Provide references for further information: Can you share references or external links related to CVE-2008-0202?

{'name': '27128', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27128'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/1454/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://securityvulns.ru/Sdocument472.html'}, {'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html'}, {'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485786/100/0/threaded'}, {'name': '3539', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0202?


Explain the CVE ID: What does the identifier CVE-2008-0203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0203.

Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cryptwidth, (2) cryptheight, (3) bgimg, (4) charR, (5) charG, (6) charB, (7) charclear, (8) tfont, (9) charel, (10) charelc, (11) charelv, (12) charnbmin, (13) charnbmax, (14) charspace, (15) charsizemin, (16) charsizemax, (17) charanglemax, (18) noisepxmin, (19) noisepxmax, (20) noiselinemin, (21) noiselinemax, (22) nbcirclemin, (23) nbcirclemax, or (24) brushsize parameter to wp-admin/options-general.php.


Provide references for further information: Can you share references or external links related to CVE-2008-0203?

{'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/1596/'}, {'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485786/100/0/threaded'}, {'name': '3539', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0203?


Explain the CVE ID: What does the identifier CVE-2008-0204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0204.

Multiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php.


Provide references for further information: Can you share references or external links related to CVE-2008-0204?

{'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html'}, {'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485786/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/1576/'}, {'name': '3539', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0204?


Explain the CVE ID: What does the identifier CVE-2008-0205 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0205.

Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php.


Provide references for further information: Can you share references or external links related to CVE-2008-0205?


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0205?


Explain the CVE ID: What does the identifier CVE-2008-0206 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0206.

Multiple cross-site scripting (XSS) vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) captcha_ttffolder, (2) captcha_numchars, (3) captcha_ttfrange, or (4) captcha_secret parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0206?

{'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/1588/'}, {'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html'}, {'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485786/100/0/threaded'}, {'name': '3539', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0206?


Explain the CVE ID: What does the identifier CVE-2008-0207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0207.

Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prot, (2) host, (3) path, (4) name, (5) ext, (6) size, (7) search_days, or (8) show_page parameter to the default URI.


Provide references for further information: Can you share references or external links related to CVE-2008-0207?

{'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/1259/'}, {'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html'}, {'name': '28335', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28335'}, {'tags': ['x_refsource_MISC'], 'url': 'http://securityvulns.ru/Sdocument731.html'}, {'name': '27126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27126'}, {'name': '20080103 securityvulns.com russian vulnerabilities digest', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485786/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=563784&group_id=149797'}, {'name': '3539', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0207?


Explain the CVE ID: What does the identifier CVE-2008-0208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0208.

Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0208?

{'name': '27162', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27162'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hackerscenter.com/archive/view.asp?id=28145'}, {'name': '20080107 [HSC] Snitz Forums Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485836/100/200/threaded'}, {'name': '28284', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28284'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0208?


Explain the CVE ID: What does the identifier CVE-2008-0209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0209.

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0209?

{'tags': ['x_refsource_MISC'], 'url': 'http://hackerscenter.com/archive/view.asp?id=28145'}, {'name': '20080107 [HSC] Snitz Forums Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485836/100/200/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0209?


Explain the CVE ID: What does the identifier CVE-2008-0210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0210.

Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 parameter settting.  NOTE: this can be leveraged to conduct directory traversal attacks without authentication by using CVE-2008-0140.


Provide references for further information: Can you share references or external links related to CVE-2008-0210?

{'name': '27154', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27154'}, {'name': '4846', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4846'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0210?


Explain the CVE ID: What does the identifier CVE-2008-0211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0211.

Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0211?

{'name': 'ADV-2008-1042', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1042/references'}, {'name': 'HPSBGN02305', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120672155821700&w=2'}, {'name': '28494', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28494'}, {'name': 'SSRT080004', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120672155821700&w=2'}, {'name': 'compaq-businessnotebook-pcbios-dos(41520)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41520'}, {'name': '1019729', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019729'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0211?


Explain the CVE ID: What does the identifier CVE-2008-0212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0212.

ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via a crafted TCP request that triggers an out-of-bounds memory access.


Provide references for further information: Can you share references or external links related to CVE-2008-0212?

