Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
oning, injection into TCP packets, and OS fingerprinting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41157 - http://secunia.com/advisories/28819 - http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf - http://www.securiteam.com/securityreviews/5PP0H0UNGW.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40329 - http://www.securityfocus.com/bid/27647
CVE ID: CVE-2008-1149 State: PUBLISHED Published: 2008-03-04T23:00:00 Last Updated: 2024-08-07T08:08:57.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery (CSRF) attacks by using crafted cookies. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00069.html - http://www.vupen.com/english/advisories/2008/0731 - http://lists.opensuse.org/opensuse-security-announce/2009-02/ms
ml - http://www.vupen.com/english/advisories/2008/0731 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html - http://www.vupen.com/english/advisories/2008/0758 - http://www.debian.org/security/2008/dsa-1557 - http://secunia.com/advisories/32834 - http://secunia.com/advisories/29964 - http://secunia.com/advisories/30816 - http://secunia.com/advisories/29287 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00100.html - http://www.securityfocus.com/bid/28068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40968 - http://secunia.com/advisories/33822 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-1 - http://www.gentoo.org/
unia.com/advisories/33822 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-1 - http://www.gentoo.org/security/en/glsa/glsa-200803-15.xml - http://secunia.com/advisories/29200 - http://secunia.com/advisories/29143 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:131
CVE ID: CVE-2008-1150 State: PUBLISHED Published: 2008-03-27T17:00:00 Last Updated: 2024-08-07T08:08:57.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (resource exhaustion) via a series of PPTP sessions, related to the persistence of interface descriptor block (IDB) data structures after process termination, aka bug ID CSCdv59309. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1006/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41484 - http://www.securityfocus.com/b
ories/2008/1006/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41484 - http://www.securityfocus.com/bid/28460 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080969862.shtml - http://www.us-cert.gov/cas/techalerts/TA08-087B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5598 - http://secunia.com/advisories/29507 - http://securitytracker.com/id?1019714
CVE ID: CVE-2008-1151 State: PUBLISHED Published: 2008-03-27T17:00:00 Last Updated: 2024-08-07T08:08:57.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (memory consumption) via a series of PPTP sessions, related to "dead memory" that remains allocated after process termination, aka bug ID CSCsj58566. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1006/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41483 - http://www.securityfocus.com/bid/28460 - http:/
eferences - https://exchange.xforce.ibmcloud.com/vulnerabilities/41483 - http://www.securityfocus.com/bid/28460 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080969862.shtml - http://www.us-cert.gov/cas/techalerts/TA08-087B.html - http://secunia.com/advisories/29507 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5287 - http://securitytracker.com/id?1019714
CVE ID: CVE-2008-1152 State: PUBLISHED Published: 2008-03-27T17:00:00 Last Updated: 2024-08-07T08:08:57.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1) UDP port 2067 or (2) IP protocol 91 packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1006/references - http://www.us-cert.gov/cas/techalerts/TA08-087B.html - http://www.securitytracker.com/id?1019712 - http://www.securityfocus.com/bid/28465 - http://www.cisco.com/en/US/products/pro
://www.securitytracker.com/id?1019712 - http://www.securityfocus.com/bid/28465 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080969866.shtml - http://secunia.com/advisories/29507 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41482
CVE ID: CVE-2008-1153 State: PUBLISHED Published: 2008-03-27T10:00:00 Last Updated: 2024-08-07T08:08:57.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of service (device crash and possible blocked interface) via a crafted IPv6 packet to the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1006/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41475 - http://www.securi
tion/oval%3Aorg.mitre.oval%3Adef%3A5860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41475 - http://www.securityfocus.com/bid/28461 - http://www.us-cert.gov/cas/techalerts/TA08-087B.html - http://www.securitytracker.com/id?1019713 - http://www.kb.cert.org/vuls/id/936177 - http://www.cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml - http://secunia.com/advisories/29507
