Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-5295 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-06T21:05:46.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the windowed parameter. Additional Analyst Notes: - CVE Program Container: References: - http://st2tea.blogspot.com/2012/01/fusetalk-forums-v32-cross-site.html - http://secunia.com/advisories/40850 - http://www.securityfocus.com/bid/51227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72083 - http://www.securitytracker.com/id?1026483
CVE ID: CVE-2012-5296 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-06T21:05:46.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) approve.asp, (2) delete.asp, (3) edit.asp, or (4) edit2.asp. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-01/0010.html - http://www.securityfocus.com/bid/51252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72100 - http://code.google.com/p/maviliguestbook/iss
om/bid/51252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72100 - http://code.google.com/p/maviliguestbook/issues/detail?id=1
CVE ID: CVE-2012-5297 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-06T21:05:46.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-01/0010.html - http://www.securityfocus.com/bid/51252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72098 - http://code.google.com/p/maviliguestbook/issues/detail?id=1
CVE ID: CVE-2012-5298 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-06T21:05:46.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-01/0010.html - http://www.securityfocus.com/bid/51252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72101 - http://code.google.com/p/maviliguestbook/issues/detail?id=1
CVE ID: CVE-2012-5299 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-06T21:05:46.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages via a direct request to (1) edit.asp, (2) delete.asp, or (3) approve.asp. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-01/0010.html - http://www.securityfocus.com/bid/51252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72099 - http://code.google.com/p/maviliguestbook/issues/detail?id=1
CVE ID: CVE-2012-5300 State: PUBLISHED Published: 2012-10-04T17:00:00 Last Updated: 2024-08-06T21:05:45.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in art_catalogo.php in MyStore Xpress Tienda Virtual 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51243 - http://www.exploit-db.com/exploits/18306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72108 - http://1337day.com/exploits/17328
CVE ID: CVE-2012-5301 State: PUBLISHED Published: 2012-10-04T19:00:00 Last Updated: 2024-08-06T21:05:45.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data. Additional Analyst Notes: - CVE Program Container: References: - http://www.cerberusftp.com/products/releasenotes.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79503
CVE ID: CVE-2012-5302 State: PUBLISHED Published: 2012-10-24T10:00:00 Last Updated: 2024-08-06T21:05:45.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in TIBCO Formvine 3.1.x and 3.2.x before 3.2.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/multimedia/formvine-advisory-2012-10-23_tcm8-17451.txt - http://osvdb.org/86606 - http://www.securityfocus.com/bid/56225 - http://www.tibco.com/services/support/advisories/formvine-advisory_20121023.jsp
CVE ID: CVE-2012-5303 State: PUBLISHED Published: 2012-10-05T21:00:00 Last Updated: 2024-08-06T21:05:46.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink attack on a PID file, as demonstrated by a pathname different from the default /var/run/monkey.pid pathname. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688879 - http://www.securityfocus.com/bid/55905 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=672425
CVE ID: CVE-2012-5304 State: PUBLISHED Published: 2012-10-06T22:00:00Z Last Updated: 2024-09-17T02:33:02.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in administration/install.php in YVS Image Gallery allows remote attackers to inject arbitrary PHP code into functions/db_connect.php via unspecified vectors. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/19/12 - http://www.openwall.com/lists/oss-security/2012/02/27/27
CVE ID: CVE-2012-5305 State: PUBLISHED Published: 2012-10-06T22:00:00 Last Updated: 2024-08-06T21:05:46.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allows remote attackers to inject arbitrary web script or HTML via the domain parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2012-04/0034.html - http://www.securityfocus.com/bid/52848 - http://www.vulnerability-lab.com/get_content.php?id=486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74569
CVE ID: CVE-2012-5306 State: PUBLISHED Published: 2012-10-06T22:00:00 Last Updated: 2024-08-06T21:05:46.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74447 - http://osvdb.org/80663 - http://www.exploit-db.com/exploits/18673 - http://archives.neohapsis.com/archives/bugtraq
447 - http://osvdb.org/80663 - http://www.exploit-db.com/exploits/18673 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0154.html - http://www.securityfocus.com/bid/52769 - http://secunia.com/advisories/48602
CVE ID: CVE-2012-5307 State: PUBLISHED Published: 2012-10-08T10:00:00Z Last Updated: 2024-09-16T21:57:39.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-2012-4824 and CVE-2012-4825. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2012-10/0001.html
CVE ID: CVE-2012-5308 State: PUBLISHED Published: 2012-10-08T10:00:00Z Last Updated: 2024-09-16T20:22:01.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2012-10/0001.html
CVE ID: CVE-2012-5309 State: PUBLISHED Published: 2012-10-08T10:00:00Z Last Updated: 2024-09-17T03:02:50.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2012-10/0001.html
CVE ID: CVE-2012-5310 State: PUBLISHED Published: 2012-10-08T17:00:00 Last Updated: 2024-08-06T21:05:46.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72622 - http://wordpress.org/extend/plugins/wp-e-commerce/changelog/ - http://secunia.com/advisories/47627 - http://www.securityfocus.com/bid/51637
CVE ID: CVE-2012-5311 State: REJECTED Published: 2012-10-08T17:00:00 Last Updated: 2012-10-16T09:00:00 Description: No description available.
