Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6737 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:41:59.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46260 - http://aluigi.altervista.org/adv/crysislog-adv.txt - http://secunia.com/advisories/30706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43087 - http://www.securityfocus
p://secunia.com/advisories/30706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43087 - http://www.securityfocus.com/bid/29720
CVE ID: CVE-2008-6738 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:42:00.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyShoutPro 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin_access cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43145 - https://www.exploit-db.com/exploits/5845 - http://www.securityfocus.com/bid/29780
CVE ID: CVE-2008-6739 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:42:00.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42983 - https://www.exploit-db.com/exploits/5780
CVE ID: CVE-2008-6740 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:41:59.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the _settings[pluginpath] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29877 - https://www.exploit-db.com/exploits/5902/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43251
CVE ID: CVE-2008-6741 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:42:00.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the db_character_set parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "\" (backslash) sequence that does not quote the "'" (single quote) character, as demonstrated via a manlabels action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilit
.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43118 - https://www.exploit-db.com/exploits/5826 - http://www.securityfocus.com/bid/29734
CVE ID: CVE-2008-6742 State: PUBLISHED Published: 2009-04-21T18:07:00 Last Updated: 2024-08-07T11:42:00.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxy P2P software allows remote attackers to cause a denial of service (memory consumption) via a foxy URI with a download action and a large fs value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43146 - http://www.securityfocus.com/bid/29776 - https://www.exploit-db.com/exploits/5843
CVE ID: CVE-2008-6743 State: PUBLISHED Published: 2009-04-22T21:00:00 Last Updated: 2024-08-07T11:41:58.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verified cookie to an arbitrary value and performing a direct request to (1) delete.php, (2) edit-submit.php, (3) edit.php, (4) submit.php, and (5) update.php, which bypasses the security check that is performed by verify.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47451 - http://osvdb.org/50802 - http://www.securityfocus.com/bid/32886 -
//exchange.xforce.ibmcloud.com/vulnerabilities/47451 - http://osvdb.org/50802 - http://www.securityfocus.com/bid/32886 - https://www.exploit-db.com/exploits/7497 - http://secunia.com/advisories/33150
CVE ID: CVE-2008-6744 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T11:42:00.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cybozu.co.jp/products/dl/notice/detail/0016.html - http://cybozu.co.jp/products/dl/notice/detail/0018.html - http://jvn.jp/en/jp/JVN18405927/index.html - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000033.html - https://exc
- http://jvn.jp/en/jp/JVN18405927/index.html - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000033.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43438 - http://secunia.com/advisories/30882 - http://osvdb.org/46575
CVE ID: CVE-2008-6745 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T11:41:59.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29898 - https://www.exploit-db.com/exploits/5909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43275
CVE ID: CVE-2008-6746 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T11:41:59.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the contact name. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.horde.org/diff.php/turba/docs/CHANGES?r1=1.181.2.165&r2=1.181.2.170&ty=h - http://secunia.com/advisories/30704 - http://lists.horde.org/archives/announce/2008/000414.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43098 - http://www.securityfocus.co
ves/announce/2008/000414.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43098 - http://www.securityfocus.com/bid/29743
CVE ID: CVE-2008-6747 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T11:42:00.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotProject before 2.1.2 does not properly restrict access to administrative pages, which allows remote attackers to gain privileges. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=21656&release_id=616346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43019 - http://osvdb.org/46143 - http://www.securityfocus.com/bid/29679 - http://secunia.com/advisories/30470
CVE ID: CVE-2008-6748 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T11:42:00.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33062 - http://secunia.com/advisories/33326 - http://retrogod.altervista.org/9sg_megacubo.html - http://www.securityfocus.com/archive/1/499654/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47697 - https://www.exploit-db.com/exploits/7623 - http://osvdb.org/511
s://exchange.xforce.ibmcloud.com/vulnerabilities/47697 - https://www.exploit-db.com/exploits/7623 - http://osvdb.org/51106
CVE ID: CVE-2008-6749 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T11:42:00.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) checkuser and (2) checkpass parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47640 - http://osvdb.org/51302 - https://www.exploit-db.com/exploits/7614
CVE ID: CVE-2008-6750 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T11:42:00.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photo/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33353 - http://osvdb.org/51303 - https://www.exploit-db.com/exploits/7614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47641
CVE ID: CVE-2008-6751 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T11:41:59.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in index.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in settings/my_photo. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33247 - https://www.exploit-db.com/exploits/7531 - http://www.securityfocus.com/bid/32954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47500
.com/exploits/7531 - http://www.securityfocus.com/bid/32954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47500 - http://osvdb.org/51706
CVE ID: CVE-2008-6752 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T11:41:59.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original password before changing passwords, which allows remote attackers to change the administrator's password and gain privileges via a direct request with modified newpass1 and newpass2 parameters in a Change operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7523 - http://osvdb.org/51705 - http://www.securityfocus.com/bid/34851 - http://secunia.com/advisori
