Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
st Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=588284 - http://www.securityfocus.com/bid/42121 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://support.novell.com/security/cve/CVE-2010-1325.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/61006
CVE ID: CVE-2010-1326 State: PUBLISHED Published: 2010-09-15T17:26:00Z Last Updated: 2024-09-16T22:29:42.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2350 - http://bugs.debian.or
Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2350 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884 - http://www.debian.org/security/2010/dsa-2108 - http://secunia.com/advisories/41358 - http://secunia.com/advisories/41345 - http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1&id=1790&action=view - http://march-hare.com/cvspro/vuln.htm
CVE ID: CVE-2010-1327 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T01:21:19.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the marca parameter to precios.php3 or (2) the where parameter in a delivery_courier action to control/abm_list.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.bonsai-sec.com/en/research/vulnerabilities/tornadostore-multiple-sql-injection-0106.php - http://www.securityfocus.com/bid/41233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59950
CVE ID: CVE-2010-1328 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T01:21:18.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tipo or (2) destino parameter to login_registrese.php3 in the Services section, (3) the rubro parameter to precios.php3 in the Products section, (4) the arti parameter to recomenda_articulo.php3 in the Products section, (5) the descrip parameter in a profile action to control/abm_det.php3 in the e-Commerce section, (6) the tit parameter in a delivery_courier action to c
rofile action to control/abm_det.php3 in the e-Commerce section, (6) the tit parameter in a delivery_courier action to control/abm_list.php3 in the e-Commerce section, or (7) the tit parameter in an usuario action to control/abm_det.php3 in the e-Commerce section. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59951 - http://www.bonsai-sec.com/en/research/vulnerabilities/tornadostore-multiple-xss-0107.php
CVE ID: CVE-2010-1329 State: PUBLISHED Published: 2010-04-15T17:00:00 Last Updated: 2024-08-07T01:21:18.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion-prevention functionality via a request that has an appended long string containing an unspecified manipulation. Additional Analyst Notes: - CVE Program Container: References: - http://www.clearskies.net/documents/css-advisory-css1001-imperva.php - http://www.imperva.com/resources/adc/adc_advisories_response_clearskies.html - http://www.securityfocus.com/bid/39472 - http://www.securityfocu
resources/adc/adc_advisories_response_clearskies.html - http://www.securityfocus.com/bid/39472 - http://www.securityfocus.com/archive/1/510709/100/0/threaded
CVE ID: CVE-2010-1330 State: PUBLISHED Published: 2012-11-23T19:00:00 Last Updated: 2024-08-07T01:21:18.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=750306 - http://rhn.redhat.com/errata/RHSA-2011-1456.html - https://bugs.gentoo.org/show_bug.cgi?id=317435 - http://www.osvdb.org/77297 - http://secunia.com/advisories/4689
.html - https://bugs.gentoo.org/show_bug.cgi?id=317435 - http://www.osvdb.org/77297 - http://secunia.com/advisories/46891 - http://www.jruby.org/2010/04/26/jruby-1-4-1-xss-vulnerability.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/80277
CVE ID: CVE-2010-1331 State: PUBLISHED Published: 2010-04-09T17:00:00 Last Updated: 2024-08-07T01:21:18.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57495 - http://jvn.jp/en/jp/JVN60969543/index.html - http://www.heartlogic.jp/docs/free_cgi/hl-sitemanager.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000010.html
CVE ID: CVE-2010-1332 State: PUBLISHED Published: 2010-04-09T17:00:00 Last Updated: 2024-08-07T01:21:18.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PrettyBook PrettyFormMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000007.html - http://jvn.jp/en/jp/JVN41842181/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/57492
CVE ID: CVE-2010-1333 State: PUBLISHED Published: 2010-04-09T17:00:00 Last Updated: 2024-08-07T01:21:18.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Almas Inc. Compiere J300_A02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.compiere-japan.com/products/release/patch.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000009.html - http://jvn.jp/en/jp/JVN38687002/index.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000008.html - http://osvdb.org/63419 - https://exchange.xforce.ibmclo
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000008.html - http://osvdb.org/63419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57494 - http://jvn.jp/en/jp/JVN57963254/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/57493 - http://secunia.com/advisories/39177
