Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-056 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11472
CVE ID: CVE-2010-1903 State: PUBLISHED Published: 2010-08-11T18:00:00 Last Updated: 2024-08-07T02:17:12.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed record in a Word file, aka "Word HTML Linked Objects Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-222A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12039 - https://docs.microsoft.com/en-us/security-upda
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12039 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-056
CVE ID: CVE-2010-1904 State: PUBLISHED Published: 2010-06-07T14:00:00 Last Updated: 2024-08-07T02:17:12.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in EMC RSA Key Manager (RKM) C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0078.html - http://seclists.org/bugtraq/2011/Jan/138 - http://www.vupen.com/english/advisories/2011/0206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59133 - http://www.securityfocus.com/archive/1/511654
s/2011/0206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59133 - http://www.securityfocus.com/archive/1/511654/100/0/threaded - http://www.securityfocus.com/bid/40553 - http://secunia.com/advisories/43057 - http://www.securitytracker.com/id?1024989 - http://www.securitytracker.com/id?1024059
CVE ID: CVE-2010-1905 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T02:17:12.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackers to inject arbitrary web script or HTML via crafted input to ASP pages, as demonstrated using the backurl parameter to sdccommon/verify/asp/n6plugindestructor.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html
http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.wintercore.com/downloads/rootedcon_0day.pdf - http://www.securityfocus.com/archive/1/511176/100/0/threaded - http://secunia.com/advisories/39740 - http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf - http://www.securityfocus.com/bid/39999
CVE ID: CVE-2010-1906 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T02:17:12.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \\.\pipe\__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39752 - http://www.kb.cert.org/vuls/id/602801 - http://wintercor
Container: References: - http://secunia.com/advisories/39752 - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.wintercore.com/downloads/rootedcon_0day.pdf - http://www.securityfocus.com/archive/1/511176/100/0/threaded - http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf
CVE ID: CVE-2010-1907 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T02:17:12.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to discover the username of the client user, and consequently determine a pathname to a certain user directory, via a call to the GetUserName method. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www
rcore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.wintercore.com/downloads/rootedcon_0day.pdf - http://www.securityfocus.com/archive/1/511176/100/0/threaded
CVE ID: CVE-2010-1908 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T02:17:12.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance does not properly restrict access to the HTTPDownloadFile, HTTPGetFile, Install, and RunCmd methods, which allows remote attackers to execute arbitrary programs via a URL in the url argument to (1) HTTPDownloadFile or (2) HTTPGetFile. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39751 - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/componen
ences: - http://secunia.com/advisories/39751 - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.wintercore.com/downloads/rootedcon_0day.pdf - http://www.securityfocus.com/archive/1/511176/100/0/threaded
CVE ID: CVE-2010-1909 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T02:17:12.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RunCmd method in the SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to execute arbitrary code via vectors involving "CreateProcess params." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39751 - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18
advisories/39751 - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.wintercore.com/downloads/rootedcon_0day.pdf - http://www.securityfocus.com/archive/1/511176/100/0/threaded
CVE ID: CVE-2010-1910 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T02:17:12.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.securityfocus.com/archive/1/511
rticle/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.securityfocus.com/archive/1/511176/100/0/threaded - http://www.securityfocus.com/bid/40003 - http://secunia.com/advisories/39740 - http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf
CVE ID: CVE-2010-1911 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T02:17:12.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The site-locking implementation in the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance relies on a list of server domain names to restrict execution of ActiveX controls, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a DNS hijacking attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-a
