Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rity.379422 - http://secunia.com/advisories/32095 - http://secunia.com/advisories/32089 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://www.redhat.com/support/errata/RHSA-2008-0879.html - http://secunia.com/advisories/31987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45357 - https://bugzilla.mozilla.org/show_bug.cgi?id=443693 - http://www.ubuntu.com/usn/usn-647-1 - http://secunia.com/advisories/32012 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 - http://secunia.com/advisories/32044 - http://secunia.com/advisories/34501 - http://secunia.com/advisories/32082
CVE ID: CVE-2008-4065 State: PUBLISHED Published: 2008-09-24T18:00:00 Last Updated: 2024-08-07T10:00:42.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka "Stripped BOM characters bug." Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2008/mfsa2008-43.html - http://secunia.com/advisories/32025 - http://secunia.com/
tp://www.mozilla.org/security/announce/2008/mfsa2008-43.html - http://secunia.com/advisories/32025 - http://secunia.com/advisories/32011 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - http://www.securitytracker.com/id?1020920 - http://secunia.com/advisories/32096 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html - http://www.ubuntu.com/usn/usn-645-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11383 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 - http://secunia.com/advisories/32144 - http://se
1383 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 - http://secunia.com/advisories/32144 - http://secunia.com/advisories/32010 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://www.securityfocus.com/bid/31346 - http://secunia.com/advisories/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32042 - http://secunia.com/
msg01335.html - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32042 - http://secunia.com/advisories/33433 - http://www.vupen.com/english/advisories/2008/2661 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://secunia.com/advisories/32095 - http://secunia.com/advisories/32089 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://secunia.com/advisories/32092 - http://www.redhat.com/support/errata/RHSA-2008-0879.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://www.debian.org/security/2009/dsa-1696 - http://download.novell.com/Download?buildid=WZXONb-tqBw~
MDVSA-2008:205 - http://www.debian.org/security/2009/dsa-1696 - http://download.novell.com/Download?buildid=WZXONb-tqBw~ - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html - http://secunia.com/advisories/31987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45356 - https://bugzilla.mozilla.org/show_bug.cgi?id=430740 - http://www.ubuntu.com/usn/usn-647-1 - http://secunia.com/advisories/32007 - http://www.redhat.com/support/errata/RHSA-2008-0882.html - http://secunia.com/advisories/32845 - http://www.debian.org/security/2008/dsa-1649 - http://secunia.com/advisories/32012 - http://secunia.com/advisories/33434 - http://slackware.com/security/viewer.php?
- http://secunia.com/advisories/32012 - http://secunia.com/advisories/33434 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 - http://secunia.com/advisories/32044 - http://www.redhat.com/support/errata/RHSA-2008-0908.html - http://secunia.com/advisories/34501 - http://secunia.com/advisories/32082
CVE ID: CVE-2008-4066 State: PUBLISHED Published: 2008-09-24T18:00:00 Last Updated: 2024-08-07T10:00:42.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a "jav&#56325ascript" sequence, aka "HTML escaped low surrogates bug." Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2008/mfsa2008-43.html - http://secunia.com/advisories/32025 - http://slackware.com/secur
w.mozilla.org/security/announce/2008/mfsa2008-43.html - http://secunia.com/advisories/32025 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8880 - http://www.securitytracker.com/id?1020920 - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000058.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html - http://www.ubuntu.com/usn/usn-645-1 - http://www.thespanner.co.uk/2008/06/30/javascript-protocol-fuzz-results/ - http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 - http://secunia.com/advisories/32144 - htt
z-results/ - http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 - http://secunia.com/advisories/32144 - http://secunia.com/advisories/32010 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://www.securityfocus.com/bid/31346 - http://secunia.com/advisories/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - https://bugzilla.mozilla.org/show_bug.cgi?id=448166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45358 - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advi
hange.xforce.ibmcloud.com/vulnerabilities/45358 - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32042 - http://www.vupen.com/english/advisories/2008/2661 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://secunia.com/advisories/32092 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://download.novell.com/Download?buildid=WZXONb-tqBw~ - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html - http://jvn.jp/en/jp/JVN96950482/index.html - http://www.ubuntu.com/usn/usn-647-1 - http://secuni
