rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-0610 
Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0611 
SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0612 
Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0613 
Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the xoops_redirect parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0614 
SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL commands via the pic parameter in a showpic action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0615 
Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) folder and (2) file parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0616 
SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.  NOTE: it is not clear whether this issue crosses privilege boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0617 
Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter to wp-admin/admin.php, or the (2) messagefield parameter in the guestbook page, and the (3) title parameter in the messagearea.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0618 
Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) gbname, (2) gbemail, (3) gburl, and (4) gbmsg parameters to unspecified programs.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0619 
Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (persistent crash) via a long URI in a .M3U file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0620 
SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0621 
Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0622 
Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the ulang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T11:00:00.000Z
CVE-2008-0623 
Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0624 
Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0625 
Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0628 
The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0629 
Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0630 
Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0631 
Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files via the SaveToDisk method, or (2) modify files via the AddStringToFile method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0632 
Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog's root directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0633 
Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of service (exception) via a user name with a large number of quotes, which triggers the overflow during escaping.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0634 
Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0635 
Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-06T20:00:00.000Z
CVE-2008-0636 
Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SC_About.htm, which provides version and patch information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T19:00:00.000Z
CVE-2008-0638 
Heap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual buffer size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-21T20:00:00.000Z
CVE-2008-0639 
Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854.  NOTE: this issue exists because of an incomplete fix for CVE-2007-6701.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-13T20:00:00.000Z
CVE-2008-0640 
Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-08T01:00:00.000Z
CVE-2008-0642 
Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-15T00:00:00.000Z
CVE-2008-0643 
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-12T00:00:00.000Z
CVE-2008-0644 
Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism for applications via unspecified vectors related to the setEncoding function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-12T00:00:00.000Z
CVE-2008-0645 
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.php, (2) menu/item.php, and (3) modules/conf_modules.php in admin/system/; and (4) system/login.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0646 
The bdecode_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service (stack exhaustion and crash) via a crafted bencoded message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0647 
Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 (aka Lianzong Game Platform) allow remote attackers to execute arbitrary code via long arguments to the (1) hgs_startGame and (2) hgs_startNotify methods, as exploited in the wild as of February 2008.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0648 
Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) indexFooter.php; and (2) DatabaseManager.php, (3) FieldManager.php, (4) Filter.php, (5) Form.php, (6) FormManager.php, (7) LoginManager.php, and (8) Filters/SingleFilter.php in scripts/classes/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0649 
SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0650 
SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta allows remote attackers to execute arbitrary SQL commands via the username field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0651 
SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL commands via the username field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0652 
SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0653 
SQL injection vulnerability in index.php in the Ynews (com_ynews) 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showYNews action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0654 
Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _VIEW (view) parameter to (1) index.php, (2) html/sitio/index.php, or (3) src/sistema/vistas/template/tpl_inicio.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0655 
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0656 
Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0657 
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-07T20:00:00.000Z
CVE-2008-0658 
slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-13T20:00:00.000Z
CVE-2008-0659 
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUploader.ocx 1.0.0.4, allows remote attackers to execute arbitrary code via a long Action property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-08T01:00:00.000Z
CVE-2008-0660 
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-08T01:00:00.000Z
CVE-2008-0661 
Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file with a long URI. NOTE: this might be the same issue as CVE-2004-1569.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-08T01:00:00.000Z
CVE-2008-0662 
The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-08T01:00:00.000Z
CVE-2008-0663 
Novell Challenge Response Client (LCM) 2.7.5 and earlier, as used with Novell Client for Windows 4.91 SP4, allows users with physical access to a locked system to obtain contents of the clipboard by pasting the contents into the Challenge Question field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-08T01:00:00.000Z
CVE-2008-0664 
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-08T01:00:00.000Z
CVE-2008-0665 
wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-11T20:00:00.000Z
CVE-2008-0666 
Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on (1) the /tmp/pe.tmp.$$ temporary file used by wml_contrib/wmg.cgi and (2) temporary files used by wml_backend/p3_eperl/eperl_sys.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-11T20:00:00.000Z
CVE-2008-0667 
The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document.  NOTE: this issue might be subsumed by CVE-2008-0655.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-11T20:00:00.000Z
CVE-2008-0668 
The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-11T20:00:00.000Z
CVE-2008-0669 
Cross-site scripting (XSS) vulnerability in search.cgi in Sift Unity allows remote attackers to inject arbitrary web script or HTML via the qt parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T00:00:00.000Z
CVE-2008-0670 
SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detalhe action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T00:00:00.000Z
CVE-2008-0671 
Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T00:00:00.000Z
CVE-2008-0672 
The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character, which triggers a NULL dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T00:00:00.000Z
CVE-2008-0673 
TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T00:00:00.000Z
CVE-2008-0674 
Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-18T22:00:00.000Z
CVE-2008-0675 
SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pre-1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the node_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T00:00:00.000Z
CVE-2008-0676 
Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T00:00:00.000Z
CVE-2008-0677 
SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T00:00:00.000Z
CVE-2008-0678 
SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T00:00:00.000Z