rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-2801 
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via (1) injection of JavaScript into documents within a JAR archive or (2) a JAR archive that uses relative URLs to JavaScript files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-07T23:00:00.000Z
CVE-2008-2802 
Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI that points to a fastload file, related to this file's "privilege level."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-07T23:00:00.000Z
CVE-2008-2803 
The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-07T23:00:00.000Z
CVE-2008-2805 
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-07T23:00:00.000Z
CVE-2008-2806 
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create arbitrary socket connections via a crafted Java applet, related to the Java Embedding Plugin (JEP) and Java LiveConnect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-07T23:00:00.000Z
CVE-2008-2807 
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote attackers to read uninitialized memory, as demonstrated by use of ISO 8859 encoding instead of UTF-8 encoding in a French .properties file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-07T23:00:00.000Z
CVE-2008-2808 
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-07T23:00:00.000Z
CVE-2008-2809 
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-08T23:00:00.000Z
CVE-2008-2810 
Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-07T23:00:00.000Z
CVE-2008-2811 
The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image whose display requires more pixels than nscoord_MAX, related to nsBlockFrame::DrainOverflowLines.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-07T23:00:00.000Z
CVE-2008-2812 
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-09T00:00:00.000Z
CVE-2008-2813 
Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2814 
Cross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2815 
SQL injection vulnerability in shopping/index.php in MyMarket 1.72 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2816 
SQL injection vulnerability in post.php in Oxygen (aka O2PHP Bulletin Board) 2.0 allows remote attackers to execute arbitrary SQL commands via the repquote parameter in a reply action, a different vector than CVE-2006-1572.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2817 
SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2818 
Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the section parameter to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2819 
SQL injection vulnerability in BlognPlus (BURO GUN +) 2.5.4 and earlier MySQL and PostgreSQL editions allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2820 
Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2821 
Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2822 
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a (1) LIST or (2) MLSD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2823 
SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2824 
Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2825 
Cross-site scripting (XSS) vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T17:00:00.000Z
CVE-2008-2826 
Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service (resource consumption and system outage) via vectors involving a large addr_num field in an sctp_getaddrs_old data structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-07-02T16:00:00.000Z
CVE-2008-2827 
The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T19:00:00.000Z
CVE-2008-2828 
Stack-based buffer overflow in tmsnc allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an MSN packet with a UBX command containing a large UBX payload length field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T19:00:00.000Z
CVE-2008-2829 
php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long IMAP request, which triggers an "rfc822.c legacy routine buffer overflow" error message, related to the rfc822_write_address function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T20:00:00.000Z
CVE-2008-2830 
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not properly restrict the loading of scripting addition plugins, which allows local users to gain privileges via scripting addition commands to a privileged application, as originally demonstrated by an osascript tell command to ARDAgent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-23T20:00:00.000Z
CVE-2008-2831 
Multiple cross-site scripting (XSS) vulnerabilities in the delegated spam management feature in the Spam Quarantine Management (SQM) component in MailMarshal SMTP 6.0.3.8 through 6.3.0.0 allow user-assisted remote authenticated users to inject arbitrary web script or HTML via (1) the list of blocked senders or (2) the list of safe senders.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-02T18:00:00.000Z
CVE-2008-2832 
Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attackers to upload and execute arbitrary code via the FILE1 parameter in an uploadfileprocess action, probably followed by a direct request to the file in calendar/eventimages/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2833 
admin/upload.php in le.cms 1.4 and earlier allows remote attackers to bypass administrative authentication, and upload and execute arbitrary files in images/, via a nonzero value for the submit0 parameter in conjunction with filenames in the filename and upload parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2834 
SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2835 
SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL commands via the formid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2836 
PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2837 
SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2838 
Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2839 
Cross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2840 
Multiple directory traversal vulnerabilities in Exero CMS 1.0.0 and 1.0.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter to (1) custompage.php, (2) errors/404.php, (3) members/memberslist.php, (4) members/profile.php, (5) news/fullview.php, (6) news/index.php, (7) nopermission.php, (8) usercp/avatar.php, or (9) usercp/editpassword.php in themes/Default/.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2841 
Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-24T19:00:00.000Z
CVE-2008-2842 
Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers to inject arbitrary web script or HTML via the FILE parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2843 
Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter in an USUB action to default.asp and the (2) Licence[SpecialLicenseNumber] (aka LicenceId) cookie to edit/default.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2844 
SQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2845 
SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2846 
SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL commands via the type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2847 
SQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 allows remote attackers to execute arbitrary SQL commands via the categori parameter in a pocategorisell action to modules.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2848 
Cross-site scripting (XSS) vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2849 
Cross-site scripting (XSS) vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote authenticated users, with create post permissions, to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2850 
SQL injection vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified cookies, related to improper use of the Drupal database API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2851 
Multiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown impact via unspecified vectors related to "parsing of http headers."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2852 
Cross-site scripting (XSS) vulnerability in CGIWrap before 4.1, when an Internet Explorer based browser is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to failure to set the charset in error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2853 
SQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute arbitrary SQL commands via the cat_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2854 
Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[preloc] parameter to (1) modules/core/logger/init.php and (2) AJAX/newscat.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2855 
Cross-site scripting (XSS) vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2856 
SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2857 
AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2858 
SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the eml parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2859 
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an "imap command."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2860 
SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2861 
Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) button parameters to ansFAQ.asp and the (3) id and (4) txtEmail parameters to login.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2862 
Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to ansFAQ.asp and the (2) template_id parameter to preview.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2863 
Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2864 
eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger.asp or (2) common2.asp in cms/include/, which reveals the database path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2865 
SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a show_article action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2866 
SQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticle[ID] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-25T10:00:00.000Z
CVE-2008-2867 
SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-26T17:00:00.000Z
CVE-2008-2868 
SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the iEve parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-26T17:00:00.000Z