rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-3326 
Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter (blog entry title).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-25T16:00:00.000Z
CVE-2008-3327 
Moodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive information via a direct request to (1) blog/blogpage.php and (2) course/report/stats/report.php, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-25T16:00:00.000Z
CVE-2008-3328 
Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-27T22:00:00.000Z
CVE-2008-3329 
Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-27T22:00:00.000Z
CVE-2008-3330 
Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-27T22:00:00.000Z
CVE-2008-3331 
Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filter_target parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-27T23:00:00.000Z
CVE-2008-3332 
Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-27T23:00:00.000Z
CVE-2008-3333 
Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-27T23:00:00.000Z
CVE-2008-3334 
Cross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-27T23:00:00.000Z
CVE-2008-3335 
Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-27T23:00:00.000Z
CVE-2008-3336 
Multiple cross-site scripting (XSS) vulnerabilities in PunBB before 1.2.19 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) include/parser.php and (2) moderate.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-27T23:00:00.000Z
CVE-2008-3337 
PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-08T19:00:00.000Z
CVE-2008-3338 
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-13T22:00:00.000Z
CVE-2008-3339 
search_result.cfm in Jobbex JobSite allows remote attackers to obtain sensitive information via unspecified vectors that reveal the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3340 
Cross-site scripting (XSS) vulnerability in search_result.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable (possibly the opt parameter.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3341 
Multiple SQL injection vulnerabilities in search_result.cfm in Jobbex JobSite allow remote attackers to execute arbitrary SQL commands via the (1) jobcountryid and (2) jobstateid parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3342 
Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_News action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3343 
SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr (trial edition) allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3344 
Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a allow remote attackers to inject arbitrary web script or HTML via the (1) ResultHtml, (2) dir, (3) SenderName, (4) RecipientName, (5) SenderMail, and (6) RecipientMail parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3345 
SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3346 
SQL injection vulnerability in product_detail.php in ShopCart DX allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3347 
SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to execute arbitrary SQL commands via the read parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3348 
Cross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to inject arbitrary web script or HTML via the year parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T16:00:00.000Z
CVE-2008-3349 
Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests.  NOTE: this may overlap CVE-2008-3160.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T17:00:00.000Z
CVE-2008-3350 
dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lacking a DHCP lease, or (2) attempting to renew a nonexistent DHCP lease for an invalid subnet as an "unknown client," a different vulnerability than CVE-2008-3214.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T17:00:00.000Z
CVE-2008-3351 
SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execute arbitrary SQL commands via the photoId parameter in a show action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T17:00:00.000Z
CVE-2008-3352 
SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a Singer action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T17:00:00.000Z
CVE-2008-3353 
Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) article comments feature and the (2) search log feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T17:00:00.000Z
CVE-2008-3354 
Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bbPath[path] parameter to votepolls.php and the (2) bbPath[root_theme] parameter to config.php, different vectors than CVE-2006-0659.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T17:00:00.000Z
CVE-2008-3355 
SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-28T17:00:00.000Z
CVE-2008-3356 
verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the application's own log file, which allows local users to overwrite arbitrary files by creating a symlink with an iivdb.log filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-05T19:20:00.000Z
CVE-2008-3357 
Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-05T19:20:00.000Z
CVE-2008-3358 
Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when Internet Explorer 7.0.5730 is used, allows remote attackers to inject arbitrary web script or HTML via a crafted URI, which causes the XSS payload to be reflected in a text/plain document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-28T18:00:00.000Z
CVE-2008-3359 
SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-29T18:00:00.000Z
CVE-2008-3360 
Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code via a long URL in the HREF attribute of an A element, a different vulnerability than CVE-2006-2494.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-29T18:00:00.000Z
CVE-2008-3361 
Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-29T18:00:00.000Z
CVE-2008-3362 
Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the upfile parameter, then accessing it via a direct request to the file in wp-content/plugins/downloads-manager/upload/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T16:03:00.000Z
CVE-2008-3363 
Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute arbitrary local files via a ..\ (dot dot backslash) in the include parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T16:03:00.000Z
CVE-2008-3364 
Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OSCE) Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security (CSM) 3.5 and 3.6; and Worry-Free Business Security (WFBS) 5.0 allows remote attackers to execute arbitrary code via a long string in the Server property, and possibly other properties.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T16:03:00.000Z
CVE-2008-3365 
Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language_full parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3366 
SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: this might overlap CVE-2008-1774.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3367 
Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3368 
PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3369 
SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the category_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3370 
SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4.0_4735.p4 allows remote attackers to execute arbitrary SQL commands via the user (user name) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3371 
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3372 
SQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL commands via the sb_protype parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3373 
The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service (engine crash) via a crafted UPX compressed file, which triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3374 
SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the rsargs array parameter in an __exp__getFeedContent action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3375 
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3376 
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3377 
SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the image_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3378 
SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3379 
Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the pic parameter to the default URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T17:00:00.000Z
CVE-2008-3380 
Cross-site scripting (XSS) vulnerability in ajaxp_backend.php in MyioSoft EasyBookMarker 4.0 trial edition (tr) allows remote attackers to inject arbitrary web script or HTML via the rs parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T18:00:00.000Z
CVE-2008-3381 
Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T18:00:00.000Z
CVE-2008-3382 
SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers to execute arbitrary SQL commands via the cat_a parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T18:00:00.000Z
CVE-2008-3383 
SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via the cat_a parameter in a browse action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T18:00:00.000Z
CVE-2008-3384 
Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) module and (2) file parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T18:00:00.000Z
CVE-2008-3385 
Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the content parameter.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T18:00:00.000Z
CVE-2008-3386 
SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T18:00:00.000Z
CVE-2008-3387 
SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands via the dbtable parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T18:00:00.000Z
CVE-2008-3388 
Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via the article parameter to (1) comaddok.php and (2) comlook.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-30T18:00:00.000Z
CVE-2008-3389 
Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-05T19:20:00.000Z
CVE-2008-3390 
Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-31T16:00:00.000Z
CVE-2008-3391 
Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to (1) admin_group_details.asp and (2) admin_category_details.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-31T16:00:00.000Z
CVE-2008-3392 
Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to log_off_user.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-31T16:00:00.000Z
CVE-2008-3393 
SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the events_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-31T16:00:00.000Z
CVE-2008-3394 
Multiple cross-site scripting (XSS) vulnerabilities in search.cfm in BookMine allow remote attackers to inject arbitrary web script or HTML via the (1) gallery and (2) search_string parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-31T16:00:00.000Z