Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2414 State: PUBLISHED Published: 2009-08-11T18:00:00 Last Updated: 2024-08-07T05:52:14.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the Codenomicon XML fuzzing framework. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-815-1 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html - http://secun
ntu.com/usn/USN-815-1 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html - http://secunia.com/advisories/36631 - http://www.networkworld.com/columnists/2009/080509-xml-flaw.html - http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html - http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html - http://www.vupen.com/english/advisories/2009/3217 - http://secunia.com/advisories/37471 - http://support.apple.com/kb/HT4225 - http://www.vupen.com/english/advisories/2009/2420 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/
announce/2009-August/msg00642.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/36417 - http://www.cert.fi/en/reports/2009/vulnerability2009085.html - http://www.codenomicon.com/labs/xml/ - http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html - http://support.apple.com/kb/HT3949 - http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html - http://www.securityfocus.com/bid/36010 - http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b31
yfocus.com/archive/1/507985/100/0/threaded - https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59 - http://secunia.com/advisories/35036 - http://secunia.com/advisories/36338 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8639 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10129 - https://bugzilla.redhat.com/show_bug.cgi?id=515195 - http://www.vupen.com/english/advisories/2009/3184 - http://www.debian.org/security/2009/dsa-1859 - http://lists.apple.com/archives/security-announce/2009/Nov/msg0
09/3184 - http://www.debian.org/security/2009/dsa-1859 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html - http://secunia.com/advisories/37346 - http://www.vupen.com/english/advisories/2009/3316 - http://support.apple.com/kb/HT3937 - http://secunia.com/advisories/36207
CVE ID: CVE-2009-2415 State: PUBLISHED Published: 2009-08-10T18:00:00 Last Updated: 2024-08-07T05:52:14.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length attributes that trigger heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1853 - http://security.debian.org/pool/updates/main/m/memcached/memcached_1.2.2-1+lenny1.diff.gz - http://osvdb.org/56906 - http://www.securityfocus.com/bid/35989 - http://secunia.com/advisories/36133 - http://security.debian.org/pool/upda
06 - http://www.securityfocus.com/bid/35989 - http://secunia.com/advisories/36133 - http://security.debian.org/pool/updates/main/m/memcached/memcached_1.1.12-1+etch1.diff.gz - http://secunia.com/advisories/37729 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00836.html
CVE ID: CVE-2009-2416 State: PUBLISHED Published: 2009-08-11T18:00:00 Last Updated: 2025-01-21T15:30:42.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.ubuntu.com/usn/USN-815-1 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00
ences: - http://www.ubuntu.com/usn/USN-815-1 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00537.html - http://secunia.com/advisories/36631 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9262 - http://www.networkworld.com/columnists/2009/080509-xml-flaw.html - https://bugzilla.redhat.com/show_bug.cgi?id=515205 - http://www.openoffice.org/security/cves/CVE-2009-2414-2416.html - http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html - http://www.vupen.com/english/advisories/2009/3217 - http://secunia.com/advisories/37471 - http://support.apple.com/kb/HT4225 - http://www.vupen.com/english/advisories/2009/2420
://secunia.com/advisories/37471 - http://support.apple.com/kb/HT4225 - http://www.vupen.com/english/advisories/2009/2420 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00642.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/36417 - http://www.cert.fi/en/reports/2009/vulnerability2009085.html - http://www.codenomicon.com/labs/xml/ - http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html - http://support.apple.com/kb/HT3949 - http://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg678527.html - http://www.securityfocus.com/bid/36010 - http://googlechromereleases.blogspot.com/2009/08/stab
bian.org/msg678527.html - http://www.securityfocus.com/bid/36010 - http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59 - http://secunia.com/advisories/35036 - http://secunia.com/advisories/36338 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00547.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7783 - http://www.vupen.com/english/advisories/2009/3184 - http://www.debian.org/security/2009/dsa-1859 - http://lists.apple.com/archives/security-
