rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-2120 
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T15:00:00.000Z
CVE-2008-2121 
The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection timeouts) via a TCP SYN flood attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T15:00:00.000Z
CVE-2008-2122 
IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T15:00:00.000Z
CVE-2008-2123 
Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary web script or HTML via (1) a "<>" sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string, a different vector than CVE-2006-5114.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2124 
SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2125 
SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary SQL commands via the artistId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2126 
Multiple cross-site scripting (XSS) vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to index.php and the (2) returnURL parameter to tux-login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2127 
Cross-site scripting (XSS) vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2128 
PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter, a different vulnerability than CVE-2006-5588 and CVE-2006-3185.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2129 
SQL injection vulnerability in index.php in Galleristic 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2130 
SQL injection vulnerability in poll_vote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2131 
Cross-site scripting (XSS) vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2132 
SQL injection vulnerability in step1.asp in Systementor PostcardMentor allows remote attackers to execute arbitrary SQL commands via the cat_fldAuto parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2133 
Cross-site scripting (XSS) vulnerability in the Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter in a new entry, as demonstrated by a CSS property in the STYLE attribute of a DIV element, a different vulnerability than CVE-2008-1873.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2134 
The Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to obtain access to arbitrary user accounts, and alter or delete data, via a modified username in an unspecified cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2135 
Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) contentname parameter to showdetails.php and the (2) article parameter to printer.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T18:00:00.000Z
CVE-2008-2136 
Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2137 
The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-29T16:00:00.000Z
CVE-2008-2138 
Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav_portal/portal/ by sending a request containing a trailing "%0A" (encoded line feed), then using the session ID that is generated from that request.  NOTE: as of 20080512, Oracle has not commented on the accuracy of this report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T16:00:00.000Z
CVE-2008-2139 
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T17:00:00.000Z
CVE-2008-2140 
Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T17:00:00.000Z
CVE-2008-2142 
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T19:00:00.000Z
CVE-2008-2143 
Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T19:00:00.000Z
CVE-2008-2144 
Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T19:00:00.000Z
CVE-2008-2145 
Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username in the "forgotten password" dialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T19:00:00.000Z
CVE-2008-2146 
wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T20:00:00.000Z
CVE-2008-2147 
Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T20:00:00.000Z
CVE-2008-2148 
The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T21:00:00.000Z
CVE-2008-2149 
Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option.  NOTE: this issue probably does not cross privilege boundaries except in cases in which Wordnet is used as a back end.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T21:00:00.000Z
CVE-2008-2152 
Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-10T18:00:00.000Z
CVE-2008-2154 
IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALL_JAR (aka sqlj.install_jar) procedure, which allows remote authenticated users to create or overwrite arbitrary files via unspecified calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-03T20:35:00.000Z
CVE-2008-2157 
robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-29T16:00:00.000Z
CVE-2008-2158 
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-29T16:00:00.000Z
CVE-2008-2159 
Microsoft Internet Explorer 7 can save encrypted pages in the cache even when the DisableCachingOfSSLPages registry setting is enabled, which might allow local users to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T22:00:00.000Z
CVE-2008-2160 
Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted (1) JPEG and (2) GIF images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T22:00:00.000Z
CVE-2008-2161 
Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T22:00:00.000Z
CVE-2008-2162 
Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T22:00:00.000Z
CVE-2008-2163 
Cross-site scripting (XSS) vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to "WYSIWYG editors."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T17:00:00.000Z
CVE-2008-2165 
Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-16T06:54:00.000Z
CVE-2008-2166 
Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unknown parameters in index.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T20:14:00.000Z
CVE-2008-2167 
Cross-site scripting (XSS) vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T20:14:00.000Z
CVE-2008-2168 
Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T21:00:00.000Z
CVE-2008-2169 
Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2170 
Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2171 
Unspecified vulnerability in AlaxalA AX routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2172 
Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2173 
Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2174 
Multiple unspecified vulnerabilities in Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 have unknown impact and attack vectors, related to "various areas where security was missing."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2175 
SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2176 
Cross-site scripting (XSS) vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2177 
Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to show.php and the (2) login parameter to admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2178 
Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the searchTerms parameter in an editArticleCategories operation (aka an admin category search).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2179 
Cross-site scripting (XSS) vulnerability in SystemList.jsp in SysAid 5.1.08 allows remote attackers to inject arbitrary web script or HTML via the searchField parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2180 
Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) admin_username parameter (aka the username field) to admin/index.php and the (2) search_text and (3) search_category parameters to search.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2181 
Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the (1) search_text and (2) search_category parameters.  NOTE: the XSS reportedly occurs in a forced SQL error message.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2182 
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2183 
SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2184 
Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) mois, (2) an, (3) jour, and (4) id parameters to index.php, and the (5) login parameter to gestion/logon.php, different vectors than CVE-2008-2183.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2185 
Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to include arbitrary local files via directory traversal sequences in the page parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2186 
Cross-site scripting (XSS) vulnerability in index.php in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2187 
Cross-site scripting (XSS) vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbitrary web script or HTML via the level parameter in a redirect action, possibly involving interface/redirect.htm.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2188 
Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) bookCopyright and (2) ver parameters to (a) footer.php, and the (3) bookName, (4) bookMetaTags, and (5) estiloCSS parameters to (b) header.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T22:00:00.000Z
CVE-2008-2189 
SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-14T17:00:00.000Z
CVE-2008-2190 
SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.  NOTE: it was later reported that 5.0 and earlier are also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-14T17:00:00.000Z
CVE-2008-2191 
SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a display_term action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-14T17:00:00.000Z
CVE-2008-2192 
Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-14T17:00:00.000Z
CVE-2008-2193 
PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the site parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-14T17:00:00.000Z
CVE-2008-2194 
SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-14T17:00:00.000Z