CVE ID: CVE-2010-1334 State: PUBLISHED Published: 2010-04-09T17:00:00Z Last Updated: 2024-09-17T02:06:06.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory, a different vulnerability than CVE-2010-0993. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39046
CVE ID: CVE-2010-1335 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter to (1) city.get/city.get.php, (2) city.get/index.php, (3) message2.send/message.send.php, (4) message.send/message.send.php, and (5) pages.add/pages.add.php in insky/modules/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/63151 - ht
om third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/63151 - http://osvdb.org/63150 - http://osvdb.org/63149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57112 - http://www.exploit-db.com/exploits/11848 - http://osvdb.org/63153 - http://packetstormsecurity.org/1003-exploits/inskycms-rfi.txt - http://secunia.com/advisories/39112 - http://osvdb.org/63152
CVE ID: CVE-2010-1336 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57161 - http://www.exploit-db.com/exploits/11874 - http://osvdb.org/63157 - http://osvdb.org/63
loud.com/vulnerabilities/57161 - http://www.exploit-db.com/exploits/11874 - http://osvdb.org/63157 - http://osvdb.org/63158 - http://secunia.com/advisories/39095 - http://www.securityfocus.com/bid/38962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57162
CVE ID: CVE-2010-1337 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and other versions, allow remote attackers to execute arbitrary PHP code via a URL in the (1) include and (2) Configuration['LANGUAGE'] parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57147 - http://www.securityfocus.com/bid/38889 - http://www.packetstormsecurity.com/1003-exploits/vanilla-rfi.txt
CVE ID: CVE-2010-1338 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/woltlabb-sql.txt - http://osvdb.org/63126 - http://www.securityfocus.com/bid/38870 - http://www.exploit-db.com/exploits/11824 - http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-t
- http://www.exploit-db.com/exploits/11824 - http://4004securityproject.wordpress.com/2010/03/22/woltlab-burning-board-teamsite-hack-v3-0-ts_other-php-sql-injection-exploit-2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/57066 - http://secunia.com/advisories/39009 - http://445544.44.ohost.de/worldlabburningboardadon2python-1.txt
CVE ID: CVE-2010-1339 State: PUBLISHED Published: 2010-04-09T18:00:00Z Last Updated: 2024-09-17T01:06:39.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a modboard action, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39009
CVE ID: CVE-2010-1340 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in jresearch.php in the J!Research (com_jresearch) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57123 - http://osvdb.org/63147 - http://secunia.com/advisories/39079 - http://www.securityfocus.com/bid/38917 - http://packetstormsecurity.org/1003-exploits/joomlajresearch-lfi.txt
CVE ID: CVE-2010-1341 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Systemsoftware Community Black Forum allows remote attackers to execute arbitrary SQL commands via the s_flaeche parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/62920 - http://www.exploit-db.com/exploits/11715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56861 - http://secunia.com/advisories/38960
CVE ID: CVE-2010-1342 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to (1) admin/menu.php and (2) library/lib.menu.php; and the adminroot parameter to (3) admin/media/update_content.php and (4) library/class.backup.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11882 - http
mation. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11882 - http://secunia.com/advisories/39106 - http://www.securityfocus.com/bid/38975
CVE ID: CVE-2010-1343 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57173 - http://www.securityfocus.com/bid/38976
CVE ID: CVE-2010-1344 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38976 - http://packetstormsecurity.org/1003-exploits/joomlackforms-lfisql.txt - http://www.exploit-db.com/exploits/11785 - http://www.osvdb.org/63032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56988 - http://www.s
/exploits/11785 - http://www.osvdb.org/63032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56988 - http://www.securityfocus.com/bid/38785
CVE ID: CVE-2010-1345 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:19.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/63031 - http://secunia.com/advisories/38976 - http://packetstormsecurity.org/1003-exploits/joomlackforms-lfisql.txt - http://www.exploit-db.com/exploits/11785
