rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-4534 
SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-10T18:00:00.000Z
CVE-2008-4535 
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1.2a and earlier, EC-CUBE Ver2 Beta(RC) 2.2.0-beta and earlier, and EC-CUBE Community Edition Nighly-Build r17623 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4536 and CVE-2008-4537.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-10T18:00:00.000Z
CVE-2008-4536 
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4537.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-10T18:00:00.000Z
CVE-2008-4537 
Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.1.1-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17336 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4536.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-10T18:00:00.000Z
CVE-2008-4539 
Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow.  NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-29T15:00:00.000Z
CVE-2008-4540 
Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-13T18:00:00.000Z
CVE-2008-4541 
Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-13T18:00:00.000Z
CVE-2008-4542 
Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data store).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-13T18:00:00.000Z
CVE-2008-4543 
Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-13T18:00:00.000Z
CVE-2008-4544 
Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-13T18:00:00.000Z
CVE-2008-4545 
Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-13T18:00:00.000Z
CVE-2008-4546 
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T15:00:00.000Z
CVE-2008-4547 
Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to execute arbitrary code via a long second argument to the TimeSpanFormat method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T17:00:00.000Z
CVE-2008-4548 
Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control (CamPanel.dll) in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T17:00:00.000Z
CVE-2008-4549 
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T17:00:00.000Z
CVE-2008-4551 
strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T19:00:00.000Z
CVE-2008-4552 
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T19:00:00.000Z
CVE-2008-4553 
qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T19:00:00.000Z
CVE-2008-4554 
The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T19:00:00.000Z
CVE-2008-4555 
Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T20:00:00.000Z
CVE-2008-4556 
Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T22:00:00.000Z
CVE-2008-4557 
plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T22:00:00.000Z
CVE-2008-4558 
Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-14T23:00:00.000Z
CVE-2008-4559 
HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program.  NOTE: this issue may be partially covered by CVE-2009-0205.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-08T21:00:00.000Z
CVE-2008-4560 
HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via (1) a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or (2) a crafted parameter in a request to the ovlaunch.exe CGI program, which reveals configuration details. NOTE: this issue may be partially covered by CVE-2009-0205.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-08T21:00:00.000Z
CVE-2008-4562 
Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-08T21:00:00.000Z
CVE-2008-4563 
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-11T14:00:00.000Z
CVE-2008-4564 
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-18T15:00:00.000Z
CVE-2008-4569 
SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL commands via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T18:12:00.000Z
CVE-2008-4570 
SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T18:12:00.000Z
CVE-2008-4571 
Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T18:12:00.000Z
CVE-2008-4572 
GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper free call, and possibly triggering a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T18:12:00.000Z
CVE-2008-4573 
SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T18:12:00.000Z
CVE-2008-4574 
SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL commands via the linkid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T18:12:00.000Z
CVE-2008-4575 
Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service (crash) via (1) a long -cmd argument and (2) unspecified vectors related to "a bunch of potential string overflows."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T19:00:00.000Z
CVE-2008-4576 
sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init timer expires.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T19:00:00.000Z
CVE-2008-4577 
The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T20:00:00.000Z
CVE-2008-4578 
The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T20:00:00.000Z
CVE-2008-4579 
The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T20:00:00.000Z
CVE-2008-4580 
fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fence_manual.fifo temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T20:00:00.000Z
CVE-2008-4581 
The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T20:00:00.000Z
CVE-2008-4582 
Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly identify the context of Windows .url shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via an HTML document that is directly accessible through a filesystem, as demonstrated by documents in (1) local folders, (2) Windows share folders, and (3) RAR archives, and as demonstrated by IFRAMEs referencing shortcuts that point to (a) about:cache?device=memory and (b) about:cache?device=disk, a variant of CVE-2008-2810.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T20:00:00.000Z
CVE-2008-4583 
Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T22:00:00.000Z
CVE-2008-4584 
Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T22:00:00.000Z
CVE-2008-4585 
Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions via a direct request to admin/home.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T22:00:00.000Z
CVE-2008-4586 
Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T22:00:00.000Z
CVE-2008-4587 
Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods.  NOTE: this could be leveraged for code execution by uploading executable files to Startup folders.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T22:00:00.000Z
CVE-2008-4588 
Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to the ABOR command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T22:00:00.000Z
CVE-2008-4589 
Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-15T22:00:00.000Z
CVE-2008-4590 
Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to admin/login.php and (2) the post parameter to admin/news.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-16T17:00:00.000Z
CVE-2008-4591 
Multiple cross-site scripting (XSS) vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[access_forbiden] and (2) lang[ident_title] parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-16T17:00:00.000Z
CVE-2008-4592 
Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-16T17:00:00.000Z
CVE-2008-4593 
Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen, aka Apple bug number 6267416.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T20:00:00.000Z
CVE-2008-4594 
Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8361P-BEM1 chipset has unknown impact and attack vectors, probably remote.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T20:00:00.000Z
CVE-2008-4595 
Multiple unspecified vulnerabilities in Slaytanic Scripts Content Plus 2.1.1 have unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T21:00:00.000Z
CVE-2008-4596 
Cross-site scripting (XSS) vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in generated pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T21:00:00.000Z
CVE-2008-4597 
Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T21:00:00.000Z
CVE-2008-4598 
Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to "numerous flaws" that are not related to XSS or access control, a different vulnerability than CVE-2008-4596 and CVE-2008-4597.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T21:00:00.000Z
CVE-2008-4599 
SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T22:00:00.000Z
CVE-2008-4600 
configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T22:00:00.000Z
CVE-2008-4601 
Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habari_username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T22:00:00.000Z
CVE-2008-4602 
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T22:00:00.000Z
CVE-2008-4603 
SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search_games action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T22:00:00.000Z
CVE-2008-4604 
SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T22:00:00.000Z
CVE-2008-4605 
SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and (2) menu.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T22:00:00.000Z
CVE-2008-4606 
Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) location_id parameter to locationdel.php and (2) vlan_id parameter to vlanedit.php.  NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-17T22:00:00.000Z