Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cker.com/id?1020795 - http://www.vupen.com/english/advisories/2008/2485 - http://secunia.com/advisories/31688 - http://marc.info/?l=bugtraq&m=122037165310549&w=2 - http://www.securityfocus.com/bid/30984 - http://marc.info/?l=bugtraq&m=122037165310549&w=2
CVE ID: CVE-2008-3537 State: PUBLISHED Published: 2008-09-03T14:00:00 Last Updated: 2024-08-07T09:45:18.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3536. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=122037165310549&w=2 - http://securityreason.com/securityalert/4209 - http://www.securitytracker.com/id?1020795 - http://www.vupen.com/english/advisories/2008/2485 - http://secunia.com/advisories/31688 - http://m
CVE ID: CVE-2008-3538 State: PUBLISHED Published: 2008-09-02T14:00:00 Last Updated: 2024-08-07T09:45:18.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Enterprise Discovery 2.0 through 2.52 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the initial description of this CVE was inadvertently associated with libxml2, but it should be for HP Enterprise Discovery. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44709 - http://secunia.com/advisories/31616 - http://securitytracker.com/id?1020760 - http://www.vupen.com/english/adviso
4709 - http://secunia.com/advisories/31616 - http://securitytracker.com/id?1020760 - http://www.vupen.com/english/advisories/2008/2446 - http://marc.info/?l=bugtraq&m=121985360414288&w=2 - http://marc.info/?l=bugtraq&m=121985360414288&w=2 - http://www.securityfocus.com/bid/30865
CVE ID: CVE-2008-3539 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T09:45:18.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HP
F Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31764 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44916 - http://securityreason.com/securityalert/4236 - http://securitytracker.com/id?1020821 - http://www.securityfocus.com/bid/31024 - http://marc.info/?l=bugtraq&m=122062779731581&w=2 - http://www.vupen.com/english/advisories/2008/2501 - http://marc.info/?l=bugtraq&m=122062779731581&w=2
CVE ID: CVE-2008-3541 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3542 State: PUBLISHED Published: 2008-10-02T18:00:00 Last Updated: 2024-08-07T09:45:18.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32061 - http://marc.info/?l=bugtraq&m=122271894520640&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45506 - http://marc.info/?l=bugtraq&m=122271894520640&w=2 - http://www.securityfocus.com/bid/31479 - http://www.vupen.com/english/advisories/2008/2695 - http://www.securitytracker.com/i
//www.securityfocus.com/bid/31479 - http://www.vupen.com/english/advisories/2008/2695 - http://www.securitytracker.com/id?1020953 - http://securityreason.com/securityalert/4346
CVE ID: CVE-2008-3543 State: PUBLISHED Published: 2008-10-07T18:27:00 Last Updated: 2024-08-07T09:45:18.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NFS / ONCplus B.11.31_04 and earlier on HP-UX B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020993 - http://secunia.com/advisories/32161 - http://www.vupen.com/english/advisories/2008/2748 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01570585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45695 - http://h20000.www2.hp.com
Document.jsp?objectID=c01570585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45695 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01570585 - http://www.securityfocus.com/bid/31607
CVE ID: CVE-2008-3544 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T09:45:18.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackers to execute arbitrary code via a long (1) REQUEST_SEV_CHANGE (aka number 47), (2) REQUEST_SAVE_STATE (aka number 61), or (3) REQUEST_RESTORE_STATE (aka number 62) request to TCP port 2954. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/closedview_old-adv.txt - http://securityreason.com/securityalert/4397 - http://downlo
- http://aluigi.altervista.org/adv/closedview_old-adv.txt - http://securityreason.com/securityalert/4397 - http://downloads.securityfocus.com/vulnerabilities/exploits/28668.c - http://secunia.com/advisories/31688 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01537275 - http://www.securityfocus.com/bid/28668 - http://www.securityfocus.com/archive/1/490541 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01537275
CVE ID: CVE-2008-3545 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T09:45:18.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ovtopmd in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3536, CVE-2008-3537, and CVE-2008-3544. NOTE: due to insufficient details from the vendor, it is not clear whether this is the same as CVE-2008-1853. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4399 - http://secunia.com/advisories/29796 - http://marc.inf
iner: References: - http://securityreason.com/securityalert/4399 - http://secunia.com/advisories/29796 - http://marc.info/?l=bugtraq&m=122356907004075&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45788 - http://www.securityfocus.com/bid/31669 - http://marc.info/?l=bugtraq&m=122356907004075&w=2 - http://securitytracker.com/id?1021014
