[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-0992 mean in the context of cybersecurity?

[Assistant] CVE-2012-0992


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0992.

[Assistant] interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-0992?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23069'}, {'name': '78731', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78731'}, {'name': '51788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51788'}, {'name': '20120201 Multiple vulnerabilities in OpenEMR', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0004.html'}, {'name': '47781', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47781'}, {'name': 'openemr-faxdispatch-command-execution(72915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72915'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.open-emr.org/wiki/index.php/OpenEMR_Patches'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0992?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-0993 mean in the context of cybersecurity?

[Assistant] CVE-2012-0993


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0993.

[Assistant] Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_image plugin is enabled, allows remote attackers to execute arbitrary PHP code via the viewer_size_image_saved cookie.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-0993?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8995'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8994'}, {'name': '51916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51916'}, {'name': '47875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47875'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23070'}, {'name': 'zenphoto-viewersizeimage-code-execution(73081)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73081'}, {'name': '20120208 Multiple vulnerabilities in ZENphoto', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/news/zenphoto-1.4.2.1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0993?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-0994 mean in the context of cybersecurity?

[Assistant] CVE-2012-0994


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0994.

[Assistant] SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-0994?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8995'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8994'}, {'name': '51916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51916'}, {'name': '47875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47875'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23070'}, {'name': 'zenphoto-albumsort-sql-injection(73082)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73082'}, {'name': '20120208 Multiple vulnerabilities in ZENphoto', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/news/zenphoto-1.4.2.1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0994?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-0995 mean in the context of cybersecurity?

[Assistant] CVE-2012-0995


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0995.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter in an external action to zp-core/admin.php, (2) PATH_INTO to an unspecified URL, as demonstrated using /1/, (3) PATH_INFO to zp-core/admin.php, or (4) album parameter to zp-core/admin-edit.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-0995?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8995'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/trac/changeset/8994'}, {'name': 'zenphoto-multiple-xss(73083)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73083'}, {'name': '51916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51916'}, {'name': '47875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47875'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23070'}, {'name': '20120208 Multiple vulnerabilities in ZENphoto', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0037.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zenphoto.org/news/zenphoto-1.4.2.1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0995?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-0996 mean in the context of cybersecurity?

[Assistant] CVE-2012-0996


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0996.

[Assistant] Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-0996?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23071'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0996?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-0997 mean in the context of cybersecurity?

[Assistant] CVE-2012-0997


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0997.

[Assistant] Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-0997?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23071'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0997?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-0998 mean in the context of cybersecurity?

[Assistant] CVE-2012-0998


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0998.

[Assistant] Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the language parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-0998?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23072'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0998?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-0999 mean in the context of cybersecurity?

[Assistant] CVE-2012-0999


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-0999.

[Assistant] SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the group_id parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-0999?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23072'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-0999?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1000 mean in the context of cybersecurity?

[Assistant] CVE-2012-1000


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1000.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to admins/login/forgot/index.php, or the (2) display_name or (3) email parameter to account/preferences.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1000?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23072'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1000?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1001 mean in the context of cybersecurity?

[Assistant] CVE-2012-1001


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1001.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes/ajax.php or (2) body parameter to includes/error.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1001?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23073'}, {'tags': ['x_refsource_MISC'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0121.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://chyrp.net/2012/02/02/heres-whats-been-going-on-recently/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/vito/chyrp/commit/f69bd791c37e0b154c0bda16f9759ba19cc77f6c'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/52115'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/52117'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1001?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1002 mean in the context of cybersecurity?

[Assistant] CVE-2012-1002


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1002.

[Assistant] SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1002?

[Assistant] {'name': 'openconf-edit-sql-injection(75399)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/75399'}, {'name': '51927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51927'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openconf.com/news/#20120202'}, {'name': '18820', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18820'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1002?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1003 mean in the context of cybersecurity?

[Assistant] CVE-2012-1003


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1003.

