Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
mber. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30463 - http://osvdb.org/45881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42792 - http://www.securityfocus.com/bid/29450 - https://www.exploit-db.com/exploits/5700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42793 - http://www.cmsimple.com/forum/viewtopic.php?f=2&t=17
CVE ID: CVE-2008-2651 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Joomla! Bulletin Board (aka Joo!BB or com_joobb) component 0.5.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the forum parameter in a forum action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42791 - https://www.exploit-db.com/exploits/5719
CVE ID: CVE-2008-2652 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T09:05:30.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2) category parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5725 - http://secunia.com/advisories/30477 - http://www.securityfocus.com/archive/1/493130/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42811 - http://www.securityfocus.com/bid/29496
CVE ID: CVE-2008-2654 State: PUBLISHED Published: 2008-06-13T18:00:00 Last Updated: 2024-08-07T09:05:30.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1796 - http://marc.info/?l=oss-security&m=121314471626034&w=2 - http://marc.info/?l=oss-security&m=121314089321816&w
008/1796 - http://marc.info/?l=oss-security&m=121314471626034&w=2 - http://marc.info/?l=oss-security&m=121314089321816&w=2 - http://www.securityfocus.com/bid/29636 - http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x9/webhttpd-security-video2-backport.diff - http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x10/webhttpd-security.diff - http://marc.info/?l=oss-security&m=121311577731820&w=2 - http://secunia.com/advisories/30544 - http://marc.info/?l=oss-security&m=121314329424538&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42979 - http://secunia.com/advisories/30864 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484572 - http://security.gentoo.org/glsa/gl
unia.com/advisories/30864 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484572 - http://security.gentoo.org/glsa/glsa-200807-02.xml
CVE ID: CVE-2008-2660 State: REJECTED Published: 2021-06-11T21:26:06 Last Updated: 2021-06-11T21:26:06 Description: No description available.
CVE ID: CVE-2008-2662 State: PUBLISHED Published: 2008-06-24T19:00:00 Last Updated: 2024-08-07T09:05:30.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors that trigger memory corruption, a different issue than CVE-2008-2663, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. This CVE description should be
20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. This CVE description should be regarded as authoritative, although it is likely to change. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://support.apple.com/kb/HT2163 - http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities - http://www.mandriva.com/security/advisories?name=MDVSA-2008:141 - http://secunia.com/advisories/30875 - http://www.vupen.com/english/advisories/2008/1981/references - http://www.vupen.com/english/advisories/2008/1907/references - http://www.debian.org/security
ies/2008/1981/references - http://www.vupen.com/english/advisories/2008/1907/references - http://www.debian.org/security/2008/dsa-1618 - http://secunia.com/advisories/31687 - http://secunia.com/advisories/30894 - http://secunia.com/advisories/31062 - http://secunia.com/advisories/31256 - http://www.securityfocus.com/archive/1/493688/100/0/threaded - http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/ - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.securitytracker.com/id?1020347 - http://www.rubyinside.com/june-2008-ruby-s
nnounce/2008//Jun/msg00002.html - http://www.securitytracker.com/id?1020347 - http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11601 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:140 - http://secunia.com/advisories/30802 - http://secunia.com/advisories/30831 - http://www.redhat.com/support/errata/RHSA-2008-0561.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43345 - https://issues.rpath.com/browse/RPL-2626 - http://w
.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43345 - https://issues.rpath.com/browse/RPL-2626 - http://www.debian.org/security/2008/dsa-1612 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.securityfocus.com/bid/29903 - http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html - http://secunia.com/advisories/30867 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:142 - http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/ - http://www.ruby-forum.com/topic/157034 - http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ - http
157034 - http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ - http://www.ubuntu.com/usn/usn-621-1 - http://secunia.com/advisories/31181
CVE ID: CVE-2008-2663 State: PUBLISHED Published: 2008-06-24T19:00:00 Last Updated: 2024-08-07T09:05:30.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.
E identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43346 - http://support.apple.com/kb/HT2163 - http://secunia.com/advisories/31090 - http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities - http://www.mandriva.com/security/advisories?name=MDVSA-2008:141 - http://secunia.com/advisories/30875 - http://www.vupen.com/english/advisories/2008/1981/references - http://www.vupen.com/english/advisories/2008/1907/ref
5 - http://www.vupen.com/english/advisories/2008/1981/references - http://www.vupen.com/english/advisories/2008/1907/references - http://www.debian.org/security/2008/dsa-1618 - http://secunia.com/advisories/31687 - http://secunia.com/advisories/30894 - http://secunia.com/advisories/31062 - http://secunia.com/advisories/31256 - http://www.securityfocus.com/archive/1/493688/100/0/threaded - http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10524 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562 - http://lists.apple.com/arch
/slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.securitytracker.com/id?1020347 - http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:140 - http://secunia.com/advisories/30802 - http://secunia.com/advisories/30831 - http://www.redhat.com/support/errata/RHSA-2008-0561.html - https://issues.rpath.com/browse/RPL-2626 - http://www.debian.org/securit
redhat.com/support/errata/RHSA-2008-0561.html - https://issues.rpath.com/browse/RPL-2626 - http://www.debian.org/security/2008/dsa-1612 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.securityfocus.com/bid/29903 - http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html - http://secunia.com/advisories/30867 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:142 - http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/ - http://www.ruby-forum.com/topic/157034 - http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ - http://www.ubuntu.com/usn
phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ - http://www.ubuntu.com/usn/usn-621-1 - http://secunia.com/advisories/31181
CVE ID: CVE-2008-2664 State: PUBLISHED Published: 2008-06-24T19:00:00 Last Updated: 2024-08-07T09:05:30.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change. Additiona
ers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://support.apple.com/kb/HT2163 - http://secunia.com/advisories/31090 - http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities - http://www.mandriva.com/security/advisories?name=MDVSA-2008:141 - http://secunia.com/advisories/30875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43348 - http://www.vupen.com/english/advisories/2008/1981/references - http://www.vupen.com/english/advisories/2008/1907/references -
/www.vupen.com/english/advisories/2008/1981/references - http://www.vupen.com/english/advisories/2008/1907/references - http://www.debian.org/security/2008/dsa-1618 - http://secunia.com/advisories/31687 - http://secunia.com/advisories/30894 - http://secunia.com/advisories/31062 - http://secunia.com/advisories/31256 - http://www.securityfocus.com/archive/1/493688/100/0/threaded - http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/ - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.securitytracker.com/id?1020347 - http://www.r
.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.securitytracker.com/id?1020347 - http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0206 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:140 - http://secunia.com/advisories/30802 - http://secunia.com/advisories/30831 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9646 - http://www.redhat.com/support/errata/RHSA-2008-0561.html - https://issues.rpath.com/browse/RPL-2626 - http://www.debian.org/security/2008/dsa-
support/errata/RHSA-2008-0561.html - https://issues.rpath.com/browse/RPL-2626 - http://www.debian.org/security/2008/dsa-1612 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.securityfocus.com/bid/29903 - http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html - http://secunia.com/advisories/30867 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:142 - http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/ - http://www.ruby-forum.com/topic/157034 - http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ - http://www.ubuntu.com/usn/usn-621-1
2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ - http://www.ubuntu.com/usn/usn-621-1 - http://secunia.com/advisories/31181
CVE ID: CVE-2008-2665 State: PUBLISHED Published: 2008-06-20T01:00:00 Last Updated: 2024-08-07T09:05:30.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictions via a .. (dot dot) in an http URL, which results in the URL being canonicalized to a local filename after the safe_mode check has successfully run. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32746 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://securityreason.com/achievement_securitya
/?l=bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://securityreason.com/achievement_securityalert/54 - http://security.gentoo.org/glsa/glsa-200811-05.xml - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.securityfocus.com/archive/1/501376/100/0/threaded - http://wiki.rpath.com/Advisories:rPSA-2009-0035 - http://www.securitytracker.com/id?1020327 - http://secunia.com/advisories/35074 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/bid/29797 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/12
