Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6331 State: PUBLISHED Published: 2009-02-27T16:00:00 Last Updated: 2024-08-07T11:27:35.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Streber before 0.08093 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46674 - http://secunia.com/advisories/32739 - http://osvdb.org/49893 - http://sourceforge.net/project/shownotes.php?group_id=145255&release_id=640914
CVE ID: CVE-2008-6332 State: PUBLISHED Published: 2009-02-27T16:00:00 Last Updated: 2024-08-07T11:27:35.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32339 - http://osvdb.org/49916 - http://secunia.com/advisories/32727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46675 - https://www.exploit-db.com/exploits/7146
CVE ID: CVE-2008-6333 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T11:27:35.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in RSS Simple News (RSSSN), when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32962 - https://www.exploit-db.com/exploits/7541
CVE ID: CVE-2008-6334 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T11:27:35.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in eMetrix Extract Website allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7525 - http://secunia.com/advisories/33255 - http://www.securityfocus.com/bid/32936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47517
CVE ID: CVE-2008-6335 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T11:27:35.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7524 - http://www.securityfocus.com/bid/32932 - http://secunia.com/advisories/33255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47516
CVE ID: CVE-2008-6336 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T11:27:35.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Text Lines Rearrange Script 1.0, when register_globals is enabled, allows remote attackers to read arbitrary local files via directory traversal sequences in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32968 - https://www.exploit-db.com/exploits/7542 - http://secunia.com/advisories/33276
CVE ID: CVE-2008-6337 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T11:27:35.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Volunteer Management System (com_volunteer) module 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the job_id parameter in a jobshow action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7546 - http://secunia.com/advisories/33271 - http://www.securityfocus.com/bid/32973
CVE ID: CVE-2008-6338 State: PUBLISHED Published: 2009-02-27T17:00:00Z Last Updated: 2024-09-17T01:05:30.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the WEBERkommunal Facilities (wes_facilities) extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/ - http://www.securityfocus.com/bid/32982 - http://secunia.com/advisories/33302 - http://typo3.org/extensions/repository/view/wes_facilities/2.0.1/
CVE ID: CVE-2008-6339 State: REJECTED Published: 2008-05-01T17:20:00Z Last Updated: 2024-09-16T23:51:35.893Z Description: No description available.
CVE ID: CVE-2008-6340 State: PUBLISHED Published: 2009-02-27T17:00:00Z Last Updated: 2024-09-16T23:00:27.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Vox populi (mv_vox_populi) extension 0.3.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/ - http://secunia.com/advisories/33262 - http://typo3.org/extensions/repository/view/mv_vox_populi/0.3.1/ - http://www.securityfocus.com/bid/32980
CVE ID: CVE-2008-6341 State: PUBLISHED Published: 2009-02-27T17:00:00Z Last Updated: 2024-09-16T17:24:02.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SB Universal Plugin (SBuniplug) extension 2.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/
CVE ID: CVE-2008-6342 State: PUBLISHED Published: 2009-02-27T17:00:00Z Last Updated: 2024-09-17T03:59:51.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TYPO3 Simple File Browser (simplefilebrowser) extension 1.0.2 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33301 - http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/ - http://typo3.org/extensions/repository/view/simplefilebrowser/1.0.3/
CVE ID: CVE-2008-6343 State: PUBLISHED Published: 2009-02-27T17:00:00Z Last Updated: 2024-09-17T02:53:09.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the TU-Clausthal ODIN (tuc_odin) extension 0.0.1, 0.1.0, 0.1.1, and 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20081222-4/
CVE ID: CVE-2008-6344 State: PUBLISHED Published: 2009-02-27T17:00:00Z Last Updated: 2024-09-17T03:59:12.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the TU-Clausthal Staff (tuc_staff) 0.3.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-20081222-4 - http://www.securityfocus.com/bid/32981
CVE ID: CVE-2008-6345 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T11:27:35.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to indes.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33269 - https://www.exploit-db.com/exploits/7548 - http://www.securityfocus.com/bid/32974
CVE ID: CVE-2008-6346 State: PUBLISHED Published: 2009-02-27T17:00:00Z Last Updated: 2024-09-17T02:05:35.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the DR Wiki (dr_wiki) extension 1.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33256 - http://typo3.org/teams/security/security-bulletins/typo3-20081222-3/
CVE ID: CVE-2008-6347 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6976 - http://www.securityfocus.com/bid/32095
CVE ID: CVE-2008-6348 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to gallery_category.php, (2) photo_id parameter to gallery_photo.php, and the (3) user_name and (4) user_pass parameters to admin/index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32145 - http://secunia.com/advisories/32593 - https://exchange
Container: References: - http://www.securityfocus.com/bid/32145 - http://secunia.com/advisories/32593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46400 - https://www.exploit-db.com/exploits/7016
