Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
E Program Container: References: - http://www.debian.org/security/2012/dsa-2460 - http://www.openwall.com/lists/oss-security/2012/03/16/17 - http://downloads.asterisk.org/pub/security/AST-2012-002.pdf - http://archives.neohapsis.com/archives/bugtraq/2012-03/0069.html - http://osvdb.org/80125 - http://www.securityfocus.com/bid/52523 - http://secunia.com/advisories/48941 - http://www.asterisk.org/node/51797 - http://secunia.com/advisories/48417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74082 - http://www.openwall.com/lists/oss-security/2012/03/16/10 - http://downloads.asterisk.org/pub/security/AST-2012-002-1.8.diff - http://securitytracker.com/id?1026812
CVE ID: CVE-2012-1184 State: PUBLISHED Published: 2012-09-18T18:00:00 Last Updated: 2024-08-06T18:53:35.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in an HTTP Digest Authentication header. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/03/16/17 - http://downloads.asterisk.org/pub/security/AST-2012-003.pdf - http://www.asterisk.org/node/51797 - http://secunia.com/a
http://downloads.asterisk.org/pub/security/AST-2012-003.pdf - http://www.asterisk.org/node/51797 - http://secunia.com/advisories/48417 - http://www.openwall.com/lists/oss-security/2012/03/16/10 - http://downloads.asterisk.org/pub/security/AST-2012-003-1.8.diff - http://osvdb.org/80126 - http://www.securitytracker.com/id?1026813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74083
CVE ID: CVE-2012-1185 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T18:53:36.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/80556 - http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.
ogram Container: References: - http://www.osvdb.org/80556 - http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1185 - http://secunia.com/advisories/49043 - http://www.debian.org/security/2012/dsa-2462 - http://www.securityfocus.com/bid/51957 - http://www.openwall.com/lists/oss-security/2012/03/19/5 - http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/profile.c - http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/property.c - http://secunia.com/advisories/47926 - http://ubuntu.com/usn/usn-1435-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
/secunia.com/advisories/47926 - http://ubuntu.com/usn/usn-1435-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76140 - http://secunia.com/advisories/48974 - http://secunia.com/advisories/49317
CVE ID: CVE-2012-1186 State: PUBLISHED Published: 2012-06-05T22:00:00 Last Updated: 2024-08-06T18:53:36.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html - http://secunia.com/advisories/49043 - http://www.debian.org/security/2012/dsa-2462 - http://www.secu
-06/msg00001.html - http://secunia.com/advisories/49043 - http://www.debian.org/security/2012/dsa-2462 - http://www.securityfocus.com/bid/51957 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76139 - http://www.openwall.com/lists/oss-security/2012/03/19/5 - http://trac.imagemagick.org/changeset/6998/ImageMagick/branches/ImageMagick-6.7.5/magick/profile.c - http://secunia.com/advisories/47926 - http://ubuntu.com/usn/usn-1435-1 - http://secunia.com/advisories/48974 - http://secunia.com/advisories/49317 - http://www.osvdb.org/80555
CVE ID: CVE-2012-1187 State: PUBLISHED Published: 2019-10-29T13:00:11 Last Updated: 2024-08-06T18:53:36.263Z Vendors: Bitlbee Products: Bitlbee Problem Types: does not drop extra group privileges Description: Bitlbee does not drop extra group privileges correctly in unix.c Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-1187 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1187 - https://access.redhat.com/security/cve/cve-2012-1187 - https://bugs.bitlbee.org/ticket/852
CVE ID: CVE-2012-1188 State: PUBLISHED Published: 2012-09-26T00:00:00 Last Updated: 2024-08-06T18:53:36.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73605 - https://github.com/forkcms/forkcms/commit/1269fe8b3813c7b7d5552a2b88bc2e7bd4d0c1f9 - http://secunia.com/advisories/48183 - http://www.fork-cms.com/blo
kcms/commit/1269fe8b3813c7b7d5552a2b88bc2e7bd4d0c1f9 - http://secunia.com/advisories/48183 - http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-released - https://www.htbridge.ch/advisory/HTB23075 - http://archives.neohapsis.com/archives/bugtraq/2012-03/0022.html - http://www.osvdb.org/79692 - https://github.com/forkcms/forkcms/commit/995220182068518e89019a265d113518f6566407 - http://www.securityfocus.com/bid/52236
CVE ID: CVE-2012-1189 State: PUBLISHED Published: 2012-10-08T18:00:00Z Last Updated: 2024-09-16T21:04:39.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://freecode.com/projects/torcs/releases/341672 - http://torcs.sourceforge.net/index.php?name=News&file=article&sid=79 - http://www.exploit-db.com/exploits/18471 - http://www.openw
cs.sourceforge.net/index.php?name=News&file=article&sid=79 - http://www.exploit-db.com/exploits/18471 - http://www.openwall.com/lists/oss-security/2012/02/18/2 - http://www.osvdb.org/79372 - http://www.openwall.com/lists/oss-security/2012/03/05/18
