Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0810 State: PUBLISHED Published: 2008-02-19T01:00:00 Last Updated: 2024-08-07T08:01:39.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3662 - http://www.securityfocus.com/bid/27830 - http://www.securityfocus.com/archive/1/488269/100/0/threaded
CVE ID: CVE-2008-0811 State: PUBLISHED Published: 2008-02-19T01:00:00 Last Updated: 2024-08-07T08:01:39.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1) the kid parameter to (a) mod/dl.php or (b) mod/links.php, and (2) the query parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5130 - http://www.securityfocus.com/bid/27841 - http://www.securitytracker.com/id?1019430
CVE ID: CVE-2008-0812 State: PUBLISHED Published: 2008-02-19T01:00:00 Last Updated: 2024-08-07T08:01:39.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27831 - http://securityreason.com/securityalert/3666 - http://secunia.com/advisories/28992 - http://www.securityfocus.com/archive/1/488271/100/0/threaded
CVE ID: CVE-2008-0813 State: PUBLISHED Published: 2008-02-19T01:00:00 Last Updated: 2024-08-07T08:01:39.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0584 - https://www.exploit-db.com/exploits/5137 - http://www.securityfocus.com/bid/27838 - http://secunia.com/advisories/29006
CVE ID: CVE-2008-0814 State: PUBLISHED Published: 2008-02-19T01:00:00 Last Updated: 2024-08-07T08:01:39.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the upload_filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27839 - https://www.exploit-db.com/exploits/5129
CVE ID: CVE-2008-0815 State: PUBLISHED Published: 2008-02-19T01:00:00 Last Updated: 2024-08-07T08:01:39.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40448 - http://www.securityfocus.com/archive/1/487992/100/100/threaded - http://www.securityfocus.com/bid/27755 - http://securityreason.com/securityalert/3663
CVE ID: CVE-2008-0816 State: PUBLISHED Published: 2008-02-19T01:00:00 Last Updated: 2024-08-07T08:01:39.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com_sg component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the pid parameter in an order task. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27821 - http://securityreason.com/securityalert/3664 - http://www.securityfocus.com/archive/1/488272/100/0/threaded
CVE ID: CVE-2008-0817 State: PUBLISHED Published: 2008-02-19T01:00:00 Last Updated: 2024-08-07T08:01:39.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the com_filebase component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40616 - http://securityreason.com/securityalert/3665 - http://www.securityfocus.com/archive/1/488284/100/0/threaded - http://www.securityfocus.com/bid/27829 - http://www.securityfocus.com/archive/1/488268/100/0/threaded
CVE ID: CVE-2008-0818 State: PUBLISHED Published: 2008-02-19T20:00:00 Last Updated: 2024-08-07T08:01:39.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie to (1) comment.php, (2) index.php, and (3) show.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0589 - http://www.securityfocus.com/bid/27806 - https://www.exploit-db.com/exploits/5124 - http://secunia.com/advisories/28972 - http://sourceforge.net/forum/forum.php?forum_id=785794
CVE ID: CVE-2008-0819 State: PUBLISHED Published: 2008-02-19T20:00:00 Last Updated: 2024-08-07T08:01:40.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3667 - http://www.securityfocus.com/bid/27802 - http://www.securityfocus.com/archive/1/488141/100/0/threaded
CVE ID: CVE-2008-0820 State: PUBLISHED Published: 2008-02-19T20:00:00 Last Updated: 2024-08-07T08:01:39.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTML via $_SERVER['PHP_INFO']. NOTE: the vendor disputes this issue in a followup, stating that the affected variable is $_SERVER['PHP_SELF'], and "This is not an Etomite specific exploit and I would like the report rescinded. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3669 - http://www.securityfocus.com/archive/1/488304/100/100/th
r: References: - http://securityreason.com/securityalert/3669 - http://www.securityfocus.com/archive/1/488304/100/100/threaded - http://www.etomite.com/forums/index.php?showtopic=7647 - http://www.securityfocus.com/bid/27794 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40525 - http://secunia.com/advisories/28964 - http://www.securityfocus.com/archive/1/488122/100/0/threaded
CVE ID: CVE-2008-0821 State: PUBLISHED Published: 2008-02-19T20:00:00 Last Updated: 2024-08-07T08:01:39.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attackers to execute arbitrary SQL commands via the questid parameter in an expand_question action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27807 - https://www.exploit-db.com/exploits/5125
