Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hreaded - http://www.securityfocus.com/archive/1/496138/100/0/threaded - http://googlechromereleases.blogspot.com/2008/09/beta-release-0214930.html - http://src.chromium.org/viewvc/chrome/trunk/src/chrome/views/tooltip_manager.cc?r1=1287&r2=2042&pathrev=2042 - http://www.securityfocus.com/archive/1/496145/100/0/threaded - http://www.blackhat.org.il/exploits/chrome-freeze-exploit.html - http://src.chromium.org/viewvc/chrome?view=rev&revision=2042 - http://www.securityfocus.com/archive/1/496126/100/0/threaded - http://src.chromium.org/viewvc/chrome/trunk/src/chrome/browser/render_widget_host_hwnd.cc?r1=1287&r2=2042&pathrev=2042
CVE ID: CVE-2008-7062 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:49:02.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46871 - https://www.exploit-db.com/exploits/7233 - http://secunia.com/advisories/32825 - http://osvdb.org/50276
CVE ID: CVE-2008-7063 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46954
CVE ID: CVE-2008-7064 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:12.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as used in QSF Portal before 1.4.5, when running on Windows, allows remote attackers to include and execute arbitrary local files via a "\" (backslash) in the lang parameter to index.php, which bypasses a protection mechanism that only checks for "/" (forward slash), as demonstrated by uploading and including PHP code in an avatar file. Additional Analyst Notes: - CVE Program Container: References: - https://www.ex
nd including PHP code in an avatar file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46828 - http://secunia.com/advisories/32823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46823 - http://secunia.com/advisories/38670 - http://www.qsfportal.com/index.php?a=newspost&t=191 - http://osvdb.org/50143 - http://www.securityfocus.com/bid/32452
CVE ID: CVE-2008-7065 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and device reboot) via a crafted SIP packet to UDP port 5060. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46820 - https://www.exploit-db.com/exploits/7220 - http://osvdb.org/50274 - http://secunia.com/advisories/32827 - http://www.securityfocus.com/bid/32451 - http://www.securityfocus.com/archive/1/498599/100/0/threaded
CVE ID: CVE-2008-7066 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:13.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct request with the update parameter set to 1 and modified user and password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32536 - https://www.exploit-db.com/exploits/7291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46969
CVE ID: CVE-2008-7067 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:13.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[PT_Config][dir][data] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46922 - http://www.securityfocus.com/bid/32510
CVE ID: CVE-2008-7068 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service (file truncation) via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the attacker can modify or add database entries but does not have permissions to truncate the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498982/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47316 - http://www
urityfocus.com/archive/1/498982/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47316 - http://www.osvdb.org/52206 - http://securityreason.com/achievement_securityalert/58 - http://www.securityfocus.com/archive/1/498746/100/0/threaded - http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1313&r2=1.2027.2.547.2.1314& - http://www.securityfocus.com/archive/1/498981/100/0/threaded
CVE ID: CVE-2008-7069 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47121 - https://www.exploit-db.com/exploits/7266
CVE ID: CVE-2008-7070 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:13.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an incomplete fix for CVE-2007-2951. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/kvirc_342_cmd.html - http://www.securityfocus.com/archive/1/498557/100/0/threaded - https://www.exploit-db.com/exploits/718
rc_342_cmd.html - http://www.securityfocus.com/archive/1/498557/100/0/threaded - https://www.exploit-db.com/exploits/7181 - http://www.securityfocus.com/bid/32410 - http://secunia.com/advisories/32410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46779
CVE ID: CVE-2008-7071 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:12.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46836 - https://www.exploit-db.com/exploits/7227 - http://www.securityfocus.com/bid/32469
CVE ID: CVE-2008-7072 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:12.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the start parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46837 - https://www.exploit-db.com/exploits/7227
CVE ID: CVE-2008-7073 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.z0rlu.blogspot.com/2008/11/pie-web-maesher-mod-rss-01-remote-file.html - http://www.securityfocus.com/bid/32465 - https://www.exploit-db.com/exploits/7225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46834
CVE ID: CVE-2008-7074 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon message." Additional Analyst Notes: - CVE Program Container: References: - http://memecode.com/site/ver.php?id=264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46970 - http://secunia.com/advisories/32906 - https://www.exploi
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46970 - http://secunia.com/advisories/32906 - https://www.exploit-db.com/exploits/7249 - http://osvdb.org/50232 - http://www.securityfocus.com/bid/32497
CVE ID: CVE-2008-7075 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:13.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via (1) the subcatid parameter to article.list.php; or the artid parameter to (2) article.print.php, (3) article.comments.php, (4) article.publisher.php, or (5) article.download.php; and (6) the PATH_INFO to article.download.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/
om third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46981 - http://www.vupen.com/english/advisories/2008/3269 - http://www.securityfocus.com/bid/32489 - https://www.exploit-db.com/exploits/7243 - http://secunia.com/advisories/32887 - http://osvdb.org/50455 - http://osvdb.org/50453 - http://osvdb.org/50454 - http://osvdb.org/50452 - http://osvdb.org/50456
CVE ID: CVE-2008-7076 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:13.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile photo, then accessing it via a direct request to the file in authorphoto/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46982 - http://secunia.com/advisories/32887 - http://osvdb.org/50459 - https://www.exploit-db.com/exploits/
nerabilities/46982 - http://secunia.com/advisories/32887 - http://osvdb.org/50459 - https://www.exploit-db.com/exploits/7251 - http://www.securityfocus.com/bid/32509
