rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-4108 
Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file.  NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4109 
A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-17T18:06:00.000Z
CVE-2008-4110 
Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long URL in the second argument to the Connect method.  NOTE: this issue is not a vulnerability in many environments, since the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T22:00:00.000Z
CVE-2008-4111 
Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T23:00:00.000Z
CVE-2008-4113 
The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T23:00:00.000Z
CVE-2008-4114 
srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via an SMB WRITE_ANDX packet with an offset that is inconsistent with the packet size, related to "insufficiently validating the buffer size," as demonstrated by a request to the \PIPE\lsarpc named pipe, aka "SMB Validation Denial of Service Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T23:00:00.000Z
CVE-2008-4115 
TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T23:00:00.000Z
CVE-2008-4116 
Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web page or embedded in a (2) .mp4 or (3) .mov file, possibly related to the Check_stack_cookie function and an off-by-one error that leads to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-17T18:06:00.000Z
CVE-2008-4117 
Unspecified vulnerability in a web page in the PRM module in Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-17T18:06:00.000Z
CVE-2008-4118 
Cross-site scripting (XSS) vulnerability in High Norm Sound Master 2nd 1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-17T19:00:00.000Z
CVE-2008-4119 
Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-27T00:00:00.000Z
CVE-2008-4120 
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-29T17:00:00.000Z
CVE-2008-4121 
Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in a search.quick action to search.php and (2) the name parameter in a sendtofriend action to sendtofriend.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-21T16:00:00.000Z
CVE-2008-4122 
Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-19T17:00:00.000Z
CVE-2008-4125 
The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4126 
PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4127 
Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service (failure of subsequent image rendering) via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4128 
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T20:00:00.000Z
CVE-2008-4129 
Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload (aka zip upload) functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T20:00:00.000Z
CVE-2008-4130 
Cross-site scripting (XSS) vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted Flash animation, related to the ability of the animation to "interact with the embedding page."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T20:00:00.000Z
CVE-2008-4131 
Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with (1) the -t option and (2) the :tag command in the (a) vi, (b) ex, (c) vedit, (d) view, and (e) edit programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T17:04:00.000Z
CVE-2008-4132 
Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.20072.239 allows remote attackers to execute arbitrary code via a long first argument to the Archive method.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T17:04:00.000Z
CVE-2008-4133 
The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T17:04:00.000Z
CVE-2008-4134 
PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T17:04:00.000Z
CVE-2008-4135 
Symbian OS S60 3rd edition on the Nokia E90 Communicator 07.40.1.2 Ra-6 and Nseries N82 allows remote attackers to cause a denial of service (device crash) via multiple deauthentication (DeAuth) frames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T17:04:00.000Z
CVE-2008-4136 
Michael Roth Software Personal FTP Server (PFT) 6.0f allows remote attackers to cause a denial of service (service crash) via multiple RETR commands, possibly involving long filenames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4137 
PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footer_file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4138 
PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4139 
Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4140 
Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4141 
Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the web_root parameter to (1) includes/function_core.php and (2) templates/layout_lyrics.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4142 
SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the es_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4143 
SQL injection vulnerability in category_search.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4144 
SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4145 
SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4146 
Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field and (2) change the visit-counter value via a modified counter field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4147 
Cross-site scripting (XSS) vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an attached file that has a modified Content-Type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4148 
SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to composing queries without using the Drupal database API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4149 
Cross-site scripting (XSS) vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link page header" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4150 
SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4151 
Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (dot dot) in the neturl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4152 
Cross-site scripting (XSS) vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via a node title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4153 
The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a node before displaying comments, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T18:00:00.000Z
CVE-2008-4154 
SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the we_objectID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T23:00:00.000Z
CVE-2008-4155 
Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. (dot dot) in the (1) module or (2) action parameter in (a) www/index.php; the (3) module, (4) ss_module, or (5) ss_action parameter in (b) modules/Module/index.php or (c) modules/Themes/index.php; or the (6) module parameter in (d) inc/vmenu.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T23:00:00.000Z
CVE-2008-4156 
SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-19T23:00:00.000Z
CVE-2008-4157 
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610.  NOTE: it was later reported that 1.2.3 is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T16:20:00.000Z
CVE-2008-4158 
Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) flag and (2) inc parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T16:20:00.000Z
CVE-2008-4159 
SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page (pageid) parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T16:20:00.000Z
CVE-2008-4160 
Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via unknown vectors related to the Solaris Access Control List (ACL) implementation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T17:00:00.000Z
CVE-2008-4161 
SQL injection vulnerability in search_inv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and order_by parameters in a search_all action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T17:00:00.000Z
CVE-2008-4162 
Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the g_site_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T17:00:00.000Z
CVE-2008-4163 
Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service (UDP client handler termination) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T17:00:00.000Z
CVE-2008-4164 
cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T17:00:00.000Z
CVE-2008-4165 
admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T18:00:00.000Z
CVE-2008-4166 
Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a denial of service (application crash) by attempting to URL encode a string containing many instances of an invalid character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T18:00:00.000Z
CVE-2008-4167 
useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) remove an Administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T18:00:00.000Z
CVE-2008-4168 
Cross-site scripting (XSS) vulnerability in verify_login.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the form_username parameter (aka user name field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T18:00:00.000Z
CVE-2008-4169 
SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T18:00:00.000Z
CVE-2008-4170 
create_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T18:00:00.000Z
CVE-2008-4171 
SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T18:00:00.000Z
CVE-2008-4172 
SQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote attackers to execute arbitrary SQL commands via the lnkid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T18:00:00.000Z
CVE-2008-4173 
SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-22T18:00:00.000Z
CVE-2008-4174 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) currentpath, (2) invert, (3) search, and (4) sort parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-23T15:00:00.000Z
CVE-2008-4175 
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) ucat parameter to upgrade.php and the (2) id parameter to linkadmin/edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-23T15:00:00.000Z
CVE-2008-4176 
SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL commands via the oyun parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-23T15:00:00.000Z
CVE-2008-4177 
SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-23T15:00:00.000Z