Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-2230 State: PUBLISHED Published: 2012-04-12T10:00:00 Last Updated: 2024-08-06T19:26:08.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnerability than CVE-2012-1574. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74823 - http://secunia.com/advisories/48776 - https://ccp.cloudera.com/display/DOC/Cloudera+Security+Bulletin
CVE ID: CVE-2012-2234 State: PUBLISHED Published: 2012-04-22T01:00:00 Last Updated: 2024-08-06T19:26:08.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the login parameter in an add_new_user action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81197 - http://packetstormsecurity.org/files/111905/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74910 - http://www.securityfocus.com/bid/53038 - https://github.com/nilsteampassnet/TeamPass/blob/master/readme.txt
CVE ID: CVE-2012-2235 State: PUBLISHED Published: 2012-05-27T19:00:00Z Last Updated: 2024-09-16T18:39:32.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-012.txt
CVE ID: CVE-2012-2236 State: PUBLISHED Published: 2012-04-20T10:00:00Z Last Updated: 2024-09-16T16:13:11.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-04/0110.html
CVE ID: CVE-2012-2237 State: PUBLISHED Published: 2019-11-13T18:57:55 Last Updated: 2024-08-06T19:26:08.961Z Vendors: Mahara Products: Mahara Problem Types: Cross-Site Scripting Description: Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) javascript innerHTML as used when generating login forms, (2) links or (3) resources URLs, and (4) the Display name in a user profile. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1009774 - https://bugs.launchpad.net/mahara/+bug/1009777 - https://bugs.launc
: - https://bugs.launchpad.net/mahara/+bug/1009774 - https://bugs.launchpad.net/mahara/+bug/1009777 - https://bugs.launchpad.net/mahara/+bug/1009784 - https://mahara.org/interaction/forum/topic.php?id=4748 - http://www.debian.org/security/2012/dsa-2540
CVE ID: CVE-2012-2238 State: PUBLISHED Published: 2019-11-21T13:47:31 Last Updated: 2024-08-06T19:26:08.989Z Vendors: tryton Products: trytond Problem Types: UNKNOWN_TYPE Description: trytond 2.4: ModelView.button fails to validate authorization Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-2238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78435 - http://www.openwall.com/lists/oss-security/2012/09/11/10 - http://www.securityfocus.com/bid/55503 - http://hg.tryton.org/2.4/trytond/rev/279f0031b461
CVE ID: CVE-2012-2239 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T19:26:08.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as demonstrated by reading config.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2591 - https://bugs.launchpad.net/mahara/+bug/1047111 - https://mahara.org/interaction/forum/topic.php?id=4869
CVE ID: CVE-2012-2240 State: PUBLISHED Published: 2012-10-01T00:00:00 Last Updated: 2024-08-06T19:26:09.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55564 - http://www.debian.org/security/2012/dsa-2549 - http://secunia.com/advisories/50600 - http://www.ubuntu.com/usn/USN-1593-1
CVE ID: CVE-2012-2241 State: PUBLISHED Published: 2012-10-01T00:00:00 Last Updated: 2024-08-06T19:26:08.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55564 - http://www.debian.org/security/2012/dsa-2549 - http://secunia.com/advisories/50600 - http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=0fd15bdec07b085f9ef438dacd18e159ac60b810 - http://www.ubuntu.com/usn/USN-1
=devscripts/devscripts.git%3Ba=commitdiff%3Bh=0fd15bdec07b085f9ef438dacd18e159ac60b810 - http://www.ubuntu.com/usn/USN-1593-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78977
CVE ID: CVE-2012-2242 State: PUBLISHED Published: 2012-10-01T00:00:00 Last Updated: 2024-08-06T19:26:09.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55564 - http://www.debian.org/security/2012/dsa-2549 - http://secunia.com/advisories/50600 - http://www.ubuntu.com/usn/USN-1593-1
CVE ID: CVE-2012-2243 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T19:26:08.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML by uploading an XML file with the xhtml extension, which is rendered inline as script. NOTE: this can be leveraged with CVE-2012-2244 to execute arbitrary code without authentication, as demonstrated by modifying the clamav path. Additional Analyst Notes: - CVE Program Container: References: - https://mahara.org/interaction/forum/topic.php?id=4937 - http://www.debian.org/se
- CVE Program Container: References: - https://mahara.org/interaction/forum/topic.php?id=4937 - http://www.debian.org/security/2012/dsa-2591 - https://bugs.launchpad.net/mahara/+bug/1055232
CVE ID: CVE-2012-2244 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T19:26:09.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authentication by leveraging CVE-2012-2243. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2591 - https://bugs.launchpad.net/mahara/+bug/1057238 - https://mahara.org/interaction/forum/topic.php?id=4936
CVE ID: CVE-2012-2245 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2246 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T19:26:08.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1057240 - http://www.debian.org/security/2012/dsa-2591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79273 - https://mahara.org/interaction/forum/topic.php?id=4939
