rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-6410 
Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the show parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T11:00:00.000Z
CVE-2008-6411 
Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the login cookie to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T11:00:00.000Z
CVE-2008-6412 
Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows "low privileged" users to gain administrator privileges via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T11:00:00.000Z
CVE-2008-6413 
Cross-site scripting (XSS) vulnerability in the Answers module 5.x-1.x-dev and possibly other 5.x versions, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a Simple Answer to a question.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T11:00:00.000Z
CVE-2008-6414 
SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T11:00:00.000Z
CVE-2008-6415 
Buffer overflow in YoungZSoft CCProxy 6.5 might allow remote attackers to execute arbitrary code via a CONNECTION request with a long hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T11:00:00.000Z
CVE-2008-6416 
Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "internal pages."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6417 
Unspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the "installation directory" via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6418 
SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the info_hash parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6419 
Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) sgc_id parameter to display_blog.php, (2) scm_mem_id parameter to social_my_profile_download.php, and the (3) catid parameter to social_forum_subcategories.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6420 
Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.php, (2) webadmin/download.php, and (3) webadmin/download_file.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6421 
PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6422 
Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) weapon.php and (2) map.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6423 
Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arbitrary local files via a .. (dot dot) in the site_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6424 
Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. (dot dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6425 
SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the news_id parameter, a different vector than CVE-2008-2456.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6427 
SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6428 
The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6429 
SQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_request action to index2.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6430 
SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6431 
Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright and (3) verandproname parameters to newtem/footer/bsd01footer.php, and the (4) topads and (5) myplugin parameters to newtem/header/bsd01header.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6433 
Cross-site scripting (XSS) vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6434 
SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6435 
Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[home], (2) lang[admin_menu], and (3) lang[admin_menu_page_overview] parameters to cms/includes/header.inc.php; and the (4) lang[login_username] and (5) lang[login_password] parameters to cms/includes/login.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6436 
Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6437 
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to error.php, and the (2) nickname and (3) randomid parameters to part/menu.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6438 
SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2008-2455.  NOTE: it was later reported that 2.1.4 is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6439 
Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6440 
Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the (1) /display and (2) /kb URIs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2008-6441 
Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed package (PKG), and possibly (3) the LEVEL parameter in a WELCOME command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6442 
Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6443 
SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6444 
Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6445 
Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and the ability to upload arbitrary PHP code.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6446 
Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6447 
Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers to execute arbitrary code via a long first argument to the CreateStore method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6448 
Cross-site scripting (XSS) vulnerability in install.cgi in SKYARC System MTCMS WYSIWYG Editor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6449 
Cross-site request forgery (CSRF) vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6450 
Cross-site scripting (XSS) vulnerability in Under Construction, Baby (UCB) PC2M 0.9.22.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T14:00:00.000Z
CVE-2008-6451 
SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2004-2036 or CVE-2005-3509.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6452 
SQL injection vulnerability in show_vote.php in Oceandir 2.9 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6453 
Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6454 
SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6455 
Session fixation vulnerability in Edikon phpShop 0.8.1 allows remote attackers to hijack web sessions via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6456 
SQL injection vulnerability in the HBook (h_book) extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6457 
SQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6458 
SQL injection vulnerability in the FE address edit for tt_address & direct mail (dmaddredit) extension 0.4.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6459 
SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6460 
SQL injection vulnerability in the Simple Random Objects (mw_random_objects) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6461 
SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6462 
SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6463 
SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension for TYPO3, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6464 
SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6465 
Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3) login parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6466 
SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6467 
SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the job_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6468 
SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via the area parameter in a browse action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6469 
SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6470 
Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the (1) mods/messages/getusers.php and (2) mods/abcode/listimg.php files.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6471 
SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-13T10:00:00.000Z
CVE-2008-6472 
The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-14T18:00:00.000Z
CVE-2008-6473 
_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-16T16:00:00.000Z
CVE-2008-6474 
The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to inject arbitrary Perl code via unspecified configuration settings related to Perl EP3 with templates, probably triggering static code injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-16T16:00:00.000Z
CVE-2008-6475 
SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote attackers to execute arbitrary SQL commands via the Via HTTP header (HTTP_VIA) to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-16T16:00:00.000Z
CVE-2008-6476 
Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-16T16:00:00.000Z
CVE-2008-6477 
SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-16T16:00:00.000Z
CVE-2008-6478 
Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft (build 4.0.0-365.6.swsoft) and 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag to (1) create-file and (2) list-control in vz/cp/vzdir/infrman/envs/files/; or modify system configuration via the path parameter to vz/cp/vzdir/infrman/envs/files/index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-16T19:00:00.000Z
CVE-2008-6479 
Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels Virtuozzo 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to modify the password via a link or IMG tag to vz/cp/pwd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-16T19:00:00.000Z
CVE-2008-6480 
Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use a modified image parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-16T19:00:00.000Z
CVE-2008-6481 
SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-17T19:12:00.000Z
CVE-2008-6482 
PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfig_live_site parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-18T15:00:00.000Z
CVE-2008-6483 
PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase or Froogle) component 1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-18T15:00:00.000Z