Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4635 State: PUBLISHED Published: 2008-10-21T00:00:00 Last Updated: 2024-08-07T10:24:20.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hisanaga Electric Co, Ltd. hisa_cart 1.29 and earlier, a module for XOOPS, allows remote attackers to obtain sensitive user information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45946 - http://jvn.jp/en/jp/JVN67334580/index.html - http://www.securityfocus.com/bid/31795 - http://secunia.com/advisories/32300 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000068.html - http://hisacart.chushokigyo.net/mo
.com/advisories/32300 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000068.html - http://hisacart.chushokigyo.net/modules/info/index.php/intro/url.html
CVE ID: CVE-2008-4636 State: PUBLISHED Published: 2008-11-27T00:00:00 Last Updated: 2024-08-07T10:24:20.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32464 - http://secunia.com/advisories/32832 - http://osvdb.org/50284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46879 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html
CVE ID: CVE-2008-4637 State: PUBLISHED Published: 2008-10-21T16:00:00 Last Updated: 2024-08-07T10:24:20.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121. Additional Analyst Notes: - CVE Program Container: References: - http://cpcommerce.cpradio.org/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/46090
CVE ID: CVE-2008-4638 State: PUBLISHED Published: 2008-10-21T16:00:00 Last Updated: 2024-08-07T10:24:20.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: qioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://seer.entsupport.symantec.com/docs/310872.htm - http://www.securityfocus.com/archive/1/497675/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46009 - http://www.symante
us.com/archive/1/497675/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46009 - http://www.symantec.com/avcenter/security/Content/2008.10.20.html - http://www.vupen.com/english/advisories/2008/2875 - http://www.securityfocus.com/bid/31679 - http://www.security-objectives.com/advisories/SECOBJSADV-2008-05.txt
CVE ID: CVE-2008-4639 State: PUBLISHED Published: 2008-10-21T16:00:00 Last Updated: 2024-08-07T10:24:20.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020 - http://www.openwall.com/lists/oss-security/2008/10/15/5 - http://www.openwall.com/lists/oss-security/2009/02/06/5 - http://www.openwall.com/lists/oss-security/2008/10/16/3 - http://www.openwall.com/lists/oss-security/2008/10/15/6
CVE ID: CVE-2008-4640 State: PUBLISHED Published: 2008-10-21T16:00:00 Last Updated: 2024-08-07T10:24:20.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32506 - https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020 - http://www.openwall.com/lists/oss-security/2008/11/26/4 - http://www
gs.launchpad.net/ubuntu/+source/jhead/+bug/271020 - http://www.openwall.com/lists/oss-security/2008/11/26/4 - http://www.openwall.com/lists/oss-security/2008/10/16/3
CVE ID: CVE-2008-4641 State: PUBLISHED Published: 2008-10-21T16:00:00 Last Updated: 2024-08-07T10:24:20.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31921 - https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020 - http://www.openwall.com/lists/oss-security/2008/10/15/5 - http://www.openwall.com/lists/oss-security/2008/11/26/4 - http://www.openwall.com/lists/oss-security/2008/10/16/3 - http://www.openwall.