[Assistant] Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function.  NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1003?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://blog.vulnhunt.com/index.php/2012/02/02/cal-2012-0004-opera-array-integer-overflow/'}, {'name': 'opera-integer-dos(73027)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73027'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1003?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1004 mean in the context of cybersecurity?

[Assistant] CVE-2012-1004


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1004.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the (1) text, (2) FirstName, (3) LastName, (4) OrganisationName, (5) OrganisationUrl, (6) Profession, (7) Country, (8) State, (9) Address, (10) Location, (11) Telephone, (12) VoIP, (13) InstantMessagingIM, (14) Email, (15) HomePage, or (16) Comment parameter.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1004?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://st2tea.blogspot.com/2012/02/foswiki-cross-site-scripting.html'}, {'name': '47849', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47849'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://foswiki.org/Support/SecurityAlert-CVE-2012-1004'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://foswiki.org/Tasks/Item11501'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://foswiki.org/Tasks/Item11498'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1004?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1005 mean in the context of cybersecurity?

[Assistant] CVE-2012-1005


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1005.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using (1) Blog/MyFirstBlog.txt or (2) Blog/AboutSomething.txt.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1005?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=453'}, {'name': 'sphinixsoftware-comment-xss(72913)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72913'}, {'name': '51820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51820'}, {'name': '47876', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47876'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1005?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1006 mean in the context of cybersecurity?

[Assistant] CVE-2012-1006


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1006.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName parameter to struts2-rest-showcase/orders.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1006?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=450'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt'}, {'name': 'apache-struts-multiple-xss(72888)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72888'}, {'name': '51902', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51902'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1006?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1007 mean in the context of cybersecurity?

[Assistant] CVE-2012-1007


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1007.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2) struts-cookbook/processSimple.do or (3) struts-cookbook/processDyna.do.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1007?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=450'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': 'apache-struts-name-xss(73052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73052'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html'}, {'name': '51900', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51900'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1007?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1008 mean in the context of cybersecurity?

[Assistant] CVE-2012-1008


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1008.

[Assistant] OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1008?

[Assistant] {'name': '18453', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18453'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/exploits/SecPod_Exploit_OfficeSIP_Server_DOS.py'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=461'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/advisories/SecPod_Exploit_OfficeSIP_Server_DOS_Vuln.txt'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1008?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1009 mean in the context of cybersecurity?

[Assistant] CVE-2012-1009


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1009.

[Assistant] NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1009?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/advisories/SecPod_Exploit_NetSarang_Xlpd_Printer_Daemon_DoS_Vuln.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secpod.org/blog/?p=457'}, {'name': '51821', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51821'}, {'name': '18454', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18454'}, {'name': 'netsarang-xlpd-dos(72933)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72933'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1009?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1010 mean in the context of cybersecurity?

[Assistant] CVE-2012-1010


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1010.

[Assistant] Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1010?

[Assistant] {'name': '18407', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18407'}, {'name': '51615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51615'}, {'name': 'allwebmenus-actions-file-upload(72640)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72640'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/changelog/'}, {'name': '20120122 AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0137.html'}, {'name': '47659', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47659'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1010?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1011 mean in the context of cybersecurity?

[Assistant] CVE-2012-1011


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1011.

[Assistant] actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1011?

[Assistant] {'name': '18407', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18407'}, {'name': '51615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51615'}, {'name': 'allwebmenus-actions-file-upload(72640)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72640'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/changelog/'}, {'name': '20120122 AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0137.html'}, {'name': '47659', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47659'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1011?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1012 mean in the context of cybersecurity?

[Assistant] CVE-2012-1012


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1012.

[Assistant] server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1012?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://src.mit.edu/fisheye/changelog/krb5/?cs=25704'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=796438'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7093'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/krb5-1.10/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1012?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1013 mean in the context of cybersecurity?

[Assistant] CVE-2012-1013


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1013.