CVE ID: CVE-2008-6349 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7029 - http://secunia.com/advisories/32561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46420 - http://www.securityfocus.com/bid/32169
CVE ID: CVE-2008-6350 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46417 - https://www.exploit-db.com/exploits/7035 - http://secunia.com/advisories/32591 - http://www.securityfocus.com/bid/32176
CVE ID: CVE-2008-6351 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46419 - https://www.exploit-db.com/exploits/7035 - http://secunia.com/advisories/32591 - http://www.securityfocus.com/bid/32176
CVE ID: CVE-2008-6352 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7432 - http://secunia.com/advisories/33126 - http://www.securityfocus.com/bid/32789
CVE ID: CVE-2008-6353 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33128 - https://www.exploit-db.com/exploits/7429 - http://www.securityfocus.com/bid/32786
CVE ID: CVE-2008-6354 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2poll.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7427 - http://secunia.com/advisories/33130
CVE ID: CVE-2008-6355 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Net Guys ASPired2Protect stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2Protect.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33130 - https://www.exploit-db.com/exploits/7428
CVE ID: CVE-2008-6356 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to (1) evcal.mdb and (2) evcal97.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47265 - https://www.exploit-db.com/exploits/7419 - http://secunia.com/advisories/34258
CVE ID: CVE-2008-6357 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to mycal.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7420 - http://secunia.com/advisories/34261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47266
CVE ID: CVE-2008-6358 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7433 - http://www.securityfocus.com/bid/32787 - http://secunia.com/advisories/33125
CVE ID: CVE-2008-6359 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50654 - http://www.securityfocus.com/bid/52471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74011 - http://www.securityfocus.com/archive/1/499099/100/0/threaded - http://www.securityfocu
cloud.com/vulnerabilities/74011 - http://www.securityfocus.com/archive/1/499099/100/0/threaded - http://www.securityfocus.com/bid/32763 - http://packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html - http://www.exploit-db.com/exploits/18595 - http://secunia.com/advisories/33106
CVE ID: CVE-2008-6360 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the userranks feature in modules/system/admin.php in ImpressCMS 1.0.2 final allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33023 - http://www.securityfocus.com/bid/32640 - http://sourceforge.net/project/shownotes.php?release_id=634159 - https://exchange.xforce.ibmcloud.com/vu
com/bid/32640 - http://sourceforge.net/project/shownotes.php?release_id=634159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47089
CVE ID: CVE-2008-6361 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32783/exploit - http://www.securityfocus.com/bid/32783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47276 - https://www.exploit-db.com/exploits/7422
CVE ID: CVE-2008-6362 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33019 - https://www.exploit-db.com/exploits/7346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47094 - http://www.securityfocus.com/bid/32655
CVE ID: CVE-2008-6363 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary code via a crafted .cct file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3369 - http://www.securityfocus.com/bid/32667 - http://secunia.com/advisories/33043 - https://www.exploit-db.com/exploits/7362
CVE ID: CVE-2008-6364 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the (1) username (uname parameter) and (2) password (pass parameter). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47281 - http://secunia.com/advisories/33072 - http://www.securityf
https://exchange.xforce.ibmcloud.com/vulnerabilities/47281 - http://secunia.com/advisories/33072 - http://www.securityfocus.com/bid/32781 - http://packetstorm.linuxsecurity.com/0812-exploits/bej-sql.txt
CVE ID: CVE-2008-6365 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, related to the uname or pass parameters to logon.jsp or logon_processing.jsp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47282 - http://secunia.com/advisories/33072 - https://www.exploit-db.com/exp
xchange.xforce.ibmcloud.com/vulnerabilities/47282 - http://secunia.com/advisories/33072 - https://www.exploit-db.com/exploits/7424 - http://www.securityfocus.com/bid/32790
CVE ID: CVE-2008-6366 State: PUBLISHED Published: 2009-03-02T16:00:00 Last Updated: 2024-08-07T11:27:35.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, possibly related to the uname and pass parameters to logon_process.jsp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7423 - http://secunia.com/advisories/33072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4
loit-db.com/exploits/7423 - http://secunia.com/advisories/33072 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47280 - http://www.securityfocus.com/bid/32791 - http://packetstorm.linuxsecurity.com/0812-exploits/affiliatesj-sql.txt
CVE ID: CVE-2008-6367 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in Member_images/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7435 - http://secunia.com/advisories/33125
CVE ID: CVE-2008-6368 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18195 - http://osvdb.org/50343 - http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt - http://secunia.com/advisories/32907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46941
CVE ID: CVE-2008-6369 State: PUBLISHED Published: 2009-03-02T19:00:00 Last Updated: 2024-08-07T11:27:35.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46961 - http://osvdb.org/50316 - http://www.securityfocus.com/bid/32502 - http://secunia.com/advisories/32903 - https://www.exploit-db.com/exploits/7244