Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.redhat.com/archives/fedora-package-announce/2008-September/msg00335.html - http://secunia.com/advisories/31633 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00045.html - http://secunia.com/advisories/31991 - http://secunia.com/advisories/31690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44699 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00692.html
CVE ID: CVE-2008-3921 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44706 - http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt - http://www.telartis.nl/xcms/awstats/ - http://securityreason.com/securityalert/4218 - http://www.vupen.com/english/advisories/2008/2442 - http://secunia.
ts/ - http://securityreason.com/securityalert/4218 - http://www.vupen.com/english/advisories/2008/2442 - http://secunia.com/advisories/31630 - http://www.securityfocus.com/archive/1/495770/100/0/threaded
CVE ID: CVE-2008-3922 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6368 - http://www.exploit-db.com/exploits/17324 - http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt - http://www.telartis.nl/xcms/awstats/ - https://exchange.xforce.ibmcloud.com/vulner
mory.edu/~ekenda2/EMORY-2008-01.txt - http://www.telartis.nl/xcms/awstats/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/44712 - http://securityreason.com/securityalert/4218 - http://www.vupen.com/english/advisories/2008/2442 - http://secunia.com/advisories/31630 - http://securityreason.com/securityalert/8259 - http://www.securityfocus.com/bid/30856 - http://www.securityfocus.com/archive/1/495770/100/0/threaded
CVE ID: CVE-2008-3923 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) page and (2) year parameters in an hstat_year action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31599 - http://www.securityfocus.com/bid/30854 - http://securityreason.com/securityalert/4220 - https://www.exploit-db.com/exploits/6313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/446
securityalert/4220 - https://www.exploit-db.com/exploits/6313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44685
CVE ID: CVE-2008-3924 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:42.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover (1) account names and (2) password hashes via a direct request for (a) backup/cmme_data.zip or (b) backup/cmme_cmme.zip. NOTE: it was later reported that vector a also affects CMME 1.19. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44684 - http://secunia.co
s: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44684 - http://secunia.com/advisories/31599 - http://www.securityfocus.com/bid/30854 - http://securityreason.com/securityalert/4220 - https://www.exploit-db.com/exploits/6313
CVE ID: CVE-2008-3925 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin.php in Content Management Made Easy (CMME) 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44686 - https://www.exploit-db.com/exploits/6313
CVE ID: CVE-2008-3926 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the env parameter in a weblog action to index.php, or (2) create arbitrary directories via a .. (dot dot) in the env parameter in a login action to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44683 - http://secunia.com/advisories/31599 - http://www.securityfocus.com/bid/30854 - http:/
mcloud.com/vulnerabilities/44683 - http://secunia.com/advisories/31599 - http://www.securityfocus.com/bid/30854 - http://securityreason.com/securityalert/4220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44687 - https://www.exploit-db.com/exploits/6313
CVE ID: CVE-2008-3927 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30876 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://dev.gentoo.org/~rbu/security/debiantemp/tiger - http://uvw.ru/report.lenny.txt - http://secunia.com/advisories/31659 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496415 - https://exc
.lenny.txt - http://secunia.com/advisories/31659 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44732
CVE ID: CVE-2008-3928 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: test.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31658 - http://security.gentoo.org/glsa/glsa-200812-12.xml - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496365 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantemp/honeyd-common
g/show_bug.cgi?id=235770 - http://uvw.ru/report.lenny.txt - http://dev.gentoo.org/~rbu/security/debiantemp/honeyd-common - http://secunia.com/advisories/33141 - http://www.securityfocus.com/bid/30874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44735
CVE ID: CVE-2008-3929 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200812-22.xml - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://dev.gentoo.org/~rbu/security/debiantemp/ampache - http://secunia.com/advisories/33316 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://secunia.com/advisories/31657 - http://www.securityfocus.com/bid