oit-db.com/exploits/7523 - http://osvdb.org/51705 - http://www.securityfocus.com/bid/34851 - http://secunia.com/advisories/33247
CVE ID: CVE-2008-6753 State: PUBLISHED Published: 2009-04-27T17:43:00 Last Updated: 2024-08-07T11:42:00.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SilverStripe before 2.2.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to AjaxUniqueTextField. Additional Analyst Notes: - CVE Program Container: References: - http://silverstripe.org/archive/show/43794 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50368 - http://www.openwall.com/lists/oss-security/2009/04/13/2 - http://www.securityfocus.com/bid/34852
CVE ID: CVE-2008-6754 State: PUBLISHED Published: 2009-04-27T19:00:00 Last Updated: 2024-08-07T11:42:00.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51205 - http://www.securityfocus.com/bid/33017 - http://secunia.com/advisories/33342 - http://www.securityfocus.com/archive/1/499562/100/0/threaded
CVE ID: CVE-2008-6755 State: PUBLISHED Published: 2009-04-27T22:00:00 Last Updated: 2024-08-07T11:42:00.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions to 0600, which makes it easier for remote attackers to modify this file by accessing it through a (1) PHP or (2) CGI script. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00204.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50324 - https://bugzilla.redhat.com/show_bug.cgi?id=476529
CVE ID: CVE-2008-6756 State: PUBLISHED Published: 2009-04-27T22:00:00 Last Updated: 2024-08-07T11:42:00.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=250715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50325
CVE ID: CVE-2008-6757 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:42:00.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitrary web script or HTML via the manuals_search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/53284 - http://www.securityfocus.com/archive/1/499625/100/0/threaded - http://www.securitytracker.com/id?1021497 - http://secunia.com/advisories/33340 - http://www.securityfocus.com/bid/33043
CVE ID: CVE-2008-6758 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:42:00.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/53283 - http://www.securityfocus.com/archive/1/499625/100/0/threaded - http://osvdb.org/51029 - http://www.securitytracker.com/id?1021497 - http://secunia.co
archive/1/499625/100/0/threaded - http://osvdb.org/51029 - http://www.securitytracker.com/id?1021497 - http://secunia.com/advisories/33340 - http://www.securityfocus.com/bid/33043
CVE ID: CVE-2008-6759 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:41:59.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a URL in the POST_DATA parameter to manuals_search.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/53281 - http://www.securityfocus.com/archive/1/499625/100/0/threaded - http://www.securitytracker.com/id?1021497 - http://www.securityfocus.com/bid/33043
CVE ID: CVE-2008-6760 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:41:59.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cart_save.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/53282 - http://www.securityfocus.com/archive/1/499625/100/0/threaded - http://www.securitytracker.com/id?1021497 - http://www.securityfocus.com/bid/33043
CVE ID: CVE-2008-6761 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:42:00.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject arbitrary PHP code into const.inc.php via the installdbname parameter (aka the Database Name field). NOTE: the installation instructions specify deleting admin/install.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47652 - https://www.exploit-db.com/exploits/7622
CVE ID: CVE-2008-6762 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:42:00.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backto parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1871 - http://archives.neohapsis.com/archives/bugtraq/2008-12/0226.html - http://osvdb.org/52213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50382
CVE ID: CVE-2008-6763 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:41:59.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in cookie to that account's username. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/47941 - http://www.securityfocus.com/bid/33031 - http://secunia.com/advisories/31801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47616 - https://www.exploit-db.com/exploits/7601
CVE ID: CVE-2008-6764 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:42:00.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31801 - http://www.securityfocus.com/bid/31055 - http://maximilianosoler.com.ar/vulns/XSS-Silentum_LoginSys.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/44925 - http://www.osvdb.org/47940
CVE ID: CVE-2008-6765 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:42:00.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499625/100/0/threaded - http://www.securitytracker.com/id?1021497 - http://www.securityfocus.com/bid/33043
CVE ID: CVE-2008-6766 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:42:00.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a flood of requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499625/100/0/threaded - http://www.osvdb.org/53285 - http://www.securitytracker.com/id?1021497
CVE ID: CVE-2008-6767 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T11:42:00.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outage), via a direct request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50384 - http://www.debian.org/security/2009/dsa-1871 - http://archives.neohapsis.com/archives/bugtraq/2008-12/0226.html
CVE ID: CVE-2008-6768 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T11:41:59.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51210 - http://secunia.com/advisories/33212 - http://www.securityfocus.com/bid/32888 - https://www.exploit-db.com/exploits/7500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47424
CVE ID: CVE-2008-6769 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T11:42:00.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32971 - https://www.exploit-db.com/exploits/7545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47569
CVE ID: CVE-2008-6770 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T11:42:00.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to a database containing user credentials via a direct request for users.txt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47565 - https://www.exploit-db.com/exploits/7545 - http://secunia.com/advisories/33272
CVE ID: CVE-2008-6771 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T11:42:00.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a direct request to user/uploads/phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47563 - http://www.securityfocus.com/bid/32971 - https://www.exploit-db.com/exploits/7545 - http://secunia.com/advisories/33272
CVE ID: CVE-2008-6772 State: PUBLISHED Published: 2009-04-29T18:06:00 Last Updated: 2024-08-07T11:42:00.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32971 - https://www.exploit-db.com/exploits/7545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47564 - http://secunia.com/advisories/33272