Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4748 State: PUBLISHED Published: 2008-10-27T19:00:00 Last Updated: 2024-08-07T10:24:21.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the irc:// URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6832 - http://www.securityfocus.com/bid/31912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46114 - http://securityreason.com/securityalert/4
s.com/bid/31912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46114 - http://securityreason.com/securityalert/4508 - http://www.vupen.com/english/advisories/2008/2926 - http://secunia.com/advisories/32410
CVE ID: CVE-2008-4749 State: PUBLISHED Published: 2008-10-27T19:00:00 Last Updated: 2024-08-07T10:24:21.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via (1) the LogFile property and ClearLogFile method, and (2) the SaveToFile method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46096 - http://securityreason.com/securityalert/4509 - https://www.exploit-db.com/exploits/6828 - http://www.securityfocus.com/bid
tp://securityreason.com/securityalert/4509 - https://www.exploit-db.com/exploits/6828 - http://www.securityfocus.com/bid/31907
CVE ID: CVE-2008-4750 State: PUBLISHED Published: 2008-10-27T19:00:00 Last Updated: 2024-08-07T10:24:21.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46095 - http://securityreason.com/securityalert/4509 - https://www.exploit-db.com/exploits/6828 - http://www.securityfocus.com/bid/31907
CVE ID: CVE-2008-4751 State: PUBLISHED Published: 2008-10-27T19:00:00 Last Updated: 2024-08-07T10:24:21.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0810-exploits/ipei-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/46111 - http://securityreason.com/securityalert/4510 - http://www.securityfocus.com/archive/1/497783/100/0/threaded - http://www.vupen.com/english/advisor
securityalert/4510 - http://www.securityfocus.com/archive/1/497783/100/0/threaded - http://www.vupen.com/english/advisories/2008/2920 - http://secunia.com/advisories/32429 - http://www.securityfocus.com/bid/31911
CVE ID: CVE-2008-4752 State: PUBLISHED Published: 2008-10-27T19:00:00 Last Updated: 2024-08-07T10:24:21.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: TlNews 2.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlNews_login cookie to admin. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4511 - http://www.securityfocus.com/bid/31919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46116 - http://secunia.com/advisories/32405 - https://www.exploit-db.com/exploits/6836
CVE ID: CVE-2008-4753 State: PUBLISHED Published: 2008-10-27T19:00:00 Last Updated: 2024-08-07T10:24:21.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL commands via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46088 - https://www.exploit-db.com/exploits/6829 - http://securityreason.com/securityalert/4512 - http://www.securityfocus.com/bid/31910
CVE ID: CVE-2008-4754 State: PUBLISHED Published: 2008-10-27T19:00:00 Last Updated: 2024-08-07T10:24:21.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in Scripts for Sites (SFS) Ez Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46113 - http://www.vupen.com/english/advisories/2008/2922 - http://secunia.com/advisories/32397 - http://securityreason.com/securityalert/4513 - http://www.securityfocus.com/bid/31924
CVE ID: CVE-2008-4755 State: PUBLISHED Published: 2008-10-28T00:00:00 Last Updated: 2024-08-07T10:24:21.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2923 - http://securityreason.com/securityalert/4521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46112 - http://www.securityfocus.com/bid/31925 - http://secunia.com/advisories/32373 - https://www.exploit-db.com/exploits/6839
CVE ID: CVE-2008-4756 State: PUBLISHED Published: 2008-10-28T00:00:00 Last Updated: 2024-08-07T10:24:21.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46128 - https://www.exploit-db.com/exploits/6833
CVE ID: CVE-2008-4757 State: PUBLISHED Published: 2008-10-28T00:00:00 Last Updated: 2024-08-07T10:24:21.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) add_postit.php (b) delete.php, and (c) mod_prest_date.php; and the (2) prev parameter to (d) prest_detail.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46125 - https://www.exploit-db.com/exploits/6833
CVE ID: CVE-2008-4758 State: PUBLISHED Published: 2008-10-28T00:00:00 Last Updated: 2024-08-07T10:24:21.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. (dot dot) in the fichier parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31915 - http://securityreason.com/securityalert/4527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46126 - https://www.exploit-db.com/exploits/6833
CVE ID: CVE-2008-4759 State: PUBLISHED Published: 2008-10-28T00:00:00 Last Updated: 2024-08-07T10:24:21.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. (dot dot) in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4520 - https://www.exploit-db.com/exploits/6835 - http://www.vupen.com/english/advisories/2008/2925 - http://www.securityfocus.com/bid/31914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46123