{'name': '1019306', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019306'}, {'name': 'HPSBMA02307', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/487586/100/0/threaded'}, {'name': 'SSRT071420', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/487586/100/0/threaded'}, {'name': '27629', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27629'}, {'name': 'ADV-2008-0424', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0424'}, {'name': '28798', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28798'}, {'name': '20080204 Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=652'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0212?


Explain the CVE ID: What does the identifier CVE-2008-0213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0213.

Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0213?

{'name': '1019311', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019311'}, {'name': 'SSRT080007', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120231595903371&w=2'}, {'name': 'HPSBGN02310', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120231595903371&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0213?


Explain the CVE ID: What does the identifier CVE-2008-0214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0214.

Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to gain access via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0214?

{'name': '27667', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27667'}, {'name': 'ADV-2008-0472', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0472'}, {'name': '1019322', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019322'}, {'name': 'HPSBMA02309', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120239931201443&w=2'}, {'name': 'SSRT080013', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120239931201443&w=2'}, {'name': '28844', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28844'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0214?


Explain the CVE ID: What does the identifier CVE-2008-0215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0215.

Multiple unspecified vulnerabilities in HP Storage Essentials Storage Resource Management (SRM) before 6.0.0 allow remote attackers to obtain unspecified access to a managed device via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0215?

{'name': 'SSRT071474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01316132'}, {'name': 'ADV-2008-0440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0440'}, {'name': '1019312', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019312'}, {'name': '28813', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28813'}, {'name': '27643', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27643'}, {'name': 'HPSBST02302', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01316132'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0215?


Explain the CVE ID: What does the identifier CVE-2008-0216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0216.

The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.


Provide references for further information: Can you share references or external links related to CVE-2008-0216?

{'name': '28498', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28498'}, {'name': '1019191', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019191'}, {'name': 'freebsd-ptsname-information-disclosure(39667)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39667'}, {'name': '27284', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27284'}, {'name': 'FreeBSD-SA-08:01', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0216?


Explain the CVE ID: What does the identifier CVE-2008-0217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0217.

The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script.


Provide references for further information: Can you share references or external links related to CVE-2008-0217?

{'name': '28498', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28498'}, {'name': '1019191', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019191'}, {'name': 'freebsd-openpty-information-disclosure(39665)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39665'}, {'name': '27284', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27284'}, {'name': 'FreeBSD-SA-08:01', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0217?


Explain the CVE ID: What does the identifier CVE-2008-0218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0218.

Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0218?

{'name': 'ADV-2008-0135', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0135'}, {'name': '27189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27189'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/data/vulnerabilities/exploits/27189.html'}, {'name': '28460', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28460'}, {'name': 'icewarpmailserver-index-xss(39564)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39564'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0218?


Explain the CVE ID: What does the identifier CVE-2008-0219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0219.

SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via the id_actividad parameter, a different vector than CVE-2007-4920.


Provide references for further information: Can you share references or external links related to CVE-2008-0219?

{'name': '4867', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4867'}, {'name': '26821', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26821'}, {'name': '27192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27192'}, {'name': 'webquest-soportehorizontalw-sql-injection(39560)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39560'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0219?


Explain the CVE ID: What does the identifier CVE-2008-0220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0220.

Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the (1) second or (2) fourth argument to the DoWebLaunch method.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0220?

{'name': 'VU#735441', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/735441'}, {'name': '4982', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4982'}, {'name': '27193', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27193'}, {'name': 'ADV-2008-0077', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0077'}, {'name': '4869', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4869'}, {'name': '20080109 Gateway WebLaunch ActiveX Control Insecure Method', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=119984138526735&w=2'}, {'name': '28379', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28379'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0220?


Explain the CVE ID: What does the identifier CVE-2008-0221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0221.

Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ (dot dot backslash) in the second argument to the DoWebLaunch method.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0221?

{'name': 'ADV-2008-0077', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0077'}, {'name': '4869', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4869'}, {'name': '20080109 Gateway WebLaunch ActiveX Control Insecure Method', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=119984138526735&w=2'}, {'name': '28379', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28379'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0221?


Explain the CVE ID: What does the identifier CVE-2008-0222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0222.

Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0222?

{'name': '27151', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27151'}, {'name': '4844', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4844'}, {'name': 'wordpress-wpfilemanager-file-upload(39462)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39462'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0222?


Explain the CVE ID: What does the identifier CVE-2008-0223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0223.

Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attackers to execute arbitrary code via a crafted .JTD file.


Provide references for further information: Can you share references or external links related to CVE-2008-0223?

{'name': '1019168', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019168'}, {'name': '27153', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27153'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.justsystems.com/jp/info/pd8001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080107'}, {'name': '28275', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28275'}, {'name': 'ADV-2008-0045', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0045'}, {'name': 'justsystems-jsfc-bo(39501)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39501'}, {'name': 'JVN#08237857', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/jp/JVN%2308237857/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0223?


Explain the CVE ID: What does the identifier CVE-2008-0224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0224.

SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0224?

{'name': 'runcms-newbb-client-sql-injection(39478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39478'}, {'name': '27152', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27152'}, {'name': '4845', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4845'}, {'name': '28340', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28340'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0224?


Explain the CVE ID: What does the identifier CVE-2008-0225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0225.

Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmff_dump_header function and related to disregarding the max field.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0225?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/xinermffhof-adv.txt'}, {'name': 'SUSE-SR:2008:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_summary_report.html'}, {'name': 'ADV-2008-0163', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0163'}, {'name': 'MDVSA-2008:045', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:045'}, {'name': '28955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28955'}, {'name': 'GLSA-200801-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200801-12.xml'}, {'name': '28489', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28489'}, {'name': '28507', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28507'}, {'name': '31393', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31393'}, {'name': 'DSA-1472', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1472'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=205197'}, {'name': 'FEDORA-2008-0718', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00592.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=428620'}, {'name': '28384', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28384'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=567872'}, {'name': '28636', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28636'}, {'name': '27198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27198'}, {'name': '28674', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28674'}, {'name': 'USN-635-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-635-1'}, {'name': 'MDVSA-2008:020', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0225?


Explain the CVE ID: What does the identifier CVE-2008-0226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0226.

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.


Provide references for further information: Can you share references or external links related to CVE-2008-0226?

{'name': 'DSA-1478', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1478'}, {'name': '29443', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29443'}, {'name': '20080104 Multiple vulnerabilities in yaSSL 1.7.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485810/100/0/threaded'}, {'name': '28324', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28324'}, {'name': '3531', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3531'}, {'name': '31681', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/31681'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.mysql.com/33814'}, {'name': '27140', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27140'}, {'name': '28597', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28597'}, {'name': 'ADV-2008-0560', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0560/references'}, {'name': '32222', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32222'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html'}, {'name': '20080104 Pre-auth buffer-overflow in mySQL through yaSSL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485811/100/0/threaded'}, {'name': '28419', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28419'}, {'name': 'ADV-2008-2780', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/2780'}, {'name': 'USN-588-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-588-1'}, {'name': 'MDVSA-2008:150', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:150'}, {'name': 'yassl-inputbufferoperator-bo(39431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39431'}, {'name': 'yassl-processoldclienthello-bo(39429)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39429'}, {'name': 'APPLE-SA-2008-10-09', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3216'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0226?


Explain the CVE ID: What does the identifier CVE-2008-0227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0227.

yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a Hello packet containing a large size value, which triggers a buffer over-read in the HASHwithTransform::Update function in hash.cpp.


Provide references for further information: Can you share references or external links related to CVE-2008-0227?

{'name': 'DSA-1478', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1478'}, {'name': '29443', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29443'}, {'name': '20080104 Multiple vulnerabilities in yaSSL 1.7.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485810/100/0/threaded'}, {'name': '28324', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28324'}, {'name': '3531', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3531'}, {'name': '31681', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/31681'}, {'name': 'yassl-hashwithtransformupdate-dos(39433)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39433'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.mysql.com/33814'}, {'name': '27140', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27140'}, {'name': '28597', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28597'}, {'name': 'ADV-2008-0560', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0560/references'}, {'name': '32222', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32222'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html'}, {'name': 'ADV-2008-2780', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/2780'}, {'name': 'USN-588-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-588-1'}, {'name': 'MDVSA-2008:150', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:150'}, {'name': 'APPLE-SA-2008-10-09', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT3216'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0227?


