Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1612.

Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1612?

{'name': '[oss-security] 20120403 Re: CVE-request: Joomla 2012-04 398-20120307 399-20120308', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/5'}, {'name': '52859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52859'}, {'name': '80880', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80880'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://developer.joomla.org/security/news/399-20120308-core-xss-vulnerability.html'}, {'name': '[oss-security] 20120403 CVE-request: Joomla 2012-04 398-20120307 399-20120308', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/3'}, {'name': '48683', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48683'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1612?


Explain the CVE ID: What does the identifier CVE-2012-1613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1613.

Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1613?

{'name': '20120329 [waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-81.html'}, {'name': '80731', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80731'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html'}, {'name': '18680', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18680'}, {'name': '48643', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48643'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354'}, {'name': '52818', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52818'}, {'name': '[oss-security] 20120330 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html'}, {'name': '[oss-security] 20120403 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/6'}, {'name': '[oss-security] 20120330 CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1613?


Explain the CVE ID: What does the identifier CVE-2012-1614 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1614.

Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2012-1614?

{'name': '20120329 [waraxe-2012-SA#081] - Multiple Vulnerabilities in Coppermine 1.5.18', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0167.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-81.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/111369/Coppermine-1.5.18-Cross-Site-Scripting-Path-Disclosure.html'}, {'name': '18680', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18680'}, {'name': '80734', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80734'}, {'name': '80735', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80735'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://coppermine.svn.sourceforge.net/viewvc/coppermine/trunk/cpg1.6.x/edit_one_pic.php?r1=8348&r2=8354'}, {'name': '80732', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80732'}, {'name': '80733', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80733'}, {'name': '52818', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52818'}, {'name': '[oss-security] 20120330 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.coppermine-gallery.net/index.php/topic%2C74682.0.html'}, {'name': '[oss-security] 20120403 Re: CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/6'}, {'name': '[oss-security] 20120330 CVE-request: Coppermine 1.5.18 waraxe-2012-SA#081', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1614?


Explain the CVE ID: What does the identifier CVE-2012-1615 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1615.

A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.


Provide references for further information: Can you share references or external links related to CVE-2012-1615?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1615'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-April/076873.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081113.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/04/2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/52884'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74655'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1615?


Explain the CVE ID: What does the identifier CVE-2012-1616 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1616.

Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.


Provide references for further information: Can you share references or external links related to CVE-2012-1616?

{'name': 'argyll-icc-code-execution(75162)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/75162'}, {'name': '48921', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48921'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=809697'}, {'name': '81617', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/81617'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.argyllcms.com/icc_readme.html'}, {'name': '53240', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53240'}, {'name': 'GLSA-201206-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201206-04.xml'}, {'name': 'FEDORA-2012-6529', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079762.html'}, {'name': '49602', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/49602'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1616?


Explain the CVE ID: What does the identifier CVE-2012-1617 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1617.

Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the type parameter.  NOTE: this vulnerability can be leveraged to upload arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2012-1617?

{'name': '20120307 OSClass directory traversal (leads to arbitrary file upload)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0024.html'}, {'name': '48284', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48284'}, {'name': '[oss-security] 20120403 Re: CVE request: OSClass directory traversal vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/03/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/osclass/OSClass/commit/a40b76695994442644e46e1b776d79660500566a'}, {'name': '[oss-security] 20120404 Re: CVE request: OSClass directory traversal vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/04/7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.codseq.it/advisories/osclass_directory_traversal_vulnerability'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://osclass.org/2012/03/05/osclass-2-3-6/'}, {'name': '52336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52336'}, {'name': '[oss-security] 20120402 Re: CVE request: OSClass directory traversal vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/02/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/osclass/OSClass/commit/1e7626f4e1a26371480989c0b937f107ea9a6d4b'}, {'name': '[oss-security] 20120402 CVE request: OSClass directory traversal vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/02/1'}, {'name': 'osclass-directory-traversal(73754)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73754'}, {'name': 'osclass-file-upload(73755)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73755'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1617?