CVE ID: CVE-2008-1154 State: PUBLISHED Published: 2008-04-04T19:00:00 Last Updated: 2024-08-07T08:08:57.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests received from the network, which allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28591 - http://www.cisco.com/en/US/products/p
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/28591 - http://www.cisco.com/en/US/products/products_security_advisory09186a008096fd9a.shtml - http://securitytracker.com/id?1019768 - http://www.vupen.com/english/advisories/2008/1093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41632 - http://secunia.com/advisories/29670
CVE ID: CVE-2008-1155 State: PUBLISHED Published: 2008-04-16T17:00:00 Last Updated: 2024-08-07T08:08:57.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1248/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41849 - http://www.securitytracker.com/id?1019859 - http://www.securityfocus.com/bid/28807
.ibmcloud.com/vulnerabilities/41849 - http://www.securitytracker.com/id?1019859 - http://www.securityfocus.com/bid/28807 - http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml - http://secunia.com/advisories/29822
CVE ID: CVE-2008-1156 State: PUBLISHED Published: 2008-03-27T10:00:00 Last Updated: 2024-08-07T08:08:57.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree (MDT) Data Join message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1006/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41468 - http://www.us-cert.gov/cas/techalerts/TA08-087B.html - http://www.ci
xchange.xforce.ibmcloud.com/vulnerabilities/41468 - http://www.us-cert.gov/cas/techalerts/TA08-087B.html - http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml - http://www.securityfocus.com/bid/28464 - http://secunia.com/advisories/29507 - http://www.securitytracker.com/id?1019715 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5648
CVE ID: CVE-2008-1157 State: PUBLISHED Published: 2008-03-14T20:00:00 Last Updated: 2024-08-07T08:08:57.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20080313-ipm.shtml - http://www.vupen.com/english/advisories/2008/0876/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41208 - http://www.securitytracker.com/id?1019611 - http://www.securityf
://exchange.xforce.ibmcloud.com/vulnerabilities/41208 - http://www.securitytracker.com/id?1019611 - http://www.securityfocus.com/bid/28249 - http://secunia.com/advisories/29376
CVE ID: CVE-2008-1158 State: PUBLISHED Published: 2008-05-16T06:54:00 Last Updated: 2024-08-07T08:08:57.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via malformed packets, aka Bug ID CSCsh50164. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29219 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/42412 - http://www.vupen.com/english/advisories/2008/1534 - http://securitytr
change.xforce.ibmcloud.com/vulnerabilities/42412 - http://www.vupen.com/english/advisories/2008/1534 - http://securitytracker.com/id?1020023 - http://secunia.com/advisories/30240
CVE ID: CVE-2008-1159 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:08:57.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart) via unknown vectors, aka Bug ID (1) CSCsk42419, (2) CSCsk60020, and (3) CSCsh51293. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a008099567f.shtml - http://www.vupen.com/english/advisories/2008/1605/references - http://www.securityfocus.com/bid/29314 - http://secunia.com/advisories/30322 - https://exch
ories/2008/1605/references - http://www.securityfocus.com/bid/29314 - http://secunia.com/advisories/30322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42563 - http://securitytracker.com/id?1020073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5486
CVE ID: CVE-2008-1160 State: PUBLISHED Published: 2008-03-25T00:00:00 Last Updated: 2024-08-07T08:08:57.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28184 - http://www.secumania.org/exploits/remote/zyxel-zywall-quagga_zebra-%28default-pass%29-remote-root-vulnerability-2008032143791/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41424 - https://www.exploit-db.com/exploits/5289 - http://secunia.com
tps://exchange.xforce.ibmcloud.com/vulnerabilities/41424 - https://www.exploit-db.com/exploits/5289 - http://secunia.com/advisories/29237 - http://www.vupen.com/english/advisories/2008/0990/references - http://packetstormsecurity.org/0803-exploits/ZyWALL.pdf
CVE ID: CVE-2008-1161 State: PUBLISHED Published: 2008-03-10T22:00:00 Last Updated: 2024-08-07T08:08:57.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Matroska file with invalid frame sizes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31393 - http://secunia.com/advisories/29601 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:178 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html - https://e
/advisories?name=MDVSA-2008:178 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41172 - http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=a62d6f482a69%3Bstyle=gitweb - http://secunia.com/advisories/29323 - http://www.securityfocus.com/bid/28543 - http://www.debian.org/security/2008/dsa-1536 - http://www.ubuntu.com/usn/usn-635-1