s.com/bid/29797 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43196 - http://secunia.com/advisories/35650 - http://securityreason.com/securityalert/3941
CVE ID: CVE-2008-2666 State: PUBLISHED Published: 2008-06-20T01:00:00 Last Updated: 2024-08-07T09:05:30.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by creating a subdirectory named http: and then placing ../ (dot dot slash) sequences in an http URL argument to the (1) chdir or (2) ftok function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32746 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://securityreason.com/securityalert/3942 - http://
traq&m=125631037611762&w=2 - http://support.apple.com/kb/HT3549 - http://securityreason.com/securityalert/3942 - http://security.gentoo.org/glsa/glsa-200811-05.xml - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.securityfocus.com/archive/1/501376/100/0/threaded - http://wiki.rpath.com/Advisories:rPSA-2009-0035 - http://www.securityfocus.com/bid/29796 - http://secunia.com/advisories/35074 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43198 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/12
abilities/43198 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.securitytracker.com/id?1020328 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://secunia.com/advisories/35650 - http://securityreason.com/achievement_securityalert/55
CVE ID: CVE-2008-2667 State: PUBLISHED Published: 2008-07-07T23:00:00 Last Updated: 2024-08-07T09:05:30.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.nabble.com/courier-authlib-0.60.6-released-td17720739.html - http://secunia.com/advisories/30591 - https://exchange.xforce.ibmcloud.com/vulnerab
ib-0.60.6-released-td17720739.html - http://secunia.com/advisories/30591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43628 - http://www.mail-archive.com/courier-users%40lists.sourceforge.net/msg31362.html - http://bugs.gentoo.org/show_bug.cgi?id=225407 - http://secunia.com/advisories/30967 - http://www.courier-mta.org/authlib/changelog.html - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - http://security.gentoo.org/glsa/glsa-200809-05.xml
CVE ID: CVE-2008-2668 State: PUBLISHED Published: 2008-06-12T01:30:00 Last Updated: 2024-08-07T09:05:30.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3935 - http://chroot.org/exploits/chroot_uu_009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42958 - http://www.securityfocus.com/archive/1/493222/100/0/threaded - http://secunia.com/advisories/30
/vulnerabilities/42958 - http://www.securityfocus.com/archive/1/493222/100/0/threaded - http://secunia.com/advisories/30607 - https://www.exploit-db.com/exploits/5773 - http://www.securityfocus.com/bid/29629
CVE ID: CVE-2008-2669 State: PUBLISHED Published: 2008-06-12T01:30:00 Last Updated: 2024-08-07T09:14:13.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3935 - http://chroot.org/exploits/chroot_uu_009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42959 - http://www.securityfocus.com/archive/1/493222/100/0/threaded - http://secunia.com/advisories/30607 - https://www.
2959 - http://www.securityfocus.com/archive/1/493222/100/0/threaded - http://secunia.com/advisories/30607 - https://www.exploit-db.com/exploits/5773 - http://www.securityfocus.com/bid/29629
CVE ID: CVE-2008-2670 State: PUBLISHED Published: 2008-06-12T01:30:00 Last Updated: 2024-08-07T09:14:13.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter, or (2) the term parameter in a search action. NOTE: the current_subsection parameter is already covered by CVE-2007-3889. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493224/100/0/threaded - https://www.exploit-db.com/exploits/5774 - http://chroot.org/exploits/chroot_uu_010 - http://www.securityfocus.com/bid/
https://www.exploit-db.com/exploits/5774 - http://chroot.org/exploits/chroot_uu_010 - http://www.securityfocus.com/bid/29630 - http://securityreason.com/securityalert/3938
CVE ID: CVE-2008-2671 State: PUBLISHED Published: 2008-06-12T01:30:00 Last Updated: 2024-08-07T09:14:13.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.php in DCFM Blog 0.9.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3939 - https://www.exploit-db.com/exploits/5772 - http://www.securityfocus.com/archive/1/493220/100/0/threaded - http://chroot.org/exploits/chroot_uu_008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42976 - http://www.securityfocus.com/bid/29627
CVE ID: CVE-2008-2672 State: PUBLISHED Published: 2008-06-12T01:30:00 Last Updated: 2024-08-07T09:14:13.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) ewiki_id and (2) ewiki_action parameters to fragments/css.php, and possibly the (3) id parameter to the default URI. NOTE: the default URI is site-specific but often performs an include_once of ewiki.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29628 - http://www
hp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29628 - http://www.securityfocus.com/archive/1/493219/100/0/threaded - http://chroot.org/exploits/chroot_uu_007 - http://securityreason.com/securityalert/3936 - https://www.exploit-db.com/exploits/5771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42981
CVE ID: CVE-2008-2673 State: PUBLISHED Published: 2008-06-12T10:00:00 Last Updated: 2024-08-07T09:14:14.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42951 - http://secunia.com/advisories/30577 - https://www.exploit-db.com/exploits/5768