Explain the CVE ID: What does the identifier CVE-2012-1618 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1618.

Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly escape unspecified JDBC statement parameters, which allows remote attackers to perform SQL injection attacks.  NOTE: as of 20120330, it was claimed that the upstream developer planned to dispute this issue, but an official dispute has not been posted as of 20121005.


Provide references for further information: Can you share references or external links related to CVE-2012-1618?

{'name': '[oss-security] 20120330 postgresql-jdbc 8.1 SQL injection with postgresql server 9.1', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/9'}, {'name': '[oss-security] 20120402 Re: [JDBC] CVE DISPUTE notification: postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/02/4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=754273'}, {'name': '[oss-security] 20120404 Re: CVE DISPUTE notification: postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/04/9'}, {'name': '80641', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80641'}, {'name': '[opensuse-security] 20120325 SQL injection attack possible when connecting to PostgreSQL 9.1 with version 8.1 JDBC driver', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.opensuse.org/opensuse-security/2012-03/msg00024.html'}, {'name': '[oss-security] 20120404 Re: Re: [JDBC] CVE DISPUTE notification: postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/04/5'}, {'name': '[oss-security] 20120404 Re: Re: [pgsql-security] postgresql-jdbc 8.1 SQL injection with postgresql server 9.1', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/04/4'}, {'name': '[oss-security] 20120330 CVE DISPUTE notification: postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/30/8'}, {'name': '[oss-security] 20120404 Re: CVE DISPUTE notification: postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/04/11'}, {'name': '[oss-security] 20120331 SQL injection attack possible when connecting to PostgreSQL 9.1 with version 8.1 JDBC driver', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/31/1'}, {'name': '20120325 SQL injection attack possible when connecting to PostgreSQL 9.1 with version 8.1 JDBC driver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0126.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1618?


Explain the CVE ID: What does the identifier CVE-2012-1619 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1619.


Provide references for further information: Can you share references or external links related to CVE-2012-1619?


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1619?


Explain the CVE ID: What does the identifier CVE-2012-1620 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1620.

slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows.


Provide references for further information: Can you share references or external links related to CVE-2012-1620?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.gentoo.org/show_bug.cgi?id=401645'}, {'name': '[oss-security] 20120405 Re: CVE Request: slock-0.9 displays modal box after locking', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/06/2'}, {'name': '[oss-security] 20120405 CVE Request: slock-0.9 displays modal box after locking', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/06/1'}, {'name': '48700', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48700'}, {'name': 'slock-xraisewindow-sec-bypass(74666)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74666'}, {'name': '81035', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/81035'}, {'name': '52922', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52922'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.suckless.org/slock/rev/891a4984aba6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=786310'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1620?


Explain the CVE ID: What does the identifier CVE-2012-1621 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1621.

Multiple cross-site scripting (XSS) vulnerabilities in Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.02 allow remote attackers to inject arbitrary web script or HTML via (1) a parameter array in freemarker templates, the (2) contentId or (3) mapKey parameter in a cms event request, which are not properly handled in an error message, or unspecified input in (4) an ajax request to the getServerError function in checkoutProcess.js or (5) a Webslinger component request.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-1621?