Explain the CVE ID: What does the identifier CVE-2008-0228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0228.

Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators.


Provide references for further information: Can you share references or external links related to CVE-2008-0228?

{'name': 'linksys-apply-csrf(39502)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39502'}, {'name': '3534', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3534'}, {'name': '28364', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28364'}, {'name': '20080107 Linksys WRT54 GL - Session riding (CSRF)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485853/100/0/threaded'}, {'name': '20080115 Re: Linksys WRT54 GL - Session riding (CSRF)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486362/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0228?


Explain the CVE ID: What does the identifier CVE-2008-0229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0229.

The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does not require authentication, which allows remote attackers on the local or wireless network to obtain administrative access.


Provide references for further information: Can you share references or external links related to CVE-2008-0229?

{'name': '20080108 Level-One WBR-3460A Grants Root Access', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485935/100/0/threaded'}, {'name': '27183', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27183'}, {'name': '1019162', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019162'}, {'name': '28397', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28397'}, {'name': '3533', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3533'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0229?


Explain the CVE ID: What does the identifier CVE-2008-0230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0230.

PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0230?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0801-exploits/osdata-lfi.txt'}, {'name': '28420', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28420'}, {'name': 'osdate-php121db-file-include(39567)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39567'}, {'name': '4870', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4870'}, {'name': '27208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27208'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0230?


Explain the CVE ID: What does the identifier CVE-2008-0231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0231.

Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page parameter.  NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments.


Provide references for further information: Can you share references or external links related to CVE-2008-0231?

{'name': '4876', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4876'}, {'name': '27196', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27196'}, {'name': 'tunedstudiostemplates-index-file-include(39555)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39555'}, {'name': '20080109 LFI in Tuned Studios Templates', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485991/100/0/threaded'}, {'name': '3532', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3532'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0231?


Explain the CVE ID: What does the identifier CVE-2008-0232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0232.

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/index.php.


Provide references for further information: Can you share references or external links related to CVE-2008-0232?

{'name': '27186', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27186'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt'}, {'name': '4864', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4864'}, {'name': 'zerocms-index-sql-injection(39530)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39530'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0232?


Explain the CVE ID: What does the identifier CVE-2008-0233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0233.

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg.


Provide references for further information: Can you share references or external links related to CVE-2008-0233?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt'}, {'name': '4864', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4864'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0233?


Explain the CVE ID: What does the identifier CVE-2008-0234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0234.

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message.


Provide references for further information: Can you share references or external links related to CVE-2008-0234?

{'name': '4885', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4885'}, {'name': 'quicktime-rtsp-responses-bo(39601)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39601'}, {'name': '20080111 Re: Re: Buffer-overflow in Quicktime Player 7.3.1.70', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486161/100/0/threaded'}, {'name': '20080110 Buffer-overflow in Quicktime Player 7.3.1.70', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486091/100/0/threaded'}, {'name': 'ADV-2008-2064', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/2064/references'}, {'name': 'APPLE-SA-2008-02-06', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2008/Feb/msg00001.html'}, {'name': '4906', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4906'}, {'name': '31034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31034'}, {'name': '20080112 Re: Buffer-overflow in Quicktime Player 7.3.1.70', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486268/100/0/threaded'}, {'name': '20080111 Re: Buffer-overflow in Quicktime Player 7.3.1.70', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486174/100/0/threaded'}, {'name': 'APPLE-SA-2008-07-10', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html'}, {'name': '20080110 Re: Buffer-overflow in Quicktime Player 7.3.1.70', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486114/100/0/threaded'}, {'name': '27225', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27225'}, {'name': 'VU#112179', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/112179'}, {'name': '20080112 Re: Re: Buffer-overflow in Quicktime Player 7.3.1.70', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486241/100/0/threaded'}, {'name': '20080114 Re: [Full-disclosure] Buffer-overflow in Quicktime Player 7.3.1.70', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486238/100/0/threaded'}, {'name': 'ADV-2008-0107', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0107'}, {'name': '3537', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3537'}, {'name': '1019178', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019178'}, {'name': '28423', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28423'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0234?