CVE ID: CVE-2008-0822 State: PUBLISHED Published: 2008-02-19T20:00:00 Last Updated: 2024-08-07T08:01:39.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488140/100/0/threaded - http://securityreason.com/securityalert/3668 - http://www.securityfocus.com/bid/27803 - https://www.exploit-db.com/exploits/5123
CVE ID: CVE-2008-0823 State: PUBLISHED Published: 2008-02-19T20:00:00 Last Updated: 2024-08-07T08:01:39.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the administration pages via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40510 - http://www.securityfocus.com/bid/27787 - http://www.vupen.com/english/advisories/2008/0571 - http://drupal.org/node/221359
CVE ID: CVE-2008-0824 State: PUBLISHED Published: 2008-02-19T20:00:00Z Last Updated: 2024-09-16T17:29:06.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=575934 - http://secunia.com/advisories/28942
CVE ID: CVE-2008-0825 State: PUBLISHED Published: 2008-02-19T20:00:00 Last Updated: 2024-08-07T08:01:39.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=575934 - http://www.vupen.com/english/advisories/2008/0596 - http://secunia.com/advisories/28942 - http://www.securityfocus.com/bid/27846
CVE ID: CVE-2008-0826 State: PUBLISHED Published: 2008-02-19T20:00:00 Last Updated: 2024-08-07T08:01:39.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=575934 - http://www.vupen.com/english/advisories/2008/0596 - http://secunia.com/advisories/28942 - http://www.securityfocus.com/bid/27846
CVE ID: CVE-2008-0827 State: PUBLISHED Published: 2008-02-19T21:00:00 Last Updated: 2024-08-07T08:01:39.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40857 - https://www.exploit-db.com/exploits/5147 - http://www.securityfocus.com/bid/27863
CVE ID: CVE-2008-0828 State: PUBLISHED Published: 2008-02-19T21:00:00 Last Updated: 2024-08-07T08:01:39.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488293/100/0/threaded - http://secunia.com/advisories/29015 - http://www.securityfocus.com/bid/27855 - http://securityreason.com/securityalert/3670
CVE ID: CVE-2008-0829 State: PUBLISHED Published: 2008-02-19T21:00:00 Last Updated: 2024-08-07T08:01:39.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail task. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27836 - https://www.exploit-db.com/exploits/5132 - http://secunia.com/advisories/28998 - http://forum.joomlaitalia.com/index.php?topic=388.0 - http://members.joomlapixel.eu/download/componenti/patch-jooget-2.6.8-sql-i
orum.joomlaitalia.com/index.php?topic=388.0 - http://members.joomlapixel.eu/download/componenti/patch-jooget-2.6.8-sql-injection/details.html
CVE ID: CVE-2008-0830 State: PUBLISHED Published: 2008-02-19T22:00:00 Last Updated: 2024-08-07T08:01:39.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (crash) via a malformed dpap: URI, a different vulnerability than CVE-2008-0043. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019488 - https://www.exploit-db.com/exploits/5151 - http://www.securityfocus.com/bid/27867
CVE ID: CVE-2008-0831 State: PUBLISHED Published: 2008-02-20T19:00:00 Last Updated: 2024-08-07T08:01:39.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 and earlier component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) user_id or (2) category_id parameter. NOTE: this might overlap CVE-2008-0754. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5103
CVE ID: CVE-2008-0832 State: PUBLISHED Published: 2008-02-20T19:00:00 Last Updated: 2024-08-07T08:01:39.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the surano parameter in a viewayat action. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2008-02/0399.html - http://secunia.com/advisories/28986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40573 - https://www.exploit-db.com/exploits/5128 - http://www.securityfocus.com/bid
.xforce.ibmcloud.com/vulnerabilities/40573 - https://www.exploit-db.com/exploits/5128 - http://www.securityfocus.com/bid/27842 - http://osvdb.org/52226
CVE ID: CVE-2008-0833 State: PUBLISHED Published: 2008-02-20T19:00:00 Last Updated: 2024-08-07T08:01:39.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the com_galeria component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5134 - http://www.securityfocus.com/archive/1/488285 - http://www.securityfocus.com/bid/27833
CVE ID: CVE-2008-0834 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is disabled on HTTP ports, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg24016411 - http://secunia.com/advisories/29004 - http://www.securitytracker.com/id?1019431 - http://www.vupen.com/english/advisories/2008/0590 - http://www.securityfocus.com/bid/27840
