Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6222 State: PUBLISHED Published: 2009-02-20T21:25:00 Last Updated: 2024-08-07T11:20:25.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46356 - http://www.securityfocus.com/bid/32113 - https://www.exploit-db.com/exploits/6980
CVE ID: CVE-2008-6223 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the plancia parameter to crea.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32515 - https://www.exploit-db.com/exploits/6992 - http://www.securityfocus.com/bid/32115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46341
CVE ID: CVE-2008-6224 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the plancia parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32515 - https://www.exploit-db.com/exploits/6992 - http://www.securityfocus.com/bid/32115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46340
CVE ID: CVE-2008-6225 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies [spread] out such false informations. Such scripts or versions [do not] exist. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32577 - http://www.securityfocus.com/bid/32138 - https://www.exploit-db.com/exploits/7009 - http
/secunia.com/advisories/32577 - http://www.securityfocus.com/bid/32138 - https://www.exploit-db.com/exploits/7009 - http://www.mole-group.com/content/view/57/72 - http://www.vupen.com/english/advisories/2008/3027 - http://osvdb.org/49694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46383
CVE ID: CVE-2008-6226 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46381 - http://www.securityfocus.com/bid/32131 - https://www.exploit-db.com/exploits/7003 - http://www.vupen.com/english/advisories/2008/3022 - http://secunia.com/advisories/32547
CVE ID: CVE-2008-6227 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the (1) sid and (2) cid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46387 - http://www.securityfocus.com/bid/32127 - https://www.exploit-db.com/exploits/6999
CVE ID: CVE-2008-6228 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46388 - https://www.exploit-db.com/exploits/6999
CVE ID: CVE-2008-6229 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal Content Construction Kit (CCK) 5.x before 5.x-1.10 and 6.x before 6.x-2.0, a module for Drupal, allows remote authenticated users with "administer content" permissions to inject arbitrary web script or HTML via (1) field labels and (2) content-type names. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46377 - http://secunia.com/advisories/32615 - http://secunia.com/advisories
exchange.xforce.ibmcloud.com/vulnerabilities/46377 - http://secunia.com/advisories/32615 - http://secunia.com/advisories/32572 - http://www.vupen.com/english/advisories/2008/3030 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00178.html - http://drupal.org/node/330546 - http://www.securityfocus.com/bid/32136
CVE ID: CVE-2008-6230 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3016 - http://secunia.com/advisories/32563 - https://www.exploit-db.com/exploits/6997 - http://www.securityfocus.com/bid/32124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46386
CVE ID: CVE-2008-6231 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46390 - http://www.vupen.com/english/advisories/2008/3019 - http://www.securityfocus.com/bid/32126 - https://www.exploit-db.com/exploits/7000 - http://secunia.com/advisories/32557
CVE ID: CVE-2008-6232 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3017 - https://www.exploit-db.com/exploits/6998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48984 - http://secunia.com/advisories/32557
CVE ID: CVE-2008-6233 State: PUBLISHED Published: 2009-02-20T23:00:00 Last Updated: 2024-08-07T11:20:25.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitrary SQL commands via the recid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32579 - http://www.vupen.com/english/advisories/2008/3025 - http://www.securityfocus.com/bid/32137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46379 - https://www.exploit-db.com/exploits/7007
CVE ID: CVE-2008-6234 State: PUBLISHED Published: 2009-02-21T01:00:00 Last Updated: 2024-08-07T11:20:25.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28061 - https://www.exploit-db.com/exploits/5207 - http://www.securityfocus.com/archive/1/488996/100/0/threaded
CVE ID: CVE-2008-6235 State: PUBLISHED Published: 2009-02-21T23:00:00 Last Updated: 2024-08-07T11:20:25.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://www.rdancer.org/vulnerablevim-netrw.v5.html - http://www.openwall.com/lists/oss-security/2008/10/20/2 - ht
html - http://www.rdancer.org/vulnerablevim-netrw.v5.html - http://www.openwall.com/lists/oss-security/2008/10/20/2 - http://www.rdancer.org/vulnerablevim-netrw.html - http://www.openwall.com/lists/oss-security/2008/10/16/2 - http://www.redhat.com/support/errata/RHSA-2008-0580.html - http://secunia.com/advisories/34418 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11247 - http://www.rdancer.org/vulnerablevim-netrw.v2.html
CVE ID: CVE-2008-6236 State: PUBLISHED Published: 2009-02-21T23:00:00 Last Updated: 2024-08-07T11:20:25.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46342 - http://secunia.com/advisories/32502 - https
com/bid/32114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46342 - http://secunia.com/advisories/32502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48944
CVE ID: CVE-2008-6237 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T11:20:25.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in software-description.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32536 - https://www.exploit-db.com/exploits/6915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46277
CVE ID: CVE-2008-6238 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T11:20:25.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47690 - http://secunia.com/advisories/33339 - http://www.osvdb.org/51026 - http://www.securityfocus.com/bid/33064 - http://holisticinfosec.org/content/view/96/45/
CVE ID: CVE-2008-6239 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T11:20:25.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47691 - http://secunia.com/advisories/33339 - http://holisticinfosec.org/content/view/96/45/ - http://www.osvdb.org/51027
CVE ID: CVE-2008-6240 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T11:20:25.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33296 - http://www.securityfocus.com/bid/33063 - http://holisticinfosec.org/content/view/95/45/ - http://www.osvdb.org/51028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47692