/english/advisories/2009/3184 - http://www.debian.org/security/2009/dsa-1859 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html - http://secunia.com/advisories/37346 - http://www.vupen.com/english/advisories/2009/3316 - http://support.apple.com/kb/HT3937 - http://secunia.com/advisories/36207
CVE ID: CVE-2009-2417 State: PUBLISHED Published: 2009-08-14T15:00:00 Last Updated: 2024-08-07T05:52:14.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch - http://curl.haxx.se/
rogram Container: References: - http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch - http://curl.haxx.se/CVE-2009-2417/curl-7.19.0-CVE-2009-2417.patch - http://curl.haxx.se/CVE-2009-2417/curl-7.19.5-CVE-2009-2417.patch - http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch - http://www.securityfocus.com/archive/1/506055/100/0/threaded - http://secunia.com/advisories/37471 - http://www.vupen.com/english/advisories/2009/2263 - http://www.ubuntu.com/usn/USN-1158-1 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/36238 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - https://exchange.xforce.ib
dvisories/36238 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52405 - http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch - http://wiki.rpath.com/Advisories:rPSA-2009-0124 - http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8542 - http://curl.haxx.se/CVE-2009-2417/curl-7.18.1-CVE-2009-2417.patch - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://support.apple.com/kb/HT4077 - http://shibboleth.internet2.edu/secadv/secadv_20090817.txt - http://secunia.com/advisories/36475
.apple.com/kb/HT4077 - http://shibboleth.internet2.edu/secadv/secadv_20090817.txt - http://secunia.com/advisories/36475 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10114 - http://curl.haxx.se/docs/adv_20090812.txt - http://secunia.com/advisories/45047 - http://www.securityfocus.com/bid/36032 - http://curl.haxx.se/CVE-2009-2417/curl-7.15.5-CVE-2009-2417.patch - http://www.vupen.com/english/advisories/2009/3316 - http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch
CVE ID: CVE-2009-2418 State: REJECTED Published: 2017-05-26T21:00:00 Last Updated: 2017-05-26T20:57:01 Description: No description available.
CVE ID: CVE-2009-2419 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:14.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted HTML document that references a zero-length .js file and the JavaScript reload function. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/a
alyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://trac.webkit.org/changeset/44519 - http://www.osvdb.org/55587 - http://www.securityfocus.com/bid/35555 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51533 - http://marcell-dietl.de/index/adv_safari_4_x_js_reload_dos.php - http://secunia.com/advisories/33495
CVE ID: CVE-2009-2420 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:14.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service (launch of multiple Windows Explorer instances) via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35482 - http://www.securityfocus.com/archive/1/504480/100/0/threaded
CVE ID: CVE-2009-2421 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:14.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a "high-bit character" in a URL fragment for an unspecified protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504479/100/0/threaded - http://www.securityfocus.com/bid/35481
CVE ID: CVE-2009-2422 State: PUBLISHED Published: 2009-07-10T15:00:00 Last Updated: 2024-08-07T05:52:14.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35702 - http://www.securityfoc
ional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35702 - http://www.securityfocus.com/bid/35579 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest - http://www.vupen.com/english/advisories/2009/1802 - http://support.apple.com/kb/HT4077 - http://n8.tumblr.com/post/117477059/security-hole-found-in-rails-2-3s - https://exchange.xforce.ibmcloud.com/vulnerabilities/51528
CVE ID: CVE-2009-2423 State: PUBLISHED Published: 2009-07-10T17:00:00Z Last Updated: 2024-09-16T22:20:51.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter in a list action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35713 - http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt
CVE ID: CVE-2009-2424 State: PUBLISHED Published: 2009-07-10T17:00:00Z Last Updated: 2024-09-16T18:13:14.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35713 - http://packetstorm.linuxsecurity.com/0907-exploits/ebayclone2009-sqlxss.txt
CVE ID: CVE-2009-2425 State: PUBLISHED Published: 2009-07-10T17:00:00 Last Updated: 2024-08-07T05:52:14.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed router descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35546 - http://archives.seul.org/or/announce/Jun-2009/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51376 - http://www.osvdb.org/55340 - http://www.vupen.com/english/advisories/2009/1716 - http://www.securityfocus.com/bid/35505