[Assistant] The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL pointer dereference and daemon crash) via a KRB5_KDB_DISALLOW_ALL_TIX create request that lacks a password.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1013?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7152'}, {'name': '53784', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53784'}, {'name': 'MDVSA-2012:102', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:102'}, {'name': 'RHSA-2012:1131', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1131.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/krb5-1.10/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=827517'}, {'name': 'openSUSE-SU-2012:0834', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/15083635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/krb5/krb5/commit/c5be6209311d4a8f10fda37d0d3f876c1b33b77b'}, {'name': '[kerberos-announce] 20120531 krb5-1.10.2 is released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mailman.mit.edu/pipermail/kerberos-announce/2012q2/000136.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1013?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1014 mean in the context of cybersecurity?

[Assistant] CVE-2012-1014


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1014.

[Assistant] The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a malformed AS-REQ request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1014?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2012-001.txt'}, {'name': 'openSUSE-SU-2012:0967', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2012-08/msg00016.html'}, {'name': 'DSA-2518', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2518'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1014?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1015 mean in the context of cybersecurity?

[Assistant] CVE-2012-1015


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1015.

[Assistant] The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free, heap memory corruption, and daemon crash) via a crafted AS-REQ request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1015?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2012-001.txt'}, {'name': 'RHSA-2012:1131', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1131.html'}, {'name': 'openSUSE-SU-2012:0967', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2012-08/msg00016.html'}, {'name': 'DSA-2518', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2518'}, {'name': 'MDVSA-2012:120', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:120'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1015?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1016 mean in the context of cybersecurity?

[Assistant] CVE-2012-1016


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1016.

[Assistant] The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 attempts to find an agility KDF identifier in inappropriate circumstances, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted Draft 9 request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1016?

[Assistant] {'name': '55040', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55040'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/krb5-1.10/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://krbdev.mit.edu/rt/Ticket/Display.html?id=7527'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/krb5/krb5/commit/db64ca25d661a47b996b4e2645998b5d7f0eb52c'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1016?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1017 mean in the context of cybersecurity?

[Assistant] CVE-2012-1017


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1017.

[Assistant] Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary SQL commands via the (1) ip_addr[0][1], (2) ip_addr[0][2], or (3) ip_addr[0][9] parameters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1017?

[Assistant] {'name': '18465', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18465'}, {'name': '47857', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47857'}, {'name': '51874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51874'}, {'name': 'base-ipaddr-sql-injection(72998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72998'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1017?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1018 mean in the context of cybersecurity?

[Assistant] CVE-2012-1018


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1018.

[Assistant] Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconverter) module 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the from parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1018?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://dl.packetstormsecurity.net/1202-exploits/joomlacurrencyconverter-xss.txt'}, {'name': 'currencyconverter-convert-xss(72917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72917'}, {'name': '51804', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51804'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1018?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1019 mean in the context of cybersecurity?

[Assistant] CVE-2012-1019


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1019.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) XWiki.XWikiComments_comment parameter to xwiki/bin/commentadd/Main/WebHome, (2) XWiki.XWikiUsers_0_company parameter when editing a user profile, or (3) projectVersion parameter to xwiki/bin/view/DownloadCode/DownloadFeedback.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1019?

[Assistant] {'name': '47885', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47885'}, {'name': '51867', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51867'}, {'tags': ['x_refsource_MISC'], 'url': 'http://st2tea.blogspot.com/2012/02/xwiki-cross-site-scripting.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109447/XWiki-Enterprise-3.4-Cross-Site-Scripting.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1019?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1020 mean in the context of cybersecurity?

[Assistant] CVE-2012-1020


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1020.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the (1) visitor_language parameter to register.php or (2) message parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1020?

[Assistant] {'name': 'nexorone-login-xss(73001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73001'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vulnerability-lab.com/get_content.php?id=304'}, {'name': '51876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51876'}, {'name': '47897', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47897'}, {'name': '20120205 NexorONE Online Banking - Multiple Cross Site Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=132852645911072&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1020?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1021 mean in the context of cybersecurity?

[Assistant] CVE-2012-1021


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1021.

[Assistant] Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1021?