CVE ID: CVE-2012-2247 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T19:26:08.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to artefact/file/ and a crafted SVG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2591 - https://mahara.org/interaction/forum/topic.php?id=4938 - https://bugs.launchpad.net/mahara/+bug/1061980
CVE ID: CVE-2012-2248 State: PUBLISHED Published: 2019-11-27T17:40:34 Last Updated: 2024-08-06T19:26:08.993Z Vendors: isc-dhcp Products: isc-dhcp Problem Types: PATH set in dhclient Description: An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-2248 - http://www.openwall.com/lists/oss-security/2012/10/18/19 - http://www.openwall.com/lists/oss-security/2012/10/15/1 - http://www.openwall.com/lists/oss-security/2012/10/17/13 - http://www.openwall.com/lists/oss-security/2012/10/17/14 - http://www.openwall.com/lists/oss-security/2012/10/18/1 - http://ww
/www.openwall.com/lists/oss-security/2012/10/17/14 - http://www.openwall.com/lists/oss-security/2012/10/18/1 - http://www.openwall.com/lists/oss-security/2012/10/18/15 - http://www.openwall.com/lists/oss-security/2012/10/18/16 - http://www.openwall.com/lists/oss-security/2012/10/18/17 - http://www.openwall.com/lists/oss-security/2012/10/18/18 - http://www.openwall.com/lists/oss-security/2012/10/18/2 - http://www.openwall.com/lists/oss-security/2012/10/18/3 - http://www.openwall.com/lists/oss-security/2012/10/21/1
CVE ID: CVE-2012-2249 State: PUBLISHED Published: 2014-02-03T02:00:00 Last Updated: 2024-08-06T19:26:08.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a renegotiation attempt that occurs after the initiation of the V3 link protocol. Additional Analyst Notes: - CVE Program Container: References: - https://gitweb.torproject.org/tor.git?a=blob_plain%3Bhb=HEAD%3Bf=ChangeLog
CVE ID: CVE-2012-2250 State: PUBLISHED Published: 2014-02-03T02:00:00 Last Updated: 2024-08-06T19:26:09.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by performing link protocol negotiation incorrectly. Additional Analyst Notes: - CVE Program Container: References: - https://gitweb.torproject.org/tor.git?a=blob_plain%3Bhb=HEAD%3Bf=ChangeLog
CVE ID: CVE-2012-2251 State: PUBLISHED Published: 2013-01-11T01:00:00 Last Updated: 2024-08-06T19:26:09.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) "-e" or (2) "--" command line option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51307 - http://www.openwall.com/lists/oss-security/2012/11/27/15 - http://www.debian.org/security/2012/dsa-2578 - http://www.securityfocus.com/bid/56708 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80334 - https://bugzilla.redhat.
/www.securityfocus.com/bid/56708 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80334 - https://bugzilla.redhat.com/show_bug.cgi?id=877279 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html
CVE ID: CVE-2012-2252 State: PUBLISHED Published: 2013-01-11T01:00:00 Last Updated: 2024-08-06T19:26:09.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51343 - http://secunia.com/advisories/51307 - http://www.openwall.com/lists/oss-security/2012/11/28/2 - http://www.openwall.com/lists/oss-security/2012/11/27/15 - http://www.openwall.com/lists/oss-security/2012/11/28/3 - http://www.debian.org/secu
/lists/oss-security/2012/11/27/15 - http://www.openwall.com/lists/oss-security/2012/11/28/3 - http://www.debian.org/security/2012/dsa-2578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80335 - http://www.securityfocus.com/bid/56708 - https://bugzilla.redhat.com/show_bug.cgi?id=880177 - http://osvdb.org/87926 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html
CVE ID: CVE-2012-2253 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T19:26:09.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2591 - https://bugs.launchpad.net/mahara/+bug/1079498 - https://mahara.org/interaction/forum/topic.php?id=5076 - http://secunia.com/advisories/51404
CVE ID: CVE-2012-2254 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-2255 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T18:55:38.395Z Description: No description available.
CVE ID: CVE-2012-2256 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T16:47:39.580Z Description: No description available.
CVE ID: CVE-2012-2257 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T20:53:05.721Z Description: No description available.
CVE ID: CVE-2012-2258 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T23:46:30.704Z Description: No description available.
CVE ID: CVE-2012-2259 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T17:33:20.000Z Description: No description available.
CVE ID: CVE-2012-2260 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T19:25:16.166Z Description: No description available.
CVE ID: CVE-2012-2261 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T19:46:51.140Z Description: No description available.
CVE ID: CVE-2012-2262 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T16:38:15.218Z Description: No description available.
CVE ID: CVE-2012-2263 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-17T02:42:11.384Z Description: No description available.
CVE ID: CVE-2012-2264 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T23:00:58.171Z Description: No description available.
CVE ID: CVE-2012-2265 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-17T03:33:54.380Z Description: No description available.
CVE ID: CVE-2012-2266 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-17T04:03:49.547Z Description: No description available.
