Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3374 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsargs array parameter in an __exp__getFeedContent action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31260 - http://svn.gregarius.net/trac/changeset/1788/trunk/gregarius/ajax.php - http://www.gulftech.org/?node=research&article_id=00119-07302008 - https://www.exploit-db.com/exploits/6159 - http://www.securityfocus.com/bid/30423 - https://ex
ticle_id=00119-07302008 - https://www.exploit-db.com/exploits/6159 - http://www.securityfocus.com/bid/30423 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44054 - http://www.securityfocus.com/archive/1/494866/100/0/threaded
CVE ID: CVE-2008-3375 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31249 - http://www.gulftech.org/?node=research&article_id=00117-07282008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44048 - http://www.jamroom.net/phpBB2/viewtopic.php?t=24454 - http://www.securityfo
.xforce.ibmcloud.com/vulnerabilities/44048 - http://www.jamroom.net/phpBB2/viewtopic.php?t=24454 - http://www.securityfocus.com/archive/1/494820/100/0/threaded - http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1178 - http://securityreason.com/securityalert/4069 - http://www.securityfocus.com/bid/30406
CVE ID: CVE-2008-3376 State: PUBLISHED Published: 2008-07-30T17:00:00Z Last Updated: 2024-09-17T03:54:24.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31249 - http://www.jamroom.net/phpBB2/viewtopic.php?t=24454 - http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1177 - http://www.securityfocus.com/bid/30406
CVE ID: CVE-2008-3377 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the image_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6134 - http://www.securityfocus.com/bid/30377 - http://securityreason.com/securityalert/4070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44029
CVE ID: CVE-2008-3378 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6133 - http://secunia.com/advisories/31252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44023 - http://www.securityfocus.com/bid/30374 - http://securityreason.com/securityalert/4071
CVE ID: CVE-2008-3379 State: PUBLISHED Published: 2008-07-30T17:00:00 Last Updated: 2024-08-07T09:37:26.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the pic parameter to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43967 - http://www.securityfocus.com/bid/30334
CVE ID: CVE-2008-3380 State: PUBLISHED Published: 2008-07-30T18:00:00 Last Updated: 2024-08-07T09:37:26.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ajaxp_backend.php in MyioSoft EasyBookMarker 4.0 trial edition (tr) allows remote attackers to inject arbitrary web script or HTML via the rs parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43918 - http://www.securityfocus.com/bid/30304 - http://www.vupen.com/english/advisories/2008/2165/references - http://secunia.com/advisories/31191 - http://securityreason.com/securityalert/4072 - http://www.securityf
5/references - http://secunia.com/advisories/31191 - http://securityreason.com/securityalert/4072 - http://www.securityfocus.com/archive/1/494550/100/0/threaded
CVE ID: CVE-2008-3381 State: PUBLISHED Published: 2008-07-30T18:00:00 Last Updated: 2024-08-07T09:37:26.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31135 - http://moinmo.in/SecurityFixes - http://www.vupen.com/english/advisories/2008/2147/references - http://hg.moinmo.in/moin/1.7/rev/383196922b03 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43899 - http://hg.moinmo.in
g.moinmo.in/moin/1.7/rev/383196922b03 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43899 - http://hg.moinmo.in/moin/1.6/rev/8686a10f1f58 - http://www.securityfocus.com/bid/30297
CVE ID: CVE-2008-3382 State: PUBLISHED Published: 2008-07-30T18:00:00 Last Updated: 2024-08-07T09:37:26.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers to execute arbitrary SQL commands via the cat_a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43931 - http://www.vupen.com/english/advisories/2008/2156/references - https://www.exploit-db.com/exploits/6108
CVE ID: CVE-2008-3383 State: PUBLISHED Published: 2008-07-30T18:00:00 Last Updated: 2024-08-07T09:37:27.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via the cat_a parameter in a browse action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6111 - http://www.vupen.com/english/advisories/2008/2159/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43934 - http://secunia.com/advisories/31162