CVE ID: CVE-2012-1190 State: PUBLISHED Published: 2012-05-03T01:00:00 Last Updated: 2024-08-06T18:53:36.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2012-1.php - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079566.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079435.html
/package-announce/2012-May/079566.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079435.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:050 - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079475.html - http://www.securityfocus.com/bid/52857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75304 - https://github.com/phpmyadmin/phpmyadmin/commit/86073d532aed656550cb731aa5b4288b126ae7a6
CVE ID: CVE-2012-1191 State: PUBLISHED Published: 2012-02-17T22:00:00Z Last Updated: 2024-09-16T17:23:51.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.isc.org/files/imce/ghostdomain_camera.pdf
CVE ID: CVE-2012-1192 State: PUBLISHED Published: 2012-02-17T22:00:00Z Last Updated: 2024-09-16T18:08:20.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.isc.org/files/imce/ghostdomain_camera.pdf
CVE ID: CVE-2012-1193 State: PUBLISHED Published: 2012-02-17T22:00:00 Last Updated: 2024-08-06T18:53:36.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.isc.org/files/imce/ghostdomain_camera.pdf - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104177.html - http://lists.fedoraproject.org
ra.pdf - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104177.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102729.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104173.html
CVE ID: CVE-2012-1194 State: PUBLISHED Published: 2012-02-17T22:00:00Z Last Updated: 2024-09-17T03:32:25.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.isc.org/files/imce/ghostdomain_camera.pdf
CVE ID: CVE-2012-1195 State: PUBLISHED Published: 2012-02-18T00:00:00 Last Updated: 2024-08-06T18:53:36.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a PutUpdateFileCore command in a RunAMTCommand SOAP request, then accessing the file via a direct request to the file in the web root. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79276 - http://www.securitytracker.com/
dditional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/79276 - http://www.securitytracker.com/id?1026693 - http://www.securityfocus.com/bid/52023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73207 - http://secunia.com/advisories/47666
CVE ID: CVE-2012-1196 State: PUBLISHED Published: 2012-02-18T00:00:00 Last Updated: 2024-08-06T18:53:36.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1026693 - http://www.securityfocus.com/bid/52023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73208 - http://osvdb.org/79277 - http://secunia.com/advisories
23 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73208 - http://osvdb.org/79277 - http://secunia.com/advisories/47666
CVE ID: CVE-2012-1197 State: PUBLISHED Published: 2012-02-18T00:00:00 Last Updated: 2024-08-06T18:53:36.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/52047 - http://osvdb.org/79305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73242 - http://secunia.com/advisories/47450
CVE ID: CVE-2012-1198 State: PUBLISHED Published: 2012-02-18T00:00:00 Last Updated: 2024-08-06T18:53:36.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an executable extension via a create action, then accessing it via a view action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73201 - http://www.securityfocus.com/bid/51979 - http://packetstormsecurity.org/files/109663/BASE-1.4.5-Remote-File-Inclusion-Shell-Creation.html
CVE ID: CVE-2012-1199 State: PUBLISHED Published: 2012-02-18T00:00:00 Last Updated: 2024-08-06T18:53:36.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) BASE_path parameter to base_ag_main.php, (2) base_db_setup.php, (3) base_graph_common.php, (4) base_graph_display.php, (5) base_graph_form.php, (6) base_graph_main.php, (7) base_local_rules.php, (8) base_logout.php, (9) base_main.php, (10) base_maintenance.php, (11) base_payload.php, (12) base_qry_alert.php, (13) base_qry_common.php, (14) base_qry_main.p
10) base_maintenance.php, (11) base_payload.php, (12) base_qry_alert.php, (13) base_qry_common.php, (14) base_qry_main.php, (15) base_stat_alerts.php, (16) base_stat_class.php, (17) base_stat_common.php, (18) base_stat_ipaddr.php, (19) base_stat_iplink.php, (20) base_stat_ports.php, (21) base_stat_sensor.php, (22) base_stat_time.php, (23) base_stat_uaddr.php, (24) base_user.php, (25) index.php, (26) admin/base_roleadmin.php, (27) admin/base_useradmin.php, (28) admin/index.php, (29) help/base_setup_help.php, (30) includes/base_action.inc.php, (31) includes/base_cache.inc.php, (32) includes/base_db.inc.php, (33) includes/base_db.inc.php, (34) includes/base_include.inc.php, (35) includes/base_o
, (32) includes/base_db.inc.php, (33) includes/base_db.inc.php, (34) includes/base_include.inc.php, (35) includes/base_output_html.inc.php, (36) includes/base_output_query.inc.php, (37) includes/base_state_criteria.inc.php, (38) includes/base_state_query.inc.php or (39) setup/base_conf_contents.php; (40) GLOBALS[user_session_path] parameter to includes/base_state_common.inc.php; (41) BASE_Language parameter to setup/base_conf_contents.php; or (42) ado_inc_php parameter to setup/setup2.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73200 - http://packetstormsecurity.org/files/1