Explain the CVE ID: What does the identifier CVE-2008-0235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0235.

The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method.


Provide references for further information: Can you share references or external links related to CVE-2008-0235?

{'name': '4875', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4875'}, {'name': '28417', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28417'}, {'name': '27199', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27199'}, {'tags': ['x_refsource_MISC'], 'url': 'http://shinnai.altervista.org/exploits/txt/TXT_rNowA1916DKFNUF48NyS.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0801-exploits/msvfpole-exec.txt'}, {'name': 'microsoft-vfpoleserver-command-execution(39559)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39559'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0235?


Explain the CVE ID: What does the identifier CVE-2008-0236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0236.

An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd method.


Provide references for further information: Can you share references or external links related to CVE-2008-0236?

{'name': '28417', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28417'}, {'name': '27205', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27205'}, {'name': 'microsoft-foxserver-command-execution(39558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39558'}, {'name': '4873', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4873'}, {'tags': ['x_refsource_MISC'], 'url': 'http://shinnai.altervista.org/exploits/txt/TXT_DiWu9j82RCq4zpaQAoxn.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0236?


Explain the CVE ID: What does the identifier CVE-2008-0237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0237.

The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method.


Provide references for further information: Can you share references or external links related to CVE-2008-0237?

{'name': 'microsoft-richtextbox-file-overwrite(39557)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39557'}, {'tags': ['x_refsource_MISC'], 'url': 'http://shinnai.altervista.org/exploits/txt/TXT_DZVN8CwCha0I2fI3NeEs.html'}, {'name': '4874', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4874'}, {'name': '27201', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27201'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0237?


Explain the CVE ID: What does the identifier CVE-2008-0238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0238.

Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related to the rmff_dump_header function, different vectors than CVE-2008-0225.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0238?

{'name': 'MDVSA-2008:045', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:045'}, {'name': '28955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28955'}, {'name': 'GLSA-200801-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200801-12.xml'}, {'name': '31393', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31393'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=205197'}, {'name': '28384', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28384'}, {'name': '28674', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28674'}, {'name': 'USN-635-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-635-1'}, {'name': 'MDVSA-2008:020', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0238?


Explain the CVE ID: What does the identifier CVE-2008-0239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0239.

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp.


Provide references for further information: Can you share references or external links related to CVE-2008-0239?

{'name': '20080110 PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486076/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Vulnerability_PR07-07.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Vulnerability_PR07-06.php'}, {'name': '103180', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1'}, {'name': 'ADV-2008-0089', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0089'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Vulnerability_PR07-08.php'}, {'name': '28356', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28356'}, {'name': '3535', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3535'}, {'name': '1019175', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019175'}, {'name': 'sun-identity-lang-xss(39581)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39581'}, {'name': '200558', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1'}, {'name': 'sun-identity-main-xss(39583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39583'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Vulnerability_PR07-09.php'}, {'name': 'sun-identity-login-xss(39580)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39580'}, {'name': '27214', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27214'}, {'name': 'sun-identity-resultsform-xss(39582)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39582'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0239?


Explain the CVE ID: What does the identifier CVE-2008-0240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0240.

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."


Provide references for further information: Can you share references or external links related to CVE-2008-0240?

{'name': '20080110 PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486076/100/0/threaded'}, {'name': '103180', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1'}, {'name': 'ADV-2008-0089', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0089'}, {'name': '28356', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28356'}, {'name': '3535', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3535'}, {'name': 'sun-identity-index-frame-injection(39586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39586'}, {'name': '200558', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Vulnerability_PR07-10.php'}, {'name': '27214', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27214'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0240?


Explain the CVE ID: What does the identifier CVE-2008-0241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0241.

Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0241?

{'name': '20080110 PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486076/100/0/threaded'}, {'name': '103180', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1'}, {'name': 'ADV-2008-0089', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0089'}, {'name': '28356', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28356'}, {'name': '3535', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3535'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.procheckup.com/Vulnerability_PR07-12.php'}, {'name': '200558', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1'}, {'name': 'sun-identity-login-security-bypass(39590)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39590'}, {'name': '27214', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27214'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0241?


