Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
008/2336 - http://www.securityfocus.com/archive/1/498647/100/0/threaded - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://www.php.net/archive/2008.php#id2008-08-07-1 - http://secunia.com/advisories/35306 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9724 - http://marc.info/?l=bugtraq&m=123376588623823&w=2 - http://secunia.com/advisories/32316 - http://secunia.com/advisories/32884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44401
CVE ID: CVE-2008-3659 State: PUBLISHED Published: 2008-08-15T00:00:00 Last Updated: 2024-08-07T09:45:18.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: the scope of this issue is limited since most applications would not use an attacker-controlled delimiter, but local attacks against safe_mode are feasible. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020995 - http://s
e. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020995 - http://secunia.com/advisories/32746 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://security.gentoo.org/glsa/glsa-200811-05.xml - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://secunia.com/advisories/31982 - http://www.securityfocus.com/archive/1/501376/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2009:024 - http://osvdb.org/47483 - http://wiki.rpath.com/Advisories:rPSA-2009-0035 - http://secunia.com/advisories/35074 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advis
035 - http://secunia.com/advisories/35074 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/32148 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.openwall.com/lists/oss-security/2008/08/08/2 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:023 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44405 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.openwall.com/lists/o
cloud.com/vulnerabilities/44405 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.openwall.com/lists/oss-security/2008/08/13/8 - http://www.vupen.com/english/advisories/2009/1297 - http://bugs.gentoo.org/show_bug.cgi?id=234102 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:021 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.openwall.com/lists/oss-security/2008/08/08/4 - http://www.debian.org/security/2008/dsa-1647 - http://www.vupen.com/english/advisories/2008/2336 - http://www.openwall.com/lists/oss-security/2008/08/08/3 - http://www.php.net/archive/2008.php#id2008-08-07-1 - http://news.php.net/php.cvs/52002 - http://secunia.com/advisories/3
http://www.php.net/archive/2008.php#id2008-08-07-1 - http://news.php.net/php.cvs/52002 - http://secunia.com/advisories/35650 - http://secunia.com/advisories/32316
CVE ID: CVE-2008-3660 State: PUBLISHED Published: 2008-08-15T00:00:00 Last Updated: 2024-08-07T09:45:18.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32746 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://security.gentoo.org/glsa/glsa-200811-05.xml - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - https:
HT3549 - http://security.gentoo.org/glsa/glsa-200811-05.xml - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44402 - http://secunia.com/advisories/31982 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html - http://www.securityfocus.com/archive/1/501376/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2009:024 - http://wiki.rpath.com/Advisories:rPSA-2009-0035 - http://secunia.com/advisories/35074 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/32148 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.openwall.com/
m/advisories/32148 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.openwall.com/lists/oss-security/2008/08/08/2 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:023 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:022 - http://www.redhat.com/support/errata/RHSA-2009-0350.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.openwall.com/lists/oss-security/2008/08/13/8 - http://www.vupen.com/english/advisories/2009/1297 - http://bugs.gentoo.org/show_bug.
m/lists/oss-security/2008/08/13/8 - http://www.vupen.com/english/advisories/2009/1297 - http://bugs.gentoo.org/show_bug.cgi?id=234102 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:021 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.debian.org/security/2008/dsa-1647 - http://www.vupen.com/english/advisories/2008/2336 - http://www.securitytracker.com/id?1020994 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9597 - http://secunia.com/advisories/35306 - http://secunia.com/advisories/35650
CVE ID: CVE-2008-3661 State: PUBLISHED Published: 2008-09-23T15:00:00 Last Updated: 2024-08-07T09:45:18.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45298 - http://int21.de/cve/CVE-2008-3661-drupal.html - http://www.securityfocus.com/archive/1/496575/100/0/threaded
CVE ID: CVE-2008-3662 State: PUBLISHED Published: 2008-09-18T18:00:00 Last Updated: 2024-08-07T09:45:18.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200811-02.xml - http://secunia.com/advisories/33144 - http://secunia.com/advisories/32662 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html - http://www.secur
