Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-5068 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-16T17:18:39.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264. Additional Analyst Notes: - CVE Program Container: References: - http://w2spconf.com/2010/papers/p26.pdf
CVE ID: CVE-2010-5069 State: PUBLISHED Published: 2011-12-07T19:00:00 Last Updated: 2024-08-07T04:09:38.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14253 - http://w2spconf.com/2010/papers/p26.pdf
CVE ID: CVE-2010-5070 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-17T01:51:02.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method, a different vulnerability than CVE-2010-2264. NOTE: this may overlap CVE-2010-5073. Additional Analyst Notes: - CVE Program Container: References: - http://w2spconf.com/2010/papers/p26.pdf
CVE ID: CVE-2010-5071 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-16T23:31:42.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. Additional Analyst Notes: - CVE Program Container: References: - http://w2spconf.com/2010/papers/p26.pdf
CVE ID: CVE-2010-5072 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-16T20:27:08.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. Additional Analyst Notes: - CVE Program Container: References: - http://w2spconf.com/2010/papers/p26.pdf
CVE ID: CVE-2010-5073 State: PUBLISHED Published: 2011-12-07T19:00:00 Last Updated: 2024-08-07T04:09:39.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. NOTE: this may overlap CVE-2010-5070. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13767 - http://w2spconf.com/2010/papers/p26.pdf
CVE ID: CVE-2010-5074 State: PUBLISHED Published: 2011-12-07T19:00:00 Last Updated: 2024-08-07T04:09:38.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets (CSS) token sequences, which makes it easier for remote attackers to obtain sensitive information about visited web pages via a timing attack. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ - https://oval.cisecurity.org/repository/search
tp://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14456
CVE ID: CVE-2010-5075 State: PUBLISHED Published: 2014-12-28T01:00:00 Last Updated: 2024-08-07T04:09:38.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service (memory corruption and panic) via a crafted IOCTL_ASWFW_COMM_PIDINFO_RESULTS DeviceIoControl request to \\.\aswFW. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42148 - https://web.archive.org/web/20120228033302/http://www.x90c.org/advisories/avast_internet_security_5.0_memory_corruption_advisory.txt - http://x90c.blogspot.com/2011/11/avast-inte
.org/advisories/avast_internet_security_5.0_memory_corruption_advisory.txt - http://x90c.blogspot.com/2011/11/avast-internet-security-aswfwsys-ioctl.html - http://x90c.blogspot.com/2011/12/bid-42148-my-avast-kernel-driver-0day_01.html
CVE ID: CVE-2010-5076 State: PUBLISHED Published: 2012-06-29T19:00:00 Last Updated: 2024-08-07T04:09:38.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1504-1 - http://secunia.com/advisories/49895 - http://rhn.redhat.com/errata/RHSA-2012-0880.html - http://secunia.com/advisories/41236 - http://qt.gitorious.org
49895 - http://rhn.redhat.com/errata/RHSA-2012-0880.html - http://secunia.com/advisories/41236 - http://qt.gitorious.org/qt/qt/commit/846f1b44eea4bb34d080d055badb40a4a13d369e - http://qt.gitorious.org/qt/qt/commit/5f6018564668d368f75e431c4cdac88d7421cff0 - http://secunia.com/advisories/49604 - http://www.westpoint.ltd.uk/advisories/wp-10-0001.txt - https://bugreports.qt-project.org/browse/QTBUG-4455
CVE ID: CVE-2010-5077 State: PUBLISHED Published: 2014-10-27T20:00:00 Last Updated: 2024-08-07T04:09:38.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/522076 - http://openarena.ws/board/index.php?topic=4391.0 - http://www.debian.org/security/2012/dsa-2442 - http://www.urbanterror.info/forums/topic/27825-drdos/ - https://bugs.debian.o
://www.debian.org/security/2012/dsa-2442 - http://www.urbanterror.info/forums/topic/27825-drdos/ - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665656 - http://permalink.gmane.org/gmane.comp.games.ioquake3/961 - http://www.openwall.com/lists/oss-security/2012/03/26/5 - http://www.ioquake.org/forums/viewtopic.php?f=12&t=1694
CVE ID: CVE-2010-5078 State: PUBLISHED Published: 2012-09-17T17:00:00 Last Updated: 2024-08-07T04:09:38.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain version information via a direct request to (1) apphire/silverstripe_version or (2) cms/silverstripe_version. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://www.osvdb.org/69888 - http://www.securityfocus.com/bid/45367 - http://secunia.com/advisories/42346 - http://www.op
ttp://www.osvdb.org/69888 - http://www.securityfocus.com/bid/45367 - http://secunia.com/advisories/42346 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://www.openwall.com/lists/oss-security/2011/01/03/12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63990 - http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4 - http://open.silverstripe.org/ticket/5031 - http://doc.silverstripe.org/framework/en/trunk/changelogs//2.3.10