Explain the CVE ID: What does the identifier CVE-2008-0242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0242.

Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions.


Provide references for further information: Can you share references or external links related to CVE-2008-0242?

{'name': 'oval:org.mitre.oval:def:5211', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5211'}, {'name': '103165', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-103165-1'}, {'name': '200641', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-200641-1'}, {'name': '28493', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28493'}, {'name': 'ADV-2008-0131', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0131'}, {'name': '1019187', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019187'}, {'name': 'solaris-libdevinfo-privilege-escalation(39629)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39629'}, {'name': '27253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27253'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0242?


Explain the CVE ID: What does the identifier CVE-2008-0243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0243.

Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0243?

{'name': 'ADV-2008-0086', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0086'}, {'name': '27215', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27215'}, {'name': '28411', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28411'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg27011539'}, {'name': 'lotus-domino-unspecified-dos(39588)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39588'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0243?


Explain the CVE ID: What does the identifier CVE-2008-0244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0244.

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec_sdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe.


Provide references for further information: Can you share references or external links related to CVE-2008-0244?

{'name': '28409', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28409'}, {'name': '20080109 Pre-auth remote commands execution in SAP MaxDB 7.6.03.07', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486039/100/0/threaded'}, {'name': 'ADV-2008-0104', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0104'}, {'name': '4877', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4877'}, {'name': '1019171', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019171'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/sapone-adv.txt'}, {'name': '3536', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3536'}, {'name': 'maxdb-system-command-execution(39573)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39573'}, {'name': '27206', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27206'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0244?


Explain the CVE ID: What does the identifier CVE-2008-0245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0245.

admin.php in UploadImage 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action.


Provide references for further information: Can you share references or external links related to CVE-2008-0245?

{'name': '27203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27203'}, {'name': '4871', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4871'}, {'name': 'uploadimage-admin-command-execution(39571)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39571'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0245?


Explain the CVE ID: What does the identifier CVE-2008-0246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0246.

admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action.


Provide references for further information: Can you share references or external links related to CVE-2008-0246?

{'name': '27203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27203'}, {'name': '4871', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4871'}, {'name': 'uploadscript-admin-command-execution(39570)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39570'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0246?


Explain the CVE ID: What does the identifier CVE-2008-0247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0247.

Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value.


Provide references for further information: Can you share references or external links related to CVE-2008-0247?

{'name': '28440', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28440'}, {'name': 'ibm-tsmexpressserver-bo(39604)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39604'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-08-001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21291536'}, {'name': 'ADV-2008-0106', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0106'}, {'name': '27235', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27235'}, {'name': '20080114 ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486270/100/0/threaded'}, {'name': '1019182', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019182'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0247?


Explain the CVE ID: What does the identifier CVE-2008-0248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0248.

Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary code via a long URL argument to the InternalTuneIn method.


Provide references for further information: Can you share references or external links related to CVE-2008-0248?

{'name': 'streamaudio-chaincastproxymanager-bo(39622)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39622'}, {'name': '4894', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4894'}, {'name': '20080111 StreamAudio ChainCast ProxyManager ccpm_0237.dll Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059572.html'}, {'name': 'ADV-2008-0133', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0133'}, {'name': '28461', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28461'}, {'name': '27247', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27247'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0248?


Explain the CVE ID: What does the identifier CVE-2008-0249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0249.

PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in an error message if a call to /usr/bin/mysqldump fails.  NOTE: this might only be an issue in limited environments.


Provide references for further information: Can you share references or external links related to CVE-2008-0249?

{'name': '27202', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27202'}, {'name': '4872', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4872'}, {'name': 'phpwebquest-backup-information-disclosure(39572)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39572'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0249?


Explain the CVE ID: What does the identifier CVE-2008-0250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0250.

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long Project line.


Provide references for further information: Can you share references or external links related to CVE-2008-0250?

{'name': '28482', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28482'}, {'name': '4892', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4892'}, {'tags': ['x_refsource_MISC'], 'url': 'http://shinnai.altervista.org/exploits/txt/TXT_PoEOrFM8py30PXrDF7IY.html'}, {'name': 'visualinterdev-sln-project-bo(41826)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41826'}, {'name': '27250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27250'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0250?