[Assistant] {'name': '51774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51774'}, {'name': '4images-categories-xss(72924)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72924'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109290/4images-xss.txt'}, {'name': '47811', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47811'}, {'name': '78711', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78711'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1021?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1022 mean in the context of cybersecurity?

[Assistant] CVE-2012-1022


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1022.

[Assistant] SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the cat_parent_id parameter in an addcat action.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1022?

[Assistant] {'name': '4images-catparentid-sql-injection(72932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72932'}, {'name': '51774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51774'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109290/4images-xss.txt'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1022?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1023 mean in the context of cybersecurity?

[Assistant] CVE-2012-1023


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1023.

[Assistant] Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1023?

[Assistant] {'name': '51774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51774'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109290/4images-xss.txt'}, {'name': '78779', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78779'}, {'name': '4images-index-open-redirect(72925)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72925'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1023?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1024 mean in the context of cybersecurity?

[Assistant] CVE-2012-1024


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1024.

[Assistant] Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1024?

[Assistant] {'name': '18343', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18343'}, {'name': 'enigma2-webinterface-directory-traversal(73109)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73109'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1024?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1025 mean in the context of cybersecurity?

[Assistant] CVE-2012-1025


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1025.

[Assistant] Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1025?

[Assistant] {'name': '18343', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18343'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1025?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1026 mean in the context of cybersecurity?

[Assistant] CVE-2012-1026


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1026.

[Assistant] Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1026?

[Assistant] {'name': '51870', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51870'}, {'name': '20120212 sqlinjection bug in nova cms', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0068.html'}, {'name': 'xraycms-login2-sql-injection(73000)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73000'}, {'name': '18467', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18467'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/tracker/?func=detail&aid=3488241&group_id=298778&atid=1260461'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1026?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1027 mean in the context of cybersecurity?

[Assistant] CVE-2012-1027


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1027.

[Assistant] Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1027?

[Assistant] {'name': '78823', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78823'}, {'name': '51842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51842'}, {'name': '47854', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47854'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dl.packetstormsecurity.net/1202-exploits/projectopen-xss.txt'}, {'name': 'VU#732115', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/732115'}, {'name': 'projectopen-accountclosed-xss(72952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72952'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1027?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1028 mean in the context of cybersecurity?

[Assistant] CVE-2012-1028


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1028.

[Assistant] Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1028?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://voxel.dl.sourceforge.net/project/simplgroup/README.md'}, {'name': '51882', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51882'}, {'name': 'simple-groupware-index-xss(73042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73042'}, {'name': '20120206 SimpleGroupware 0.742 Cross-Site-Scripting vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0028.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1028?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1029 mean in the context of cybersecurity?

[Assistant] CVE-2012-1029


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1029.

[Assistant] SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1029?

[Assistant] {'name': '47874', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47874'}, {'name': '78900', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78900'}, {'name': 'tubeace-q-sql-injection(72999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72999'}, {'name': '18466', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18466'}, {'name': '52046', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52046'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109485/Tube-Ace-SQL-Injection.html'}, {'name': '51873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51873'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1029?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1030 mean in the context of cybersecurity?

[Assistant] CVE-2012-1030


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1030.

[Assistant] Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted URL containing text that is used within a modal popup.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1030?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.62.aspx'}, {'tags': ['x_refsource_MISC'], 'url': 'http://technet.microsoft.com/en-us/security/msvr/msvr12-003'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1030?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1031 mean in the context of cybersecurity?

[Assistant] CVE-2012-1031


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1031.

[Assistant] Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit Mode privileges, a different vulnerability than CVE-2011-3416 and CVE-2011-3417.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1031?

[Assistant] {'name': '51877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51877'}, {'name': '47910', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47910'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://world.episerver.com/Blogs/Jens-N/Dates/2012/1/Security-vulnerability---Elevation-of-privilege/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1031?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1032 mean in the context of cybersecurity?

[Assistant] CVE-2012-1032


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1032.

[Assistant] Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1032?

