rainbutterfly/cve_corpus huggingface dataset:
CVE-2009-2822 
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-05T16:00:00.000Z
CVE-2009-2823 
The Apache HTTP Server in Apple Mac OS X before 10.6.2 enables the HTTP TRACE method, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified web client software.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2824 
Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code via a crafted embedded font in a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2825 
Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2826 
Multiple integer overflows in CoreGraphics in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2827 
Heap-based buffer overflow in Disk Images in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FAT filesystem on a disk image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2828 
The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2829 
Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2830 
Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Common Document Format (CDF) file.  NOTE: this might overlap CVE-2009-1515.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2831 
Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a "design issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2832 
Buffer overflow in FTP Server in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a CWD command specifying a pathname in a deeply nested hierarchy of directories, related to a "CWD command line tool."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2833 
Buffer overflow in the UCCompareTextDefault API in International Components for Unicode in Apple Mac OS X 10.5.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2834 
IOKit in Apple Mac OS X before 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2835 
The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2836 
Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2837 
Heap-based buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2838 
Integer overflow in QuickLook in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Office document that triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2839 
Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2840 
Spotlight in Apple Mac OS X 10.5.8 does not properly handle temporary files, which allows local users to overwrite arbitrary files in the context of a different user's privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-10T19:00:00.000Z
CVE-2009-2841 
The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-13T15:00:00.000Z
CVE-2009-2842 
Apple Safari before 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-13T15:00:00.000Z
CVE-2009-2843 
Java for Mac OS X 10.5 before Update 6 and 10.6 before Update 1 accepts expired certificates for applets, which makes it easier for remote attackers to execute arbitrary code via an applet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-08T17:00:00.000Z
CVE-2009-2844 
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function.  NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2846 
The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read in the readb function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2847 
The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2848 
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2849 
The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions.  NOTE: this is only a vulnerability when sysfs is writable by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2850 
Multiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to execute arbitrary code, as demonstrated using (1) an array index error in the ReadAEDRList64 function, and other errors in the (2) SearchForRecord_r_64, (3) LastRecord64, (4) CDFsel64, and other unspecified functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2851 
Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2852 
WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via the test_filter[wp_head] array parameter to test/index.php, which is used in a call to the call_user_func_array function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2853 
Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2854 
Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct request to (1) edit-comments.php, (2) edit-pages.php, (3) edit.php, (4) edit-category-form.php, (5) edit-link-category-form.php, (6) edit-tag-form.php, (7) export.php, (8) import.php, or (9) link-add.php in wp-admin/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2855 
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T20:41:00.000Z
CVE-2009-2856 
Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T22:00:00.000Z
CVE-2009-2857 
The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-19T17:00:00.000Z
CVE-2009-2858 
Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-19T17:00:00.000Z
CVE-2009-2859 
IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-19T17:00:00.000Z
CVE-2009-2860 
Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via "malicious packets."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-19T17:00:00.000Z
CVE-2009-2861 
The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service (service outage) via crafted remote radio management (RRM) packets, aka "SkyJack" or Bug ID CSCtb56664.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-27T16:31:00.000Z
CVE-2009-2862 
The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2863 
Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2864 
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service restart) via malformed SIP messages, aka Bug ID CSCsz95423.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2865 
Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2866 
Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2867 
Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted SIP transit packet, aka Bug ID CSCsr18691.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2868 
Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2869 
Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to cause a denial of service (device reload) via a crafted NTPv4 packet, aka Bug IDs CSCsu24505 and CSCsv75948.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2870 
Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCsx25880.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2871 
Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2872 
Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh97579 and CSCsq31776.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2873 
Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via malformed packets, aka Bug ID CSCsx70889.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-28T18:20:00.000Z
CVE-2009-2874 
The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4) allows remote attackers to cause a denial of service (process crash) via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-16T16:00:00.000Z
CVE-2009-2875 
Buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WebEx Recording Format (WRF) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-18T19:00:00.000Z
CVE-2009-2876 
Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file, a different vulnerability than CVE-2009-2878 and CVE-2009-2879.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-18T19:00:00.000Z
CVE-2009-2877 
Stack-based buffer overflow in ataudio.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-18T19:00:00.000Z
CVE-2009-2878 
Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file, a different vulnerability than CVE-2009-2876 and CVE-2009-2879.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-18T19:00:00.000Z
CVE-2009-2879 
Heap-based buffer overflow in atas32.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 (aka T26SP49EP32) for Windows, 27.x before 27.10.x (aka T27SP10) for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted WebEx Recording Format (WRF) file, a different vulnerability than CVE-2009-2876 and CVE-2009-2878.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-18T19:00:00.000Z
CVE-2009-2880 
Buffer overflow in atrpui.dll in the Cisco WebEx WRF Player 26.x before 26.49.32 for Windows, 27.x before 27.10.x for Windows, 26.x before 26.49.35 for Mac OS X and Linux, and 27.x before 27.11.8 for Mac OS X and Linux allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WebEx Recording Format (WRF) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-18T19:00:00.000Z
CVE-2009-2881 
Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to (1) index.php and possibly (2) allpubs.php in publications/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-20T17:00:00.000Z
CVE-2009-2882 
Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) browse_ladies.php and (2) browse_men.php, the (3) gender parameter to search.php, and the (4) id parameter to services.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-20T17:00:00.000Z