Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
8 - http://secunia.com/advisories/31019 - http://www.vupen.com/english/advisories/2008/2029/references - http://marc.info/?l=bugtraq&m=121630706004256&w=2 - https://www.exploit-db.com/exploits/6123 - http://www.ibm.com/support/docview.wss?uid=isg1IZ26671 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.html - http://www.vupen.com/english/advisories/2008/2268 - http://www.vupen.com/english/advisories/2009/0297 - http://marc.info/?l=bugtraq&m=121630706004256&w=2 - http://secunia.com/advisories/31207 - http://secunia.com/advisories/31031 - http://www.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31451 - http://www.vupen.com/english/advisories
w.vupen.com/english/advisories/2008/2584 - http://secunia.com/advisories/31451 - http://www.vupen.com/english/advisories/2008/2051/references - http://secunia.com/advisories/30977 - http://www.redhat.com/support/errata/RHSA-2008-0789.html - http://www.vupen.com/english/advisories/2008/2377 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368 - http://www.securitytracker.com/id?1020558 - http://secunia.com/advisories/31221 - http://rhn.redhat.com/errata/RHSA-2008-0533.html - http://www.openbsd.org/errata43.html#004_bind - http://www.securitytracker.com/id?1020804 - http://secunia.com/advisories/31143 - http://www.securityfocus.com/archive/1/495289/100/0/threaded
ker.com/id?1020804 - http://secunia.com/advisories/31143 - http://www.securityfocus.com/archive/1/495289/100/0/threaded - http://www.vupen.com/english/advisories/2008/2195/references - http://www.vupen.com/english/advisories/2008/2196/references - http://secunia.com/advisories/33714 - http://marc.info/?l=bugtraq&m=121866517322103&w=2 - http://secunia.com/advisories/33786 - http://www.securitytracker.com/id?1020448 - http://secunia.com/advisories/31882 - http://www.vupen.com/english/advisories/2008/2384 - http://www.ibm.com/support/docview.wss?uid=isg1IZ26669 - http://up2date.astaro.com/2008/08/up2date_7202_released.html - http://www.vupen.com/english/advisories/2008/2123/references - http://
e.astaro.com/2008/08/up2date_7202_released.html - http://www.vupen.com/english/advisories/2008/2123/references - http://support.apple.com/kb/HT3026 - http://secunia.com/advisories/31014 - http://secunia.com/advisories/30979 - http://www.securitytracker.com/id?1020575 - http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/ - http://www.vupen.com/english/advisories/2008/2482 - http://www.ibm.com/support/docview.wss?uid=isg1IZ26672 - http://support.apple.com/kb/HT3129 - http://www.debian.org/security/2008/dsa-1619 - http://www.vupen.com/english/advisories/2008/2166/references - http://secunia.com/advisories/31072 - http://www.vupen.com/english/advisories/2008/2139/refere
es/2008/2166/references - http://secunia.com/advisories/31072 - http://www.vupen.com/english/advisories/2008/2139/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761 - http://www.vupen.com/english/advisories/2008/2092/references - http://secunia.com/advisories/31482 - http://www.ibm.com/support/docview.wss?uid=isg1IZ26670 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:139 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5917 - http://secunia.com/advisories/30989 - http://www.vupen.com/english/advisories/2008/2055/references - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.js
p://www.vupen.com/english/advisories/2008/2055/references - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=762152 - http://www.ipcop.org/index.php?name=News&file=article&sid=40 - http://secunia.com/advisories/31065 - http://secunia.com/advisories/31254 - http://www.securityfocus.com/archive/1/495869/100/0/threaded - http://www.doxpara.com/?p=1176 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc - http://www.ubuntu.com/usn/usn-627-1 - http://www.vupen.com/english/advisories/2010/0622 - http://www.securitytracker.com/id?1020576 - http://www.isc.org/index.pl?/sw/bind/bind
com/english/advisories/2010/0622 - http://www.securitytracker.com/id?1020576 - http://www.isc.org/index.pl?/sw/bind/bind-security.php - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520 - http://secunia.com/advisories/31153 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231 - http://www.vupen.com/english/advisories/2008/2549 - http://www.ibm.com/support/docview.wss?uid=isg1IZ26667 - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html - http://secunia.com/advisories/31213 - http://secunia.com/advisories/31030 - http://www.ubuntu.com/usn/usn-622-1 - http://secunia.com/advisories/31033 - http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html - h
/usn/usn-622-1 - http://secunia.com/advisories/31033 - http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html - http://www.securitytracker.com/id?1020440 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html - http://www.doxpara.com/DMK_BO2K8.ppt - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html - http://www.debian.org/security/2008/dsa-1604 - http://secunia.com/advisories/31823 - http://secunia.com/advisories/31326 - http://www.vupen.com/english/advisories/2008/2558 - https://www.exploit-db.com/exploits/6122 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725 - http://www.caughq.org/exploits/CA
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725 - http://www.caughq.org/exploits/CAU-EX-2008-0003.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/43637 - http://www.vupen.com/english/advisories/2008/2383 - http://www.securitytracker.com/id?1020560 - http://secunia.com/advisories/31900 - http://www.kb.cert.org/vuls/id/MIMG-7ECL8Q - http://support.citrix.com/article/CTX118183 - http://secunia.com/advisories/30925 - http://www.vupen.com/english/advisories/2009/0311 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 - http://www.debian.org/security/2008/dsa-1623 - http://www.vupen.com/english/advisories/2008/2582 - http://www.caughq.org/exploit
