rainbutterfly/cve_corpus huggingface dataset:
CVE-2009-20006 osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution
osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated attacker can craft a POST request to upload a .php file containing arbitrary code, which is then executed by the server.
Problem types: cwe_id: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
Affected products: vendor: osCommerce
product: osCommerce
default_status: unknown
Credits: lang: en
value: flyh4t
Published: 2025-09-16T14:33:40.335Z
CVE-2009-20007 Talkative IRC v0.4.4.16 Response Buffer Overflow
Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploit this flaw by sending an overly long message that overflows a fixed-length buffer, potentially leading to arbitrary code execution in the context of the vulnerable process. This vulnerability is exploitable remotely and does not require authentication.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Talkative
product: Talkative IRC
default_status: unaffected
Credits: lang: en
value: Gjoko Krstic "LiquidWorm" of Zero Science Lab
Published: 2025-09-16T14:34:39.071Z
CVE-2009-20008 Green Dam 3.17 URL Processing Buffer Overflow
Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can exploit this vulnerability by enticing a user to visit a specially crafted webpage containing a long URL, resulting in arbitrary code execution.
Problem types: cwe_id: CWE-121
description: CWE-121  Stack-based Buffer Overflow
Affected products: vendor: Zhengzhou Jinhui Computer System Engineering Co. Ltd. ; Beijing Dazheng Human Language Technology Academy
product: Green Dam Youth Escort
default_status: unaffected
Credits: lang: en
value: Scott Wolchok
lang: en
value: Randy Yao
lang: en
value: J. Alex Halderman
Published: 2025-08-30T13:47:42.991Z
CVE-2009-20009 Belkin Bulldog Plus Web Service Buffer Overflow
Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before copying it into a fixed-size buffer, resulting in memory corruption and potential remote code execution. Exploitation requires network access and does not require prior authentication.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Belkin International, Inc.
product: Bulldog Plus UPS Monitoring Software
default_status: unaffected
Credits: lang: en
value: Elazar
Published: 2025-08-30T13:43:21.759Z
CVE-2009-20010 Dogfood CRM spell.php RCE
Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem. The vulnerability arises from unsanitized user input passed via a POST request to the data parameter, which is processed by the underlying shell without adequate escaping. This allows attackers to inject arbitrary shell commands and execute them on the server. The flaw is exploitable without authentication and was discovered by researcher LSO.
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Dogfood CRM
product: Dogfood CRM
default_status: unaffected
Credits: lang: en
value: LSO
lang: en
value: aushack
Published: 2025-08-30T13:47:04.559Z
CVE-2009-20011 ContentKeeper Web Appliance < 125.10 RCE via mimencode
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as the Apache user. Additionally, the exploit can optionally escalate privileges by abusing insecure PATH usage in the benetool binary, resulting in root-level access if successful.
Problem types: cwe_id: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: ContentKeeper Technologies
product: ContentKeeper Web Appliance
default_status: unaffected
Credits: lang: en
value: Patrick Webster (aushack)
Published: 2025-08-30T13:46:00.936Z
CVE-2009-2000 
Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-22T18:00:00.000Z
CVE-2009-2001 
Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-22T18:00:00.000Z
CVE-2009-2002 
Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-22T18:00:00.000Z
CVE-2009-2003 
Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to "admin."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-08T19:00:00.000Z
CVE-2009-2004 
Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) student and (2) course parameters, a different vector than CVE-2007-2902.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-08T19:00:00.000Z
CVE-2009-2005 
Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-08T19:00:00.000Z
CVE-2009-2006 
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) search_term parameter to main/auth/courses.php; the (2) frm_title and (3) frm_content parameters in a new personal agenda item action; the (4) title and (5) tutor_name parameters in a new course action; and the (6) student and (7) course parameters to main/mySpace/myStudents.php.  NOTE: vectors 2 and 3 might only be exploitable via a separate CSRF vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-08T19:00:00.000Z
CVE-2009-2007 
Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary files via a .. (dot dot) and a ..\ (dot dot backslash) in the lang parameter to main/exercice/hotspot_lang_conversion.php and (2) read arbitrary files via a .. (dot dot) in the doc_url parameter to main/exercice/Hpdownload.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-08T19:00:00.000Z
CVE-2009-2008 
Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) uInfo parameter to main/tracking/userLog.php and the (2) course parameter to main/mySpace/lp_tracking.php, a different vector than CVE-2009-2006.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-08T19:00:00.000Z
CVE-2009-2009 
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) curdirpath parameter to main/document/slideshow.php and the (2) file parameter to main/exercice/testheaderpage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-08T19:00:00.000Z
CVE-2009-2010 
Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile.php, (3) pid parameter to gallery/index.php, and the (4) fcms_login_id cookie parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-08T19:00:00.000Z
CVE-2009-2011 
Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes this method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-16T20:26:00.000Z
