Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4761 State: PUBLISHED Published: 2010-03-29T18:00:00 Last Updated: 2024-08-07T07:17:24.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long string in a .smi file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50266 - http://www.exploit-db.com/exploits/8594 - http://www.exploit-db.com/exploits/8589 - http://www.securityfocus.com/bid/34794
CVE ID: CVE-2009-4762 State: PUBLISHED Published: 2010-03-29T20:00:00 Last Updated: 2024-08-07T07:17:24.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603. Additional Analyst Notes: - CVE Program Container: References: - http://hg.moinmo.in/moin/1.7/rev/897cdbe9e8f2 - http://moinmo.in/SecurityFixes - http://www.vupen.com/english/advisories/2010/1208 - http://www.debian.org/security/2010/dsa-2014 -
o.in/SecurityFixes - http://www.vupen.com/english/advisories/2010/1208 - http://www.debian.org/security/2010/dsa-2014 - http://secunia.com/advisories/39887 - http://www.securityfocus.com/bid/35277 - http://ubuntu.com/usn/usn-941-1 - http://www.vupen.com/english/advisories/2010/0600 - http://hg.moinmo.in/moin/1.8/rev/897cdbe9e8f2
CVE ID: CVE-2009-4763 State: PUBLISHED Published: 2010-03-30T23:00:00 Last Updated: 2024-08-07T07:17:25.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ClickHeat plugin, as used in phpMyVisites before 2.4, has unknown impact and attack vectors. NOTE: due to lack of details from the vendor, it is not clear whether this is related to CVE-2008-5793. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38824 - http://www.phpmyvisites.us/phpmv2/CHANGELOG - https://exchange.xforce.ibmcloud.com/vulnerabilities/57004 - http://secunia.com/advisories/38862
CVE ID: CVE-2009-4764 State: PUBLISHED Published: 2010-04-05T15:15:00 Last Updated: 2024-08-07T07:17:24.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users into executing arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.immunitysec.com/pipermail/dailydave/2010-April/006074.html - https://forum.immunityinc.com/board/thread/1199/exploiting-pdf-files-without-vulnerabili/?page=1#post-1199 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
pdf-files-without-vulnerabili/?page=1#post-1199 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6976 - http://www.metasploit.com/redmine/projects/framework/repository/revisions/8379/changes/modules/exploits/windows/fileformat/adobe_pdf_embedded_exe.rb - https://exchange.xforce.ibmcloud.com/vulnerabilities/57994 - http://lists.immunitysec.com/pipermail/dailydave/2010-April/006072.html
CVE ID: CVE-2009-4765 State: PUBLISHED Published: 2010-04-13T18:00:00Z Last Updated: 2024-09-16T18:17:57.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: CNR Hikaye Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/hikaye.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61480 - http://secunia.com/advisories/38103 - http://packetstormsecurity.org/1001-exploits/aspcnrhikaye-disclose.txt - http://www.vupen.com/english/advisories/2010/0032
CVE ID: CVE-2009-4766 State: PUBLISHED Published: 2010-04-13T18:00:00Z Last Updated: 2024-09-16T23:55:40.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: YP Portal MS-Pro Surumu (aka MS-Pro Portal Scripti) 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38119 - http://www.osvdb.org/61467 - http://packetstormsecurity.org/1001-exploits/ypportal-disclose.txt
CVE ID: CVE-2009-4767 State: PUBLISHED Published: 2010-04-20T14:00:00 Last Updated: 2024-08-07T07:17:25.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) input_name and (2) input_text parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37418 - http://osvdb.org/60310 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54321 - http://www.exploit-db.com/exploits/10168
CVE ID: CVE-2009-4768 State: PUBLISHED Published: 2010-04-20T14:00:00 Last Updated: 2024-08-07T07:17:25.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54324 - http://forums.battle.net/thread.html?topicId=16888549346 - http://www.securityfocus.com/bid/37052 - http://secunia.com/advisories/37390
CVE ID: CVE-2009-4769 State: PUBLISHED Published: 2010-04-20T14:00:00Z Last Updated: 2024-09-17T01:40:43.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow (2) remote authenticated users to execute arbitrary code via format string specifiers in a PWD command to the FTP server component. Additional Analyst Notes: - CVE Program Container: References: - http://www.metasploit.com/redmine/projects/framework/repository/r
Analyst Notes: - CVE Program Container: References: - http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/http/httpdx_tolog_format.rb - http://osvdb.org/60181 - http://www.vupen.com/english/advisories/2009/3312 - http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/ftp/httpdx_tolog_format.rb - http://osvdb.org/60182
CVE ID: CVE-2009-4770 State: PUBLISHED Published: 2010-04-20T14:00:00Z Last Updated: 2024-09-16T23:42:05.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access. Additional Analyst Notes: - CVE Program Container: References: - http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/ftp/httpdx_tolog_format.rb
CVE ID: CVE-2009-4771 State: PUBLISHED Published: 2010-04-20T14:00:00 Last Updated: 2024-08-07T07:17:25.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal does not properly validate orders, which allows remote attackers to trigger unspecified "duplicate actions" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54346 - http://www.securityfocus.com/bid/37058 - http://drupal.org/node/636576 - http://secunia.com/advisories/37440 - http://osvdb.org/60290