CVE ID: CVE-2010-5079 State: PUBLISHED Published: 2012-09-17T17:00:00Z Last Updated: 2024-09-16T21:07:45.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses weak entropy when generating tokens for (1) the CSRF protection mechanism, (2) autologin, (3) "forgot password" functionality, and (4) password salts, which makes it easier for remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://open.silverstripe.org/changeset/114505 - http://open.silverstripe.org/changeset/114503 - http://www.openwall.com/lists/oss-security/2012/05/
g/changeset/114505 - http://open.silverstripe.org/changeset/114503 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://open.silverstripe.org/changeset/114504 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://open.silverstripe.org/changeset/114498 - http://www.openwall.com/lists/oss-security/2011/01/03/12 - http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4 - http://open.silverstripe.org/changeset/114497 - http://doc.silverstripe.org/framework/en/trunk/changelogs//2.3.10
CVE ID: CVE-2010-5080 State: PUBLISHED Published: 2012-08-26T18:00:00Z Last Updated: 2024-09-16T20:52:56.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GET parameter while changing a password through email, which allows remote attackers to obtain sensitive data and hijack the session via the HTTP referer logs on a server, aka "HTTP referer leakage." Additional Analyst Notes: - CVE Program Container: References: - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.10 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://doc.silverstripe
sapphire/en/trunk/changelogs//2.3.10 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.4 - http://secunia.com/advisories/42346 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.osvdb.org/69887 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://www.openwall.com/lists/oss-security/2011/01/03/12 - http://open.silverstripe.org/changeset/114758
CVE ID: CVE-2010-5081 State: PUBLISHED Published: 2011-12-25T01:00:00Z Last Updated: 2024-09-16T17:59:11.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18113 - http://www.exploit-db.com/exploits/14373
CVE ID: CVE-2010-5082 State: PUBLISHED Published: 2012-01-17T19:00:00 Last Updated: 2024-08-07T04:09:38.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka "Color Control Panel Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https:/
nal Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-045A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-012 - http://shinnai.altervista.org/exploits/SH-006-20100914.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14446
CVE ID: CVE-2010-5083 State: PUBLISHED Published: 2012-02-14T20:00:00 Last Updated: 2024-08-07T04:09:38.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14589 - http://www.itsecteam.com/en/vulnerabilities/vulnerability58.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/61012
CVE ID: CVE-2010-5084 State: PUBLISHED Published: 2012-02-14T20:00:00Z Last Updated: 2024-09-16T21:57:25.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cross-site request forgery (CSRF) protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the administrator account, which allows remote attackers to hijack the authentication of administrators for requests that add new users via e107_admin/users.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.madirish.net/?article=471 - http://e107.org/comment.php?comment.news.872 - http://www.securitytracker.com/id?1024351 - http://secunia.com/advisories/4
tp://e107.org/comment.php?comment.news.872 - http://www.securitytracker.com/id?1024351 - http://secunia.com/advisories/41034
CVE ID: CVE-2010-5085 State: PUBLISHED Published: 2012-02-14T20:00:00 Last Updated: 2024-08-07T04:09:39.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2022 - http://marc.info/?l=bugtraq&m=128104795219200&w=2 - http://www.osvdb.org/67043 - http://dev.hulihanapplications.com/iss
http://marc.info/?l=bugtraq&m=128104795219200&w=2 - http://www.osvdb.org/67043 - http://dev.hulihanapplications.com/issues/show/208 - http://www.htbridge.ch/advisory/xsrf_csrf_in_amethyst.html - http://secunia.com/advisories/40874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60947
CVE ID: CVE-2010-5086 State: PUBLISHED Published: 2012-03-19T18:00:00Z Last Updated: 2024-09-17T02:11:48.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the style parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40432 - http://cross-site-scripting.blogspot.com/2010/07/bit-weaver-27-local-file-inclusion.html - http://www.exploit-db.com/exploits/18530 - http://www.securityfocus.com/bid/52176