{'name': '20120415 [CVE-2012-1621] Apache OFBiz information disclosure vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2012/Apr/101'}, {'name': '[www-announce] 20120415 Apache OFBiz 10.04.02 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail-archives.apache.org/mod_mbox/www-announce/201204.mbox/%3C2B984C00-EC65-4455-98D3-55735ABE8AF9%40apache.org%3E'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ofbiz.apache.org/download.html#vulnerabilities'}, {'name': '48800', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48800'}, {'name': '81349', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/81349'}, {'name': '81346', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/81346'}, {'name': '81347', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/81347'}, {'name': '20120415 [CVE-2012-1621] Apache OFBiz information\tdisclosure vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Apr/172'}, {'name': 'apache-ofbiz-multiple-xss(74870)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74870'}, {'name': '53023', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53023'}, {'name': '81348', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/81348'}, {'name': '[ofbiz-dev] 20120415 [CVE-2012-1621] Apache OFBiz information disclosure vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail-archives.apache.org/mod_mbox/ofbiz-dev/201204.mbox/%3CA126EDA0-06A5-4B67-8CDD-FC5F5AABA147%40apache.org%3E'}, {'name': '1026927', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026927'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1621?


Explain the CVE ID: What does the identifier CVE-2012-1622 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1622.

Apache OFBiz 10.04.x before 10.04.02 allows remote attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1622?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://ofbiz.apache.org/download.html#security'}, {'name': '[ofbiz-user] 20120415 [CVE-2012-1622] Apache OFBiz information disclosure vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail-archives.apache.org/mod_mbox/ofbiz-user/201204.mbox/%3C4F378887-E697-44E7-976C-48B9B7475C4D%40apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1622?


Explain the CVE ID: What does the identifier CVE-2012-1623 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1623.

The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions.


Provide references for further information: Can you share references or external links related to CVE-2012-1623?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1394172'}, {'name': '47443', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47443'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': '51271', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51271'}, {'name': '78184', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/78184'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1623?


Explain the CVE ID: What does the identifier CVE-2012-1624 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1624.

Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.


Provide references for further information: Can you share references or external links related to CVE-2012-1624?

{'name': 'lingotek-createedit-xss(72151)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72151'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1394220'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': '47453', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47453'}, {'name': '51272', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51272'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1394412'}, {'name': '78185', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/78185'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1624?


Explain the CVE ID: What does the identifier CVE-2012-1625 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1625.

Eval injection vulnerability in the fillpdf_form_export_decode function in fillpdf.admin.inc in the Fill PDF module 6.x-1.x before 6.x-1.16 and 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with administer PDFs privileges to execute arbitrary PHP code via unspecified vectors.  NOTE: Some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2012-1625?

{'name': '51288', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51288'}, {'name': '78182', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78182'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1394428'}, {'name': '47418', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47418'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1625?


Explain the CVE ID: What does the identifier CVE-2012-1626 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1626.

SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to execute arbitrary SQL commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1626?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1401026'}, {'name': '47533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47533'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': '78261', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78261'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1401434'}, {'name': 'date-event-sql-injection(72356)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72356'}, {'name': '51378', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51378'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1626?


Explain the CVE ID: What does the identifier CVE-2012-1627 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1627.

Cross-site scripting (XSS) vulnerability in vud_term.module in the Vote Up/Down module 6.x-2.x before 6.x-2.8 and 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via taxonomy terms.


Provide references for further information: Can you share references or external links related to CVE-2012-1627?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/vote_up_down.git/commit/fe83aa4b8fa44d83a01494870a80d4651434f4c0'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1401580'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1400530'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1400528'}, {'name': '51376', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51376'}, {'name': '47549', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47549'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1627?


Explain the CVE ID: What does the identifier CVE-2012-1628 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1628.

Cross-site scripting (XSS) vulnerability in the SuperCron module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1628?

{'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': 'supercron-unspecified-xss(72389)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72389'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1401644'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1628?


Explain the CVE ID: What does the identifier CVE-2012-1629 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1629.

Cross-site scripting (XSS) vulnerability in the Taxotouch module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1629?

{'name': '51387', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51387'}, {'name': 'taxinomynavigator-unspecified-xss(72387)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72387'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1401644'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1629?


Explain the CVE ID: What does the identifier CVE-2012-1630 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1630.

Cross-site scripting (XSS) vulnerability in the Taxonomy Navigator module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1630?