CVE ID: CVE-2009-4772 State: PUBLISHED Published: 2010-04-20T14:00:00 Last Updated: 2024-08-07T07:17:25.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal, when a custom checkout completion message is enabled, allows attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37058 - http://drupal.org/node/636576 - http://osvdb.org/60291 - http://secunia.com/advisories/37440 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
6576 - http://osvdb.org/60291 - http://secunia.com/advisories/37440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54345
CVE ID: CVE-2009-4773 State: PUBLISHED Published: 2010-04-20T14:00:00 Last Updated: 2024-08-07T07:17:25.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the order-management functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37058 - http://drupal.org/node/636576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54344 - http://osvdb.org/60292 - http://secunia.com/advisories/37440
CVE ID: CVE-2009-4774 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-17T01:25:47.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris 10 and OpenSolaris snv_49 through snv_117, when 64bit mode is used on the Intel x86 platform and a Linux (lx) branded zone is configured, allows local users to cause a denial of service (panic) via unspecified vectors, a different vulnerability than CVE-2007-6225. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36691 - http://www.securityfocus.com/bid/36340 - http://www.vupen.com/english/advisories/2009/2581 - http://sunsolve.sun.com/searc
tp://www.securityfocus.com/bid/36340 - http://www.vupen.com/english/advisories/2009/2581 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-266228-1
CVE ID: CVE-2009-4775 State: PUBLISHED Published: 2010-04-21T14:00:00 Last Updated: 2024-08-07T07:17:25.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash) via format string specifiers in the status code portion of an HTTP response. Additional Analyst Notes: - CVE Program Container: References: - http://docs.ipswitch.com/WS_FTP%20122/ReleaseNotes/English/index.htm?k_id=ipswitch_com_ftp_documents_worldwide_ws_ftp122releasenotesenglish#link23 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53098 - http://www.packetstormsecurity.org/0909-expl
glish#link23 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53098 - http://www.packetstormsecurity.org/0909-exploits/nocoolnameforawsftppoc.pl.txt - http://www.exploit-db.com/exploits/9607 - http://www.securityfocus.com/bid/36297
CVE ID: CVE-2009-4776 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-16T17:58:12.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/
nal Analyst Notes: - CVE Program Container: References: - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html - http://osvdb.org/57834 - http://www.securityfocus.com/bid/36309 - http://secunia.com/advisories/36622 - http://www.vupen.com/english/advisories/2009/2574
CVE ID: CVE-2009-4777 State: PUBLISHED Published: 2010-04-21T14:00:00 Last Updated: 2024-08-07T07:17:25.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in multiple versions of Hitachi JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer, allows remote attackers to cause a denial of service ("abnormal" termination) via vectors related to the display of an "invalid GIF file." Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-016/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53115 - http:/
oft1/global/security/info/vuls/HS09-016/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53115 - http://secunia.com/advisories/36646 - http://www.vupen.com/english/advisories/2009/2576 - http://osvdb.org/57832 - http://www.securityfocus.com/bid/36311
CVE ID: CVE-2009-4778 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-17T04:13:53.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.7 and 5.0.0, and BlackBerry Professional Software 4.1.4, allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246, CVE-2009-0176, CVE-2009-0219, CVE-2009-2643, and CVE-2009-2646. Additional Analyst Note
ulnerability than CVE-2008-3246, CVE-2009-0176, CVE-2009-0219, CVE-2009-2643, and CVE-2009-2646. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37167 - http://www.securitytracker.com/id?1023258 - http://secunia.com/advisories/37562 - http://www.blackberry.com/btsc/KB19860 - http://www.vupen.com/english/advisories/2009/3372
CVE ID: CVE-2009-4779 State: PUBLISHED Published: 2010-04-21T14:00:00 Last Updated: 2024-08-07T07:17:25.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in NukeHall 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter to (1) blocks.php, (2) messages.php, and (3) stories.php in admin/modules/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54393
CVE ID: CVE-2009-4780 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-16T19:45:51.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter in a sitemap action, (2) the search parameter in a search action, (3) the tagging_id parameter in a search action, (4) the highlight parameter in an artikel action, (5) the artlang parameter in an artikel action, (6) the letter parameter in a sitemap action, (7) the lang parameter in a show action, (8) the cat parameter in a show action, (9) the news
meter in a sitemap action, (7) the lang parameter in a show action, (8) the cat parameter in a show action, (9) the newslang parameter in a news action, (10) the artlang parameter in a send2friend action, (11) the cat parameter in a send2friend action, (12) the id parameter in a send2friend action, (13) the srclang parameter in a translate action, (14) the id parameter in a translate action, (15) the cat parameter in a translate action, (16) the cat parameter in an add action, or (17) the question parameter in an add action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: Ref