dvisories/32662 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00832.html - http://www.securityfocus.com/archive/1/496509/100/0/threaded - http://www.securityfocus.com/bid/31231 - http://int21.de/cve/CVE-2008-3662-gallery.html - http://gallery.menalto.com/gallery_2.2.6_released - http://gallery.menalto.com/gallery_1.5.9_released - http://seclists.org/fulldisclosure/2008/Sep/0379.html - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00794.html
CVE ID: CVE-2008-3663 State: PUBLISHED Published: 2008-09-24T14:00:00 Last Updated: 2024-08-07T09:45:19.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.nabble.com/ANNOUNCE:-SquirrelMail-1.4.16-Released-td19711998.html - http://secunia.com/advisories/33937 - http://int21.de/cve/CVE-2008-3663-squirrelmail.html - http://www.securityfocus.com/bid/31321 - http://support.apple.com/kb/HT3438 - http:/
e/CVE-2008-3663-squirrelmail.html - http://www.securityfocus.com/bid/31321 - http://support.apple.com/kb/HT3438 - http://securityreason.com/securityalert/4304 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://www.securityfocus.com/archive/1/496601/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45700 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10548
CVE ID: CVE-2008-3664 State: PUBLISHED Published: 2008-09-05T16:00:00 Last Updated: 2024-08-07T09:45:19.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.ph
s/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495981/100/0/threaded - http://securityreason.com/securityalert/4229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45142 - http://www.securityfocus.com/bid/31008
CVE ID: CVE-2008-3666 State: PUBLISHED Published: 2008-08-13T17:00:00 Last Updated: 2024-08-07T09:45:19.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent attackers to cause a denial of service (panic) via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server with EnableSendFile configured; and (2) local users to cause a denial of service (panic) via a call to the sendfile system call, as reachable through the sendfilev library. Additional Analyst Notes: - CVE Program Container: Referenc
ile system call, as reachable through the sendfilev library. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5128 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239186-1 - http://www.vupen.com/english/advisories/2008/2337 - http://osvdb.org/47375 - http://secunia.com/advisories/31426 - http://www.securitytracker.com/id?1020666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44396 - http://www.securityfocus.com/bid/30654
CVE ID: CVE-2008-3667 State: PUBLISHED Published: 2008-08-13T18:00:00 Last Updated: 2024-08-07T09:45:19.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/30617-poc.pl - http://www.securityfocus.com/bid/30617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44381
CVE ID: CVE-2008-3668 State: PUBLISHED Published: 2008-08-13T18:00:00 Last Updated: 2024-08-07T09:45:18.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to (1) friends.php, (2) seutubo.php, (3) album.php, (4) scrapbook.php, (5) index.php, or (6) tribes.php; or (7) the description field of a new scrap. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44387 - http://www.securityfocus.com/bid/30618 - https://exchange.xforce.i
/exchange.xforce.ibmcloud.com/vulnerabilities/44387 - http://www.securityfocus.com/bid/30618 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44385 - http://lostmon.blogspot.com/2008/08/yogurt-social-network-multiple-scripts.html - http://www.securityfocus.com/bid/30619
CVE ID: CVE-2008-3669 State: PUBLISHED Published: 2008-08-13T19:00:00 Last Updated: 2024-08-07T09:45:19.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (aka ZeeReviews) allows remote attackers to execute arbitrary SQL commands via the ItemID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6165 - http://www.securityfocus.com/bid/30445 - http://www.vupen.com/english/advisories/2008/2256/references - http://securityreason.com/securityalert/4151 - http://secunia.com/advisories/31296 - https://exchange.
2256/references - http://securityreason.com/securityalert/4151 - http://secunia.com/advisories/31296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44100
CVE ID: CVE-2008-3670 State: PUBLISHED Published: 2008-08-13T19:00:00 Last Updated: 2024-08-07T09:45:18.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL commands via the autid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44120 - http://www.vupen.com/english/advisories/2008/2255/references - http://secunia.com/advisories/31292 - http://www.securityfocus.com/bid/30452 - https://www.exploit-db.com/exploits/6167
CVE ID: CVE-2008-3671 State: PUBLISHED Published: 2008-08-13T19:00:00Z Last Updated: 2024-09-17T01:36:36.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30456 - http://secunia.com/advisories/30856
CVE ID: CVE-2008-3672 State: PUBLISHED Published: 2008-08-13T19:00:00 Last Updated: 2024-08-07T09:45:18.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3673. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44112 - http://secunia.com/advisories/31291