ww.debian.org/security/2008/dsa-1623 - http://www.vupen.com/english/advisories/2008/2582 - http://www.caughq.org/exploits/CAU-EX-2008-0002.txt - http://www.debian.org/security/2008/dsa-1605 - http://www.novell.com/support/viewContent.do?externalId=7000912 - http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning - http://www.vupen.com/english/advisories/2008/2342 - http://www.vupen.com/english/advisories/2008/2114/references - http://secunia.com/advisories/30973 - http://secunia.com/advisories/31204 - http://secunia.com/advisories/31354 - http://security.gentoo.org/glsa/glsa-200812-17.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
too.org/glsa/glsa-200812-17.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12117 - http://secunia.com/advisories/33178 - http://secunia.com/advisories/30988 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html - http://secunia.com/advisories/31011 - http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html - http://www.vupen.com/english/advisories/2008/2334 - http://www.securitytracker.com/id?1020577 - http://secunia.com/advisories/31422 - http://secunia.com/advisories/31197 - http://www.securitytracker.com/id?1020548 - http://www.vupen.com/english/advisories/2008/2467 - http://sunsolve.sun.com/s
ttp://www.securitytracker.com/id?1020548 - http://www.vupen.com/english/advisories/2008/2467 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1 - http://www.us-cert.gov/cas/techalerts/TA08-190B.html - http://www.us-cert.gov/cas/techalerts/TA08-190A.html - http://security.gentoo.org/glsa/glsa-200807-08.xml - http://secunia.com/advisories/31022 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.539239 - http://www.securitytracker.com/id?1020449 - http://secunia.com/advisories/31093 - http://secunia.com/advisories/31052 - http://secunia.com/advisories/30980 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackwar
- http://secunia.com/advisories/30980 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.452680 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401 - http://secunia.com/advisories/31199 - http://www.vupen.com/english/advisories/2008/2030/references - http://www.vupen.com/english/advisories/2008/2291 - http://www.vupen.com/english/advisories/2008/2023/references - http://marc.info/?l=bugtraq&m=123324863916385&w=2 - http://www.vupen.com/english/advisories/2008/2466 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037 - http://secunia.com/advisories/31212 - http://www.vupen.com/english/advisories/2008/2113/references
etins/2008/ms08-037 - http://secunia.com/advisories/31212 - http://www.vupen.com/english/advisories/2008/2113/references - http://secunia.com/advisories/31152 - http://www.vupen.com/english/advisories/2008/2019/references - http://www.vupen.com/english/advisories/2008/2197/references
CVE ID: CVE-2008-1448 State: PUBLISHED Published: 2008-08-13T00:00:00 Last Updated: 2024-08-07T08:24:41.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via an mhtml: URI in conjunction with a redirection, aka "URL Parsing Cross-Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020679 - http://
y." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020679 - http://www.securityfocus.com/bid/30585 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.coresecurity.com/content/internet-explorer-zone-elevation - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-048 - http://www.securitytracker.com/id?1020680 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securityfocus.com/archive/1/495458/100/0/threaded - http://secunia.com/advisories/31415 - http://www.vupen.com/english/advisories/2008/2352 - https://oval.cisecurity.org/reposit
//secunia.com/advisories/31415 - http://www.vupen.com/english/advisories/2008/2352 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5886
CVE ID: CVE-2008-1449 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-1450 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-1451 State: PUBLISHED Published: 2008-06-12T01:30:00 Last Updated: 2024-08-07T08:24:41.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30584 - http://www.securityfocus.com/bid/29588 - http://www.us-cert.gov/cas/techalerts/TA08-162B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef
gov/cas/techalerts/TA08-162B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5582 - http://www.vupen.com/english/advisories/2008/1781 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-034 - http://securitytracker.com/id?1020228
CVE ID: CVE-2008-1452 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-1453 State: PUBLISHED Published: 2008-06-12T01:30:00 Last Updated: 2024-08-07T08:24:42.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol (SDP) packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1777 - http://www.securityfocus.com/bid/29522 - http://www.us-cert.gov/cas/techalerts/TA08-162B.html - http://securitytracker.com/id?1020221 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/20
2B.html - http://securitytracker.com/id?1020221 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-030 - http://secunia.com/advisories/30051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4730
CVE ID: CVE-2008-1454 State: PUBLISHED Published: 2008-07-08T23:00:00 Last Updated: 2024-08-07T08:24:41.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache Poisoning Vulnerability," a different vulnerability than CVE-2008-1447. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020437 - http://secunia.com/advisories/30925 - http://www.securityf