/www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.wintercore.com/downloads/rootedcon_0day.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/58608 - http://www.securityfocus.com/archive/1/511176/100/0/threaded - http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf
CVE ID: CVE-2010-1912 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T02:17:13.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to bypass intended restrictions on ActiveX execution via "instantiation/free attacks." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.wintercore.com/downloads/rootedcon_0day.pdf - http://www.securityfoc
-an-advisory-for-consona-products.html - http://www.wintercore.com/downloads/rootedcon_0day.pdf - http://www.securityfocus.com/archive/1/511176/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/58607
CVE ID: CVE-2010-1913 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T02:17:12.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance, when downloaded from a server operated by Telefonica or possibly other companies, contains an incorrect DNS whitelist that includes the DNS hostnames of home computers of many persons, which allows remote attackers to bypass intended restrictions on ActiveX execution by hosting an ActiveX control on an applicable home web server. Additional Analyst Notes: - CVE P
s on ActiveX execution by hosting an ActiveX control on an applicable home web server. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/602801 - http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html - http://www.wintercore.com/downloads/rootedcon_0day.pdf - http://www.securityfocus.com/archive/1/511176/100/0/threaded
CVE ID: CVE-2010-1914 State: PUBLISHED Published: 2010-05-12T00:00:00 Last Updated: 2024-08-07T02:17:12.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the (1) ZEND_BW_XOR opcode (shift_left_function), (2) ZEND_SL opcode (bitwise_xor_function), or (3) ZEND_SR opcode (shift_right_function), related to the convert_to_long_base function. Additional Analyst Notes: - CVE Program Container: References: - http://www.php-security.org/2010/05/08/mops-2010-016-php-zend_sr-opcode-interruption-address-information-leak-vulnerabi
http://www.php-security.org/2010/05/08/mops-2010-016-php-zend_sr-opcode-interruption-address-information-leak-vulnerability/index.html - http://www.php-security.org/2010/05/08/mops-2010-014-php-zend_bw_xor-opcode-interruption-address-information-leak-vulnerability/index.html - http://www.php-security.org/2010/05/08/mops-2010-015-php-zend_sl-opcode-interruption-address-information-leak-vulnerability/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/58587 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-1915 State: PUBLISHED Published: 2010-05-12T00:00:00 Last Updated: 2024-08-07T02:17:14.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose values are not updated in the associated local variables, and access of previously-freed memory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58586 - http://list
t Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58586 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://www.php-security.org/2010/05/09/mops-2010-017-php-preg_quote-interruption-information-leak-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-1916 State: PUBLISHED Published: 2010-05-12T00:00:00 Last Updated: 2024-08-07T02:17:12.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in Serendipity 1.5.2 and earlier, allows remote attackers to bypass intended access restrictions and modify the configuration of arbitrary plugins via (1) crafted backend_config_secret_key_location and backend_config_hash parameters that are used in a SHA1 hash of a shared secret that can be known or externally influenced, which are not properly handled by the "Deprecated config passing" feature; or (2) crafted backend_data and backend_d
ed, which are not properly handled by the "Deprecated config passing" feature; or (2) crafted backend_data and backend_data[key_location] variables, which are not properly handled by the xinha_read_passed_data function. NOTE: this can be leveraged to upload and possibly execute arbitrary files via config.inc.php in the ImageManager plugin. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=591701 - http://www.vupen.com/english/advisories/2010/1401 - http://www.php-security.org/2010/05/10/mops-2010-020-xinha-wysiwyg-plugin-configuration-injection-vulnerability/index.html - http://secunia.com/advisories/40124 - http://secunia.com/adviso
lugin-configuration-injection-vulnerability/index.html - http://secunia.com/advisories/40124 - http://secunia.com/advisories/39782 - http://www.securityfocus.com/bid/40033 - http://trac.xinha.org/ticket/1518 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042577.html - http://www.php-security.org/2010/05/10/mops-2010-019-serendipity-wysiwyg-editor-plugin-configuration-injection-vulnerability/index.html
CVE ID: CVE-2010-1917 State: PUBLISHED Published: 2010-05-12T00:00:00 Last Updated: 2024-08-07T02:17:12.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (PHP crash) via a crafted first argument to the fnmatch function, as demonstrated using a long string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40860 - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://www.debian.org/security/2010/dsa-2089 - http://www.redhat.com/support/errata/RHSA-2010-0919.html - http://secunia.com/advis