CVE ID: CVE-2008-3546 State: PUBLISHED Published: 2008-08-07T21:00:00 Last Updated: 2024-08-07T09:45:18.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495391/100/0/threaded - http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.5.6.4.txt - http://secunia.com/advisories/32029 - http://wiki.rpath.com
.kernel.org/pub/software/scm/git/docs/RelNotes-1.5.6.4.txt - http://secunia.com/advisories/32029 - http://wiki.rpath.com/Advisories:rPSA-2008-0253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44217 - http://secunia.com/advisories/33964 - https://issues.rpath.com/browse/RPL-2707 - http://secunia.com/advisories/31347 - http://security.gentoo.org/glsa/glsa-200809-16.xml - http://www.debian.org/security/2008/dsa-1637 - http://kerneltrap.org/mailarchive/git/2008/7/16/2529284 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00729.html - http://secunia.com/advisories/32384 - http://www.securityfocus.com/bid/30549 - http://www.vupen.com/english/advisories/2008/2306
ecunia.com/advisories/32384 - http://www.securityfocus.com/bid/30549 - http://www.vupen.com/english/advisories/2008/2306 - http://www.securitytracker.com/id?1020627 - http://secunia.com/advisories/31780 - http://www.ubuntu.com/usn/USN-723-1
CVE ID: CVE-2008-3547 State: PUBLISHED Published: 2009-03-10T21:00:00 Last Updated: 2024-08-07T09:45:18.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service (persistent game disruption) or possibly execute arbitrary code via vectors involving many long names for "companies and clients." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34161 - http://marc.info/?l=oss-security&m=121790659421159&w=2 - http://security.gentoo.org/glsa/glsa-200903-09.xml - http://marc.info/?l=oss-security&m=121814230706576&w=2 - http://ma
http://security.gentoo.org/glsa/glsa-200903-09.xml - http://marc.info/?l=oss-security&m=121814230706576&w=2 - http://marc.info/?l=oss-security&m=121787604812284&w=2 - http://sourceforge.net/project/shownotes.php?release_id=617243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49221 - http://marc.info/?l=oss-security&m=121797672406282&w=2 - http://bugs.gentoo.org/show_bug.cgi?id=233929 - http://bugs.debian.org/493714
CVE ID: CVE-2008-3548 State: PUBLISHED Published: 2008-08-07T21:00:00 Last Updated: 2024-08-07T09:45:18.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Sun Netra T5220 Server with firmware 7.1.3 allows local users to cause a denial of service (panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44221 - http://www.securityfocus.com/bid/30557 - http://secunia.com/advisories/31335 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239930-1 - http://www.vupen.com/english/advisories/2008/2310 - http://www.securitytracker.com/id?1020632
CVE ID: CVE-2008-3549 State: PUBLISHED Published: 2008-08-07T21:00:00 Last Updated: 2024-08-07T09:45:18.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the pthread_mutex_reltimedlock_np API in Sun Solaris 10 and OpenSolaris before snv_90 allows local users to cause a denial of service (system hang or panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5446 - http://secunia.com/advisories/31348 - http://www.vupen.com/english/advisories/2008/2312 - http://www.securitytracker.com/id?1
//secunia.com/advisories/31348 - http://www.vupen.com/english/advisories/2008/2312 - http://www.securitytracker.com/id?1020634 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-239387-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44224
CVE ID: CVE-2008-3550 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1PK68332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44254 - http://www.securitytracker.com/id?1020642 - http://www.vupen.com/englis
ange.xforce.ibmcloud.com/vulnerabilities/44254 - http://www.securitytracker.com/id?1020642 - http://www.vupen.com/english/advisories/2008/2317
CVE ID: CVE-2008-3551 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or mobile Java), as distributed in Sun Wireless Toolkit 2.5.2, allow remote attackers to execute arbitrary code via unknown vectors. NOTE: as of 20080807, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a company led by a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - https://excha
d a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44478 - http://www.security-explorations.com/n2vendors.htm - http://www.securityfocus.com/archive/1/495224/100/0/threaded - http://www.security-explorations.com/n2srp.htm - http://www.securityfocus.com/bid/30591 - http://www.security-explorations.com/report_toc.pdf - http://www.security-explorations.com/n2press.htm
CVE ID: CVE-2008-3552 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition FP1, and possibly later devices, allow remote attackers to execute arbitrary code via unknown vectors, probably related to MIDP privilege escalation and persistent MIDlets, aka "ISSUES 11-15." NOTE: as of 20080807, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a company led by a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Co
nown researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-explorations.com/n2vendors.htm - http://www.securityfocus.com/archive/1/495224/100/0/threaded - http://www.security-explorations.com/n2srp.htm - http://www.securityfocus.com/bid/30592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44438 - http://www.securityfocus.com/bid/30591 - http://www.security-explorations.com/report_toc.pdf - http://www.security-explorations.com/n2press.htm