Explain the CVE ID: What does the identifier CVE-2008-0251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0251.

Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0251?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.photopost.com/forum/showthread.php?t=134910'}, {'name': 'vbgallery-unspecified-code-execution(39621)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39621'}, {'name': '28430', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28430'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.photopost.com/forum/showthread.php?t=134909'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0251?


Explain the CVE ID: What does the identifier CVE-2008-0252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0252.

Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arbitrary files, and possibly read and write portions of arbitrary files, via a crafted session id in a cookie.


Provide references for further information: Can you share references or external links related to CVE-2008-0252?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cherrypy.org/changeset/1775'}, {'name': 'ADV-2008-0039', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0039'}, {'name': 'GLSA-200801-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200801-11.xml'}, {'name': '27181', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27181'}, {'name': 'DSA-1481', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1481'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.gentoo.org/show_bug.cgi?id=204829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cherrypy.org/changeset/1776'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cherrypy.org/changeset/1774'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.rpath.com/browse/RPL-2127'}, {'name': '20080124 rPSA-2008-0030-1 CherryPy', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487001/100/0/threaded'}, {'name': 'FEDORA-2008-0333', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00297.html'}, {'name': '28769', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28769'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cherrypy.org/ticket/744'}, {'name': '28353', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28353'}, {'name': '28611', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28611'}, {'name': '28354', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28354'}, {'name': '28620', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28620'}, {'name': 'FEDORA-2008-0299', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00240.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0252?


Explain the CVE ID: What does the identifier CVE-2008-0253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0253.

SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands via the nid parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0253?

{'name': '20080114 Binn SBuilder (nid) Remote Blind Sql Injection Vulnerabily', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486265/100/0/threaded'}, {'name': '27264', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27264'}, {'name': 'binnsbuilder-fulltext-sql-injection(39634)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39634'}, {'name': '4904', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4904'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0253?


Explain the CVE ID: What does the identifier CVE-2008-0254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0254.

SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0254?

{'name': '28446', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28446'}, {'name': '27263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27263'}, {'name': 'tutorialcms-activate-sql-injection(39642)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39642'}, {'name': '4901', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4901'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0254?


Explain the CVE ID: What does the identifier CVE-2008-0255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0255.

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0255?

{'name': '28426', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28426'}, {'name': 'igamingcms-archive-sql-injection(39598)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39598'}, {'name': '27230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27230'}, {'name': '4886', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4886'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0255?


Explain the CVE ID: What does the identifier CVE-2008-0256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0256.

Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) Imgbig.asp, (b) thumb.asp, and (c) thumbricerca.asp and the (2) ricerca parameter to (d) thumbricerca.asp.


Provide references for further information: Can you share references or external links related to CVE-2008-0256?

{'name': '28447', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28447'}, {'name': '4900', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4900'}, {'name': '27262', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27262'}, {'name': 'aspphotogallery-multiple-sql-injection(39646)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39646'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0256?


Explain the CVE ID: What does the identifier CVE-2008-0257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0257.

Cross-site scripting (XSS) vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0257?

{'name': '28465', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28465'}, {'name': 'dansiesearchengine-search-xss(39636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39636'}, {'name': '27269', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27269'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0257?


Explain the CVE ID: What does the identifier CVE-2008-0258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0258.

Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0258?

{'name': '28474', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28474'}, {'name': '27268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27268'}, {'name': 'phprunningmanagement-index-xss(39639)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39639'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=1204199&group_id=103505&atid=634992'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=568237&group_id=103505'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0258?


Explain the CVE ID: What does the identifier CVE-2008-0259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0259.

Multiple directory traversal vulnerabilities in _mg/php/mg_thumbs.php in minimal Gallery 0.8 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) thumbcat and (2) thumb parameters.


Provide references for further information: Can you share references or external links related to CVE-2008-0259?

{'name': '27265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27265'}, {'name': '4902', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4902'}, {'name': 'minimalgallery-mgthumbs-file-include(39649)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39649'}, {'name': '28391', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28391'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0259?