CVE ID: CVE-2012-2267 State: PUBLISHED Published: 2012-04-17T01:00:00 Last Updated: 2024-08-06T19:26:08.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1923. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52929 - http://www.securitytracker.com/id?1026898 - http://secunia.com/secunia_research/2012-9/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74674
m/id?1026898 - http://secunia.com/secunia_research/2012-9/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74674 - http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf
CVE ID: CVE-2012-2268 State: PUBLISHED Published: 2012-04-17T01:00:00 Last Updated: 2024-08-06T19:26:09.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled exception and daemon crash) via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different vulnerability than CVE-2012-1923. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52929 - http://www.securitytracker.com/id?1026898 - http://secunia.com/secunia_research/2012-9/ - http://he
ocus.com/bid/52929 - http://www.securitytracker.com/id?1026898 - http://secunia.com/secunia_research/2012-9/ - http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf
CVE ID: CVE-2012-2269 State: PUBLISHED Published: 2012-04-20T10:00:00 Last Updated: 2024-08-06T19:26:08.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary field to apps/contacts/ajax/addcard.php, (2) the parameter parameter to apps/contacts/ajax/addproperty.php, (3) the name parameter to apps/contacts/ajax/createaddressbook, (4) the file parameter to files/download.php, or the (5) name, (6) user, or (7) redirect_url parameter to files/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb
redirect_url parameter to files/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81210 - http://owncloud.org/security/advisories/CVE-2012-2269/ - http://osvdb.org/81206 - http://www.tele-consulting.com/advisories/TC-SA-2012-01.txt - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0127.html - http://www.openwall.com/lists/oss-security/2012/09/02/2 - http://secunia.com/advisories/48850 - http://osvdb.org/81209 - http://www.securityfocus.com/bid/53145 - http://osvdb.org/81207 - http://osvdb.org/81208 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75028
CVE ID: CVE-2012-2270 State: PUBLISHED Published: 2012-04-20T10:00:00 Last Updated: 2024-08-06T19:26:09.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/security/advisories/CVE-2012-2270/ - http://www.tele-consulting.com/advisories/TC-SA-2012-01.txt - http://www.openwall.com/lists/oss-security/2012/08/11/1 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0127.html - h
/www.openwall.com/lists/oss-security/2012/08/11/1 - http://archives.neohapsis.com/archives/bugtraq/2012-04/0127.html - http://www.openwall.com/lists/oss-security/2012/09/02/2 - http://secunia.com/advisories/48850 - http://www.securityfocus.com/bid/53145 - http://packetstormsecurity.org/files/111956/ownCloud-3.0.0-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75029 - http://osvdb.org/81211
CVE ID: CVE-2012-2271 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-06T19:26:09.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.0 allows remote attackers to execute arbitrary code via a long string in the first argument (aka the reg_name argument). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/82086 - http://www.securityfocus.com/bid/53611 - http://www.exploit-db.com/exploits/18892/
CVE ID: CVE-2012-2273 State: PUBLISHED Published: 2012-04-20T01:00:00 Last Updated: 2024-08-06T19:26:09.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit Portable Executable (PE) file with a kernel ImageBase value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026982 - http://www.securityfocus.com/bid/53163 - http://www.comodo.com/home/download/release-notes.php?p=anti-malware - http://archives.neohapsis.com/archives/bugtraq/2012-04/0139.html - http://secunia.com/advisories/489
hp?p=anti-malware - http://archives.neohapsis.com/archives/bugtraq/2012-04/0139.html - http://secunia.com/advisories/48928
CVE ID: CVE-2012-2274 State: PUBLISHED Published: 2012-08-13T23:00:00 Last Updated: 2024-08-06T19:26:08.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pivotx/ajaxhelper.php in PivotX 2.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23087 - http://www.securityfocus.com/bid/53434 - http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog?view=revision&revision=4145 - http://pivotx.net/page/security - http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog?view=revision&re
on=4145 - http://pivotx.net/page/security - http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog?view=revision&revision=4147
CVE ID: CVE-2012-2275 State: PUBLISHED Published: 2012-09-15T17:00:00 Last Updated: 2024-08-06T19:26:09.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to lib/usermanagement/userInfo.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/21135 - http://packetstormsecurity.org/files/116275/TestLink-1.9.3-Cross-Site-Request-Forgery.html - http
b.com/exploits/21135 - http://packetstormsecurity.org/files/116275/TestLink-1.9.3-Cross-Site-Request-Forgery.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/78306 - http://archives.neohapsis.com/archives/bugtraq/2012-09/0023.html - http://gitorious.org/testlink-ga/testlink-code/commit/252788c2373e73173172ada9af661e0721599891 - http://gitorious.org/testlink-ga/testlink-code/commit/c8751a3c9ad8970b49d1bf882203efacd10af087 - http://gitorious.org/testlink-ga/testlink-code/commit/2d4ac941314f8bda80e265c9de8bacf17d1cd3e6 - https://www.htbridge.com/advisory/HTB23088