ptember/msg01403.html - http://jvn.jp/en/jp/JVN96950482/index.html - http://www.ubuntu.com/usn/usn-647-1 - http://secunia.com/advisories/32007 - http://www.redhat.com/support/errata/RHSA-2008-0882.html - http://secunia.com/advisories/32845 - http://blogs.technet.com/bluehat/archive/2008/08/14/targeted-fuzzing.aspx - http://www.debian.org/security/2008/dsa-1649 - http://secunia.com/advisories/32012 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 - http://secunia.com/advisories/32044 - http://www.redhat.com/support/errata/RHSA-2008-0908.html - http://secunia.com/advisories/34501 - http://secunia.com/advisories/32082
CVE ID: CVE-2008-4067 State: PUBLISHED Published: 2008-09-24T18:00:00 Last Updated: 2024-08-07T10:00:42.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32025 - http://secunia.com/advisories/32011 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10770 - http://slackwar
s/32011 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10770 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - http://secunia.com/advisories/32096 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html - http://www.ubuntu.com/usn/usn-645-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 - http://secunia.com/advisories/32144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45359 - http://secunia.com/advisories/32010 - http://www.securitytracker.com/id?1020921 - http://www.vupen.com/english/advisories
ttp://secunia.com/advisories/32010 - http://www.securitytracker.com/id?1020921 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://www.securityfocus.com/bid/31346 - http://secunia.com/advisories/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html - http://www.debian.org/security/2008/dsa-1669 - http://www.mozilla.org/security/announce/2008/mfsa2008-44.html - http://secunia.com/advisories/32042 - http://secunia.com/adv
//www.mozilla.org/security/announce/2008/mfsa2008-44.html - http://secunia.com/advisories/32042 - http://secunia.com/advisories/33433 - http://www.vupen.com/english/advisories/2008/2661 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://secunia.com/advisories/32095 - http://secunia.com/advisories/32089 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://secunia.com/advisories/32092 - http://www.redhat.com/support/errata/RHSA-2008-0879.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - https://bugzilla.mozilla.org/show_bug.cgi?id=380994 - https://bugzilla.mozilla.org/show_bug.cgi?id=394075
SA-2008:205 - https://bugzilla.mozilla.org/show_bug.cgi?id=380994 - https://bugzilla.mozilla.org/show_bug.cgi?id=394075 - http://www.debian.org/security/2009/dsa-1696 - http://download.novell.com/Download?buildid=WZXONb-tqBw~ - http://www.0x000000.com/?i=422 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html - http://secunia.com/advisories/31987 - http://www.ubuntu.com/usn/usn-647-1 - http://secunia.com/advisories/32007 - http://www.redhat.com/support/errata/RHSA-2008-0882.html - http://secunia.com/advisories/32845 - http://www.debian.org/security/2008/dsa-1649 - http://secunia.com/advisories/32012 - http://secunia.com/advisories/33434 - http://slackware.c
/security/2008/dsa-1649 - http://secunia.com/advisories/32012 - http://secunia.com/advisories/33434 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 - http://secunia.com/advisories/32044 - http://www.redhat.com/support/errata/RHSA-2008-0908.html - http://secunia.com/advisories/34501 - http://secunia.com/advisories/32082
CVE ID: CVE-2008-4068 State: PUBLISHED Published: 2008-09-24T18:00:00 Last Updated: 2024-08-07T10:00:42.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32025 - http://secunia.com/advisories/32011 - http://slackware.com/s
tainer: References: - http://secunia.com/advisories/32025 - http://secunia.com/advisories/32011 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - http://secunia.com/advisories/32096 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html - http://www.ubuntu.com/usn/usn-645-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 - http://secunia.com/advisories/32144 - http://secunia.com/advisories/32010 - http://www.securitytracker.com/id?1020921 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://www.securi
id?1020921 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://www.securityfocus.com/bid/31346 - http://secunia.com/advisories/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.html - http://www.debian.org/security/2008/dsa-1669 - http://www.mozilla.org/security/announce/2008/mfsa2008-44.html - http://secunia.com/advisories/32042 - http://secunia.com/advisories/33433 - http://www.vupen.com/english/advisories/2008/2661 -
ecunia.com/advisories/32042 - http://secunia.com/advisories/33433 - http://www.vupen.com/english/advisories/2008/2661 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://secunia.com/advisories/32095 - http://secunia.com/advisories/32089 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://secunia.com/advisories/32092 - http://www.redhat.com/support/errata/RHSA-2008-0879.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://www.debian.org/security/2009/dsa-1696 - http://download.novell.com/Download?buildid=WZXONb-tqBw~ - https://www.redhat.com/archives/fedora-package-announce/2008-Septemb
download.novell.com/Download?buildid=WZXONb-tqBw~ - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html - http://secunia.com/advisories/31987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45360 - http://www.ubuntu.com/usn/usn-647-1 - http://secunia.com/advisories/32007 - http://www.redhat.com/support/errata/RHSA-2008-0882.html - http://secunia.com/advisories/32845 - http://www.debian.org/security/2008/dsa-1649 - http://secunia.com/advisories/32012 - http://secunia.com/advisories/33434 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 - http://secunia.com/advisories/32044 - https://oval.cisecurity.org/r