CVE ID: CVE-2008-4760 State: PUBLISHED Published: 2008-10-28T00:00:00 Last Updated: 2024-08-07T10:24:21.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lecture.php in Graphiks MyForum 1.3, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46124 - http://www.vupen.com/english/advisories/2008/2921 - https://www.exploit-db.com/exploits/6844 - http://securityreason.com/securityalert/4519
CVE ID: CVE-2008-4761 State: PUBLISHED Published: 2008-10-28T00:00:00 Last Updated: 2024-08-07T10:24:21.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3.20.2 allows remote attackers to inject arbitrary web script or HTML via the jsMakeSrc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue is probably in the HTMLArea HTMLTidy (HTML Tidy) plugin, not eSupport. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilit
upport. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/31908.html - http://www.openwall.com/lists/oss-security/2008/10/27/6 - http://www.securityfocus.com/bid/31908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46097
CVE ID: CVE-2008-4762 State: PUBLISHED Published: 2008-10-28T00:00:00 Last Updated: 2024-08-07T10:24:21.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentially execute arbitrary code via a long argument to the (1) rename and (2) realpath parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021096 - http://secunia.com/advisories/32366 - http://www.securityfocus.com/bid/31872 - http://securityreason.com/securityalert/4515 - http://www.securityfocus.com/archive/1/497746/100/0/threaded - htt
1872 - http://securityreason.com/securityalert/4515 - http://www.securityfocus.com/archive/1/497746/100/0/threaded - https://www.exploit-db.com/exploits/6812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46046 - http://www.vupen.com/english/advisories/2008/2897 - https://www.exploit-db.com/exploits/6800
CVE ID: CVE-2008-4763 State: PUBLISHED Published: 2008-10-28T01:00:00 Last Updated: 2024-08-07T10:24:20.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and earlier allow remote attackers to inject arbitrary web script or HTML via the PHP_SELF variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28740 - http://securityreason.com/securityalert/4514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41791 - http://www.securityfocus.com/archive/1/490768/100/0/threaded
CVE ID: CVE-2008-4764 State: PUBLISHED Published: 2008-10-28T01:00:00 Last Updated: 2024-08-07T10:24:21.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter in a show_error action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41873 - https://www.exploit-db.com/exploits/5435 - http://www.securityfocus.com/bid/28764
CVE ID: CVE-2008-4765 State: PUBLISHED Published: 2008-10-28T01:00:00 Last Updated: 2024-08-07T10:24:20.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0804-exploits/pollbooth20-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41796 - http://www.securityfocus.com/bid/28752 - https://www.exploit-db.c
//exchange.xforce.ibmcloud.com/vulnerabilities/41796 - http://www.securityfocus.com/bid/28752 - https://www.exploit-db.com/exploits/5436
CVE ID: CVE-2008-4766 State: PUBLISHED Published: 2008-10-28T01:00:00 Last Updated: 2024-08-07T10:24:21.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php in Oxygen Bulletin Board 1.1.3 allows remote attackers to execute arbitrary SQL commands via the member parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41703 - http://www.securityfocus.com/bid/28651/exploit
CVE ID: CVE-2008-4767 State: PUBLISHED Published: 2008-10-28T10:00:00 Last Updated: 2024-08-07T10:24:21.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with (1) .htm, (2) .html, or (3) .txt extensions, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: it is unclear how allowing the upload of .html or .txt files supports arbitrary code execution; this might be legitimate functionality. Additional Analyst Notes
.html or .txt files supports arbitrary code execution; this might be legitimate functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28919 - http://www.juniper.net/security/auto/vulnerabilities/vuln28919.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42007
CVE ID: CVE-2008-4768 State: PUBLISHED Published: 2008-10-28T10:00:00 Last Updated: 2024-08-07T10:31:27.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in TLM CMS 3.1 allows remote attackers to execute arbitrary SQL commands via the nom parameter to a-b-membres.php. NOTE: the goodies.php vector is already covered by CVE-2007-4808. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28837/exploit - http://www.securityfocus.com/bid/28837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
s.com/bid/28837/exploit - http://www.securityfocus.com/bid/28837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41923
CVE ID: CVE-2008-4769 State: PUBLISHED Published: 2008-10-28T10:00:00 Last Updated: 2024-08-07T10:31:26.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41920 - http://trac.wordpress.org/changeset/7586 - http://www.securityfocus.com/bid/28845 - h
mcloud.com/vulnerabilities/41920 - http://trac.wordpress.org/changeset/7586 - http://www.securityfocus.com/bid/28845 - http://www.debian.org/security/2009/dsa-1871 - http://secunia.com/advisories/29949 - http://www.juniper.fi/security/auto/vulnerabilities/vuln28845.html
