deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2754
Published: 2010-07-30
Description: dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.mozilla.org/security/announce/2010/mfsa2010-47.html; https://bugzilla.mozilla.org/show_bug.cgi?id=568564; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11770
CVE: CVE-2010-2755
Published: 2010-07-30
Description: layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://www.mozilla.org/security/announce/2010/mfsa2010-48.html; https://bugzilla.mozilla.org/show_bug.cgi?id=575836; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11961
CVE: CVE-2010-2913
Published: 2010-07-30
Description: The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sensitive information via vectors involving (1) the mobile device or (2) a synchronized computer.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://itunes.apple.com/us/app/citi-mobile-sm/id301724680; http://news.cnet.com/8301-27080_3-20011664-245.html; http://securitytracker.com/id?1024249
CVE: CVE-2010-1207
Published: 2010-07-30
Description: Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.mozilla.org/security/announce/2010/mfsa2010-43.html; https://bugzilla.mozilla.org/show_bug.cgi?id=571287; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11887
CVE: CVE-2010-1208
Published: 2010-07-30
Description: Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.mozilla.org/security/announce/2010/mfsa2010-35.html; http://www.securityfocus.com/archive/1/512515; http://www.securityfocus.com/bid/41849
CVE: CVE-2010-1209
Published: 2010-07-30
Description: Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator interface and a javascript callback.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.mozilla.org/security/announce/2010/mfsa2010-36.html; http://www.securityfocus.com/archive/1/512511; http://www.securityfocus.com/bid/41845
CVE: CVE-2010-1210
Published: 2010-07-30
Description: intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.mozilla.org/security/announce/2010/mfsa2010-44.html; https://bugzilla.mozilla.org/show_bug.cgi?id=564679; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11863
CVE: CVE-2010-1211
Published: 2010-07-30
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://www.mozilla.org/security/announce/2010/mfsa2010-34.html; https://bugzilla.mozilla.org/show_bug.cgi?id=507775; https://bugzilla.mozilla.org/show_bug.cgi?id=528644
CVE: CVE-2010-1212
Published: 2010-07-30
Description: js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) propagation of deep aborts in the TraceRecorder::record_JSOP_BINDNAME function, (2) depth handling in the TraceRecorder::record_JSOP_GETELEM function, and (3) tracing of out-of-range arguments in the TraceRecorder::record_JSOP_ARGSUB function.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.mozilla.org/security/announce/2010/mfsa2010-34.html; https://bugzilla.mozilla.org/show_bug.cgi?id=530955; https://bugzilla.mozilla.org/show_bug.cgi?id=558618
CVE: CVE-2010-1213
Published: 2010-07-30
Description: The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted HTML document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.mozilla.org/security/announce/2010/mfsa2010-42.html; https://bugzilla.mozilla.org/show_bug.cgi?id=568148; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11835
CVE: CVE-2010-1214
Published: 2010-07-30
Description: Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.mozilla.org/security/announce/2010/mfsa2010-37.html; https://bugzilla.mozilla.org/show_bug.cgi?id=572985; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685
CVE: CVE-2010-1215
Published: 2010-07-30
Description: Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging "access to an object from the chrome scope."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.mozilla.org/security/announce/2010/mfsa2010-38.html; https://bugzilla.mozilla.org/show_bug.cgi?id=567069; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11527
CVE: CVE-2010-1778
Published: 2010-07-30
Description: Cross-site scripting (XSS) vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://support.apple.com/kb/HT4276; http://www.securityfocus.com/bid/42020
CVE: CVE-2010-1780
Published: 2010-07-30
Description: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to element focus.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1782
Published: 2010-07-30
Description: WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to the rendering of an inline element.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1783
Published: 2010-07-30
Description: WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic modification of a text node, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1784
Published: 2010-07-30
Description: The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1785
Published: 2010-07-30
Description: WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1786
Published: 2010-07-30
Description: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a foreignObject element in an SVG document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1787
Published: 2010-07-30
Description: WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a floating element in an SVG document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1788
Published: 2010-07-30
Description: WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a use element in an SVG document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1789
Published: 2010-07-30
Description: Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a JavaScript string object.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-1790
Published: 2010-07-30
Description: WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time (JIT) compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to a "reentrancy issue."