CVE ID: CVE-2008-3384 State: PUBLISHED Published: 2008-07-30T18:00:00 Last Updated: 2024-08-07T09:37:26.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) module and (2) file parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43937 - http://www.securityfocus.com/archive/1/494582/100/0/threaded - https://www.exploit-db.com/exploits/6107 - http://www.securityfocus.com/bid/30315 - http://ww
/1/494582/100/0/threaded - https://www.exploit-db.com/exploits/6107 - http://www.securityfocus.com/bid/30315 - http://www.vupen.com/english/advisories/2008/2155/references - http://securityreason.com/securityalert/4073 - http://sourceforge.net/forum/forum.php?thread_id=2104908&forum_id=237160 - http://secunia.com/advisories/31150
CVE ID: CVE-2008-3385 State: PUBLISHED Published: 2008-07-30T18:00:00 Last Updated: 2024-08-07T09:37:26.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6080 - http://www.securityfocus.com/bid/30240 - http://securityreason.com/secu
es: - https://www.exploit-db.com/exploits/6080 - http://www.securityfocus.com/bid/30240 - http://securityreason.com/securityalert/4074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43833 - http://secunia.com/advisories/31099
CVE ID: CVE-2008-3386 State: PUBLISHED Published: 2008-07-30T18:00:00 Last Updated: 2024-08-07T09:37:26.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43861 - http://securityreason.com/securityalert/4075 - http://secunia.com/advisories/31134 - http://www.securityfocus.com/bid/30272
CVE ID: CVE-2008-3387 State: PUBLISHED Published: 2008-07-30T18:00:00 Last Updated: 2024-08-07T09:37:26.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the dbtable parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43911 - http://securityreason.com/securityalert/4076 - https://www.exploit-db.com/exploits/6102
CVE ID: CVE-2008-3388 State: PUBLISHED Published: 2008-07-30T18:00:00 Last Updated: 2024-08-07T09:37:26.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via the article parameter to (1) comaddok.php and (2) comlook.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30289 - http://www.securityfocus.com/archive/1/494534/100/0/threaded - http://securityreason.com/securityalert/4079 - http://secunia.com/advisories/31174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43909
CVE ID: CVE-2008-3389 State: PUBLISHED Published: 2008-08-05T19:20:00 Last Updated: 2024-08-07T09:37:26.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020615 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=732 - http://www.ingres.com/support/security-ale
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=732 - http://www.ingres.com/support/security-alert-080108.php - http://www.vupen.com/english/advisories/2008/2292 - http://secunia.com/advisories/31398 - http://www.vupen.com/english/advisories/2008/2313 - http://secunia.com/advisories/31357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44179 - http://www.securityfocus.com/archive/1/495177/100/0/threaded - http://www.securityfocus.com/bid/30512 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989
CVE ID: CVE-2008-3390 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:27.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6156 - http://securityreason.com/securityalert/4080 - http://www.securityfocus.com/archive/1/494864/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44046
CVE ID: CVE-2008-3391 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to (1) admin_group_details.asp and (2) admin_category_details.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30398 - http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS.txt - http://secunia.com/advisories/31281 - http://depo2.nm.ru/WebWiz_Forum_v9.5_XSS2.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44012
CVE ID: CVE-2008-3392 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to log_off_user.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31281 - http://depo2.nm.ru/WebWiz_Forum_v9.5_CSRF.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44011
CVE ID: CVE-2008-3393 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30432 - http://holisticinfosec.org/content/view/79/45/ - http://www.osvdb.org/47202 - http://secunia.com/advisories/31258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44067
CVE ID: CVE-2008-3394 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in search.cfm in BookMine allow remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30432 - http://holisticinfosec.org/content/view/79/45/ - http://www.osvdb.org/47203 - http://secunia.com/advisories/31258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44068