CVE ID: CVE-2008-0835 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:40.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the area parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5131 - http://www.securityfocus.com/bid/27843 - http://www.securityfocus.com/archive/1/488288/100/0/threaded
CVE ID: CVE-2008-0836 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service (panic) via unspecified vectors that trigger a NULL pointer dereference in the vuid3ps2 module, a different issue than CVE-2007-5319. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28990 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-200635-1 - http://www.vupen.com/english/advisories/2008/0582 - http://www.securitytrack
search/document.do?assetkey=1-26-200635-1 - http://www.vupen.com/english/advisories/2008/0582 - http://www.securitytracker.com/id?1019429
CVE ID: CVE-2008-0837 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27791 - http://urbangiraffe.com/tracker/issues/show/60 - http://www.securityfocus.com/archive/1/488109/100/0/threaded - http://secunia.com/advisories/289
racker/issues/show/60 - http://www.securityfocus.com/archive/1/488109/100/0/threaded - http://secunia.com/advisories/28968 - http://securityreason.com/securityalert/3674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40513
CVE ID: CVE-2008-0838 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) error and (2) go parameters to the login page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488206/100/0/threaded - http://www.securitytracker.com/id?1019427 - http://www.sophos.com/support/knowledgebase/article/34733.html - http://www.securityfocus.
uritytracker.com/id?1019427 - http://www.sophos.com/support/knowledgebase/article/34733.html - http://www.securityfocus.com/bid/27813 - http://securityreason.com/securityalert/3673 - http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-02-13 - http://www.vupen.com/english/advisories/2008/0574 - http://secunia.com/advisories/28961
CVE ID: CVE-2008-0839 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:40.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29008 - https://www.exploit-db.com/exploits/5138 - http://www.securityfocus.com/bid/27850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40611
CVE ID: CVE-2008-0840 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0621 - https://www.exploit-db.com/exploits/5140 - http://www.securityfocus.com/bid/27837 - http://secunia.com/advisories/29017 - http://www.securityfocus.com/archive/1/488283/100/0/threaded
CVE ID: CVE-2008-0841 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com_ricette) 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27834 - https://www.exploit-db.com/exploits/5133
CVE ID: CVE-2008-0842 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Classifier (com_clasifier) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40629 - https://www.exploit-db.com/exploits/5146 - http://www.vupen.com/english/advisories/2008/0620 - http://www.securityfocus.com/bid/27917
CVE ID: CVE-2008-0843 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488200/100/0/threaded - http://securityreason.com/securityalert/3675 - http://www.securityfocus.com/bid/27814 - http://secunia.com/advisories/28984 - http://packetstormsecurity.org/1002-exploits/statcountex-disclose.txt - http://www.exploit-db.com/exploits/11434
CVE ID: CVE-2008-0844 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the PccookBook (com_pccookbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5145 - http://www.securityfocus.com/bid/27864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40620
CVE ID: CVE-2008-0845 State: PUBLISHED Published: 2008-02-20T21:00:00 Last Updated: 2024-08-07T08:01:39.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3672 - http://www.securityfocus.com/bid/27858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40860 - http://www.securityfocus.com/archive/1/488282/100/0/threaded
CVE ID: CVE-2008-0846 State: PUBLISHED Published: 2008-02-20T21:00:00Z Last Updated: 2024-09-16T19:15:26.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the com_profile component for Joomla! allows remote attackers to execute arbitrary SQL commands via the oid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=120335361520072&w=2 - http://www.securityfocus.com/bid/27851
CVE ID: CVE-2008-0847 State: PUBLISHED Published: 2008-02-21T00:00:00 Last Updated: 2024-08-07T08:01:39.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40627 - http://www.securityfocus.com/bid/27861 - http://www.securityfocus.com/archive/1/488315/100/0/threaded