CVE ID: CVE-2008-7077 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SailPlanner 0.3a allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32521 - https://www.exploit-db.com/exploits/7267 - http://www.juniper.net/security/auto/vulnerabilities/vuln32521.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46932
CVE ID: CVE-2008-7078 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow remote authenticated users to execute arbitrary code via a long argument to the (2) MKD, (3) XMKD, (4) RMD, and other unspecified commands in the FTP component. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46988 - https://www.exploit-db.com/exploits/7314 - http://www.securityfoc
//exchange.xforce.ibmcloud.com/vulnerabilities/46988 - https://www.exploit-db.com/exploits/7314 - http://www.securityfocus.com/archive/1/498786/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0007.html - http://secunia.com/advisories/32892 - http://www.securityfocus.com/bid/32558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46987 - http://www.securityfocus.com/bid/32560 - http://www.maxum.com/Rumpus/News601.html
CVE ID: CVE-2008-7079 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:12.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long entry in a .M3U playlist file. NOTE: this issue might be related to CVE-2008-0619. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7207 - http://secunia.com/advisories/32850 - http://www.securityfocus.com/bid/32446 - http://osvdb.org/50199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46811
CVE ID: CVE-2008-7080 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:13.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32776 - http://www.osvdb.org/50153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46803 - https://www.exploit-db.com/exploits/7206
CVE ID: CVE-2008-7081 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:13.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46968
CVE ID: CVE-2008-7082 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to moderation.php with the (1) mergeposts, (2) split, and (3) deleteposts actions, which allows remote attackers to steal the token and bypass the cross-site request forgery (CSRF) protection mechanism to hijack the authentication of moderators by reading the token from the HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/498630/100/0/threaded - http://www.securityfoc
E Program Container: References: - http://www.securityfocus.com/archive/1/498630/100/0/threaded - http://www.securityfocus.com/bid/32467 - http://secunia.com/advisories/32880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46885 - http://osvdb.org/50275
CVE ID: CVE-2008-7083 State: PUBLISHED Published: 2009-08-25T10:00:00 Last Updated: 2024-08-07T11:56:14.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46907 - http://www.securityfocus.com/bid/32525
CVE ID: CVE-2008-7084 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:12.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30261 - http://osvdb.org/51464 - http://www.securityfocus.com/archive/1/494422/100/0/threaded - https://www.exploit-db.com/exploits/6151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43867
CVE ID: CVE-2008-7085 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:13.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the viewpage action to the default URI, probably index.php, or (2) divid parameter in the schedule action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43852 - https://www.exploit-db.com/exploits/6084 - http://www.securityfocus.com/bid/30248
CVE ID: CVE-2008-7086 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:12.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6050 - http://www.securityfocus.com/bid/30199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43744
CVE ID: CVE-2008-7087 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:14.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBPATH parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52898 - http://www.securityfocus.com/bid/30264 - http://www.securityfocus.com/archive/1/494426/100/0/threaded - http://osvdb.org/51466
CVE ID: CVE-2008-7088 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:14.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in a certain path. NOTE: this may be the same vulnerability as CVE-2008-0251, but this is not clear due to lack of details from the vendor. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30249 - https://www.ex
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30249 - https://www.exploit-db.com/exploits/6082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43845
CVE ID: CVE-2008-7089 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:14.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00120-07312008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44187 - http://www.securityfocus.com/archive/1/494987/100/0/threaded - http://www.securityfocus.com/bid/30458 - http://www.osvdb.o
tp://www.securityfocus.com/archive/1/494987/100/0/threaded - http://www.securityfocus.com/bid/30458 - http://www.osvdb.org/50186 - https://www.exploit-db.com/exploits/6173
CVE ID: CVE-2008-7090 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:13.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the existence of arbitrary files via a .. (dot dot) in the $tb_url variable in trackback.php, or (2) include arbitrary files via a .. (dot dot) in the template parameter to settemplate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/50188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44191 - http://www.osvdb.org/50187 - http://www.gulftech.org/?node=research&article_i
force.ibmcloud.com/vulnerabilities/44191 - http://www.osvdb.org/50187 - http://www.gulftech.org/?node=research&article_id=00120-07312008 - http://www.securityfocus.com/archive/1/494987/100/0/threaded - http://www.securityfocus.com/bid/30458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44190 - https://www.exploit-db.com/exploits/6173
CVE ID: CVE-2008-7091 State: PUBLISHED Published: 2009-08-26T14:00:00 Last Updated: 2024-08-07T11:56:12.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvo
ID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/50191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44193 - http://www.osvdb.org/50198 - http://www.osvdb.org/50195 - http://www.osvdb.org/50193 - http://www.gulftech.org/?node=research&article_id=00120-07312008 - http://www.securityfocus.com/archive/1/494987/100/0/threaded - http://www.osvdb.org/50194 - http://www.securityfocus.com/bid/30458 - http://www.osvdb.org/50190 - http://www.osvdb.org/50192 - http://www.osvdb.org/50189 - h
w.securityfocus.com/bid/30458 - http://www.osvdb.org/50190 - http://www.osvdb.org/50192 - http://www.osvdb.org/50189 - http://www.osvdb.org/50196 - http://www.osvdb.org/50197 - https://www.exploit-db.com/exploits/6173