CVE ID: CVE-2008-3553 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary code via unknown vectors, probably related to MIDP privilege escalation and persistent MIDlets, aka "ISSUES 3-10." NOTE: as of 20080807, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a company led by a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - htt
ng assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44437 - http://www.security-explorations.com/n2vendors.htm - http://www.securityfocus.com/archive/1/495224/100/0/threaded - http://www.security-explorations.com/n2srp.htm - http://www.securityfocus.com/bid/30592 - http://www.securityfocus.com/bid/30591 - http://www.security-explorations.com/report_toc.pdf - http://www.security-explorations.com/n2press.htm
CVE ID: CVE-2008-3554 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via the searchid parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44251 - https://www.exploit-db.com/exploits/6214
CVE ID: CVE-2008-3555 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base (WSNKB) 4.1.36 and earlier, (4) Links 4.1.44 and earlier, and possibly (5) Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the TID parameter, as demonstrated by uploading a .jpg file containing PHP sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31392 - http://securityr
Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31392 - http://securityreason.com/securityalert/4120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44236 - https://www.exploit-db.com/exploits/6208
CVE ID: CVE-2008-3556 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) showmember parameter in a members action and the (2) thread parameter in a board action. NOTE: vector 1 might be the same as CVE-2008-2522. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4119 - http://www.securityfocus.com/bid/30565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44262 - http://www.securityfocus.
www.securityfocus.com/bid/30565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44262 - http://www.securityfocus.com/archive/1/495167/100/0/threaded
CVE ID: CVE-2008-3557 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by setting both the adminuser and loggedin cookies. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6213 - http://www.securityfocus.com/bid/30580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44260 - http://secunia.com/advisories/31383 - http://securityreason.com/securityalert/4118
CVE ID: CVE-2008-3558 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6220 - http://www.kb.cert.org/vuls/id/661827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44250 - http://www.securityfocus.com/bid/30578 - http://www.vupen.com/english/advisories/2008/2319
d.com/vulnerabilities/44250 - http://www.securityfocus.com/bid/30578 - http://www.vupen.com/english/advisories/2008/2319 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/063692.html - http://www.securitytracker.com/id?1020641 - http://www.cisco.com/en/US/products/products_security_advisory09186a00809e2006.shtml - http://secunia.com/advisories/31397
CVE ID: CVE-2008-3559 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web script or HTML via the (1) filename parameter to search.asp and the (2) page parameter to order.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31369 - http://downloads.securityfocus.com/vulnerabilities/exploits/30567.html - http://www.securityfocu
.com/advisories/31369 - http://downloads.securityfocus.com/vulnerabilities/exploits/30567.html - http://www.securityfocus.com/bid/30567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44271
CVE ID: CVE-2008-3560 State: PUBLISHED Published: 2008-08-08T19:00:00 Last Updated: 2024-08-07T09:45:18.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31402 - http://www.securityfocus.com/bid/30576 - http://downloads.securityfocus.com/vulnerabilities/exploits/30576.html - http://lostmon.blogspot.com/2008/08/kshop-module-search-variable-and-field.html - https://exchange.xforce.ibmcloud.com/vulnerabili
tmon.blogspot.com/2008/08/kshop-module-search-variable-and-field.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44261
CVE ID: CVE-2008-3561 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the ag parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44270 - http://secunia.com/advisories/31382 - http://packetstorm.linuxsecurity.com/0808-exploits/powergap-sql.txt
CVE ID: CVE-2008-3562 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mods parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30564 - http://secunia.com/advisories/31362 - https://exchange.xforce.ibmcloud.com/
: - http://www.securityfocus.com/bid/30564 - http://secunia.com/advisories/31362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44258 - http://www.securityfocus.com/bid/30564/exploit
CVE ID: CVE-2008-3563 State: PUBLISHED Published: 2008-08-10T20:00:00 Last Updated: 2024-08-07T09:45:18.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the checked array parameter to plog-download.php in an album action and (2) unspecified parameters to plog-remote.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the activate parameter to admin/plog-themes.php, related to theme_dir settings. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4121 - ht