rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-1731 
The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T19:00:00.000Z
CVE-2008-1732 
SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T19:00:00.000Z
CVE-2008-1733 
SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com_puarcade) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T19:00:00.000Z
CVE-2008-1734 
Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating a file with a one-letter lowercase alphabetic name, which triggers interpretation of a certain unquoted [a-z] argument as a matching shell glob for this name, rather than interpretation as the literal [a-z] regular-expression string, and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-18T15:00:00.000Z
CVE-2008-1735 
BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an invalid pointer to the CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-29T23:00:00.000Z
CVE-2008-1736 
Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions, which allows local users to cause a denial of service (system crash) via (1) a crafted OBJECT_ATTRIBUTES structure in a call to the NtDeleteFile function, which leads to improper validation of a ZwQueryObject result; and unspecified calls to the (2) NtCreateFile and (3) NtSetThreadContext functions, different vectors than CVE-2007-0709.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-29T23:00:00.000Z
CVE-2008-1737 
Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service (reboot with the product disabled) and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateKey hooked System Service Descriptor Table (SSDT) function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-29T23:00:00.000Z
CVE-2008-1738 
Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service (system crash) via an invalid pointer to the _CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-29T23:00:00.000Z
CVE-2008-1739 
Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-03T19:00:00.000Z
CVE-2008-1740 
The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified "stress test," aka Bug ID CSCsh20972.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-1741 
The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of service (core dump and service interruption) via a TCP port scan, aka Bug ID CSCsj64533.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-1742 
Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug ID CSCsj80609.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-1743 
Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, aka Bug ID CSCsi98433.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-1744 
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-1745 
Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (service interruption) via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-1746 
The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (core dump and service restart) via a series of malformed UDP packets, as demonstrated by the IP Stack Integrity Checker (ISIC), aka Bug ID CSCsj24113.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-1747 
Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (CCM service restart) via an unspecified SIP INVITE message, aka Bug ID CSCsk46944.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-1748 
Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-1749 
Memory leak in Cisco Content Switching Module (CSM) 4.2(3) up to 4.2(8) and Cisco Content Switching Module with SSL (CSM-S) 2.1(2) up to 2.1(7) allows remote attackers to cause a denial of service (memory consumption) via TCP segments with an unspecified combination of TCP flags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-14T18:00:00.000Z
CVE-2008-1750 
SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to the /category URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T20:28:00.000Z
CVE-2008-1751 
Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) language and (2) lang parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T20:28:00.000Z
CVE-2008-1752 
ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for (1) config.ini or (2) database.ini.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T20:28:00.000Z
CVE-2008-1753 
Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T20:28:00.000Z
CVE-2008-1754 
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T20:28:00.000Z
CVE-2008-1755 
Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T20:28:00.000Z
CVE-2008-1756 
Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service (daemon crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-11T20:28:00.000Z
CVE-2008-1757 
Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-12T20:00:00.000Z
CVE-2008-1758 
SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-12T20:00:00.000Z
CVE-2008-1759 
SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-12T20:00:00.000Z
CVE-2008-1760 
Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php in _blogadata/include.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-12T20:00:00.000Z
CVE-2008-1761 
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-12T20:00:00.000Z
CVE-2008-1762 
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-12T20:00:00.000Z
CVE-2008-1763 
SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL commands via the id_art parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-12T20:00:00.000Z
CVE-2008-1764 
Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-12T20:00:00.000Z
CVE-2008-1765 
Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header.  NOTE: the related issue in Photoshop CS3 is already covered by CVE-2007-2244.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-23T10:00:00.000Z
CVE-2008-1766 
Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to "two minor security-related bugs."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-12T20:00:00.000Z
CVE-2008-1767 
Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-23T14:00:00.000Z
CVE-2008-1768 
Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-24T18:00:00.000Z
CVE-2008-1769 
VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-24T18:00:00.000Z
CVE-2008-1770 
CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T21:00:00.000Z
CVE-2008-1771 
Integer overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on Debian) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a large Content-Length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T15:00:00.000Z
CVE-2008-1772 
iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T15:00:00.000Z
CVE-2008-1773 
PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T15:00:00.000Z
CVE-2008-1774 
SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T15:00:00.000Z
CVE-2008-1775 
Cross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the displayName parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T16:00:00.000Z
CVE-2008-1776 
PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T16:00:00.000Z
CVE-2008-1777 
The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a long HTTP HEAD request to TCP port 8028.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T16:00:00.000Z
CVE-2008-1778 
Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cause a denial of service (application exit), corrupt data, or trigger incorrect calculations via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T16:00:00.000Z
CVE-2008-1779 
Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T16:00:00.000Z
CVE-2008-1780 
Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications in separate labeling zones to bypass labeling restrictions via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T16:00:00.000Z
CVE-2008-1782 
phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T10:00:00.000Z
CVE-2008-1783 
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T10:00:00.000Z
CVE-2008-1784 
Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2) editu.php, and (3) uidx.php in siteadmin/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T10:00:00.000Z
CVE-2008-1785 
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T10:00:00.000Z
CVE-2008-1786 
The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1787 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) text and (2) ul parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1788 
SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1789 
SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1790 
Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality.  NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1791 
SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1792 
Cross-site scripting (XSS) vulnerability in the insertion filter in the Flickr Drupal module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-alpha allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1793 
Multiple cross-site scripting (XSS) vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the (1) AdNum and (2) Department parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1794 
Multiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x before 5.x-1.10, 5.x-2.x before 5.x-2.0-beta3, and 6.x before 6.x-1.0-beta3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1795 
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via (1) the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or (2) the data__announcements___pk1_pk2__subject parameter in an ADD action to bin/common/announcement.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1796 
Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1797 
Unspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before build 3150 allows remote attackers to cause a denial of service (freeze) via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1798 
Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cal[lng] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z