CVE ID: CVE-2010-5087 State: PUBLISHED Published: 2012-08-26T18:00:00Z Last Updated: 2024-09-16T19:35:01.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators via vectors related to "form action requests" using a controller. Additional Analyst Notes: - CVE Program Container: References: - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.10 - http://open.silverstripe.org/changeset/115182 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://doc.silverstripe.org/sa
erstripe.org/changeset/115182 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.4 - http://secunia.com/advisories/42346 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://www.openwall.com/lists/oss-security/2011/01/03/12 - http://open.silverstripe.org/changeset/115185
CVE ID: CVE-2010-5088 State: PUBLISHED Published: 2012-08-26T18:00:00 Last Updated: 2024-08-07T04:09:38.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3 allow remote attackers to hijack the authentication of administrators via destructive controller actions, a different vulnerability than CVE-2010-5087. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41717 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://open.silverstripe.org/changeset/113275 - http://holisticinfosec.org/content/view/157/45/ - http
ty/2012/05/01/3 - http://open.silverstripe.org/changeset/113275 - http://holisticinfosec.org/content/view/157/45/ - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.9 - http://www.securityfocus.com/bid/44768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63156 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://www.osvdb.org/69113 - http://www.openwall.com/lists/oss-security/2011/01/03/12 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.3 - http://open.silverstripe.org/changeset/113282
CVE ID: CVE-2010-5089 State: PUBLISHED Published: 2012-08-26T18:00:00Z Last Updated: 2024-09-16T18:19:25.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://open.silverstripe.org/changeset/110757 - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3
CVE ID: CVE-2010-5090 State: PUBLISHED Published: 2012-08-26T18:00:00Z Last Updated: 2024-09-17T02:32:34.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3
CVE ID: CVE-2010-5091 State: PUBLISHED Published: 2012-08-26T18:00:00Z Last Updated: 2024-09-16T23:20:47.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by changing the extension of an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://open.silverstripe.org/ticket/5693 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://dl
//www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://dl.packetstormsecurity.net/1006-exploits/silverstripe-shell.txt - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.1 - http://open.silverstripe.org/changeset/107273 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.8
CVE ID: CVE-2010-5092 State: PUBLISHED Published: 2012-08-26T18:00:00Z Last Updated: 2024-09-16T18:34:25.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://open.silverstripe.org/ticket/5772 - http://open.silverstripe.org/changeset/107532 - http://doc.silv
012/04/30/3 - http://open.silverstripe.org/ticket/5772 - http://open.silverstripe.org/changeset/107532 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.1
CVE ID: CVE-2010-5093 State: PUBLISHED Published: 2012-08-26T18:00:00Z Last Updated: 2024-09-16T20:42:48.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address (ID) of another user. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.silverstripe.org/security-releases - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://open.silverstripe.org/changeset/100744 - http://doc
s - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://open.silverstripe.org/changeset/100744 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.7
CVE ID: CVE-2010-5094 State: PUBLISHED Published: 2012-08-26T18:00:00Z Last Updated: 2024-09-17T00:11:21.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote attackers to delete index.php and "disrupt mod_rewrite-less URL routing." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.silverstripe.org/security-releases - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://open.si
http://www.silverstripe.org/security-releases - http://www.openwall.com/lists/oss-security/2012/04/30/3 - http://open.silverstripe.org/changeset/101227 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.7
CVE ID: CVE-2010-5095 State: PUBLISHED Published: 2012-08-26T18:00:00 Last Updated: 2024-08-07T04:09:39.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/01/3 - http://www.openwall.com/lists/oss-security/2012/04/30/1 - http://www.silverstripe.org/security-releases - http://www.openwall.com/lists/oss-security/2012/04/30/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5654
es - http://www.openwall.com/lists/oss-security/2012/04/30/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56546 - http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.6 - http://groups.google.com/group/silverstripe-announce/browse_thread/thread/c75fbd7926ed2725?tvc=2&fwc=1 - http://secunia.com/advisories/38697 - http://www.securityfocus.com/bid/38394 - http://www.osvdb.org/62541