.debian.org/security/2010/dsa-2089 - http://www.redhat.com/support/errata/RHSA-2010-0919.html - http://secunia.com/advisories/42410 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58585 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://www.php-security.org/2010/05/11/mops-2010-021-php-fnmatch-stack-exhaustion-vulnerability/index.html - http://www.vupen.com/english/advisories/2010/3081
CVE ID: CVE-2010-1918 State: PUBLISHED Published: 2010-05-12T00:00:00Z Last Updated: 2024-09-17T03:55:09.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39728 - http://packetstormsecurity.org/1005-exploits/MOPS-2010-018.pdf - http://www.securityfocus.com/bid/40032 - http://www.php-security.org/2010/05/09/mops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html - http://osvdb.org/64506 - http://www.v
ops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html - http://osvdb.org/64506 - http://www.vupen.com/english/advisories/2010/1101
CVE ID: CVE-2010-1919 State: PUBLISHED Published: 2010-05-28T18:00:00 Last Updated: 2024-08-07T02:17:14.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service (gsan service hang) by sending a crafted message using TCP. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39919 - http://www.packetstormsecurity.org/1005-advisories/ESA-2010-007.txt - http://securitytracker.com/id?1024036 - http://www.vupen.com/english/advisories/2010/1253 - http://www.securityfocus.com/bid/40390 - http://archives.neohapsis.com/archives/bugtraq/2
english/advisories/2010/1253 - http://www.securityfocus.com/bid/40390 - http://archives.neohapsis.com/archives/bugtraq/2010-05/0254.html
CVE ID: CVE-2010-1920 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:12.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39673 - http://www.vupen.com/english/advisories/2010/1059 - http://packetstormsecurity.org/1005-exploits/openmairie-rfilfi.txt - http://www.exploit-d
english/advisories/2010/1059 - http://packetstormsecurity.org/1005-exploits/openmairie-rfilfi.txt - http://www.exploit-db.com/exploits/12486 - http://www.securityfocus.com/bid/39887
CVE ID: CVE-2010-1921 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:13.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) annuaire.class.php, (2) droit.class.php, (3) collectivite.class.php, (4) profil.class.php, (5) direction.class.php, (6) service.class.php, (7) directiongenerale.class.php, and (8) utilisateur.class.php in obj/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64180 - http://www.osv
hp in obj/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64180 - http://www.osvdb.org/64179 - http://www.osvdb.org/64181 - http://secunia.com/advisories/39673 - http://www.vupen.com/english/advisories/2010/1059 - http://www.osvdb.org/64184 - http://www.osvdb.org/64176 - http://www.osvdb.org/64178 - http://packetstormsecurity.org/1005-exploits/openmairie-rfilfi.txt - http://www.exploit-db.com/exploits/12486 - http://www.securityfocus.com/bid/39887 - http://www.osvdb.org/64182 - http://www.osvdb.org/64177
CVE ID: CVE-2010-1922 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:13.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in 29o3 CMS 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the LibDir parameter to (1) lib/page/pageDescriptionObject.php, and (2) layoutHeaderFuncs.php, (3) layoutManager.php, and (4) layoutParser.php in lib/layout/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/29o3cms-rfi.txt - http://www.vupen.com/english/advisories/2010/1120 - http://www.securityfocus.com/bid/40049 - http://www.security
i.txt - http://www.vupen.com/english/advisories/2010/1120 - http://www.securityfocus.com/bid/40049 - http://www.securityfocus.com/archive/1/511222/100/0/threaded - http://www.exploit-db.com/exploits/12558
CVE ID: CVE-2010-1923 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:12.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remote attackers to execute arbitrary SQL commands via the id parameter in a showgallery action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58583 - http://packetstormsecurity.org/1005-exploits/web20snfcs-sql.txt - http://secunia.com/advisories/39761 - http://osvdb.org/64513
CVE ID: CVE-2010-1924 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:12.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58392 - http://www.exploit-db.com/exploits/12545 - http://www.securityfocus.com/bid/40040 - http://osvdb.org/64512
CVE ID: CVE-2010-1925 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:14.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-2817. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20464 - http://www.vupen.com/english/advisories/2010/1117 - http://www.securityfocus.com/bid/40030 - http://www.exploit-db.com/exploits/12552 - http://packetstormsecurity.org/1005-exploits/teknoportal-sql.txt
CVE ID: CVE-2010-1926 State: PUBLISHED Published: 2010-05-12T16:00:00 Last Updated: 2024-08-07T02:17:14.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/opencourrier-rfilfi.txt - http://www.exploit-db.c