ocus.com/bid/51979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73200 - http://packetstormsecurity.org/files/109663/BASE-1.4.5-Remote-File-Inclusion-Shell-Creation.html
CVE ID: CVE-2012-1200 State: PUBLISHED Published: 2012-02-18T00:00:00 Last Updated: 2024-08-06T18:53:36.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary PHP code via a URL in the (1) fileType parameter to optimizer/index.php, (2) id parameter to administrator/modules/moduleslist.php, (3) filename parameter to includes/function/gets.php, or (4) conf[blockfile] parameter to includes/function/usertpl.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/109669/Nova-CMS-Remote-File-Inclusion.html - https://exchange.xforce.i
eferences: - http://packetstormsecurity.org/files/109669/Nova-CMS-Remote-File-Inclusion.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/73159 - http://www.securityfocus.com/bid/51976
CVE ID: CVE-2012-1203 State: PUBLISHED Published: 2014-12-28T00:00:00 Last Updated: 2024-08-06T18:53:36.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a save_user action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18498/
CVE ID: CVE-2012-1205 State: PUBLISHED Published: 2012-02-20T19:00:00Z Last Updated: 2024-09-17T00:06:30.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47976 - http://wordpress.org/extend/plugins/relocate-upload/changelog/ - http://osvdb.org/79250 - http://www.securityfocus.com/bid/49693 - http://plugins.trac.wordpress.org/changeset/504380/relocate-upload
CVE ID: CVE-2012-1206 State: PUBLISHED Published: 2012-02-20T19:00:00 Last Updated: 2024-08-06T18:53:36.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (1) JPG image to the ImportGR in the JPG image filter module (HncJpeg10.flt) or (2) PNG image to the PNG image filter module (HncPng10.flt), which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73026 - http://www.hancom.co.kr/notice.noticeView.do?targetRow=1&notice_seqno=100 - http:
e.ibmcloud.com/vulnerabilities/73026 - http://www.hancom.co.kr/notice.noticeView.do?targetRow=1&notice_seqno=100 - http://secunia.com/advisories/47386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73025 - http://osvdb.org/78906 - http://www.securityfocus.com/bid/51892 - http://osvdb.org/78907
CVE ID: CVE-2012-1207 State: PUBLISHED Published: 2012-02-20T19:00:00 Last Updated: 2024-08-06T18:53:36.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter to frontend/js.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73169 - http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released - https://github.com/forkcms/forkcms/commit/a9986b86c53de05822
tp://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released - https://github.com/forkcms/forkcms/commit/a9986b86c53de0582248b39605660fbba0c21a29 - http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html
CVE ID: CVE-2012-1208 State: PUBLISHED Published: 2012-02-20T19:00:00Z Last Updated: 2024-09-16T22:20:23.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) report parameter to blog/settings or (2) error parameter to users/index. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47937 - http://www.securityfocus.com/bid/51972 - https://github.com/forkcms/forkcms/commit/d65c083adc91c88d21bd9a0df4c2688df634c6ff - https://gith
yfocus.com/bid/51972 - https://github.com/forkcms/forkcms/commit/d65c083adc91c88d21bd9a0df4c2688df634c6ff - https://github.com/forkcms/forkcms/commit/df75e0797a6540c4d656969a2e7df7689603b2cf - http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released - http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html - https://github.com/forkcms/forkcms/commit/8fa74dd3e2e32723cd121177dce6aeac37e29df6
CVE ID: CVE-2012-1209 State: PUBLISHED Published: 2012-02-20T19:00:00 Last Updated: 2024-08-06T18:53:36.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73393 - https://github.com/forkcms/forkcms/commit/df75e0797a6540c4d656969a2e7df7689603b2cf - http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released - https://github.com/forkcms/forkcms/
969a2e7df7689603b2cf - http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released - https://github.com/forkcms/forkcms/commit/c8ec9c58a6b3c46cdd924532c1de99bcda6072ed
CVE ID: CVE-2012-1210 State: PUBLISHED Published: 2012-02-20T19:00:00 Last Updated: 2024-08-06T18:53:36.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/109670/Pfile-1.02-Cross-Site-Scripting-SQL-Injection.html - http://www.securityfocus.com/bid/51982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/73166
CVE ID: CVE-2012-1211 State: PUBLISHED Published: 2012-02-20T19:00:00 Last Updated: 2024-08-06T18:53:36.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject arbitrary web script or HTML via the filecat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73165 - http://packetstormsecurity.org/files/109670/Pfile-1.02-Cross-Site-Scripting-SQL-Injection.html - http://www.securityfocus.com/bid/51982