CVE ID: CVE-2009-2426 State: PUBLISHED Published: 2009-07-10T17:00:00 Last Updated: 2024-08-07T05:52:14.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35546 - http://archives.seul.org/or/announce/Jun-2009/msg00000.html - https
References: - http://secunia.com/advisories/35546 - http://archives.seul.org/or/announce/Jun-2009/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51377 - http://www.vupen.com/english/advisories/2009/1716 - http://www.securityfocus.com/bid/35505 - http://www.osvdb.org/55341
CVE ID: CVE-2009-2427 State: PUBLISHED Published: 2009-07-10T17:00:00Z Last Updated: 2024-09-17T02:26:47.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the emp_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0907-exploits/jobbr-sql.txt - http://secunia.com/advisories/35722
CVE ID: CVE-2009-2428 State: PUBLISHED Published: 2009-07-10T17:00:00 Last Updated: 2024-08-07T05:52:14.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the (1) userid parameter to suchauftraege_user.php and the (2) descr parameter to vote.php; and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1823 - http://packetstorm.linuxsecurity.com/0907-exploits/tausch-sql.txt - http://secunia.com/advisories/35725
CVE ID: CVE-2009-2429 State: PUBLISHED Published: 2009-07-10T17:00:00 Last Updated: 2024-08-07T05:52:14.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49338 - http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html - http://secunia.com/a
m/vulnerabilities/49338 - http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html - http://secunia.com/advisories/34390
CVE ID: CVE-2009-2430 State: PUBLISHED Published: 2009-07-10T17:00:00 Last Updated: 2024-08-07T05:52:14.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv_01 through snv_58, when Solaris Auditing is enabled, allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35501 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-262088-1 - http://secunia.com/advisories/35580
CVE ID: CVE-2009-2431 State: PUBLISHED Published: 2009-07-10T20:25:00 Last Updated: 2024-08-07T05:52:14.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/55716 - http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked - https://exchange.xforce.ibmcloud.com/vulnerabilities/51733 - http://www.securityfocus.com/archive/1/504795/100/0/threaded - http://securitytracker.com/id?1022528 - ht
lities/51733 - http://www.securityfocus.com/archive/1/504795/100/0/threaded - http://securitytracker.com/id?1022528 - http://www.vupen.com/english/advisories/2009/1833
CVE ID: CVE-2009-2432 State: PUBLISHED Published: 2009-07-10T20:25:00 Last Updated: 2024-08-07T05:52:14.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked - http://www.securityfocus.com/archive/1/504795/100/0/threaded - http://securitytracker.com/id?1022528 - http://www.vupen.com/english/advisories/2009/1833 - https://exch
00/0/threaded - http://securitytracker.com/id?1022528 - http://www.vupen.com/english/advisories/2009/1833 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51734 - http://www.osvdb.org/55717
CVE ID: CVE-2009-2433 State: PUBLISHED Published: 2009-07-10T20:25:00 Last Updated: 2024-08-07T05:52:14.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a long URL in the first argument. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12829 - http://www.exploit-db.com/exploits/9100 - http://www.securityfocus.com/bid/35620
CVE ID: CVE-2009-2434 State: PUBLISHED Published: 2009-07-13T14:00:00 Last Updated: 2024-08-07T05:52:14.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54713 - http://www.securityfocus.com/bid/35615 - http://securitytracker.com/id?1022530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51612 - http://www.osvdb.org/55727 - http://secunia.com/advisories/35754 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ54714
CVE ID: CVE-2009-2435 State: PUBLISHED Published: 2009-07-13T14:00:00Z Last Updated: 2024-09-17T02:41:12.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.senseofsecurity.com.au/advisories/SOS-09-004.pdf - http://www.securityfocus.com/bid/35614
CVE ID: CVE-2009-2436 State: PUBLISHED Published: 2009-07-13T14:00:00Z Last Updated: 2024-09-17T01:26:37.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35603 - http://packetstormsecurity.org/0907-exploits/myphpdating10-sql.txt - http://www.vupen.com/english/advisories/2009/1819 - http://secunia.com/advisories/32268
CVE ID: CVE-2009-2437 State: PUBLISHED Published: 2009-07-13T14:00:00Z Last Updated: 2024-09-17T03:27:38.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka Login) and (2) password parameters in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1835 - http://secunia.com/advisories/35749 - http://packetstormsecurity.org/0907-exploits/rentventory-xss.txt