https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://secunia.com/advisories/31657 - http://www.securityfocus.com/bid/30875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44739 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496369 - http://freshmeat.net/projects/ampache/releases/283935
CVE ID: CVE-2008-3930 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:42.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496359 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://www.securityfocus.com/bid/30877 - http://secunia.com/advisories/31648 - http://dev.gentoo.org/~rbu/security/debiantemp/citadel-server - https://exchange.xforce.ibm
cunia.com/advisories/31648 - http://dev.gentoo.org/~rbu/security/debiantemp/citadel-server - https://exchange.xforce.ibmcloud.com/vulnerabilities/44734
CVE ID: CVE-2008-3931 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44736 - http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://dev.gentoo.org/~rbu/security/debiantemp/r-base-core-ra - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org
oo.org/~rbu/security/debiantemp/r-base-core-ra - https://bugs.gentoo.org/show_bug.cgi?id=235770 - http://bugs.debian.org/496418 - http://secunia.com/advisories/31647 - http://security.gentoo.org/glsa/glsa-200809-13.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496363 - https://bugs.gentoo.org/show_bug.cgi?id=235822 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:198 - http://secunia.com/advisories/31996
CVE ID: CVE-2008-3932 State: PUBLISHED Published: 2008-09-04T19:00:00 Last Updated: 2024-08-07T10:00:41.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service (hang) via a crafted NCP packet that triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html - http://www.redhat.com/support/errata/RHSA-2008-0890.html - http://secunia.com/advisories/31864 - http://www.wireshark.org/security/wnpa-sec-2008-05.html - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
p://www.wireshark.org/security/wnpa-sec-2008-05.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11273 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278 - http://www.securityfocus.com/archive/1/496487/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://secunia.com/advisories/32091 - http://www.vupen.com/english/advisories/2008/2773 - http://www.securitytracker.com/id?1020819 - http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html - http://www.vupen.com/english/advisories/2008/2493 - http://www.mandriva.com/security/advis
008-September/msg00715.html - http://www.vupen.com/english/advisories/2008/2493 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:199 - http://security.gentoo.org/glsa/glsa-200809-17.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/45309 - http://secunia.com/advisories/31886 - http://secunia.com/advisories/32028
CVE ID: CVE-2008-3933 State: PUBLISHED Published: 2008-09-04T19:00:00 Last Updated: 2024-08-07T10:00:42.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html - http://www.redhat.com/support/errata/RHSA-2008-0890.html - http://secunia.com/advisories/31864 - http://www.wireshark.org/security/wnpa-sec-2008-05.html - http://wik
8-0890.html - http://secunia.com/advisories/31864 - http://www.wireshark.org/security/wnpa-sec-2008-05.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2649 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9620 - http://www.securityfocus.com/archive/1/496487/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://secunia.com/advisories/32091 - http://www.vupen.com/english/advisories/2008/2773 - http://secunia.com/advisories/32944 - http://www.securitytracker.com/id?1020819 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html
ww.securitytracker.com/id?1020819 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2682 - http://www.vupen.com/english/advisories/2008/2493 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:199 - http://security.gentoo.org/glsa/glsa-200809-17.xml - http://secunia.com/advisories/31886 - http://secunia.com/advisories/32028 - http://www.debian.org/security/2008/dsa-1673
CVE ID: CVE-2008-3934 State: PUBLISHED Published: 2008-09-04T19:00:00 Last Updated: 2024-08-07T10:00:41.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Wireshark (formerly Ethereal) 0.99.6 through 1.0.2 allows attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15087 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html - http://www.redhat.com/support/errata/RHSA-2008-0890.html - http://secunia.com/advisories/31864 - https://oval.cisecu
l - http://www.redhat.com/support/errata/RHSA-2008-0890.html - http://secunia.com/advisories/31864 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9920 - http://www.wireshark.org/security/wnpa-sec-2008-05.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278 - http://www.securityfocus.com/archive/1/496487/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://secunia.com/advisories/32091 - http://www.vupen.com/english/advisories/2008/2773 - http://www.securitytracker.com/id?1020819 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html - http://www.vupen.com/english/advisories/2008/