Explain the CVE ID: What does the identifier CVE-2008-0260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0260.

minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to php_info.php, which calls the phpinfo function.


Provide references for further information: Can you share references or external links related to CVE-2008-0260?

{'name': '4902', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4902'}, {'name': '28391', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28391'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0260?


Explain the CVE ID: What does the identifier CVE-2008-0261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0261.

Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service (query flood) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0261?

{'name': '28392', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28392'}, {'name': 'mambo-search-dos(39613)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39613'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.mambo-foundation.org/showthread.php?t=9651'}, {'name': '27239', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27239'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0261?


Explain the CVE ID: What does the identifier CVE-2008-0262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0262.

SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0262?

{'name': 'agares-articleblock-sql-injection(39641)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39641'}, {'name': '27258', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27258'}, {'name': '4905', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4905'}, {'name': '4898', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4898'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0262?


Explain the CVE ID: What does the identifier CVE-2008-0263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0263.

The SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP media ports in unspecified call hold and send-only stream scenarios, which allows remote attackers to cause a denial of service (port exhaustion) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0263?

{'name': '40365', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/40365'}, {'name': '1019177', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019177'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ingate.com/relnote-461.php'}, {'name': '28394', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28394'}, {'name': '27222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27222'}, {'name': 'ADV-2008-0108', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0108'}, {'name': '1019176', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019176'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0263?


Explain the CVE ID: What does the identifier CVE-2008-0264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0264.

Unspecified vulnerability in the Meta Tags (aka Nodewords) 5.x-1.6 module for Drupal, when images are permitted in node bodies, allows remote authenticated users to execute arbitrary code via unspecified vectors involving creation of a node.


Provide references for further information: Can you share references or external links related to CVE-2008-0264?

{'name': 'drupal-metatags-code-execution(39638)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39638'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/209759'}, {'name': 'ADV-2008-0129', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0129'}, {'name': '28478', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28478'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0264?


Explain the CVE ID: What does the identifier CVE-2008-0265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0265.

Multiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to (1) list_system.jsp, (2) list_pktfilter.jsp, (3) list_ltm.jsp, (4) resources_audit.jsp, and (5) list_asm.jsp in tmui/Control/jspmap/tmui/system/log/; and (6) list.jsp in certain directories.


Provide references for further information: Can you share references or external links related to CVE-2008-0265?

{'name': '1019190', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019190'}, {'name': 'ADV-2008-0181', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0181'}, {'name': 'f5bigip-searchstring-xss(39632)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39632'}, {'name': '3545', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3545'}, {'name': '28505', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28505'}, {'name': '20080114 F5 BIG-IP Web Management List Search XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486217/100/0/threaded'}, {'name': '27272', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27272'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0265?


Explain the CVE ID: What does the identifier CVE-2008-0266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0266.

Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks.  NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2008-0266?

{'name': '20080106 eTicket 1.5.5.2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485835/100/0/threaded'}, {'name': 'eticket-admin-csrf(39490)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39490'}, {'name': '28331', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28331'}, {'name': '27173', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27173'}, {'name': '3542', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3542'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0266?


Explain the CVE ID: What does the identifier CVE-2008-0267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0267.

Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) status, (2) sort, and (3) way parameters to search.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (4) msg and (5) password parameters to admin.php.


Provide references for further information: Can you share references or external links related to CVE-2008-0267?

{'name': 'eticket-admin-sql-injection(39487)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39487'}, {'name': '20080106 eTicket 1.5.5.2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485835/100/0/threaded'}, {'name': 'eticket-search-sql-injection(39489)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39489'}, {'name': '28331', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28331'}, {'name': '27173', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27173'}, {'name': '3542', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3542'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0267?


Explain the CVE ID: What does the identifier CVE-2008-0268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0268.

Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0268?

{'name': '20080106 eTicket 1.5.5.2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485835/100/0/threaded'}, {'name': 'eticket-view-xss(39488)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39488'}, {'name': '28331', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28331'}, {'name': '27173', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27173'}, {'name': '3542', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3542'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0268?


Explain the CVE ID: What does the identifier CVE-2008-0269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0269.

Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors.