/01/1 - http://secunia.com/advisories/33101 - http://www.securityfocus.com/bid/32518 - http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml - https://oval.cisecurity.org/rep
ecurityfocus.com/bid/32518 - http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10058 - http://secunia.com/advisories/33111 - http://www.redhat.com/support/errata/RHSA-2008-1028.html - http://www.cups.org/str.php?L2974 - http://www.gentoo.org/security/en/glsa/glsa-200812-01.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2009:029 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html - http://secunia.com/advisories/33568 - http://www.debian.org/security/2008/dsa-1677 - http://secunia.com/advisories/32962 - http://www.securitytracker.com/id?1021298 - http://www.vu
security/2008/dsa-1677 - http://secunia.com/advisories/32962 - http://www.securitytracker.com/id?1021298 - http://www.vupen.com/english/advisories/2008/3315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46933 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:028 - http://svn.easysw.com/public/cups/trunk/CHANGES-1.3.txt
CVE ID: CVE-2008-5287 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:11.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46833 - http://secunia.com/advisories/32868 - https://www.exploit-db.com/exploits/7224 - http://osvdb.org/50185 - http://securityreason.com/securityalert/4664
CVE ID: CVE-2008-5288 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4665 - http://secunia.com/advisories/32868 - http://osvdb.org/50184 - https://www.exploit-db.com/exploits/7229 - http://www.securityfocus.com/bid/32472 - https://exchange.xforce.ibmcloud.com/vulnerabi
w.exploit-db.com/exploits/7229 - http://www.securityfocus.com/bid/32472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46840
CVE ID: CVE-2008-5289 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46838 - http://securityreason.com/securityalert/4666 - http://secunia.com/advisories/32866 - http://www.securityfocus.com/bid/32474 - https://www.exploit-db.com/exploits/7228
CVE ID: CVE-2008-5290 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4666 - http://secunia.com/advisories/32866 - http://www.securityfocus.com/bid/32474 - https://www.exploit-db.com/exploits/7228
CVE ID: CVE-2008-5291 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:11.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter, a different vector than CVE-2007-4805 and CVE-2008-3165. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7231 - http://www.securityfocus.com/bid/32475 - http://secunia.com/advisories/32865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46841 - http://securityreason.com/security
a.com/advisories/32865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46841 - http://securityreason.com/securityalert/4667
CVE ID: CVE-2008-5292 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_snaps.php in VideoGirls BiZ allows remote attackers to execute arbitrary SQL commands via the type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4668 - http://osvdb.org/50309 - http://secunia.com/advisories/32808 - http://www.securityfocus.com/bid/32477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46872 - https://www.exploit-db.com/exploits/7234
CVE ID: CVE-2008-5293 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WebStudio eHotel allows remote attackers to execute arbitrary SQL commands via the pageid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46831 - http://osvdb.org/50201 - https://www.exploit-db.com/exploits/7222 - http://secunia.com/advisories/32874
CVE ID: CVE-2008-5294 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:11.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL commands via the pageid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46832 - http://osvdb.org/50200 - http://securityreason.com/securityalert/4670 - http://secunia.com/advisories/32873 - https://www.exploit-db.com/exploits/7223
CVE ID: CVE-2008-5295 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL commands via the show_emp parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7235 - http://www.securityfocus.com/bid/32478 - http://secunia.com/advisories/32797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46873 - http://securityreason.com/securityalert/4671
CVE ID: CVE-2008-5296 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46804 - http://www.securityfocus.com/bid/32440 - http://gallery.menalto.com/last_official_G1_releases - http://osvdb.org/
6804 - http://www.securityfocus.com/bid/32440 - http://gallery.menalto.com/last_official_G1_releases - http://osvdb.org/50089
CVE ID: CVE-2008-5297 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update request, related to a missing length check in the GetNextLine function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/11/21/15 - http://www.securityfocus.com/bid/32344 - http://secunia.com/advisories/33610 - http://securityreason.com/securityalert/4672 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506179 - http://secuni