[Assistant] {'name': '52874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52874'}, {'name': '48696', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48696'}, {'name': 'siteseeker-episerver-xss(74799)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74799'}, {'name': '81013', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/81013'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1032?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1033 mean in the context of cybersecurity?

[Assistant] CVE-2012-1033


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1033.

[Assistant] The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1033?

[Assistant] {'name': 'HPSBUX02835', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=135638082529878&w=2'}, {'name': 'isc-bind-update-sec-bypass(73053)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.isc.org/software/bind/advisories/cve-2012-1033'}, {'name': '1026647', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026647'}, {'name': '47884', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47884'}, {'name': 'SSRT100763', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=135638082529878&w=2'}, {'name': 'openSUSE-SU-2012:0864', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/15136477'}, {'name': '78916', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78916'}, {'name': 'RHSA-2012:0717', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0717.html'}, {'name': 'VU#542123', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/542123'}, {'name': 'openSUSE-SU-2012:0863', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/15136456'}, {'name': '51898', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51898'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1033?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1034 mean in the context of cybersecurity?

[Assistant] CVE-2012-1034


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1034.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1034?

[Assistant] {'name': '51877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51877'}, {'name': '47910', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47910'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://world.episerver.com/PageFiles/110367/BugList.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://world.episerver.com/Blogs/Shahid-Nawaz/Dates/2012/1/General-Hotfix-CMS-6-R2/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1034?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1035 mean in the context of cybersecurity?

[Assistant] CVE-2012-1035


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1035.

[Assistant] AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1035?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.nruns.com/_downloads/advisory28122011.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adacore.com/2012/01/27/security-advisory-sa-2012-l119-003-hash-collisions-in-aws/'}, {'name': '20120127 AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-01/0169.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ocert.org/advisories/ocert-2011-003.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1035?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1036 mean in the context of cybersecurity?

[Assistant] CVE-2012-1036


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1036.

[Assistant] Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1036?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://technet.microsoft.com/en-us/security/msvr/msvr12-002'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1036?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1037 mean in the context of cybersecurity?

[Assistant] CVE-2012-1037


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1037.

[Assistant] PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the sub_type parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1037?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://forge.indepnet.net/projects/glpi/versions/685'}, {'name': 'MDVSA-2012:016', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:016'}, {'name': '20120210 CVE-2012-1037: GLPI <= 0.80.61 LFI/RFI', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Feb/157'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://forge.indepnet.net/issues/3338'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://forge.indepnet.net/projects/glpi/repository/revisions/17457/diff/branches/0.80-bugfixes/front/popup.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1037?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1038 mean in the context of cybersecurity?

[Assistant] CVE-2012-1038


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1038.

[Assistant] Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobility System Software (MSS) 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter name.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1038?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.secureworks.com/advisories/swrx-2012-004/SWRX-2012-004.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-004/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2012-06-611&viewMode=view'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1038?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1039 mean in the context of cybersecurity?

[Assistant] CVE-2012-1039


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1039.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) login_data parameter to admin/auth.php; (2) nb parameter to admin/blogs.php; (3) type, (4) sortby, (5) order, or (6) status parameters to admin/comments.php; or (7) page parameter to admin/plugin.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1039?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.ch/advisory/HTB23074'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dotclear.org/blog/post/2012/02/11/Dotclear-2.4.2'}, {'name': 'dotclear-multiple-xss(73565)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73565'}, {'name': '52221', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52221'}, {'name': '20120229 Multiple XSS in Dotclear', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0183.html'}, {'name': '48209', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48209'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1039?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1046 mean in the context of cybersecurity?

[Assistant] CVE-2012-1046


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1046.

[Assistant] Cross-site scripting (XSS) vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0696.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1046?

[Assistant] {'name': '1026648', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1026648'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg27023584'}, {'name': '51905', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51905'}, {'name': '78917', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/78917'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1PM49009'}, {'name': '47889', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47889'}, {'name': 'PM49009', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1PM49009'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1046?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1047 mean in the context of cybersecurity?

[Assistant] CVE-2012-1047


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1047.

[Assistant] Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter in an Online_help action.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1047?