all.com/lists/oss-security/2008/11/26/4 - http://www.openwall.com/lists/oss-security/2008/10/16/3 - http://www.openwall.com/lists/oss-security/2008/10/15/6
CVE ID: CVE-2008-4642 State: PUBLISHED Published: 2008-10-21T18:00:00 Last Updated: 2024-08-07T10:24:20.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45915 - https://www.exploit-db.com/exploits/6758 - http://secunia.com/advisories/32290 - http://www.securityfocus.com/bid/31771
CVE ID: CVE-2008-4643 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4455 - https://www.exploit-db.com/exploits/6759 - http://secunia.com/advisories/32289 - http://www.securityfocus.com/bid/31772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45917
CVE ID: CVE-2008-4644 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4455 - https://www.exploit-db.com/exploits/6759 - http://secunia.com/advisories/32289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45918 - http://www.securityfocus.com/bid/31772
CVE ID: CVE-2008-4645 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to execute arbitrary PHP code via PHP sequences in the sort parameter, which is processed by create_function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45875 - https://www.exploit-db.com/exploits/6755 - http://www.securityfocus.com/bid/31762 - http://securityreason.com/securityalert/4456
CVE ID: CVE-2008-4646 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.zebux.org/pub/Advisory/Advisory_Websense_Reporter_Password_Disclosure_200810.txt - http://secunia.com/advisories/32264 - http://www.securitytracker.com/id?1021058 - http://www.vupen.com/english/advisories/2008/2819 - http://www.securityfocus.com/
//www.securitytracker.com/id?1021058 - http://www.vupen.com/english/advisories/2008/2819 - http://www.securityfocus.com/bid/31746
CVE ID: CVE-2008-4647 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45921 - http://www.securityfocus.com/bid/31774 - http://packetstorm.linuxsecurity.com/0810-exploits/sweetcms-sql.txt - http://secunia.com/advisories/32277
CVE ID: CVE-2008-4648 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:21.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO or the (2) option, (3) Itemid, (4) id, (5) task, (6) bid, and (7) contact_id parameters. NOTE: the error might be located in modules/mod_language.php, and index.php might be the interaction point. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32278 - http://packetstormsecurity.org/0810-exploits/elxis-xss.txt
ntainer: References: - http://secunia.com/advisories/32278 - http://packetstormsecurity.org/0810-exploits/elxis-xss.txt - http://www.securityfocus.com/bid/31764 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45866
CVE ID: CVE-2008-4649 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45868 - http://packetstormsecurity.org/0810-exploits/elxis-xss.txt - http://www.securityfocus.com/bid/31764
CVE ID: CVE-2008-4650 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands via the eventdate parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31773 - http://securityreason.com/securityalert/4457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45919 - https://www.exploit-db.com/exploits/6760
CVE ID: CVE-2008-4651 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby parameter to admin/cms/images.php and the (2) nav_id parameter in an editrecord action to admin/cms/nav.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45986 - http://www.digitrustgroup.com/advisories/web-application-security-jetbox - http://www.securityfocus.com/bid/31824
CVE ID: CVE-2008-4652 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6840 - http://www.securityfocus.com/bid/31814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45975 - https://www.exploit-db.com/exploits/6793 - http://securityreason.com/securityalert/4458
CVE ID: CVE-2008-4653 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:21.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45991 - https://www.exploit-db.com/exploits/6795 - http://securityreason.com/securityalert/4459 - http://secunia.com
ies/45991 - https://www.exploit-db.com/exploits/6795 - http://securityreason.com/securityalert/4459 - http://secunia.com/advisories/32347
CVE ID: CVE-2008-4654 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2856 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14803 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=fde9e1c
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14803 - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=fde9e1cc1fe1ec9635169fa071e42b3aa6436033 - http://secunia.com/advisories/32339 - http://www.trapkit.de/advisories/TKADV2008-010.txt - http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=26d92b87bba99b5ea2e17b7eaa39c462d65e9133 - http://www.openwall.com/lists/oss-security/2008/10/19/2 - http://www.securityfocus.com/bid/31813 - http://www.videolan.org/security/sa0809.html - http://securityreason.com/securityalert/4460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45960 - http://www.securityfocus.com/archive/1/497587/100/0/threaded - http://bugs.debian.org/cgi-bin/bugrepor
abilities/45960 - http://www.securityfocus.com/archive/1/497587/100/0/threaded - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502726