CVE ID: CVE-2012-5312 State: PUBLISHED Published: 2012-10-08T17:00:00 Last Updated: 2024-08-06T21:05:46.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72613 - http://www.securityfocus.com/bid/51614 - http://packetstormsecurity.org/files/view/108888/tribiq-sql.txt
CVE ID: CVE-2012-5313 State: PUBLISHED Published: 2012-10-08T17:00:00 Last Updated: 2024-08-06T21:05:46.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute arbitrary SQL commands via the TOPIC_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72564 - http://marc.info/?l=full-disclosure&m=132706457510193&w=2 - http://www.vulnerability-lab.com/get_content.php?id=384
CVE ID: CVE-2012-5314 State: PUBLISHED Published: 2012-10-08T17:00:00 Last Updated: 2024-08-06T21:05:46.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ViewGit 0.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://st2tea.blogspot.com/2012/01/viewgit-cross-site-scripting.html - http://www.securityfocus.com/bid/51624 - http://packetstormsecurity.org/files/view/108910/viewgit-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72619
CVE ID: CVE-2012-5315 State: PUBLISHED Published: 2012-10-08T17:00:00 Last Updated: 2024-08-06T21:05:46.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web script or HTML via the message parameter to (1) messages_viewer.php, (2) home.php, or (3) history.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51609 - http://www.exploit-db.com/exploits/18402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72610
CVE ID: CVE-2012-5316 State: PUBLISHED Published: 2012-10-08T17:00:00 Last Updated: 2024-08-06T21:05:47.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) Troubleshooting in the Trace route Device module or (2) LDAP Username in the LDAP Configuration module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72579 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0130
https://exchange.xforce.ibmcloud.com/vulnerabilities/72579 - http://archives.neohapsis.com/archives/bugtraq/2012-01/0130.html - http://www.vulnerability-lab.com/get_content.php?id=28
CVE ID: CVE-2012-5317 State: PUBLISHED Published: 2012-10-08T17:00:00Z Last Updated: 2024-09-16T20:27:38.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote attackers to execute arbitrary SQL commands via the lastname parameter in a process action. Additional Analyst Notes: - CVE Program Container: References: - http://www.dw-itsecurity.de/index.php/unser-service/websicherheit/bigware - http://archives.neohapsis.com/archives/bugtraq/2012-01/0143.html - http://www.securityfocus.com/bid/51640 - http://secunia.com/advisories/47713 - http://www.bigware.de/12_18_2011-20_40/sicherheit-update-2
tyfocus.com/bid/51640 - http://secunia.com/advisories/47713 - http://www.bigware.de/12_18_2011-20_40/sicherheit-update-2-1-5-zur-bigware-shopsoftware-2-1
CVE ID: CVE-2012-5318 State: PUBLISHED Published: 2012-10-08T17:00:00Z Last Updated: 2024-09-16T17:48:53.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the directory specified by the folder parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1125. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47688 - http://www.openwall.com/l
al Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47688 - http://www.openwall.com/lists/oss-security/2012/03/08/1
CVE ID: CVE-2012-5319 State: PUBLISHED Published: 2012-10-08T18:00:00 Last Updated: 2024-08-06T21:05:46.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the rootpass parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73387
CVE ID: CVE-2012-5320 State: PUBLISHED Published: 2012-10-08T18:00:00 Last Updated: 2024-08-06T21:05:46.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73380 - http://www.osvdb.org/79649 - http://secunia.com/advisories/48088 - http://www.exploit-db.com/exploits/18504
CVE ID: CVE-2012-5321 State: PUBLISHED Published: 2012-10-08T18:00:00 Last Updated: 2024-08-06T21:05:46.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48102 - http://www.securitytracker.com/id?1026708 - http://st2tea.blogspot.com/2012/02/tiki-wiki-cms-groupware-frame-injection.html - http://osvdb.org/79409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73403 - http://www.securityf
ection.html - http://osvdb.org/79409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73403 - http://www.securityfocus.com/bid/52079
CVE ID: CVE-2012-5322 State: PUBLISHED Published: 2012-10-08T18:00:00 Last Updated: 2024-08-06T21:05:46.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the (1) pvcName parameter to webconfig/wan/confirm.html/confirm or (2) host_name_txtbox parameter to webconfig/lan/lan_config.html/local_lan_config. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52098 - http://packetstormsecurity.org/files/109987/Xavi-7968-ADSL-Router-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://exchange.xforce.