CVE ID: CVE-2008-6241 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T11:20:25.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPSite 0.0.1 and 0.0.7, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the checkuser parameter (aka username field), or (2) the checkpass parameter (aka password field), to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33347 - https://www.exploit-db.com/exploits/7615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47643
CVE ID: CVE-2008-6242 State: PUBLISHED Published: 2009-02-23T17:00:00 Last Updated: 2024-08-07T11:20:25.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SearchResults.php in Scripts For Sites (SFS) EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32039 - http://secunia.com/advisories/32525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46273 - https://www.exploit-db.com/exploits/6922
CVE ID: CVE-2008-6243 State: PUBLISHED Published: 2009-02-23T17:00:00 Last Updated: 2024-08-07T11:20:25.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showcategory.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46277 - https://www.exploit-db.com/exploits/6903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48945 - http://osvdb.org/49546
CVE ID: CVE-2008-6244 State: PUBLISHED Published: 2009-02-23T17:00:00 Last Updated: 2024-08-07T11:20:25.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_reviews.php in Scripts for Sites (SFS) EZ Gaming Cheats allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46288 - https://www.exploit-db.com/exploits/6924 - http://secunia.com/advisories/32522
CVE ID: CVE-2008-6245 State: PUBLISHED Published: 2009-02-23T17:00:00 Last Updated: 2024-08-07T11:20:25.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in track.php in Scripts For Sites (SFS) EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46280 - https://www.exploit-db.com/exploits/6910 - http://www.securityfocus.com/bid/32033 - http://secunia.com/advisories/32552
CVE ID: CVE-2008-6246 State: PUBLISHED Published: 2009-02-23T17:00:00 Last Updated: 2024-08-07T11:20:25.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in Scripts For Sites (SFS) EZ Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46279 - http://www.securityfocus.com/bid/32032 - https://www.exploit-db.com/exploits/6913
CVE ID: CVE-2008-6247 State: PUBLISHED Published: 2009-02-23T17:00:00 Last Updated: 2024-08-07T11:20:25.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topsite.php in Scripts For Sites (SFS) EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46274 - https://www.exploit-db.com/exploits/6920 - http://secunia.com/advisories/32526
CVE ID: CVE-2008-6248 State: PUBLISHED Published: 2009-02-23T17:00:00 Last Updated: 2024-08-07T11:20:25.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in all.php in Galatolo WebManager 1.3a and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43781 - http://secunia.com/advisories/31098 - https://www.exploit-db.com/exploits/6075
CVE ID: CVE-2008-6249 State: PUBLISHED Published: 2009-02-23T17:00:00 Last Updated: 2024-08-07T11:20:25.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30232 - http://secunia.com/advisories/31098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46677 - https://www.exploit-db.com/exploits/6075
CVE ID: CVE-2008-6250 State: PUBLISHED Published: 2009-02-23T17:00:00 Last Updated: 2024-08-07T11:20:25.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter to a blog page. Additional Analyst Notes: - CVE Program Container: References: - http://e-rdc.org/v1/news.php?readmore=102 - http://www.securityfocus.com/archive/1/494412/100/0/threaded - https://www.exploit-db.com/exploits/6079 - http://secunia.com/advisories/31100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43776 - http://www.securityfocus.com/bid/30237
CVE ID: CVE-2008-6251 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:20:25.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46665 - http://scripts.ishallnotcare.org/2008/11/18/phpfan-335-security-release-important/ - https://www.exploit-db.com/exploits/7143 - http://secunia.com/advisories/32734
CVE ID: CVE-2008-6252 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:20:25.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the smc program in smcFanControl 2.1.2 allows local users to execute arbitrary code and gain privileges via a long -k option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46551 - https://www.exploit-db.com/exploits/7088 - http://www.vupen.com/english/advisories/2008/3126 - http://blog.xwings.net/?p=127 - http://osvdb.org/49796 - http://www.macupdate.com/info.php/id/23049 - http://secu
3126 - http://blog.xwings.net/?p=127 - http://osvdb.org/49796 - http://www.macupdate.com/info.php/id/23049 - http://secunia.com/advisories/32679
CVE ID: CVE-2008-6253 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:20:25.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the g_pcltar_lib_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498438 - https://www.exploit-db.com/exploits/7153 - http://www.securityfocus.com/bid/32342 - http://secunia.com/advisories/32736 - http://www.pluck-cms.org/index.php?file=kop1
p://www.securityfocus.com/bid/32342 - http://secunia.com/advisories/32736 - http://www.pluck-cms.org/index.php?file=kop11.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/46676
CVE ID: CVE-2008-6254 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:20:25.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL commands via the categoryID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32733 - https://www.exploit-db.com/exploits/7144 - http://www.securityfocus.com/bid/32337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46652
CVE ID: CVE-2008-6255 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:20:25.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) answer parameter to admincp/verify.php, (2) extension parameter in an edit action to admincp/attachmentpermission.php, and the (3) iperm parameter to admincp/image.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46682 - http://www.waraxe.us/advisory-69.html - http://secunia.com/advisories/32775 - http://www.se
.com/vulnerabilities/46682 - http://www.waraxe.us/advisory-69.html - http://secunia.com/advisories/32775 - http://www.securityfocus.com/archive/1/498390/100/0/threaded
CVE ID: CVE-2008-6256 State: PUBLISHED Published: 2009-02-24T18:00:00 Last Updated: 2024-08-07T11:20:25.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinfo[recurring] parameter, a different vector than CVE-2005-3022. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46683 - http://www.securityfocus.com/archive/1/498369/100/0/threaded - http://www.waraxe.us/advisory-68.html - http://secunia.com/advisories/32735