CVE ID: CVE-2008-4655 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Simple survey (simplesurvey) 1.7.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2870 - http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/ - http://secunia.com/advisories/32369 - http://typo3.org/extensions/repository/view/simplesurvey/1.8.1/
CVE ID: CVE-2008-4656 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:21.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Frontend Users View (feusersview) 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2870 - http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/ - http://www.securityfocus.com/bid/31843
CVE ID: CVE-2008-4657 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Econda Plugin (econda) 0.0.2 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2870 - http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/ - http://www.securityfocus.com/bid/31841 - http://typo3.org/extensions/repository/view/econda/0.0.4/
CVE ID: CVE-2008-4658 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JobControl (dmmjobcontrol) 1.15.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31840 - http://typo3.org/extensions/repository/view/dmmjobcontrol/1.15.5/ - http://www.vupen.com/english/advisories/2008/2870 - http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/ - http://secunia.com/advisories/32342
CVE ID: CVE-2008-4659 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Mannschaftsliste (kiddog_playerlist) 1.0.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2870 - http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/ - http://www.securityfocus.com/bid/31844
CVE ID: CVE-2008-4660 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45999 - http://www.vupen.com/english/advisories/2008/2870 - http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/ - http://www.securityfocus.com/bid/31845
CVE ID: CVE-2008-4661 State: PUBLISHED Published: 2008-10-21T22:00:00 Last Updated: 2024-08-07T10:24:20.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Page Improvements (sm_pageimprovements) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2870 - http://typo3.org/teams/security/security-bulletins/typo3-20081020-1/ - http://typo3.org/extensions/repository/view/sm_pageimprovements/0.3.0/info/ChangeLog/
CVE ID: CVE-2008-4662 State: PUBLISHED Published: 2008-10-21T23:00:00 Last Updated: 2024-08-07T10:24:20.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492877/100/0/threaded - http://securityreason.com/securityalert/4463 - http://www.securityfocus.com/bid/31743 - http://secunia.com/advisories/30472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45843 - ht
us.com/bid/31743 - http://secunia.com/advisories/30472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45843 - https://www.exploit-db.com/exploits/6744
CVE ID: CVE-2008-4663 State: PUBLISHED Published: 2008-10-21T23:00:00 Last Updated: 2024-08-07T10:24:20.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log Kaiseki (1) jcode.pl and (2) Jcode.pm, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kumacchi.com/cgiroom/index.html - http://jvn.jp/en/jp/JVN72065744/index.html - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000044.html - http://jvn.jp/en/jp/JVN46869708/index.html - https://exchange.xforce.ibmcloud.com/vulnerabiliti
JVNDB-2008-000044.html - http://jvn.jp/en/jp/JVN46869708/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46053 - http://www.kumacchi.com/cgiroom/cgis/accesslogex/accesslogex.html - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000043.html
CVE ID: CVE-2008-4664 State: PUBLISHED Published: 2008-10-22T00:00:00 Last Updated: 2024-08-07T10:24:20.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27271 - http://secunia.com/advisories/28494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39675 - http://hi.baidu.com/muma_reader/blog/item/46bd0d7a04eb75e
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39675 - http://hi.baidu.com/muma_reader/blog/item/46bd0d7a04eb75e92f73b36e.html
CVE ID: CVE-2008-4665 State: PUBLISHED Published: 2008-10-22T10:00:00 Last Updated: 2024-08-07T10:24:20.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) news_read.php and (2) gifts_show.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45496 - http://www.vupen.com/english/advisories/2008/2698 - http://secunia.com/advisories/32016 - http://securityreason.com/securityalert/4466 - https://www.exploit-db.com/exploits/6626 - http://www.securityfocus.com/bid/31477
CVE ID: CVE-2008-4666 State: PUBLISHED Published: 2008-10-22T10:00:00 Last Updated: 2024-08-07T10:24:20.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4467 - http://www.securityfocus.com/bid/31424 - https://www.exploit-db.com/exploits/6576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45469
CVE ID: CVE-2008-4667 State: PUBLISHED Published: 2008-10-22T10:00:00 Last Updated: 2024-08-07T10:24:20.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the rss parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45514 - http://www.vupen.com/english/advisories/2008/2697 - https://www.exploit-db.com/exploits/6628 - http://securityreason.com/securityalert/4468