CVE ID: CVE-2008-3673 State: PUBLISHED Published: 2008-08-13T19:00:00 Last Updated: 2024-08-07T09:45:19.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3672. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30454 - http://www.vupen.com/english/advisories/2008/2253/references - https://www.exploit-db.com/exploits/6169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44112 - http://secunia.com/advisories/31291 - http://securityreason.com/
://exchange.xforce.ibmcloud.com/vulnerabilities/44112 - http://secunia.com/advisories/31291 - http://securityreason.com/securityalert/4153
CVE ID: CVE-2008-3674 State: PUBLISHED Published: 2008-08-13T19:00:00 Last Updated: 2024-08-07T09:45:19.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execute arbitrary SQL commands via the UID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44113 - http://securityreason.com/securityalert/4152 - https://www.exploit-db.com/exploits/6170 - http://www.vupen.com/english/advisories/2008/2252/references - http://secunia.com/advisories/31276 - http://www.securityfocus.com/bid/30455
CVE ID: CVE-2008-3675 State: PUBLISHED Published: 2008-08-14T19:00:00 Last Updated: 2024-08-07T09:45:18.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files via (1) a .. (dot dot) and possibly (2) a full pathname in the img parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4154 - http://secunia.com/advisories/31456 - https://www.exploit-db.com/exploits/6235 - http://www.securityfocus.com/bid/30672 - https://exchange.xforce.ibmcl
1456 - https://www.exploit-db.com/exploits/6235 - http://www.securityfocus.com/bid/30672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44416
CVE ID: CVE-2008-3676 State: PUBLISHED Published: 2008-08-14T19:00:00 Last Updated: 2024-08-07T09:45:19.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource exhaustion or daemon crash) via a long series of IMAP commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31480 - http://www.securityfocus.com/bid/30663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44429 - http://securityreason.com/securityalert/4155 - http://www.securityfocus.com/archive/1/495361/100/0/threaded - http://www.hma
://securityreason.com/securityalert/4155 - http://www.securityfocus.com/archive/1/495361/100/0/threaded - http://www.hmailserver.com/documentation/?page=changelog
CVE ID: CVE-2008-3677 State: PUBLISHED Published: 2008-08-14T19:00:00 Last Updated: 2024-08-07T09:45:18.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/events_application_top.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44426 - http://secunia.com/advisories/31475 - http://www.securityfocus.com/bid/30676 - http://sourceforge.net/project/shownotes.php?release_id=619467
CVE ID: CVE-2008-3678 State: PUBLISHED Published: 2008-08-14T19:00:00 Last Updated: 2024-08-07T09:45:19.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44427 - http://secunia.com/advisories/31475 - http://www.securityfocus.com/bid/30676 - http://sourceforge.net/project/shownotes.php?release_id=619467
CVE ID: CVE-2008-3679 State: PUBLISHED Published: 2008-08-14T19:00:00 Last Updated: 2024-08-07T09:45:18.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web script or HTML via the catid parameter in a (1) user_add, (2) recip, (3) tellafriend, or (4) contact action, or (5) in a request without an action; or (6) the id parameter in a tellafriend action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://ex
btained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44418 - http://www.securityfocus.com/bid/30665/exploit - http://www.securityfocus.com/bid/30665 - http://secunia.com/advisories/31487
CVE ID: CVE-2008-3680 State: PUBLISHED Published: 2008-08-14T19:00:00 Last Updated: 2024-08-07T09:45:19.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44428 - http://security.gentoo.org/glsa/glsa-200904-13.xml - http://www.securityfocus.com/archive/1/495448/100/0/threaded - http://securityreason.c
too.org/glsa/glsa-200904-13.xml - http://www.securityfocus.com/archive/1/495448/100/0/threaded - http://securityreason.com/securityalert/4156 - https://www.exploit-db.com/exploits/6237 - http://secunia.com/advisories/34696 - http://aluigi.org/poc/ventrilobotomy.zip - http://aluigi.altervista.org/adv/ventrilobotomy-adv.txt - http://secunia.com/advisories/31466 - http://www.securityfocus.com/bid/30675 - http://www.vupen.com/english/advisories/2008/2365
CVE ID: CVE-2008-3681 State: PUBLISHED Published: 2008-08-14T19:00:00 Last Updated: 2024-08-07T09:45:19.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administrator. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html - http://securityreason.com/securityalert/4157 - http://www.securitytracker.com/id?1020687 - http://secunia.com/advisories/31457 - https://exchang
m/securityalert/4157 - http://www.securitytracker.com/id?1020687 - http://secunia.com/advisories/31457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44430 - http://www.securityfocus.com/bid/30667 - https://www.exploit-db.com/exploits/6234
CVE ID: CVE-2008-3682 State: PUBLISHED Published: 2008-08-14T19:00:00 Last Updated: 2024-08-07T09:45:19.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0808-exploits/phprealty-sql.txt - http://www.securityfocus.com/bid/30678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44431 - http://secunia.com/advisories/31484