{'name': '51387', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51387'}, {'name': 'taxinomynavigator-unspecified-xss(72387)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72387'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1401644'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1630?


Explain the CVE ID: What does the identifier CVE-2012-1631 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1631.

Cross-site request forgery (CSRF) vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1631?

{'name': '51388', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51388'}, {'name': 'adminhover-unspecified-csrf(72386)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72386'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1401644'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1407206'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1631?


Explain the CVE ID: What does the identifier CVE-2012-1632 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1632.

Cross-site scripting (XSS) vulnerability in password_policy.admin.inc in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote authenticated users with administer policies permissions to inject arbitrary web script or HTML via the name parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1632?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/password_policy.git/commit/3c688c3b4a3ed96fdc4b89883595633338c7ebb6'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1401678'}, {'name': '51385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51385'}, {'name': '47541', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47541'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1632?


Explain the CVE ID: What does the identifier CVE-2012-1633 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1633.

Cross-site request forgery (CSRF) vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote attackers to hijack the authentication of administrative users for requests that unblock a user.


Provide references for further information: Can you share references or external links related to CVE-2012-1633?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1401678'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/password_policy.git/commit/3c688c3b4a3ed96fdc4b89883595633338c7ebb6'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': '51385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51385'}, {'name': '47541', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47541'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1633?


Explain the CVE ID: What does the identifier CVE-2012-1634 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1634.

Cross-site scripting (XSS) vulnerability in video_filter.codecs.inc in the Video Filter module 6.x-2.x and 7.x-2.x for Drupal allows remote attackers to inject arbitrary web script or HTML via the EMBEDLOOKUP parameter for Blip.tv links.


Provide references for further information: Can you share references or external links related to CVE-2012-1634?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/video_filter.git/commit/49680a6'}, {'name': 'videofilter-unspecified-xss(72359)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72359'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://justin.madirish.net/content/drupal-video-filter-6x-28-xss-vulnerability'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1401838'}, {'name': '51381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51381'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/video_filter.git/commit/c90c86e'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1634?


Explain the CVE ID: What does the identifier CVE-2012-1635 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1635.

The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML sitemap module to obtain sensitive information about unpublished content.


Provide references for further information: Can you share references or external links related to CVE-2012-1635?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1407456'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1409268'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1635?


Explain the CVE ID: What does the identifier CVE-2012-1636 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1636.

Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of users for requests that delete stickynotes via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1636?

{'name': '47650', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47650'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1408556'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1409422'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/stickynote.git/commit/9a7b535'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1636?


Explain the CVE ID: What does the identifier CVE-2012-1637 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1637.

Cross-site scripting vulnerability (XSS) in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal.


Provide references for further information: Can you share references or external links related to CVE-2012-1637?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.drupal.org/node/1409476'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1637?


Explain the CVE ID: What does the identifier CVE-2012-1638 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1638.

SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated users with the "use search_autocomplete" permission to execute arbitrary SQL commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1638?

{'name': '47731', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47731'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1410674'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': '51667', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51667'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1416612'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/search_autocomplete.git/commit/589e8f6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1638?


Explain the CVE ID: What does the identifier CVE-2012-1639 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1639.

Multiple cross-site scripting (XSS) vulnerabilities in product/commerce_product.module in the Drupal Commerce module for Drupal before 7.x-1.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) sku or (2) title parameters.


Provide references for further information: Can you share references or external links related to CVE-2012-1639?

{'name': '78528', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78528'}, {'name': '47730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47730'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1416824'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/commerce.git/blobdiff/45bc53875f1675750afe60e709a34c95e3008366..b74cdcd:/modules/product/commerce_product.module'}, {'name': 'drupal-commerce-multiple-xss(72743)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72743'}, {'name': '51668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51668'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1639?


Explain the CVE ID: What does the identifier CVE-2012-1640 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1640.