- http://securityreason.com/securityalert/4672 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506179 - http://secunia.com/advisories/33138 - http://security.gentoo.org/glsa/glsa-200901-12.xml - https://www.exploit-db.com/exploits/7151 - http://www.debian.org/security/2008/dsa-1686 - http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c - http://git.debian.org/?p=collab-maint/no-ip.git%3Ba=commit%3Bh=60ed93621ff36d9731ba5d9f9336d6eb91122302 - http://secunia.com/advisories/32761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46696
CVE ID: CVE-2008-5298 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32257 - http://www.vupen.com/english/advisories/2011/0236 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053501.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959 - http://secunia.com/advisories/43109
011-January/053501.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959 - http://secunia.com/advisories/43109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45813 - http://www.securityfocus.com/bid/31735 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053510.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47030
CVE ID: CVE-2008-5299 State: PUBLISHED Published: 2008-12-01T15:00:00 Last Updated: 2024-08-07T10:49:12.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the (1) /tmp/chm2pdf/work or (2) /tmp/chm2pdf/orig temporary directories. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32257 - http://www.vupen.com/english/advisories/2011/0236 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053501.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959 - http://secunia.com/advisories/43109 - https://excha
501.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959 - http://secunia.com/advisories/43109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45813 - http://www.securityfocus.com/bid/31735 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053510.html
CVE ID: CVE-2008-5300 State: PUBLISHED Published: 2008-12-01T17:00:00 Last Updated: 2024-08-07T10:49:12.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32998 - http://www.securityfocus.com/archive/1/499044/100/0/threaded - http://marc.info/?l=linux-netdev&m=122721862313564&w=2 - http://www.securityfocus.com/a
rchive/1/499044/100/0/threaded - http://marc.info/?l=linux-netdev&m=122721862313564&w=2 - http://www.securityfocus.com/archive/1/512019/100/0/threaded - http://secunia.com/advisories/33706 - https://issues.rpath.com/browse/RPL-2915 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10283 - http://www.redhat.com/support/errata/RHSA-2009-0053.html - http://secunia.com/advisories/33756 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html - http://secunia.com/advisories/33348 - http://secunia.com/advisories/32913 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11427 - http://securityre
32913 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11427 - http://securityreason.com/securityalert/4673 - http://marc.info/?l=linux-netdev&m=122765505415944&w=2 - http://www.redhat.com/support/errata/RHSA-2009-0014.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46943 - http://www.securityfocus.com/bid/32516 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:032 - http://secunia.com/advisories/33556 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=473259 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332 - http://secunia.com/advisories/33083 - https://usn.ubuntu.com/714-1/ - http://osvdb.org/50272 - https://rhn.redha
-0332 - http://secunia.com/advisories/33083 - https://usn.ubuntu.com/714-1/ - http://osvdb.org/50272 - https://rhn.redhat.com/errata/RHSA-2009-1550.html - https://bugzilla.redhat.com/show_bug.cgi?id=470201 - http://www.ubuntu.com/usn/usn-715-1 - http://secunia.com/advisories/33854 - http://www.debian.org/security/2008/dsa-1681
CVE ID: CVE-2008-5301 State: PUBLISHED Published: 2008-12-01T17:00:00 Last Updated: 2024-08-07T10:49:12.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46672 - http://www.vupen.com/english/advisories/2008/3190 - http://www.ubuntu.com/usn/USN-838-1 - http://www.dovecot.org/list/dovecot/2008-November/035259.html - http://secunia.com/advisories/32768 - http://se
-838-1 - http://www.dovecot.org/list/dovecot/2008-November/035259.html - http://secunia.com/advisories/32768 - http://secunia.com/advisories/36904 - http://www.securityfocus.com/bid/32582
CVE ID: CVE-2008-5302 State: PUBLISHED Published: 2008-12-01T17:00:00 Last Updated: 2024-08-07T10:49:12.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32980 - https://exchange.xforce.ibmcloud.com/vulne
