rainbutterfly/cve_corpus huggingface dataset:
CVE-2009-4688 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4689 
SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4690 
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) postcomments.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4691 
SQL injection vulnerability in addlink.php in Classified Linktrader Script allows remote attackers to execute arbitrary SQL commands via the slctCategories parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4692 
Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the pr parameter in a ulist action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4693 
Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to (1) en.inc.php, (2) hu.inc.php, (3) no.inc.php, (4) ro.inc.php, and (5) ru.inc.php in language/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4694 
Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the fid parameter in a view_forum action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4695 
SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4696 
SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a view_forum action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4697 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter in a ulist action and the (2) fid parameter in a view_forum action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-10T22:00:00.000Z
CVE-2009-4698 
Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to (1) aviso.php and (2) imprimir.php, and the (3) cod_categoria parameter to categoria.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4699 
Multiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/auth.php and (2) file_uploader.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4700 
Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .. (dot dot) in the layout parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4701 
SQL injection vulnerability in the Myth download (myth_download) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4702 
SQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4703 
SQL injection vulnerability in the Webesse Image Gallery (ws_gallery) extension 1.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4704 
Unspecified vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4705 
Cross-site scripting (XSS) vulnerability in the Twitter Search (twittersearch) extension before 0.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4706 
Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4707 
Cross-site scripting (XSS) vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4708 
SQL injection vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4709 
SQL injection vulnerability in the datamints Newsticker (datamints_newsticker) extension before 0.7.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4710 
SQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4711 
SQL injection vulnerability in the CoolURI (cooluri) extension before 1.0.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2008-6686.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4712 
SQL injection vulnerability in index.php in Tukanas Classifieds (aka EasyClassifieds) Script 1.0 allows remote attackers to execute arbitrary SQL commands via the b parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4713 
Multiple cross-site scripting (XSS) vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via (1) the cod_categoria parameter to categoria.php, (2) the opcao parameter to index.php, and the PATH_INFO to (3) categoria.php and (4) index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4714 
Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to cadastro_usuario.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4715 
Cross-site scripting (XSS) vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script or HTML via the Amount parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4716 
Cross-site scripting (XSS) vulnerability in results.php in EDGEPHP EZWebSearch allows remote attackers to inject arbitrary web script or HTML via the language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4717 
Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML via the (1) host parameter to stat/host.php, nodayshow parameter to (2) mostvisitpage.php and (3) visitorduration.php in stat/, (4) nopagesmost parameter to stat/mostvisitpagechart.php, and date parameter to (5) pageviewers.php, (6) pageviewerschart.php, and (7) referer.php in stat/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4718 
SQL injection vulnerability in visitorduration.php in Gonafish WebStatCaffe allows remote attackers to execute arbitrary SQL commands via the nodayshow parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-15T21:00:00.000Z
CVE-2009-4719 
SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4720 
SQL injection vulnerability in cgi-bin/gnudip.cgi in GnuDIP 2.1.1 allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4721 
Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web (A-W) BannerAd 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) User and (2) Password parameters. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4722 
SQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4723 
Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4724 
SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4725 
Directory traversal vulnerability in modules/aljazeera/admin/setup.php in Arab Portal 2.2 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4726 
Directory traversal vulnerability in download.php in Quickdev 4 PHP allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4727 
SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4728 
SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4729 
Multiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media Script 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, (3) id parameter to templates/header1.php, and (4) key parameter to video_listing.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4730 
SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4731 
SQL injection vulnerability in photos.php in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allows remote attackers to execute arbitrary SQL commands via the album parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4732 
SQL injection vulnerability in tt/index.php in TT Web Site Manager 0.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tt_name parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4733 
SQL injection vulnerability in checkuser.php in SimpleLoginSys 0.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4734 
SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4735 
SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-18T18:00:00.000Z
CVE-2009-4736 
Cross-site scripting (XSS) vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-23T18:00:00.000Z
CVE-2009-4737 
Stack-based buffer overflow in JustSystems Corporation Ichitaro 13, 2004 through 2009, Viewer 2009 19.0.1.0 and earlier, and other versions allows context-dependent attackers to execute arbitrary code via a crafted Rich Text File (RTF), related to "pvpara ffooter."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-06T22:00:00.000Z
CVE-2009-4738 
Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching external applications."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-18T23:00:00.000Z
CVE-2009-4739 
PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the language_id parameter.  NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4740 
Directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4741 
Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4742 
Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the word parameter in a play help action to the faq module, reachable through index.php; (2) the word parameter in a play keyw action to the link module, reachable through index.php; (3) the id_certificate parameter in an elemmetacertificate action to the meta_certificate module, reachable through index.php; or (4) the id_certificate parameter in an elemcertificate action to the certificate module, reachable through index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4743 
Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) HistoryStorageObjectName and (2) HistoryKey parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4744 
Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4745 
Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) sortField, (2) sortDesc, or (3) pageNumber parameter in a login action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4746 
Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arbitrary web script or HTML via the recordsPerPage parameter in a poll_default login action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4747 
PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4748 
SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter in an act_OrderCategories action to wp-admin/post-new.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4749 
Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL commands via the x parameter to (1) message_box.php and (2) request.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4750 
PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4751 
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4752 
PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2009-4753 
Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attackers to cause a denial of service (TCP/IP outage) via long arguments to the (1) XRMD, (2) delete, (3) RNFR, or (4) RNTO command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-29T18:00:00.000Z
CVE-2009-4754 
Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-29T18:00:00.000Z
CVE-2009-4755 
Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via a long string in a malformed (1) .b4s or (2) .pls playlist file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-29T18:00:00.000Z
CVE-2009-4756 
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-29T18:00:00.000Z
CVE-2009-4757 
Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a malformed playlist (.m3u) file.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-29T18:00:00.000Z