rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-0273 
Interpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6, when Internet Explorer 6 is used, allows remote attackers to conduct cross-site scripting (XSS) attacks via invalid UTF-8 byte sequences, which are not processed as UTF-8 by Drupal's HTML filtering, but are processed as UTF-8 by Internet Explorer, effectively removing characters from the document and defeating the HTML protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0274 
Cross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allows remote attackers to inject arbitrary web script or HTML via crafted links involving theme .tpl.php files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0275 
The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1) titles, (2) teasers, and (3) bodies, which might allow remote attackers to gain access to syndicated content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0276 
Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0277 
Unspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users with node-creation privileges to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0278 
SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a sm_window action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0279 
SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitrary SQL commands via the topic parameter.  NOTE: the categorie parameter might also be affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T19:00:00.000Z
CVE-2008-0280 
SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the (1) a or (2) cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T20:00:00.000Z
CVE-2008-0281 
SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idFamille parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T20:00:00.000Z
CVE-2008-0282 
SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T20:00:00.000Z
CVE-2008-0283 
PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T20:00:00.000Z
CVE-2008-0284 
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T20:00:00.000Z
CVE-2008-0285 
ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-15T23:00:00.000Z
CVE-2008-0286 
SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) password fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T00:00:00.000Z
CVE-2008-0287 
PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php and (2) checkout.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T01:00:00.000Z
CVE-2008-0288 
Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands via the id, which is not properly handled in (1) classes/IADomain.php, (2) classes/IACollection.php, and (3) classes/IAUser.php, as demonstrated via the id parameter in a collection.imageview action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T01:00:00.000Z
CVE-2008-0289 
PHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter.  NOTE: a second vector might exist via the l parameter.  NOTE: as of 20080118, the vendor has disputed the set of affected versions, stating that the issue "is already fixed, for almost a year."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T01:00:00.000Z
CVE-2008-0290 
Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in the gestion_membre.php page to base.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T01:00:00.000Z
CVE-2008-0291 
SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T21:00:00.000Z
CVE-2008-0292 
Cross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T21:00:00.000Z
CVE-2008-0293 
Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the show_foot function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T21:00:00.000Z
CVE-2008-0294 
Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat more than once via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T21:00:00.000Z
CVE-2008-0295 
Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T21:00:00.000Z
CVE-2008-0296 
Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary code via a long string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T21:00:00.000Z
CVE-2008-0297 
PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which includes the credentials in its output.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T22:00:00.000Z
CVE-2008-0298 
KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a crafted web page, possibly involving a STYLE attribute of a DIV element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T22:00:00.000Z
CVE-2008-0299 
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-16T22:00:00.000Z
CVE-2008-0300 
mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-11T23:00:00.000Z
CVE-2008-0301 
Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via the gaz parameter to mod_gazetteer_edit.php and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-11T23:00:00.000Z
CVE-2008-0302 
Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T01:00:00.000Z
CVE-2008-0303 
The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-29T02:00:00.000Z
CVE-2008-0304 
Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-29T19:00:00.000Z
CVE-2008-0306 
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-11T23:00:00.000Z
CVE-2008-0307 
Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-11T23:00:00.000Z
CVE-2008-0308 
Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-28T20:00:00.000Z
CVE-2008-0309 
Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-28T20:00:00.000Z
CVE-2008-0310 
Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-07T17:00:00.000Z
CVE-2008-0311 
Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-06T23:00:00.000Z
CVE-2008-0312 
Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-08T17:00:00.000Z
CVE-2008-0313 
The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-08T17:00:00.000Z
CVE-2008-0314 
Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-16T15:00:00.000Z
CVE-2008-0318 
Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-12T19:00:00.000Z
CVE-2008-0320 
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-17T17:00:00.000Z
CVE-2008-0322 
The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\\.\I2OExc" device interface, which allows local users to gain privileges.  NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call with a crafted DeviceObject pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-13T20:14:00.000Z
CVE-2008-0324 
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T02:00:00.000Z
CVE-2008-0325 
SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0326 
SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to show.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0327 
SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0328 
SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0329 
LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_refuser.php in Admin/, which allows remote attackers to accept comments, delete comments, and delete articles via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0330 
Open System Consultants (OSC) Radiator before 4.0 allows remote attackers to cause a denial of service (daemon crash) via malformed RADIUS requests, as demonstrated by packets sent by nmap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0331 
Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service (panic and reboot) via unspecified DNS requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0332 
Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0333 
Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the temp_filename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0334 
Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the L_PREF_NAME[855] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0335 
Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0336 
Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0337 
Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0338 
Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T21:07:00.000Z
CVE-2008-0339 
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z
CVE-2008-0340 
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the (1) Advanced Queuing component (DB02) and (2) Oracle Spatial component (DB04).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z
CVE-2008-0341 
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote attack vectors, aka DB03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z
CVE-2008-0342 
Unspecified vulnerability in the Upgrade/Downgrade component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z
CVE-2008-0343 
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z
CVE-2008-0344 
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z
CVE-2008-0345 
Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z
CVE-2008-0346 
Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka AS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z
CVE-2008-0347 
Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01.  NOTE: Oracle has not disputed a reliable claim that this issue is related to WKSYS schema privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z
CVE-2008-0348 
Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact and remote attack vectors, aka (1) PSE01, (2) PSE03, and (3) PSE04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-17T22:00:00.000Z