redhat.com/archives/fedora-package-announce/2008-September/msg00715.html - http://www.vupen.com/english/advisories/2008/2493 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:199 - http://security.gentoo.org/glsa/glsa-200809-17.xml - http://secunia.com/advisories/31886 - http://secunia.com/advisories/32028
CVE ID: CVE-2008-3935 State: PUBLISHED Published: 2008-09-05T15:00:00.000Z Last Updated: 2025-04-03T15:13:53.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://jvn.jp/en/jp/JVN79914432/index.html - http://www.securityfocus.com/bid/31006 - http://www.d-ic.com/free/05/shop_v50.html - http://secunia.com/advisories/31652 - http://www.d-ic.com/free/05/shop_v52.html
CVE ID: CVE-2008-3936 State: PUBLISHED Published: 2008-09-05T15:00:00 Last Updated: 2024-08-07T10:00:41.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Dreambox DM500C allows remote attackers to cause a denial of service (application hang) via a long URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44788 - http://www.securityfocus.com/archive/1/495837/100/0/threaded - http://www.securitytracker.com/id?1020784 - http://www.vupen.com/english/advisories/2008/2472 - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3807 - http://secunia.com/advisories/31650 - http://www.securityfocus.com/b
tp://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3807 - http://secunia.com/advisories/31650 - http://www.securityfocus.com/bid/30919 - http://securityreason.com/securityalert/4221 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064115.html
CVE ID: CVE-2008-3937 State: PUBLISHED Published: 2008-09-05T15:00:00.000Z Last Updated: 2025-04-03T15:11:17.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) user_id parameter in an edit action to user_admin.php, the (2) title parameter to listings.php, and the (3) redirect_url parameter to user_profile.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/30989 - http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt -
rences: - http://www.securityfocus.com/bid/30989 - http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt - http://secunia.com/advisories/31719
CVE ID: CVE-2008-3938 State: PUBLISHED Published: 2008-09-05T15:00:00.000Z Last Updated: 2025-04-03T15:08:51.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allows remote attackers to change arbitrary passwords via an update_password action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstorm.linuxsecurity.com/0808-exploits/omcd-xssxsrf.txt - http://secunia.com/advisories/31719
CVE ID: CVE-2008-3939 State: PUBLISHED Published: 2008-09-05T15:00:00.000Z Last Updated: 2025-04-03T15:06:33.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers to read arbitrary files via directory traversal sequences in the URI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/30987 - http://secunia.com/advisories/31693 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064227.html
CVE ID: CVE-2008-3940 State: PUBLISHED Published: 2008-09-05T15:00:00 Last Updated: 2024-08-07T10:00:42.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2) .project file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31587 - http://www.vupen.com/english/advisories/2008/2463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44752 - http://deathrow.vistech.net/DEFCON16/VMS.PDF - http://www.securityfocus.com/bid/30948
CVE ID: CVE-2008-3941 State: PUBLISHED Published: 2008-09-05T15:00:00 Last Updated: 2024-08-07T10:00:42.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter in a search action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30980 - http://marc.info/?l=bugtraq&m=122039853426550&w=2 - http://securityreason.com/securityalert/4222
CVE ID: CVE-2008-3942 State: PUBLISHED Published: 2008-09-05T15:00:00 Last Updated: 2024-08-07T10:00:41.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44887 - http://www.securityfocus.com/bid/30962 - http://packetstormsecurity.org/0808-exploits/phpemlak-sql.txt
CVE ID: CVE-2008-3943 State: PUBLISHED Published: 2008-09-05T15:00:00 Last Updated: 2024-08-07T10:00:41.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31696 - http://www.securityfocus.com/bid/31001 - http://securityreason.com/securityalert/4223 - https://www.exploit-db.com/exploits/6361
CVE ID: CVE-2008-3944 State: PUBLISHED Published: 2008-09-05T15:00:00 Last Updated: 2024-08-07T10:00:41.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4224 - http://www.securityfocus.com/bid/31005 - https://www.exploit-db.com/exploits/6362
CVE ID: CVE-2008-3945 State: PUBLISHED Published: 2008-09-05T15:00:00 Last Updated: 2024-08-07T10:00:42.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31653 - https://www.exploit-db.com/exploits/6336 - http://securityreason.com/securityalert/4225
CVE ID: CVE-2008-3946 State: PUBLISHED Published: 2008-09-05T16:00:00 Last Updated: 2024-08-07T10:00:41.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45135 - http://deathrow.vistech.net/DEFCON16/VMS.PDF
CVE ID: CVE-2008-3947 State: PUBLISHED Published: 2008-09-05T16:00:00 Last Updated: 2024-08-07T10:00:41.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45047 - http://deathrow.vistech.net/DEFCON16/VMS.PDF