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-1791
Published: 2010-07-30
Description: Integer signedness error in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving a JavaScript array index.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1792
Published: 2010-07-30
Description: WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE: CVE-2010-1793
Published: 2010-07-30
Description: Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a (1) font-face or (2) use element in an SVG document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
CVE: CVE-2010-1796
Published: 2010-07-30
Description: The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to obtain sensitive Address Book Card information via JavaScript code that forces keystroke events for input fields.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2010//Jul/msg00001.html; http://support.apple.com/kb/HT4276; http://www.securityfocus.com/bid/42020
CVE: CVE-2010-2751
Published: 2010-07-30
Description: The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and the history.back and history.forward JavaScript functions.
CVSS Score: 2.6 (LOW)
CWE: CWE-264
References: http://www.mozilla.org/security/announce/2010/mfsa2010-45.html; https://bugzilla.mozilla.org/show_bug.cgi?id=536466; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11688
CVE: CVE-2010-2752
Published: 2010-07-30
Description: Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://www.mozilla.org/security/announce/2010/mfsa2010-39.html; http://www.securityfocus.com/archive/1/512514; http://www.securityfocus.com/bid/41852
CVE: CVE-2010-2753
Published: 2010-07-30
Description: Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html; http://www.mozilla.org/security/announce/2010/mfsa2010-40.html; http://www.securityfocus.com/archive/1/512510
CVE: CVE-2010-2914
Published: 2010-07-30
Description: Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/40722; http://www.securityfocus.com/archive/1/512645/100/0/threaded; http://www.securitytracker.com/id?1024248
CVE: CVE-2010-2915
Published: 2010-07-30
Description: SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0907-exploits/ajhypeprime-sql.txt; http://www.exploit-db.com/exploits/14435; https://exchange.xforce.ibmcloud.com/vulnerabilities/60589
CVE: CVE-2010-2916
Published: 2010-07-30
Description: SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1007-exploits/ajhyipmeridian-sql.txt; http://www.exploit-db.com/exploits/14436; https://exchange.xforce.ibmcloud.com/vulnerabilities/60590
CVE: CVE-2010-2917
Published: 2010-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) emailid, (2) fname, (3) lname, (4) company, (5) address1, (6) address2, (7) city, (8) state, (9) zipcode, (10) phone, and (11) fax parameters in an update action.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1007-exploits/ajarticle-xss.txt; http://secunia.com/advisories/40560; http://www.exploit-db.com/exploits/14354
CVE: CVE-2010-2918
Published: 2010-07-30
Description: PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/0804-exploits/joomlavisites-rfi.txt; http://www.exploit-db.com/exploits/14476; http://www.securityfocus.com/bid/28942
CVE: CVE-2010-2919
Published: 2010-07-30
Description: SQL injection vulnerability in the StaticXT (com_staticxt) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1007-exploits/joomlastaticxt-sql.txt; http://www.exploit-db.com/exploits/14395; https://exchange.xforce.ibmcloud.com/vulnerabilities/60462
CVE: CVE-2010-2920
Published: 2010-07-30
Description: Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1004-exploits/joomlafoobla-lfi.txt; http://www.exploit-db.com/exploits/12120; http://www.securityfocus.com/bid/39341
CVE: CVE-2010-2921
Published: 2010-07-30
Description: SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a golfcourses action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1007-exploits/joomlagolfcourseguide-sql.txt; http://www.exploit-db.com/exploits/14448; https://exchange.xforce.ibmcloud.com/vulnerabilities/60608
CVE: CVE-2010-2922
Published: 2010-07-30
Description: SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1007-exploits/akyblog-sql.txt; http://secunia.com/advisories/40746; http://www.exploit-db.com/exploits/14461
CVE: CVE-2010-2923
Published: 2010-07-30
Description: SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id_cate parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1007-exploits/joomlayoutube-sql.txt; http://www.exploit-db.com/exploits/14467; http://www.securityfocus.com/bid/41938
CVE: CVE-2010-2924
Published: 2010-07-30
Description: SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the url parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/66566; http://secunia.com/advisories/40692; http://www.exploit-db.com/exploits/14441
CVE: CVE-2010-2925
Published: 2010-07-30
Description: SQL injection vulnerability in index.php in Freeway CMS 1.4.3.210 allows remote attackers to execute arbitrary SQL commands via the ecPath parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1007-exploits/freewaycms-sql.txt; http://www.exploit-db.com/exploits/14474; http://www.securityfocus.com/bid/41960