ckware-security&y=2008&m=slackware-security.412123 - http://secunia.com/advisories/32044 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11471 - http://www.redhat.com/support/errata/RHSA-2008-0908.html - http://secunia.com/advisories/34501 - http://secunia.com/advisories/32082
CVE ID: CVE-2008-4069 State: PUBLISHED Published: 2008-09-24T18:00:00 Last Updated: 2024-08-07T10:00:42.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file. Additional Analyst Notes: - CVE Program Container: References: - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232 - http://www.debian.org/security/2009/dsa-1697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45361 - https://www.redhat.com/
debian.org/security/2009/dsa-1697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45361 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html - http://www.ubuntu.com/usn/usn-645-1 - http://secunia.com/advisories/32144 - http://secunia.com/advisories/32010 - https://bugzilla.mozilla.org/show_bug.cgi?id=449703 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-645-2 - http://www.securityfocus.com/bid/31346 - http://secunia.com/advisories/31985 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisor
0/msg00005.html - http://secunia.com/advisories/31984 - http://secunia.com/advisories/32185 - http://secunia.com/advisories/32196 - http://www.securitytracker.com/id?1020923 - http://www.debian.org/security/2008/dsa-1669 - http://secunia.com/advisories/32042 - http://secunia.com/advisories/33433 - http://www.vupen.com/english/advisories/2008/2661 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://www.mozilla.org/security/announce/2008/mfsa2008-45.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://download.novell.com/Download?buildid=WZXONb-
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:205 - http://download.novell.com/Download?buildid=WZXONb-tqBw~ - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html - http://www.blackhat.com/presentations/bh-usa-08/Hoffman/Hoffman-BH2008-CircumventingJavaScript.ppt - http://www.redhat.com/support/errata/RHSA-2008-0882.html - http://secunia.com/advisories/32845 - http://www.debian.org/security/2008/dsa-1649 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11000 - http://secunia.com/advisories/32012 - http://secunia.com/advisories/32044 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-4070 State: PUBLISHED Published: 2008-09-27T00:00:00 Last Updated: 2024-08-07T10:00:42.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32025 - http://www.debian.org/security/2009/dsa-1697 - https://bugzilla.mozilla.org/show_bug.cgi?id=425152 - http://w
es/32025 - http://www.debian.org/security/2009/dsa-1697 - https://bugzilla.mozilla.org/show_bug.cgi?id=425152 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:206 - http://secunia.com/advisories/32010 - http://www.vupen.com/english/advisories/2009/0977 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45426 - http://secunia.com/advisories/32196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10933 - http://secunia.com/advisories/33433 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://www.securitytrack
p://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422 - http://www.securitytracker.com/id?1020948 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://secunia.com/advisories/32092 - http://www.debian.org/security/2009/dsa-1696 - http://www.ubuntu.com/usn/usn-647-1 - http://www.mozilla.org/security/announce/2008/mfsa2008-46.html - http://secunia.com/advisories/33434 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123 - http://secunia.com/advisories/32044 - http://www.redhat.com/support/errata/RHSA-2008-0908.html - http://www.securityfocus.com/bid/31411 - http://secunia.com/advisories
w.redhat.com/support/errata/RHSA-2008-0908.html - http://www.securityfocus.com/bid/31411 - http://secunia.com/advisories/34501 - http://secunia.com/advisories/32082
CVE ID: CVE-2008-4071 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property value with an invalid acroie:// URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6424 - http://securityreason.com/securityalert/4257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45195
CVE ID: CVE-2008-4072 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter in a pickup action or (2) the sql_cid parameter, different vectors than CVE-2008-3588. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45053 - http://www.securityfocus.com/archive/1/496233/100/0/threaded - http://secunia.com/advisories/31815 - http://www.securityfo
tp://www.securityfocus.com/archive/1/496233/100/0/threaded - http://secunia.com/advisories/31815 - http://www.securityfocus.com/bid/31172 - https://www.exploit-db.com/exploits/6431
CVE ID: CVE-2008-4073 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45049 - http://securityreason.com/securityalert/4248 - http://www.securityfocus.com/bid/31120 - http://www.vupen.com/english/advisories/2008/2551 - https://www.exploit-db.com/exploits/6426
CVE ID: CVE-2008-4074 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45049 - https://www.exploit-db.com/exploits/6433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45200 - http://securityreason.com/securityalert/4247 - http://www.securityfocus.com/bid/31137
CVE ID: CVE-2008-4075 State: PUBLISHED Published: 2008-09-15T15:00:00 Last Updated: 2024-08-07T10:00:42.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4249 - http://www.securityfocus.com/bid/31135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45063 - http://secunia.com/advisories/31808 - https://www.exploit-db.com/exploits/6430