er: References: - http://www.securitytracker.com/id?1020437 - http://secunia.com/advisories/30925 - http://www.securityfocus.com/bid/30132 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5380 - http://www.us-cert.gov/cas/techalerts/TA08-190A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037 - http://www.vupen.com/english/advisories/2008/2019/references
CVE ID: CVE-2008-1455 State: PUBLISHED Published: 2008-08-13T00:00:00 Last Updated: 2024-08-07T08:24:42.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 through SP1; and Office 2004 for Mac allows remote attackers to execute arbitrary code via a PowerPoint file with crafted list values that trigger memory corruption, aka "Parsing Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://marc.info/?l=bugtraq&m=121
rogram Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securitytracker.com/id?1020676 - http://www.vupen.com/english/advisories/2008/2355 - http://secunia.com/advisories/31453 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5555 - http://www.securityfocus.com/bid/30579
CVE ID: CVE-2008-1456 State: PUBLISHED Published: 2008-08-13T10:00:00 Last Updated: 2024-08-07T08:24:41.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2353 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.securitytracker.com/id?1020677 - http://
s/2008/2353 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.securitytracker.com/id?1020677 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-049 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securityfocus.com/bid/30586 - http://secunia.com/advisories/31417 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5630
CVE ID: CVE-2008-1457 State: PUBLISHED Published: 2008-08-13T10:00:00 Last Updated: 2024-08-07T08:24:41.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2353 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.securitytracker.com/id?1020677 - http://marc.info/?l=bugtraq&m=12
us-cert.gov/cas/techalerts/TA08-225A.html - http://www.securitytracker.com/id?1020677 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-049 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://secunia.com/advisories/31417 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6095 - http://www.securityfocus.com/bid/30584
CVE ID: CVE-2008-1458 State: PUBLISHED Published: 2008-03-24T18:00:00 Last Updated: 2024-08-07T08:24:41.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29468 - http://securityreason.com/securityalert/3762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41306 - http://www.securityfocus.com/bid/28333 - http://www.securityfocu
://exchange.xforce.ibmcloud.com/vulnerabilities/41306 - http://www.securityfocus.com/bid/28333 - http://www.securityfocus.com/archive/1/489857/100/0/threaded
CVE ID: CVE-2008-1459 State: PUBLISHED Published: 2008-03-24T18:00:00 Last Updated: 2024-08-07T08:24:42.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Alberghi (com_alberghi) 2.1.3 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28331 - https://www.exploit-db.com/exploits/5278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41285 - http://secunia.com/advisories/29473
CVE ID: CVE-2008-1460 State: PUBLISHED Published: 2008-03-24T18:00:00 Last Updated: 2024-08-07T08:24:41.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29474 - https://www.exploit-db.com/exploits/5277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41279 - http://www.securityfocus.com/bid/28318
CVE ID: CVE-2008-1461 State: PUBLISHED Published: 2008-03-24T18:00:00 Last Updated: 2024-08-07T08:24:41.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.click-internet.fr/index.php?cki=News&news=9 - http://www.securityfocus.com/bid/28259 - http://www.securityfocus.com/archive/1/489658/100/0/threaded - http://securityreason.com/securityaler
us.com/bid/28259 - http://www.securityfocus.com/archive/1/489658/100/0/threaded - http://securityreason.com/securityalert/3761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41245
CVE ID: CVE-2008-1462 State: PUBLISHED Published: 2008-03-24T21:00:00 Last Updated: 2024-08-07T08:24:42.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41377 - https://www.exploit-db.com/exploits/5285 - http://www.securityfocus.com/bid/28378
CVE ID: CVE-2008-1463 State: PUBLISHED Published: 2008-03-24T21:00:00 Last Updated: 2024-08-07T08:24:41.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the "corrective action" section of an alert page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28279 - http://secunia.com/advisories/29439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ecurityfocus.com/bid/28279 - http://secunia.com/advisories/29439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41359 - http://imperva.com/go/secadv/20080318
CVE ID: CVE-2008-1464 State: PUBLISHED Published: 2008-03-24T21:00:00Z Last Updated: 2024-09-16T23:10:54.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) query parameter to (a) search.php; (2) gusername and (3) gpassword parameters to (b) login.php; and the (4) username and (5) password parameters to (c) gadmin/index.php in a signin action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advi
y from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29399
CVE ID: CVE-2008-1465 State: PUBLISHED Published: 2008-03-24T21:00:00 Last Updated: 2024-08-07T08:24:41.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php, a different product than CVE-2008-0562. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5280 - http://www.securityfocus.com/bid/28324 - http://secunia.com/advisories/29471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41283