y.org/files/109987/Xavi-7968-ADSL-Router-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73353 - http://secunia.com/advisories/48050
CVE ID: CVE-2012-5323 State: PUBLISHED Published: 2012-10-08T18:00:00 Last Updated: 2024-08-06T21:05:46.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html/admin_passwd in Xavi X7968 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysUserName, sysPassword, and sysCfmPwd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52098 - http://packetstormsecurity.org/files/109987/Xavi-7968-ADSL-Router-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://e
ketstormsecurity.org/files/109987/Xavi-7968-ADSL-Router-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73354 - http://secunia.com/advisories/48050
CVE ID: CVE-2012-5324 State: PUBLISHED Published: 2012-10-08T20:00:00 Last Updated: 2024-08-06T21:05:46.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in the (1) sub_path parameter to the StoreInRegistry function or (2) sub_key parameter to the InitFromRegistry function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51712 - http://www.exploit-db.com/exploits/18427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72774 - htt
/bid/51712 - http://www.exploit-db.com/exploits/18427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72774 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5067.php
CVE ID: CVE-2012-5325 State: PUBLISHED Published: 2012-10-08T20:00:00 Last Updated: 2024-08-06T21:05:46.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the scr_do_redirect function in scr.php in the Shortcode Redirect plugin 1.0.01 and earlier for WordPress allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via the (1) url or (2) sec attributes in a redirect tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51626 - http://packetstormsecurity.org/files/view/108914/wpshortcoderedirect-xss.txt - https://exchange.xforce.ibmcloud
/51626 - http://packetstormsecurity.org/files/view/108914/wpshortcoderedirect-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72620
CVE ID: CVE-2012-5326 State: PUBLISHED Published: 2012-10-08T20:00:00 Last Updated: 2024-08-06T21:05:46.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/72611
CVE ID: CVE-2012-5327 State: PUBLISHED Published: 2012-10-08T20:00:00 Last Updated: 2024-08-06T21:05:46.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) delete_usrgrp[] parameter in a delete_usergroups action, (2) usergroup parameter in an add_user_togroup action, or (3) add_forum_group_id parameter in an add_forum_submit action. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/mingle-forum/changelog/ -
nal Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/mingle-forum/changelog/ - http://plugins.trac.wordpress.org/changeset?reponame=&new=492859%40mingle-forum&old=487353%40mingle-forum - http://packetstormsecurity.org/files/view/108915/wpmingleforum-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/72641
CVE ID: CVE-2012-5328 State: PUBLISHED Published: 2012-10-08T20:00:00Z Last Updated: 2024-09-16T17:54:27.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the (1) memberid or (2) groupid parameters in a removemember action or (3) id parameter to fs-admin/fs-admin.php, or (4) edit_forum_id parameter in an edit_save_forum action to fs-admin/wpf-edit-forum-group.php. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/mingle-forum/change
Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/mingle-forum/changelog/ - http://plugins.trac.wordpress.org/changeset?reponame=&new=492859%40mingle-forum&old=487353%40mingle-forum
CVE ID: CVE-2012-5329 State: PUBLISHED Published: 2012-10-08T23:00:00 Last Updated: 2024-08-06T21:05:47.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in TYPSoft FTP Server 1.1 allows remote authenticated users to cause a denial of service (application crash) via a long string in an APPE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/80577 - http://www.exploit-db.com/exploits/18615 - http://www.securityfocus.com/bid/52554