- CVE Program Container: References: - http://secunia.com/advisories/32980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6890 - http://wiki.rpath.com/Advisories:rPSA-2009-0011 - http://www.debian.org/security/2008/dsa-1678 - http://www.ubuntu.com/usn/usn-700-1 - http://www.openwall.com/lists/oss-security/2008/11/28/2 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286905 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286922#36 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - ht
rg/cgi-bin/bugreport.cgi?bug=286922#36 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://support.apple.com/kb/HT4077 - http://secunia.com/advisories/33314 - http://www.securityfocus.com/archive/1/500210/100/0/threaded - http://www.ubuntu.com/usn/usn-700-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11076 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/40052 - http://www.redhat.com/support/errata/RHSA-2010-0458.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 - http://www.gossamer-threads.com/lists/perl/porters/233695#233695 - http://www.mand
nter/index?page=content&id=JSA10735 - http://www.gossamer-threads.com/lists/perl/porters/233695#233695 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
CVE ID: CVE-2008-5303 State: PUBLISHED Published: 2008-12-01T17:00:00 Last Updated: 2024-08-07T10:49:12.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5302 due to affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32980 - http://wiki.rpath.com/Advisories:rPSA-2009-0011 - http://www.debian.o
eferences: - http://secunia.com/advisories/32980 - http://wiki.rpath.com/Advisories:rPSA-2009-0011 - http://www.debian.org/security/2008/dsa-1678 - http://www.ubuntu.com/usn/usn-700-1 - http://www.openwall.com/lists/oss-security/2008/11/28/2 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286905 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6680 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286922#36 - http://support.apple.com/kb/HT4077 - http://secunia.com/advisories/33314 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9699
unia.com/advisories/33314 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9699 - http://www.securityfocus.com/archive/1/500210/100/0/threaded - http://www.ubuntu.com/usn/usn-700-2 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/40052 - http://www.redhat.com/support/errata/RHSA-2010-0458.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47044 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 - http://www.gossamer-threads.com/lists/perl/porters/233695#233695 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
CVE ID: CVE-2008-5304 State: PUBLISHED Published: 2008-12-10T00:00:00 Last Updated: 2024-08-07T10:49:12.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32669 - http://www.vupen.com/english/advisories/2008/3381 - http://securitytracker.com/id?1021351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47122 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5304 - http://secunia.com/advisories/33040
CVE ID: CVE-2008-5305 State: PUBLISHED Published: 2008-12-10T00:00:00 Last Updated: 2024-08-07T10:49:12.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1021352 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2008-5305 - http://www.securityfocus.com/bid/32668 - http://www.vupen.com/english/advisories/2008/3381 - http://secunia.com/advisories/33040
CVE ID: CVE-2008-5306 State: PUBLISHED Published: 2008-12-02T11:00:00 Last Updated: 2024-08-07T10:49:12.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the login_lg parameter (username). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46792 - https://www.exploit-db.com/exploits/7200 - http://www.securityfocus.com/bid/32429 - http://securityreason.com/securityalert/46
//www.exploit-db.com/exploits/7200 - http://www.securityfocus.com/bid/32429 - http://securityreason.com/securityalert/4674 - http://www.vupen.com/english/advisories/2008/3239
CVE ID: CVE-2008-5307 State: PUBLISHED Published: 2008-12-02T11:00:00 Last Updated: 2024-08-07T10:49:12.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the login_lg parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32841 - http://www.vupen.com/english/advisories/2008/3238 - https://www.exploit-db.com/exploits/7201 - http://securityreason.com/securityalert/4678 - http://www.securityfocus.com/bid/32430 - https://exc
.com/exploits/7201 - http://securityreason.com/securityalert/4678 - http://www.securityfocus.com/bid/32430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46794
CVE ID: CVE-2008-5308 State: PUBLISHED Published: 2008-12-02T11:00:00 Last Updated: 2024-08-07T10:49:12.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4676 - http://secunia.com/advisories/32758 - http://www.vupen.com/english/advisories/2008/3243 - http://osvdb.org/50067 - http://www.securityfocus.com/bid/32435 - https://exchange.xfor
m/english/advisories/2008/3243 - http://osvdb.org/50067 - http://www.securityfocus.com/bid/32435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46793 - https://www.exploit-db.com/exploits/7191