Multiple cross-site scripting (XSS) vulnerabilities in the Managesite module 6.x-1.x before 6.1-1.1 for Drupal allow remote authenticated users with "administer managesite" permissions to inject arbitrary web script or HTML via the title parameter when (1) adding or (2) updating a category.


Provide references for further information: Can you share references or external links related to CVE-2012-1640?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1417000'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': '47732', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47732'}, {'name': 'drupal-managesite-category-xss(72742)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72742'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/managesite.git/blobdiff/7dd99c47d891d482be1430d3c06a5bb0f6c74d85..7051b7e:/managesite.module'}, {'name': '51669', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51669'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1640?


Explain the CVE ID: What does the identifier CVE-2012-1641 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1641.

The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission to execute arbitrary PHP code via admin/build/finder/import.


Provide references for further information: Can you share references or external links related to CVE-2012-1641?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1432320'}, {'name': '79014', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79014'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1432318'}, {'name': '[oss-security] 20120319 Re: CVE-request: Drupal Finder SA-CONTRIB-2012-017', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/19/9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/finder.git/commit/bc0cc82'}, {'name': '[oss-security] 20120316 CVE-request: Drupal Finder SA-CONTRIB-2012-017', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/16/9'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1432970'}, {'name': '47943', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47943'}, {'name': '47915', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47915'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1641?


Explain the CVE ID: What does the identifier CVE-2012-1642 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1642.

includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensitive information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1642?

{'name': '48022', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48022'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/linkchecker.git/commit/fef0ddf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1441252'}, {'name': '79315', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79315'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1440508'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1642?


Explain the CVE ID: What does the identifier CVE-2012-1643 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1643.

The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission, which allows remote attackers to modify access permissions via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1643?

{'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1441448'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1441556'}, {'name': '79316', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79316'}, {'name': '48019', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48019'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/fp.git/commitdiff/39e7587'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1643?


Explain the CVE ID: What does the identifier CVE-2012-1644 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1644.

The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1644?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1441086'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/og_vocab.git/commitdiff/cd8de08'}, {'name': 'ogvocabulary-title-xss(53902)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/53902'}, {'name': '79336', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79336'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1441450'}, {'name': '48020', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1644?


Explain the CVE ID: What does the identifier CVE-2012-1645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1645.

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php.


Provide references for further information: Can you share references or external links related to CVE-2012-1645?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1441480'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/cdn.git/commitdiff/cd2a5ff'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/cdn.git/commitdiff/eca85e6'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1441502'}, {'name': '79317', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79317'}, {'name': '48032', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48032'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1441482'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1645?


Explain the CVE ID: What does the identifier CVE-2012-1646 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1646.

Multiple cross-site scripting (XSS) vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via the (1) title parameter in faq.admin.inc or (2) detailed_question parameter in faq.module.


Provide references for further information: Can you share references or external links related to CVE-2012-1646?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1451194'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/faq.git/commit/912f1d2'}, {'name': '79466', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79466'}, {'name': '48131', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48131'}, {'name': '52126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52126'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/faq.git/blobdiff/525fb85e5a43cb6cfe3028aa88eaf8a6e40548d5..f381756:/faq.admin.inc'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/faq.git/commit/f381756'}, {'name': 'drupal-faq-unspecified-xss(73452)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73452'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/faq.git/blobdiff/2991dd94e70a2881571a4b777645f4dcc42c1f10..912f1d2:/faq.module'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1646?


Explain the CVE ID: What does the identifier CVE-2012-1647 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1647.

Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER['HTTP_HOST'] or (2) $_SERVER['SCRIPT_NAME'] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION.


Provide references for further information: Can you share references or external links related to CVE-2012-1647?

{'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1461424'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/mediafront.git/commitdiff/b3857aa'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/mediafront.git/commitdiff/6300750'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1460892'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': '52229', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52229'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1460894'}, {'name': '79684', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79684'}, {'name': 'mediafront-phplibrary-xss(73606)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73606'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1647?