CVE ID: CVE-2008-1162 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5211 - http://www.securityfocus.com/archive/1/489017/100/0/threaded - http://www.securityfocus.com/bid/28067 - http://forum.aria-security.net/showthread.php?p=1521 - http://secunia.com/advisories/29212
CVE ID: CVE-2008-1163 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5208 - http://www.securityfocus.com/bid/28065
CVE ID: CVE-2008-1164 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the mod_project_id parameter in a project_detail action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5209 - http://www.securityfocus.com/bid/28064
CVE ID: CVE-2008-1165 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script or HTML via (1) a forced SQL error message or (2) old_value and new_value database fields in task summaries, related to the item_summary parameter in a details action in index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://flyspray.org/fsa:3 - http://secunia.com/advisories/29215 - https://e
otes: - CVE Program Container: References: - http://flyspray.org/fsa:3 - http://secunia.com/advisories/29215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40963
CVE ID: CVE-2008-1166 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40964 - http://www.securityfocus.com/archive/1/489020/100/0/threaded
CVE ID: CVE-2008-1167 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40970 - http://sourceforge.net/project/shownotes.php?release_id=581212 - http://www.vupen.com/english/advisories/2008/0749 -
- http://sourceforge.net/project/shownotes.php?release_id=581212 - http://www.vupen.com/english/advisories/2008/0749 - http://secunia.com/advisories/28668 - http://www.gentoo.org/security/en/glsa/glsa-200803-21.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2008:079 - http://secunia.com/advisories/29309 - http://www.securitytracker.com/id?1019536 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html - http://secunia.com/advisories/29323 - http://www.securityfocus.com/archive/1/489018/100/0/threaded - http://secunia.com/advisories/29500 - http://www.securityfocus.com/bid/28077
CVE ID: CVE-2008-1168 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0750/references - http://secunia.com/advisories/28668 - htt
: References: - http://www.vupen.com/english/advisories/2008/0750/references - http://secunia.com/advisories/28668 - http://www.gentoo.org/security/en/glsa/glsa-200803-21.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/40972 - http://sourceforge.net/project/shownotes.php?release_id=581509 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:079 - http://secunia.com/advisories/29309 - http://secunia.com/advisories/29500 - http://www.securityfocus.com/bid/28077
CVE ID: CVE-2008-1169 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) or "../" (dot dot forward slash) in the GET command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0614 - http://aluigi.altervista.org/adv/scichatdt-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/40655 - http://www.securityfocus.com/bid/27872
CVE ID: CVE-2008-1170 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the page parameter to (1) minimal/wiki.php and (2) simplest/wiki.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28074 - http://secunia.com/advisories/29218 - http://securityreason.com/securityalert/3714 - http://www.securityfocus.com/archive/1/489024/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/40976
CVE ID: CVE-2008-1171 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T08:08:57.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. NOTE: CVE disputes this issue because $phpbb_root_path is explicitly set to "./" in both programs Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488914/100/0/threaded - http://www.attrition.org/pipermail/vim/2008-March/001913.html - ht
w.securityfocus.com/archive/1/488914/100/0/threaded - http://www.attrition.org/pipermail/vim/2008-March/001913.html - http://www.securityfocus.com/archive/1/488922/100/0/threaded - http://securityreason.com/securityalert/3716
CVE ID: CVE-2008-1172 State: PUBLISHED Published: 2008-03-06T00:00:00 Last Updated: 2024-08-07T08:08:57.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489039/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/40981 - http://securityreason.com/securityalert/3713
CVE ID: CVE-2008-1173 State: PUBLISHED Published: 2008-03-06T00:00:00 Last Updated: 2024-08-07T08:08:57.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40980 - http://www.securityfocus.com/archive/1/489039/100/0/threaded - http://www.securityfocus.com/bid/28082 - http://secunia.com/advisories/29220 - http://securityreason.com/securityalert/3713
CVE ID: CVE-2008-1174 State: PUBLISHED Published: 2008-03-06T00:00:00Z Last Updated: 2024-09-17T01:51:51.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=120410229721185&w=2 - http://securitytracker.com/id?1019520 - http://www.securityfocus.com/bid/28040 - http://secunia.com/advisories/29142