[Assistant] {'name': '51901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51901'}, {'name': '18473', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18473'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vulnerability-lab.com/get_content.php?id=405'}, {'name': '20120207 Cyberoam Central Console v2.00.2 - File Include Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0036.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1047?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1048 mean in the context of cybersecurity?

[Assistant] CVE-2012-1048


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1048.

[Assistant] Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other editions, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1048?

[Assistant] {'name': 'efrontcommunity-administrator-xss(73043)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73043'}, {'name': '51894', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51894'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vulnerability-lab.com/get_content.php?id=423'}, {'name': '20120207 eFronts Community++ v3.6.10 - Cross Site Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0033.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1048?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1049 mean in the context of cybersecurity?

[Assistant] CVE-2012-1049


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1049.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp/AddDC.jsp or (2) operation parameter to DomainConfig.do.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1049?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109528'}, {'name': 'manageengine-admanager-multiple-xss(73039)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73039'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php'}, {'name': '47887', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47887'}, {'name': '51893', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51893'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1049?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1050 mean in the context of cybersecurity?

[Assistant] CVE-2012-1050


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1050.

[Assistant] Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the * construct for mass virtual hosting, allows remote attackers to read arbitrary files via a crafted Host header.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1050?

[Assistant] {'name': '47908', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47908'}, {'name': '20120203 Mathopd - Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-02/0025.html'}, {'name': '[mathopd] 20120202 security alert: directory traversal when using * in Location', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.mail-archive.com/mathopd%40mathopd.org/msg00392.html'}, {'name': '1026641', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026641'}, {'name': 'mathopd-http-directory-traversal(73049)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73049'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mathopd.org/security.html'}, {'name': '78896', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78896'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1050?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1051 mean in the context of cybersecurity?

[Assistant] CVE-2012-1051


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1051.

[Assistant] Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1051?

[Assistant] {'name': 'xnview-qcd-bo(73040)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73040'}, {'name': '78904', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78904'}, {'name': '47352', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47352'}, {'name': '51896', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51896'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1051?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1052 mean in the context of cybersecurity?

[Assistant] CVE-2012-1052


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1052.

[Assistant] Buffer overflow in IvanView 1.2.15 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1052?

[Assistant] {'name': '78905', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78905'}, {'name': '51895', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51895'}, {'name': '47362', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47362'}, {'name': 'ivanview-qcd-bo(73041)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73041'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1052?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1053 mean in the context of cybersecurity?

[Assistant] CVE-2012-1053


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1053.

[Assistant] The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1053?

[Assistant] {'name': '48157', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48157'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14'}, {'name': '48166', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48166'}, {'tags': ['x_refsource_MISC'], 'url': 'http://projects.puppetlabs.com/issues/12458'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://puppetlabs.com/security/cve/cve-2012-1053/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://projects.puppetlabs.com/issues/12459'}, {'name': 'USN-1372-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1372-1'}, {'name': '48290', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48290'}, {'name': '79495', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79495'}, {'name': '48161', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48161'}, {'tags': ['x_refsource_MISC'], 'url': 'http://projects.puppetlabs.com/issues/12457'}, {'name': 'SUSE-SU-2012:0325', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html'}, {'name': 'puppet-forked-priv-escalation(73445)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73445'}, {'name': '52158', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52158'}, {'name': 'DSA-2419', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2419'}, {'name': 'openSUSE-SU-2012:0835', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/15087408'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1053?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1054 mean in the context of cybersecurity?

[Assistant] CVE-2012-1054


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1054.

[Assistant] Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1054?

[Assistant] {'name': '48157', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48157'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14'}, {'name': '48166', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48166'}, {'tags': ['x_refsource_MISC'], 'url': 'http://projects.puppetlabs.com/issues/12460'}, {'name': '79496', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79496'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://puppetlabs.com/security/cve/cve-2012-1054/'}, {'name': 'USN-1372-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1372-1'}, {'name': '48290', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48290'}, {'name': '48161', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48161'}, {'name': 'SUSE-SU-2012:0325', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html'}, {'name': '52158', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52158'}, {'name': 'DSA-2419', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2419'}, {'name': 'puppet-k5login-type-symlink(73446)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73446'}, {'name': 'openSUSE-SU-2012:0835', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/15087408'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1054?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1055 mean in the context of cybersecurity?

