Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2394 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:58:02.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to contact.php and the (2) nid parameter to news.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30149 - http://www.vupen.com/english/advisories/2008/1561/references - https://www.exploit-db.com/exploits/5642 - http://www.tagworx.net/webdesign_seo_muenchen.php?cid=79&pid=5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42512
CVE ID: CVE-2008-2395 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:58:02.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42520 - http://www.securityfocus.com/bid/29281
CVE ID: CVE-2008-2396 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:58:02.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in an arbitrary element of the PAGES array parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5651 - http://www.securityfocus.com/bid/29278 - http://secunia.com/advisories/30264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42518
CVE ID: CVE-2008-2397 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:58:02.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search-results.dot in dotCMS 1.x allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42525 - http://secunia.com/advisories/30307 - http://www.securityfocus.com/bid/29287
CVE ID: CVE-2008-2398 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:58:02.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42546 - http://www.securityfocus.com/archive/1/492271/100/0/threaded - http://securityreason.com/securityalert/3896 - http://www.securityfocus.com/bid/29291
CVE ID: CVE-2008-2399 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FireFTP add-on before 0.98.20080518 for Firefox allows remote FTP servers to create or overwrite arbitrary files via ..\ (dot dot backslash) sequences in responses to (1) MLSD and (2) LIST commands, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1596/references - https://exchange.xforce.ibmcloud.com/vulnerabilitie
es: - http://www.vupen.com/english/advisories/2008/1596/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/42516 - http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.58%3Br2=1.59%3Bf=h - http://www.securityfocus.com/bid/29289 - http://secunia.com/advisories/30284 - http://vuln.sg/fireftp0971-en.html - http://www.kb.cert.org/vuls/id/906907
CVE ID: CVE-2008-2400 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in stunnel before 4.23, when running as a service on Windows, allows local users to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29285 - http://www.vupen.com/english/advisories/2008/1568/references - http://secunia.com/advisories/30297 - http://stunnel.mirt.net/pipermail/stunnel-announce/2008-May/000034.html - http://www.securitytracker.com/id?1020049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
2008-May/000034.html - http://www.securitytracker.com/id?1020049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42526
CVE ID: CVE-2008-2401 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:58:02.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain file that is included by multiple unspecified ASP applications. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020186 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 - http://www.vupen.com/english/advisories/2008/1742/references - http://secunia.com/advisories/30523 - https://ex
8184-1 - http://www.vupen.com/english/advisories/2008/1742/references - http://secunia.com/advisories/30523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42832 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=705
CVE ID: CVE-2008-2402 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:58:02.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=706 - http://www.securitytracker.com/id?1020187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42828 - http:/
id=706 - http://www.securitytracker.com/id?1020187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42828 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 - http://www.vupen.com/english/advisories/2008/1742/references - http://secunia.com/advisories/30523 - http://www.securityfocus.com/bid/29540
CVE ID: CVE-2008-2403 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:58:02.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29538 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=707 - http://www.securitytracker.com/id?1020188 - http://sunsolve.sun.com/search/document.do?assetkey
ies/display.php?id=707 - http://www.securitytracker.com/id?1020188 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 - http://www.vupen.com/english/advisories/2008/1742/references - http://secunia.com/advisories/30523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42831
CVE ID: CVE-2008-2404 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:58:02.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020189 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42830 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 - http://www.
rce.ibmcloud.com/vulnerabilities/42830 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 - http://www.vupen.com/english/advisories/2008/1742/references - http://secunia.com/advisories/30523
CVE ID: CVE-2008-2405 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:58:02.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applications. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 - http://www.vupen.com/english/advisories/2008/1742/references - http://secunia.com/advisories/30523 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=709 - https://exchange.xforce.ibmcloud.com/vu
523 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42829 - http://www.securitytracker.com/id?1020190
CVE ID: CVE-2008-2406 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T08:58:02.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via direct requests on TCP port 5102. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29539 - http://www.securitytracker.com/id?1020191 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1 - http://www.vupen.com/english/advisories/2008/1742/references - http://secunia.com/advisories/30523 - https://exchange.xforce.ibmclo
vupen.com/english/advisories/2008/1742/references - http://secunia.com/advisories/30523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42833 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=710
CVE ID: CVE-2008-2407 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42582 - http://www.vupen.com/english/advisories/2008/1622 - http://www.securityfocus.com/bid/29330 - http://secunia.com/advisories/30336 - http://www.securityfocus.com/arc
8/1622 - http://www.securityfocus.com/bid/29330 - http://secunia.com/advisories/30336 - http://www.securityfocus.com/archive/1/492433/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-08-029/