wn; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37180 - http://secunia.com/advisories/37520
CVE ID: CVE-2009-4781 State: PUBLISHED Published: 2010-04-21T14:00:00 Last Updated: 2024-08-07T07:17:25.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: TUKEVA Password Reminder before 1.0.0.4 uses a hard-coded password for rem.accdb, which allows local users to discover credentials via a DBI connection. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37553 - http://www.exploit-db.com/exploits/10201 - http://www.tekuva.com/index.php?option=com_docman&task=doc_details&gid=40&Itemid=9
CVE ID: CVE-2009-4782 State: PUBLISHED Published: 2010-04-21T14:00:00 Last Updated: 2024-08-07T07:17:25.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to inject arbitrary web script or HTML via the (1) start, (2) forum, and (3) cat parameters to community/thread.php; (4) start and (5) cat parameters to community/forum.php; and (6) start parameter to blog/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508148/100/0/threaded - http://packetstormsecurity.org/0912-exploits/theeta-sqlxss.txt - http://secunia.co
com/archive/1/508148/100/0/threaded - http://packetstormsecurity.org/0912-exploits/theeta-sqlxss.txt - http://secunia.com/advisories/37529
CVE ID: CVE-2009-4783 State: PUBLISHED Published: 2010-04-21T14:00:00 Last Updated: 2024-08-07T07:17:25.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to execute arbitrary SQL commands via the start parameter to (1) forum.php and (2) thread.php in community/, and (3) blog/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508148/100/0/threaded - http://packetstormsecurity.org/0912-exploits/theeta-sqlxss.txt - http://secunia.com/advisories/37529
CVE ID: CVE-2009-4784 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-16T16:39:04.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Joaktree (com_joaktree) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the treeId parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37178 - http://packetstormsecurity.org/0912-exploits/joomlajoaktree-sql.txt - http://secunia.com/advisories/37535
CVE ID: CVE-2009-4785 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-17T00:05:26.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Quick News (com_quicknews) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a view_item action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0911-exploits/joomla-quicknews.txt - http://www.securityfocus.com/bid/37161
CVE ID: CVE-2009-4786 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-16T17:02:40.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pligg before 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to (1) admin/admin_config.php, (2) admin/admin_modules.php, (3) delete.php, (4) editlink.php, (5) submit.php, (6) submit_groups.php, (7) user_add_remove_links.php, and (8) user_settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://holisticinfosec.org/content/view/130/45/ - http://www.pligg.com/blog/775/pligg-cms-1-0-3-release/ - http
ences: - http://holisticinfosec.org/content/view/130/45/ - http://www.pligg.com/blog/775/pligg-cms-1-0-3-release/ - http://secunia.com/advisories/37349
CVE ID: CVE-2009-4787 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-16T23:20:50.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Pligg before 1.0.3 allow remote attackers to hijack the authentication of administrators for requests that create user accounts or have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://holisticinfosec.org/content/view/130/45/ - http://www.pligg.com/blog/775/pligg-cms-1-0-3-release/ - http://secunia.com/advisories/37349
CVE ID: CVE-2009-4788 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-17T04:14:45.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the (1) return parameter to pligg/login.php and the (2) HTTP Referer header to user_settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://holisticinfosec.org/content/view/130/45/ - http://www.pligg.com/blog/775/pligg-cms-1-0-3-release/ - http://secunia.com/advisories/37349
CVE ID: CVE-2009-4789 State: PUBLISHED Published: 2010-04-21T14:00:00Z Last Updated: 2024-09-16T17:04:12.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) wp-comments-post.php and (2) wp-trackback.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37179 - http://packetstormsecurity.org/0912-exploits/joomlamojoblog-rfi.txt
CVE ID: CVE-2009-4790 State: PUBLISHED Published: 2010-04-22T14:00:00Z Last Updated: 2024-09-16T20:26:22.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP commands. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34433
CVE ID: CVE-2009-4791 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T07:17:25.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to addressbook.php, (2) id parameter to recipes.php, (3) year parameter to register.php, (4) poll_id parameter to home.php, and (5) email parameter to lostpw.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.familycms.com/blog/2009/03/fcms-182-released/ - http://www.exploit-db.com/exploits/8319 - http://www.securityfocus.com/arc
milycms.com/blog/2009/03/fcms-182-released/ - http://www.exploit-db.com/exploits/8319 - http://www.securityfocus.com/archive/1/502272/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=672266 - http://sourceforge.net/tracker/?func=detail&aid=2722736&group_id=189733&atid=930513 - http://www.securityfocus.com/bid/34297 - http://secunia.com/advisories/34503