rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-4047 
Unspecified vulnerability in Novell Forum (formerly SiteScape Forum) 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrary TCL code via a modified URL.  NOTE: this might overlap CVE-2007-6515.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4048 
Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4049 
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4050 
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4051 
Cross-site scripting (XSS) vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4052 
Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service (crash) or gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4053 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the (1) param, (2) cat_id, and (3) view parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4054 
SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4055 
SQL injection vulnerability in tops_top.php in Million Pixel Ad Script (Million Pixel Script) allows remote attackers to execute arbitrary SQL commands via the id_cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4056 
Cross-site scripting (XSS) vulnerability in admin/login.php in Matterdaddy Market 1.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4057 
Unspecified vulnerability in Objective Development Sharity 3 before 3.5 has unknown impact and attack vectors, related to a "serious security problem."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-11T14:00:00.000Z
CVE-2008-4058 
The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4059 
The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to a SCRIPT element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4060 
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to create documents that lack script-handling objects, and execute arbitrary code with chrome privileges, via vectors related to (1) the document.loadBindingDocument function and (2) XSLT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4061 
Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via an mtd element with a large integer value in the rowspan attribute, related to the layout engine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4062 
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c, (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp, and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4063 
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the "this" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the "g" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4064 
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to graphics rendering and (1) handling of a long alert messagebox in the cairo_surface_set_device_offset function, (2) integer overflows when handling animated PNG data in the info_callback function in nsPNGDecoder.cpp, and (3) an integer overflow when handling SVG data in the nsSVGFEGaussianBlurElement::SetupPredivide function in nsSVGFilters.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4065 
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka "Stripped BOM characters bug."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4066 
Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a "jav&#56325ascript" sequence, aka "HTML escaped low surrogates bug."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4067 
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4068 
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4069 
The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-24T18:00:00.000Z
CVE-2008-4070 
Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-27T00:00:00.000Z
CVE-2008-4071 
A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property value with an invalid acroie:// URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4072 
Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter in a pickup action or (2) the sql_cid parameter, different vectors than CVE-2008-3588.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4073 
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4074 
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4075 
Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4076 
Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4077 
The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large Content-Length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4078 
SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4079 
Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4.20, and 1.54 and earlier; and Movable Type Community Solution allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4080 
SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username parameter to admin/library/authenticate.php and the (2) download parameter to downloadmp3.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4081 
admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T15:00:00.000Z
CVE-2008-4082 
SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4083 
Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4084 
SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4085 
plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4086 
SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4087 
Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of service or execute arbitrary code via a Beatcraft Project (aka bcproj) file with a long string in a certain instruments title field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4088 
SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the sid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4089 
Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4090 
SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an addtocart action, a different vector than CVE-2007-2672.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4091 
SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4092 
SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the artid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4093 
SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-15T16:00:00.000Z
CVE-2008-4094 
Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-30T17:00:00.000Z
CVE-2008-4095 
Multiple unspecified vulnerabilities in the Importer in Flip4Mac WMV before 2.2.1 have unknown impact and attack vectors, different vulnerabilities than CVE-2007-6713.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-16T10:00:00.000Z
CVE-2008-4096 
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-17T18:06:00.000Z
CVE-2008-4097 
MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-17T18:06:00.000Z
CVE-2008-4098 
MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-17T18:06:00.000Z
CVE-2008-4099 
PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4100 
GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.  NOTE: the vendor reports that this is intended behavior and is compatible with the product's intended role in a trusted environment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4101 
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4102 
Joomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for attackers to guess the pseudo-random values produced by PHP's mt_rand function, as demonstrated by guessing password reset tokens, a different vulnerability than CVE-2008-3681.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4103 
The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4104 
Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4105 
JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4106 
WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the user_login column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's password to a random value by registering a similar username and then requesting a password reset, related to a "SQL column truncation vulnerability." NOTE: the attacker can discover the random password by also exploiting CVE-2008-4107.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z
CVE-2008-4107 
The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset functionality in Joomla! 1.5.x and WordPress before 2.6.2, a different vulnerability than CVE-2008-2107, CVE-2008-2108, and CVE-2008-4102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-18T17:47:00.000Z