CVE ID: CVE-2010-1346 State: PUBLISHED Published: 2010-04-09T18:00:00 Last Updated: 2024-08-07T01:21:18.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/63121 - http://secunia.com/advisories/39018 - http://packetstormsecurity.org/1003-exploits/minicmsribafs-sql.txt - http://www.securityfocus.com/bid/38881 - http://www.exploit-db.com/exploits
ty.org/1003-exploits/minicmsribafs-sql.txt - http://www.securityfocus.com/bid/38881 - http://www.exploit-db.com/exploits/11835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57092
CVE ID: CVE-2010-1347 State: PUBLISHED Published: 2010-04-12T17:00:00 Last Updated: 2024-08-07T01:21:18.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Director Agent 6.1 before 6.1.2.3 in IBM Systems Director on AIX and Linux uses incorrect permissions for the (1) diruninstall and (2) opt/ibm/director/bin/wcitinst scripts, which allows local users to gain privileges by executing these scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39305 - http://secunia.com/advisories/39194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57611 - http://www.securitytracker.com/id?1023831 - http://www.vupen.com/english/advisori
e.ibmcloud.com/vulnerabilities/57611 - http://www.securitytracker.com/id?1023831 - http://www.vupen.com/english/advisories/2010/0830 - http://www-01.ibm.com/support/docview.wss?uid=isg1PM08236 - http://osvdb.org/63595
CVE ID: CVE-2010-1348 State: PUBLISHED Published: 2010-04-12T17:00:00 Last Updated: 2024-08-07T01:21:18.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the login process in IBM WebSphere Portal 6.0.1.1, and 6.1.0.x before 6.1.0.3 Cumulative Fix 03, has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/63594 - http://www.securityfocus.com/bid/39306 - http://secunia.com/advisories/39305 - http://www.vupen.com/english/advisories/2010/0829 - http://www.securitytracker.com/id?1023830 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM08667 - https://exchange.xforce.ibmcloud.co
tracker.com/id?1023830 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM08667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57613
CVE ID: CVE-2010-1349 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:21:18.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38519 - http://www.securitytracker.com/id?1023690 - http://www.opera.com/support/kb/view/948/ - http://www.exploit-db.com/exploits/11622 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56673 - http://osvdb.org/62714 - http://my.opera.com/securitygroup/blog/2010/03/
nge.xforce.ibmcloud.com/vulnerabilities/56673 - http://osvdb.org/62714 - http://my.opera.com/securitygroup/blog/2010/03/09/the-malformed-content-length-header-security-issue - http://www.vupen.com/english/advisories/2010/0529 - http://secunia.com/advisories/38820
CVE ID: CVE-2010-1350 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:21:18.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57500 - http://packetstormsecurity.org/1004-exploits/joomlajpjobs-sql.txt - http://www.xenuser.org/documents/security/joomla_com_jp_jobs_sql.txt - http://www.securityfocus.com/bid/39191 - http://www.exploi
w.xenuser.org/documents/security/joomla_com_jp_jobs_sql.txt - http://www.securityfocus.com/bid/39191 - http://www.exploit-db.com/exploits/12037 - http://secunia.com/advisories/39325 - http://www.joomlanetprojects.com/index.php/en/joomla-projects-downloads/joomla-1/joomla-1/38-comjpjobs.html
CVE ID: CVE-2010-1351 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:21:19.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) _nodesforum_path_from_here_to_nodesforum_folder parameter to erase_user_data.php and the (2) _nodesforum_code_path parameter to pre_output.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12047 - https://exchange.xf
nal Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57517 - http://secunia.com/advisories/39311
CVE ID: CVE-2010-1352 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:21:19.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39357 - http://www.securityfocus.com/bid/39248 - http://www.exploit-db.com/exploits/12084 - http://packetstormsecurity.org/1004-exploits/joomlajukebox-
s.com/bid/39248 - http://www.exploit-db.com/exploits/12084 - http://packetstormsecurity.org/1004-exploits/joomlajukebox-lfi.txt
CVE ID: CVE-2010-1353 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:21:19.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57533 - http://packetstormsecurity.org/1004-exploits/joomlaloginbox-lfi.txt - http://www.securityfocus.com/bid/39212 - http://www.exploit-db.com/exploits/12068 - http://www.vupen.com/english/advisories/2010/0808 - http:/
us.com/bid/39212 - http://www.exploit-db.com/exploits/12068 - http://www.vupen.com/english/advisories/2010/0808 - http://secunia.com/advisories/39349
CVE ID: CVE-2010-1354 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:21:18.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39266 - http://packetstormsecurity.org/1004-exploits/joomlavjdeo-lfi.txt - http://www.exploit-db.com/exploits/12102 - http://secunia.com/advisories/39296