CVE ID: CVE-2008-3395 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail/Config.php and (2) webmail/webadmin/.htpasswd, which allows local users to obtain sensitive information by reading these files. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44144 - http://secunia.com/advisories/31279 - http://www.securityfocus.com/bi
change.xforce.ibmcloud.com/vulnerabilities/44144 - http://secunia.com/advisories/31279 - http://www.securityfocus.com/bid/30434
CVE ID: CVE-2008-3396 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31266 - http://aluigi.altervista.org/adv/ut2004null-adv.txt - http://www.securityfocus.com/archive/1/494935/100/0/threaded - http://www.vupen.com/english/advisories/2008/2259/references - http://aluigi.org/poc/ut2004null.zip - https://exchange.xf
ttp://www.vupen.com/english/advisories/2008/2259/references - http://aluigi.org/poc/ut2004null.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/44107 - http://www.securityfocus.com/bid/30427
CVE ID: CVE-2008-3397 State: PUBLISHED Published: 2008-07-31T16:00:00.000Z Last Updated: 2025-04-03T13:42:26.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Runesoft Cerberus CMS before 3_1.4_0.9 allows remote attackers to inject arbitrary web script or HTML via a cerberus_user cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/30416 - http://secunia.com/advisories/31218 - http://gl2logic.com/cerberus/cerberus.php?app=Old_News&SHOWID=7
CVE ID: CVE-2008-3398 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43994 - http://www.securityfocus.com/bid/30369 - https://www.exploit-db.com/exploits/6131 - http://secunia.com/advisories/31233 - http://www.securityfocus.com/archi
69 - https://www.exploit-db.com/exploits/6131 - http://secunia.com/advisories/31233 - http://www.securityfocus.com/archive/1/494754/100/0/threaded - http://securityreason.com/securityalert/4081
CVE ID: CVE-2008-3399 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the include_directory parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43992 - https://www.exploit-db.com/exploits/6131 - http://www.securityfocus.com/archive/1/494754/100/0/threaded - http://securityreason.com/securityalert/4081
CVE ID: CVE-2008-3400 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6131 - http://secunia.com/advisories/31233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43995 - http://www.securityfocus.com/archive/1/494754/100/0/threaded - http://securityreason.com/securityalert/4081
CVE ID: CVE-2008-3401 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44061 - http://www.securityfocus.com/archive/1/494927/100/0/threaded - http://www.securityfocus.com/bid/30435 - http://secunia.com/advisories/31300 - http://securityreason.com/securityalert/4082
CVE ID: CVE-2008-3402 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the hm parameter to (1) hioxupdate.php and (2) hioxstats.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44064 - http://www.securityfocus.com/archive/1/494930/100/0/threaded - http://secunia.com/advisories/31299 - http://securityreason.com/securityalert/4083 -
m/archive/1/494930/100/0/threaded - http://secunia.com/advisories/31299 - http://securityreason.com/securityalert/4083 - http://www.securityfocus.com/bid/30436
CVE ID: CVE-2008-3403 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mojoClassified.cgi in MojoPersonals allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31165 - http://securityreason.com/securityalert/4084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43932 - http://www.vupen.com/english/advisories/2008/2157 - https://www.exploit-db.com/exploits/6109 - http://www.securityfocus.com/bid/30325
CVE ID: CVE-2008-3404 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook.js.php in MJGuest 6.8 GT allows remote attackers to inject arbitrary web script or HTML via the link parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=121743234408691&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44139 - http://securityreason.com/securityalert/4085 - http://www.securityfocus.com/archive/1/497750/100/0/threaded - http://www.securityfocus.com/bid/30438 - http://www.mdsjack.bo.it/files/mjgues
cus.com/archive/1/497750/100/0/threaded - http://www.securityfocus.com/bid/30438 - http://www.mdsjack.bo.it/files/mjguest.log.txt
CVE ID: CVE-2008-3405 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44065 - https://www.exploit-db.com/exploits/6164 - http://www.securityfocus.com/bid/30439 - http://secunia.com/advisories/31297
CVE ID: CVE-2008-3406 State: PUBLISHED Published: 2008-07-31T16:00:00 Last Updated: 2024-08-07T09:37:26.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44060 - https://www.exploit-db.com/exploits/6140 - http://www.securityfocus.com/bid/30386 - http://securityreason.com/securityalert/4087