rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-5031 
Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c.  NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-10T16:00:00.000Z
CVE-2008-5032 
Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c.  NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-10T16:00:00.000Z
CVE-2008-5033 
The chip_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2.6.25.19, 2.6.26.x before 2.6.26.7, and 2.6.27.x before 2.6.27.3 allows attackers to cause a denial of service (NULL function pointer dereference and OOPS) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-10T16:00:00.000Z
CVE-2008-5034 
master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file.  NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-10T16:00:00.000Z
CVE-2008-5035 
The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote attackers to cause a denial of service (daemon crash or hang) via a packet with an invalid length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-10T16:00:00.000Z
CVE-2008-5036 
Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c.  NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-10T22:00:00.000Z
CVE-2008-5037 
SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-12T20:18:00.000Z
CVE-2008-5038 
Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name" requests that cause one thread to operate on memory after it has been freed in another thread, which triggers memory corruption, aka Novell Bug 373852.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-12T20:18:00.000Z
CVE-2008-5039 
Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via the tid parameter in a team action to modules.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-12T20:18:00.000Z
CVE-2008-5040 
Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1) myforum_login and (2) myforum_pass cookies to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-12T20:18:00.000Z
CVE-2008-5041 
Sweex RO002 Router with firmware Ts03-072 has "rdc123" as its default password for the "rdc123" account, which makes it easier for remote attackers to obtain access.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-12T21:00:00.000Z
CVE-2008-5042 
Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-12T21:00:00.000Z
CVE-2008-5043 
Multiple cross-site scripting (XSS) vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via (1) the elementid parameter in a generatedreportresults action to the ReportTree program, (2) the jnlpname parameter to the Launch program, or (3) the :tasklabel parameter to the ReportRequest program, related to the name of a report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-12T23:00:00.000Z
CVE-2008-5044 
Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-12T23:00:00.000Z
CVE-2008-5045 
Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to cause a denial of service (crash) via a 200 server response that is exactly 1024 characters long.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T00:00:00.000Z
CVE-2008-5046 
SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL commands via the manufacturers_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T01:00:00.000Z
CVE-2008-5047 
SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T01:00:00.000Z
CVE-2008-5048 
Buffer overflow in Atepmon.sys in ISecSoft Anti-Trojan Elite 4.2.1 and earlier, and possibly 4.2.2, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via long inputs to the 0x00222494 IOCTL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T01:00:00.000Z
CVE-2008-5049 
Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other versions including 3.3.3, allows local users to gain privileges via long inputs to the (1) 0x002224A4, (2) 0x002224C0, and (3) 0x002224CC IOCTL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T01:00:00.000Z
CVE-2008-5050 
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T01:00:00.000Z
CVE-2008-5051 
SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PostID parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T01:00:00.000Z
CVE-2008-5052 
The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5053 
PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5054 
Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters to customer_login.php and the (3) user_name and (4) user_pass parameters to admin/index.php. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5055 
SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to execute arbitrary SQL commands via the department_id parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5056 
Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5057 
SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5058 
SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the user parameter, as reachable from siteadmin/adminlogin.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5059 
Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript event in the new_language parameter in a login action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5060 
Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to (1) export_batch.inc.php, (2) run_auto_suspend.cron.php, and (3) send_email_cache.php in include/scripts/; (4) include/misc/mod_2checkout/2checkout_return.inc.php; and (5) include/html/nettools.popup.php, different vectors than CVE-2006-4034 and CVE-2005-1054.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5061 
Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5062 
Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5063 
PHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the Tipo parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T11:00:00.000Z
CVE-2008-5064 
SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T17:00:00.000Z
CVE-2008-5065 
TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestBook_login cookie to admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T17:00:00.000Z
CVE-2008-5066 
PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T17:00:00.000Z
CVE-2008-5067 
Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T17:00:00.000Z
CVE-2008-5068 
Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter to index.php and the (2) searchtext parameter to search.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-13T17:00:00.000Z
CVE-2008-5069 
SQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T16:00:00.000Z
CVE-2008-5070 
SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to (1) profiles/index.php and (2) profiles/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T16:00:00.000Z
CVE-2008-5071 
Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T16:00:00.000Z
CVE-2008-5072 
vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash) via a malformed FLV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T16:00:00.000Z
CVE-2008-5073 
Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T16:00:00.000Z
CVE-2008-5074 
SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T16:00:00.000Z
CVE-2008-5075 
Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) img.php, (b) file.php, (c) mail.php, (d) thumb.php, (e) zip.php, and (f) zipit.php, and (2) the view parameter to (g) browser.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T16:00:00.000Z
CVE-2008-5076 
htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T18:00:00.000Z
CVE-2008-5077 
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-07T17:00:00.000Z
CVE-2008-5078 
Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code via an epsf escape sequence with a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-19T17:00:00.000Z
CVE-2008-5079 
net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-09T00:00:00.000Z
CVE-2008-5080 
awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the query_string parameter.  NOTE: this issue exists because of an incomplete fix for CVE-2008-3714.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-03T18:00:00.000Z
CVE-2008-5081 
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-17T02:00:00.000Z
CVE-2008-5082 
The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows remote authenticated users with enrollment privileges to bypass intended authentication policies by performing enrollment with a software key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-30T19:00:00.000Z
CVE-2008-5083 
In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON.
Problem types: description: unauthorized access private property
Affected products: vendor: JON
product: JON
Published: 2019-11-07T23:18:28.000Z
CVE-2008-5086 
Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-19T17:00:00.000Z
CVE-2008-5087 
SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5088 
Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) email.php and (2) question.php, a different vector than CVE-2008-1909.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5089 
Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the (1) Pages.Save, (2) PrintReport, or (3) Canvas.Save method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5090 
Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5091 
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5092 
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5093 
Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5094 
Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5095 
Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5096 
Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5097 
SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-14T19:00:00.000Z
CVE-2008-5098 
Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-2904.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-17T18:00:00.000Z