CVE-2009-2012 
Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T17:00:00.000Z
CVE-2009-2013 
SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the source_class parameter in a browse_classes action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2014 
SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2015 
Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2016 
SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2017 
SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2018 
SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2019 
SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2020 
Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2021 
SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2022 
fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2023 
SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the current_currency parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2024 
Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2025 
admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-09T19:00:00.000Z
CVE-2009-2026 
Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute arbitrary code via crafted data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-10T18:00:00.000Z
CVE-2009-2027 
The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate launch of the application after installation, related to an unspecified compression method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-10T19:00:00.000Z
CVE-2009-2028 
Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T15:00:00.000Z
CVE-2009-2029 
Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv_104, allows remote authenticated users to cause a denial of service (NIS+ daemon hang) via unspecified vectors related to NIS+ callbacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T15:00:00.000Z
CVE-2009-2030 
Unspecified vulnerability in the XML Digital Signature verification functionality in JVA-RUN in JDK 6.0 in IBM OS/400 i5/OS V5R4M0 and V6R1M0 has unknown impact and attack vectors related to "XML SECURITY PATCH."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T21:00:00.000Z
CVE-2009-2031 
smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T21:00:00.000Z
CVE-2009-2032 
Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T17:28:00.000Z
CVE-2009-2033 
Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T17:28:00.000Z
CVE-2009-2034 
SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T17:28:00.000Z
CVE-2009-2035 
Unspecified vulnerability in Services 6.x before 6.x-0.14, a module for Drupal, when key-based access is enabled, allows remote attackers to read or add keys and access unauthorized services via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T17:28:00.000Z
CVE-2009-2036 
SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T17:28:00.000Z
CVE-2009-2037 
Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) GLOBALS[SKIN] parameter to index.php and the (2) skin parameter to admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T17:28:00.000Z
CVE-2009-2038 
Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T17:28:00.000Z
CVE-2009-2039 
Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T17:28:00.000Z
CVE-2009-2040 
admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authentication and create administrative accounts via a manage_admin action in a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T17:28:00.000Z
CVE-2009-2041 
Cross-site scripting (XSS) vulnerability in A51 D.O.O. activeCollab 0.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1772.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T20:07:00.000Z
CVE-2009-2042 
libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T20:07:00.000Z
CVE-2009-2043 
nsViewManager.cpp in Mozilla Firefox 3.0.2 through 3.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to interaction with TinyMCE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-2044 
Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image in the BACKGROUND attribute of a BODY element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-2045 
The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, allows remote attackers to cause a denial of service (reboot) via a malformed payload in a UDP packet to port 37000, related to the xvcrman process, aka Bug ID CSCsj47924.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-24T22:00:00.000Z
CVE-2009-2046 
The embedded web server on the Cisco Video Surveillance 2500 Series IP Camera with firmware before 2.1 allows remote attackers to read arbitrary files via a (1) http or (2) https request, related to the (a) SD Camera Web Server and the (b) Wireless Camera HTTP Server, aka Bug IDs CSCsu05515 and CSCsr96497.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-24T22:00:00.000Z
CVE-2009-2047 
Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-16T15:00:00.000Z
CVE-2009-2048 
Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-16T15:00:00.000Z
CVE-2009-2049 
Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1 through 12.2(33)SXI2, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (device reload) by using an RFC4271 peer to send a malformed update, aka Bug ID CSCta33973.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-30T18:00:00.000Z
CVE-2009-2050 
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) before 6.1(1) allows remote attackers to cause a denial of service (voice-services outage) via a malformed header in a SIP message, aka Bug ID CSCsi46466.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-27T16:31:00.000Z
CVE-2009-2051 
Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), and 7.x before 7.1(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a malformed SIP INVITE message that triggers an improper call to the sipSafeStrlen function, aka Bug IDs CSCsz40392 and CSCsz43987.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-27T16:31:00.000Z