CVE ID: CVE-2008-4770 State: PUBLISHED Published: 2009-01-16T21:00:00 Last Updated: 2024-08-07T10:31:27.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type." Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200903-17.xml - http://www.realvnc.com/products/upgrade.html - https://www.redhat.com/archives/fedora-package-announce/200
0903-17.xml - http://www.realvnc.com/products/upgrade.html - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01025.html - http://www.realvnc.com/products/free/4.1/release-notes.html - http://secunia.com/advisories/33689 - http://secunia.com/advisories/34184 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-140455-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248526-1 - http://www.securityfocus.com/bid/31832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45969 - http://www.securityfocus.com/bid/33263 - http://secunia.com/advisories/32317 - http://www.vupen.com/english/advisories/2008/2868 - http://www.realvnc.com/pipermail/vnc-list/20
.com/advisories/32317 - http://www.vupen.com/english/advisories/2008/2868 - http://www.realvnc.com/pipermail/vnc-list/2008-November/059432.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47937 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9367 - http://www.redhat.com/support/errata/RHSA-2009-0261.html
CVE ID: CVE-2008-4771 State: PUBLISHED Published: 2008-10-28T18:00:00 Last Updated: 2024-08-07T10:31:27.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5), (3) Vivotek RTSP MPEG4 SP Control (RtspVapgDecoderNew.dll 2.0.0.39), and possibly other products, allows remote attackers to execute arbitrary code via a long Url property. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisori
om third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40867 - http://osvdb.org/43007 - http://secunia.com/advisories/29131 - http://secunia.com/advisories/29146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40864 - http://www.vupen.com/english/advisories/2008/0687/references - http://www.vupen.com/english/advisories/2008/0685/references - http://www.securityfocus.com/bid/28010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40863 - http://osvdb.org/42378 - https://www.exploit-db.com/exploits/5193 - http://www.vupen.com/english/advisories/2008/0686/
- http://osvdb.org/42378 - https://www.exploit-db.com/exploits/5193 - http://www.vupen.com/english/advisories/2008/0686/references - http://securityreason.com/securityalert/4517
CVE ID: CVE-2008-4772 State: PUBLISHED Published: 2008-10-28T19:00:00 Last Updated: 2024-08-07T10:31:26.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6853 - http://securityreason.com/securityalert/4523 - http://www.securityfocus.com/bid/31945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46150
CVE ID: CVE-2008-4773 State: PUBLISHED Published: 2008-10-28T19:00:00 Last Updated: 2024-08-07T10:31:27.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6853 - http://securityreason.com/securityalert/4523 - http://www.securityfocus.com/bid/31945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46151
CVE ID: CVE-2008-4774 State: PUBLISHED Published: 2008-10-28T19:00:00 Last Updated: 2024-08-07T10:31:27.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6853 - http://securityreason.com/securityalert/4523 - http://www.securityfocus.com/bid/31945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46149
CVE ID: CVE-2008-4775 State: PUBLISHED Published: 2008-10-28T19:00:00 Last Updated: 2024-08-07T10:31:27.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11.9.2 and 3.0.1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the db parameter, a different vector than CVE-2006-6942 and CVE-2007-5977. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00908.html - http://security.gentoo.org/glsa/glsa-200903-32.xml - http://secunia.com
ra-package-announce/2008-October/msg00908.html - http://security.gentoo.org/glsa/glsa-200903-32.xml - http://secunia.com/advisories/32449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46136 - http://www.securityfocus.com/archive/1/497815/100/0/threaded - http://www.vupen.com/english/advisories/2008/2943 - http://securityreason.com/securityalert/4516 - http://www.securityfocus.com/bid/31928 - http://secunia.com/advisories/32482 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00925.html
CVE ID: CVE-2008-4776 State: PUBLISHED Published: 2008-10-28T19:00:00 Last Updated: 2024-08-07T10:31:27.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: libgadu before 1.8.2 allows remote servers to cause a denial of service (crash) via a contact description with a large length, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://lists.ziew.org/pipermail/libgadu-devel/2008-October/000331.html - http://www.debian.org/security/2008/dsa-1664 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html - http://www.ubuntu.com/usn/usn-692-1 - http://www.securityfocus.com/bid/31951 - https://exchange.xforce.ibmcl
0012.html - http://www.ubuntu.com/usn/usn-692-1 - http://www.securityfocus.com/bid/31951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46158 - https://bugzilla.redhat.com/show_bug.cgi?id=468830
CVE ID: CVE-2008-4777 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2008-04/0031.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41614 - http://www.securityfocus.com/bid/28586 - http://www.securityfocus.com/archive/1/490410/100/0/threaded