CVE ID: CVE-2008-2408 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.0 allows remote attackers to execute arbitrary code via a malformed attribute in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1622 - http://archives.neohapsis.com/archives/bugtraq/2008-05/0284.html - http://www.securityfocus.com/bid/29330 - http://secunia.com/advisories/30336 - http://securitytracker.com/id?1020105 - http://www.zeroda
ityfocus.com/bid/29330 - http://secunia.com/advisories/30336 - http://securitytracker.com/id?1020105 - http://www.zerodayinitiative.com/advisories/ZDI-08-030/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/42581
CVE ID: CVE-2008-2409 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-08-031/ - http://www.vupen.com/english/advisories/2008/1622 - http://securitytracker.com/id?1020106 - http://www.securityfocus.com/bid/29330 - http://secunia.com/advisories/30336 - https://exchange.xforce.ibmcloud.com/vu
- http://www.securityfocus.com/bid/29330 - http://secunia.com/advisories/30336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42576 - http://archives.neohapsis.com/archives/bugtraq/2008-05/0285.html
CVE ID: CVE-2008-2410 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the servlet engine and Web container in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42553 - http://www.vupen.com/english/advisories/2008/1597 - http://www-1.ibm.com/support/docview.wss?uid=swg21303296 - http://secunia.com/advisories/
english/advisories/2008/1597 - http://www-1.ibm.com/support/docview.wss?uid=swg21303296 - http://secunia.com/advisories/30310 - http://secunia.com/advisories/30332 - http://www.securityfocus.com/bid/29311
CVE ID: CVE-2008-2411 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a details action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29129 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42542 - http://www.securityfocus.com/archive/1/491892/100/0/threaded - http://securityreason.com/securityalert/3900 - http://secunia.com/advisories/30148 - https:/
e/1/491892/100/0/threaded - http://securityreason.com/securityalert/3900 - http://secunia.com/advisories/30148 - https://www.exploit-db.com/exploits/5576
CVE ID: CVE-2008-2412 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42490 - http://www.securityfocus.com/bid/29253 - http://www.z0rlu.ownspace.org/index.php?/archives/84-ACGV-News-v0.9.1-2003-SQL-inj.-XSS.html
CVE ID: CVE-2008-2413 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42491 - http://www.securityfocus.com/bid/29253 - http://www.z0rlu.ownspace.org/index.php?/archives/84-ACGV-News-v0.9.1-2003-SQL-inj.-XSS.html
CVE ID: CVE-2008-2414 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in send_email.php in AN Guestbook (ANG) 0.4 allows remote attackers to inject arbitrary web script or HTML via the postid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42489 - http://www.z0rlu.ownspace.org/index.php?/archives/86-ANG-AN-Guestbook-version-0.4-xss.html
CVE ID: CVE-2008-2415 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in template/purpletech/base_include.php in DigitalHive (aka hive) 2.0 RC2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42495 - http://www.z0rlu.ownspace.org/index.php?/archives/85-hive-v2.0-RC2-LFi.html
CVE ID: CVE-2008-2416 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter in a Fiction action, possibly related to sources/fiction.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42515 - https://www.exploit-db.com/exploits/5639 - http://www.securityfocus.com/bid/29265 - http://www.vupen.com/english/advisories/2008/1564/references
CVE ID: CVE-2008-2417 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T08:58:02.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary SQL commands via the qNo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42496 - https://www.exploit-db.com/exploits/5638 - http://www.securityfocus.com/bid/29263 - http://secunia.com/advisories/30295 - http://www.vupen.com/english/advisories/2008/1565/references
CVE ID: CVE-2008-2418 State: PUBLISHED Published: 2008-05-23T14:00:00 Last Updated: 2024-08-07T08:58:02.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237584-1 - http://secunia.com/advisories/30357 - http://www.vupen.com/english/advisories/2008/1606/references - http://www.securitytracker.com/id?1020096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42587 - http://www.securityfocus.com/bid/29326 -
r.com/id?1020096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42587 - http://www.securityfocus.com/bid/29326 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5346
CVE ID: CVE-2008-2419 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code by triggering an error condition during certain Iframe operations between a JSframe write and a JSframe close, as demonstrated by an error in loading an empty Java applet defined by a 'src="javascript:"' sequence. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42589 - http://www.0x000000.com/?i=576 - http:/
iner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42589 - http://www.0x000000.com/?i=576 - http://www.securityfocus.com/bid/29318
CVE ID: CVE-2008-2420 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42528 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00942.html - http://www.vupen.com/english/advisories/2008/1569/references - http://secunia.co
ckage-announce/2008-May/msg00942.html - http://www.vupen.com/english/advisories/2008/1569/references - http://secunia.com/advisories/30335 - http://secunia.com/advisories/31438 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00856.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:168 - http://stunnel.mirt.net/pipermail/stunnel-announce/2008-May/000035.html - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00907.html - http://security.gentoo.org/glsa/glsa-200808-08.xml - http://www.securityfocus.com/bid/29309
CVE ID: CVE-2008-2421 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (aka WD4A or WDA), and Web Dynpro for BSP allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under bc/gui/sap/its/webgui/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492376/100/0/threaded - http://www.securityfocus.com/bid/29317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42724 - http://www.se
ed - http://www.securityfocus.com/bid/29317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42724 - http://www.securitytracker.com/id?1020097 - http://www.vupen.com/english/advisories/2008/1599/references - http://secunia.com/advisories/30334
CVE ID: CVE-2008-2422 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42555
CVE ID: CVE-2008-2423 State: PUBLISHED Published: 2008-05-23T15:00:00 Last Updated: 2024-08-07T08:58:02.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42801 - http://ftp.icdevgroup.org/pub/interchange/5.5/ANNOUNCEMENT-5.5.2.txt - http://ftp.icdevgroup.org/interchange/5.6/ANNOUNCEMENT-5.6.0.txt - http://secunia.com/advisories/30346 - https://exchange.xforce.ibmcloud.com/vu