rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-1799 
Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1800 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the (1) choice, (2) _page_, (3) zone_admin, (4) general_search, and (5) import parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-15T17:00:00.000Z
CVE-2008-1801 
Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T16:00:00.000Z
CVE-2008-1802 
Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified length fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T16:00:00.000Z
CVE-2008-1803 
Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow.  NOTE: the role of the channel_process function was not specified by the original researcher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-12T22:00:00.000Z
CVE-2008-1804 
preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-22T10:00:00.000Z
CVE-2008-1805 
Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-06T22:00:00.000Z
CVE-2008-1806 
Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-16T19:00:00.000Z
CVE-2008-1807 
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-16T19:00:00.000Z
CVE-2008-1808 
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-16T19:00:00.000Z
CVE-2008-1809 
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-14T18:00:00.000Z
CVE-2008-1810 
Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-01T14:00:00.000Z
CVE-2008-1811 
Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote authenticated attack vectors related to flows_030000.wwv_execute_immediate, aka APEX01.  NOTE: the previous information was obtained from the April 2008 CPU.  Oracle has not commented on reliable researcher claims that APEX01 is for insufficient authorization checks for SQL commands in the run_ddl function in flows_030000.wwv_execute_immediate, allowing privilege escalation by certain non-DBA remote authenticated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1812 
Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enterprise Manager for AS 1.0.2.2 and Database 9.0.1.5 has unknown impact and local attack vectors, aka EM01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1813 
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote unauthenticated or authenticated attack vectors related to (1) SYS.DBMS_AQ in the Advanced Queuing component, aka DB01; (2) Core RDBMS, aka DB03; (3) SDO_GEOM in Oracle Spatial, aka DB06; (4) Export, aka DB12; and (5) DBMS_STATS in Query Optimizer, aka DB13.  NOTE: the previous information was obtained from the Oracle CPU.  Oracle has not commented on reliable researcher claims that DB06 is SQL injection, and DB13 occurs when the OUTLN account is reset to use a hard-coded password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1814 
Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3 and 10.1.2.2; and Oracle Collaboration Suite 10.1.2; has unknown impact and remote attack vectors, aka DB04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1815 
Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMS_CDC_UTILITY, aka DB02.  NOTE: the previous information was obtained from the April 2008 CPU.  Oracle has not commented on reliable researcher claims that DB02 is for SQL injection in LOCK_CHANGE_SET.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1816 
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) SDO_UTIL in the Oracle Spatial component, aka DB05; or (2) fine grained auditing in the Audit component, aka DB14.  NOTE: the previous information was obtained from the Oracle CPU.  Oracle has not commented on reliable researcher claims that DB05 is SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1817 
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to (1) SDO_IDX in the Spatial component, aka DB07; and (2) Core RDBMS, aka DB10.  NOTE: the previous information was obtained from the Oracle CPU.  Oracle has not commented on reliable researcher claims that DB07 is SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1818 
Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1819 
Unspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors, aka DB09.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1820 
Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11.  NOTE: the previous information was obtained from the April 2008 CPU.  Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1821 
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+, and 10.1.0.5 has unknown impact and remote attack vectors related to SYS.DBMS_AQJMS_INTERNAL, aka DB15.  NOTE: the previous information was obtained from the April 2008 CPU.  Oracle has not commented on reliable researcher claims that DB15 is for multiple buffer overflows in the (1) AQ$_REGISTER and (2) AQ$_UNREGISTER procedures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1822 
Unspecified vulnerability in the Oracle Application Express component in Oracle Application Express 3.0.1 has unknown impact and remote attack vectors, aka APEX02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1823 
Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.14 has unknown impact and remote attack vectors, aka AS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1824 
Unspecified vulnerability in the Oracle Dynamic Monitoring Service component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.3.3 has unknown impact and remote attack vectors, aka AS02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1825 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 has unknown impact and remote attack vectors, aka AS03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1826 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and attack vectors related to (a) Advanced Pricing, aka (1) APP01 and (2) APP10; and (b) Applications Framework, aka (3) APP05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1827 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to (a) Advanced Pricing component, aka (1) APP02, (2) APP03, and (3) APP09; (b) Application Object Library component, aka (4) APP04, (5) APP07, and (6) APP11; (c) Applications Manager component, aka (7) APP06; (d) and Applications Technology Stack component, aka (8) APP08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1828 
Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.19, 8.48.16, and 8.49.09 has unknown impact and remote authenticated attack vectors, aka PSE01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1829 
Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vectors, aka PSE02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1830 
Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and 9.0 has unknown impact and remote attack vectors, aka PSE03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1831 
Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and remote or local attack vectors, aka (1) SEBL01, (2) SEBL02, (3) SEBL03, (4) SEBL04, (5) SEBL05, and (6) SEBL06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T10:00:00.000Z
CVE-2008-1832 
lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T15:00:00.000Z
CVE-2008-1833 
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T15:00:00.000Z
CVE-2008-1834 
swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict local file access from untrusted sandboxes, which allows remote attackers to read arbitrary files via a crafted Flash file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T16:00:00.000Z
CVE-2008-1835 
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T16:00:00.000Z
CVE-2008-1836 
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T16:00:00.000Z
CVE-2008-1837 
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T16:00:00.000Z
CVE-2008-1838 
SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1839 
Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, and (3) year parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1840 
SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1841 
SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the session_id variable, as exploited in the wild in April 2008.  NOTE: the fix for CVE-2008-1840 was intended to address this vulnerability, but is actually inapplicable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1842 
Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1843 
SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitrary SQL commands via the age_to parameter in a browsebyCat action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1844 
SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1845 
The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a different user who launches mksh and specifies that terminal with the -T option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1846 
The default configuration of SAP NetWeaver before 7.0 SP15 does not enable the "Always Use Secure HTML Editor" (aka Editor Security or Secure Editing) parameter, which allows remote attackers to conduct cross-site scripting (XSS) attacks by entering feedback for a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1847 
SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1848 
Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a show_error action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1849 
Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter in a show_error action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1850 
Multiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI Affiliate allow remote attackers to inject arbitrary web script or HTML via the (1) login, (2) profile, (3) profile2, and (4) ref parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T17:00:00.000Z
CVE-2008-1851 
ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (hang) via certain requests that do not provide all required arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T18:00:00.000Z
CVE-2008-1852 
ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T18:00:00.000Z
CVE-2008-1853 
The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (exit) by sending a 0x36 packet (exit request).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T18:00:00.000Z
CVE-2008-1854 
Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (service termination) via a long HTTP (1) GET, (2) HEAD, (3) PUT, (4) POST, or (5) TRACE request.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T19:00:00.000Z
CVE-2008-1855 
FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot (PrP), allows remote attackers to corrupt memory and cause a denial of service (CMA Framework service crash) via a long invalid method in requests for the /spin//AVClient//AVClient.csp URI, a different vulnerability than CVE-2006-5274.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T19:00:00.000Z
CVE-2008-1856 
plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into the maps_type configuration setting, and then sending a request to maps_view.php, which causes plugins/maps/map.main.class.php to use the modified configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T19:00:00.000Z
CVE-2008-1857 
Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) dirn and (2) fname parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T19:00:00.000Z
CVE-2008-1858 
SQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T19:00:00.000Z
CVE-2008-1859 
SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T19:00:00.000Z
CVE-2008-1860 
Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into includes/Config.php via the default parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-17T16:00:00.000Z