[Assistant] CVE-2012-1055


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1055.

[Assistant] Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1055?

[Assistant] {'name': '78985', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78985'}, {'name': '51948', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51948'}, {'name': 'photoline-qcd-bo(73103)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73103'}, {'name': '47477', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47477'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1055?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1056 mean in the context of cybersecurity?

[Assistant] CVE-2012-1056


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1056.

[Assistant] The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for (1) Recent forwards, (2) Most forwarded, or (3) Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1056?

[Assistant] {'name': '47851', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47851'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1425150'}, {'name': '51826', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51826'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1423722'}, {'name': 'drupal-multiple-blocks-security-bypass(72920)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72920'}, {'name': '78817', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78817'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1056?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1057 mean in the context of cybersecurity?

[Assistant] CVE-2012-1057


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1057.

[Assistant] Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the tracking code, possibly related to improper "flood control."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1057?

[Assistant] {'name': '47851', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47851'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/forward.git/commitdiff/72158fdbfbf5a068938985e3d10ce1d8f969d9c3'}, {'name': 'drupal-forward-unspecified-csrf(72922)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72922'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1425150'}, {'name': '51826', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51826'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1423722'}, {'name': '78817', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78817'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1057?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1058 mean in the context of cybersecurity?

[Assistant] CVE-2012-1058


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1058.

[Assistant] Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that add admin accounts via an admin.newuser action to index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1058?

[Assistant] {'name': '18468', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18468'}, {'name': 'flyspray-index-csrf(73051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73051'}, {'name': '47881', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47881'}, {'name': '78923', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78923'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109507/Flyspray-0.9.9.6-Cross-Site-Request-Forgery.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1058?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1059 mean in the context of cybersecurity?

[Assistant] CVE-2012-1059


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1059.

[Assistant] Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, as demonstrated using the "Front" field in the shirt module.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1059?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/109389/VL-407.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vulnerability-lab.com/get_content.php?id=407'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/osCommerce/oscommerce/commit/a5aeb0448cc333cc4b801c0e01981b218fd9c7df'}, {'name': 'oscommerce-index-xss(72916)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72916'}, {'name': '51831', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51831'}, {'name': '18455', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18455'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1059?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1060 mean in the context of cybersecurity?

[Assistant] CVE-2012-1060


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1060.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in revisioning_theme.inc in the Taxonomy module in the Revisioning module 6.x-3.13 and other versions before 6.x-3.14 for Drupal allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the (1) tags or (2) term parameters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1060?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/revisioning.git/commit/768c882'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.madirish.net/content/drupal-revisioning-6x-313-xss-vulnerability'}, {'name': '47931', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47931'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1433550'}, {'name': '51923', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51923'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1431114'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1060?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1061 mean in the context of cybersecurity?

[Assistant] CVE-2012-1061


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1061.

[Assistant] SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2012-1061?

[Assistant] {'name': '51912', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51912'}, {'name': '47587', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47587'}, {'name': 'gforgeadvanced-unspecified-sql-injection(73085)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73085'}, {'name': '78928', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78928'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gforgegroup.wordpress.com/2012/02/03/gforge-as-6_0_1-release/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1061?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2012-1062 mean in the context of cybersecurity?

[Assistant] CVE-2012-1062


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1062.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1) period parameter to showHistoryData.do; (2) selectedNetwork, (3) network, or (4) group parameters to showresource.do; (5) header parameter to AlarmView.do; or (6) attName parameter to jsp/PopUp_Graph.jsp.  NOTE: the Search.do/query vector is already covered by CVE-2008-1566, and the jsp/ThresholdActionConfiguration.jsp redirectto vector is already covered by CVE-2008-0474.