Explain the CVE ID: What does the identifier CVE-2012-1648 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1648.

Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1648?

{'name': 'coolaid-helpmessages-xss(73607)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73607'}, {'name': '48196', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48196'}, {'name': '52232', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52232'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1461438'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1417186'}, {'name': '79712', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79712'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1648?


Explain the CVE ID: What does the identifier CVE-2012-1649 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1649.

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1649?

{'name': '48196', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48196'}, {'name': 'coolaid-helpmessages-security-bypass(73608)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73608'}, {'name': '52232', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52232'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1461438'}, {'name': '79772', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79772'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1417186'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1649?


Explain the CVE ID: What does the identifier CVE-2012-1650 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1650.

The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated users with access content permission to bypass intended access restrictions.


Provide references for further information: Can you share references or external links related to CVE-2012-1650?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/zipcart.git/commitdiff/fe143c2'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1461446'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1460892'}, {'name': '79766', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79766'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': 'zipcart-archives-security-bypass(73609)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73609'}, {'name': '52231', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52231'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1650?


Explain the CVE ID: What does the identifier CVE-2012-1651 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1651.

Cross-site scripting (XSS) vulnerability in the Submenu Tree module before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1651?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1461470'}, {'name': '79696', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79696'}, {'name': '52226', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52226'}, {'name': '48202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48202'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1132838'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1651?


Explain the CVE ID: What does the identifier CVE-2012-1652 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1652.

Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x before 6.x-3.8 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via unspecified vectors related to "the vocabulary's help text."


Provide references for further information: Can you share references or external links related to CVE-2012-1652?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1461318'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1461724'}, {'name': '48235', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48235'}, {'name': '79683', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79683'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/hierarchical_select.git/commit/be32dceb17d25553e474c295a8c3db69eab95cee'}, {'name': '52228', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52228'}, {'name': 'hierarchicalselect-textvocabularies-xss(73611)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73611'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1652?


Explain the CVE ID: What does the identifier CVE-2012-1653 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1653.

Cross-site scripting (XSS) vulnerability in the Taxonomy Views Integrator (TVI) module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."


Provide references for further information: Can you share references or external links related to CVE-2012-1653?

{'name': '79682', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/79682'}, {'name': 'taxonomyviews-viewpages-xss(73612)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73612'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1306946'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1461892'}, {'name': '48163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48163'}, {'name': '52227', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52227'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1653?


Explain the CVE ID: What does the identifier CVE-2012-1654 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1654.

Multiple cross-site scripting (XSS) vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in (1) data.views.inc and (2) data_ui/data_ui.admin.inc.


Provide references for further information: Can you share references or external links related to CVE-2012-1654?

{'name': '48326', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/data.git/commit/33f0caa'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.madirish.net/content/drupal-data-6x-10-xss-vulnerability'}, {'name': '79854', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79854'}, {'name': '52337', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52337'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1470980'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/data.git/commit/6f6858a'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1470982'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1471780'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1654?


Explain the CVE ID: What does the identifier CVE-2012-1655 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1655.

Unspecified vulnerability in the UC PayDutchGroup / WeDeal payment module 6.x-1.0 for Drupal allows remote authenticated users to obtain account credentials via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1655?

{'name': '52344', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52344'}, {'name': 'ucpaydutch-unspec-information-disclsoure(73897)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73897'}, {'name': '79855', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79855'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1471800'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1655?


Explain the CVE ID: What does the identifier CVE-2012-1656 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1656.

SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the Site table prefix field.


Provide references for further information: Can you share references or external links related to CVE-2012-1656?

{'name': '79857', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79857'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.madirish.net/content/drupal-multisite-search-module-sql-injection-vulnerability'}, {'name': 'multisite-unspecified-sql-injection(73898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73898'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1471800'}, {'name': '52342', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52342'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1656?


Explain the CVE ID: What does the identifier CVE-2012-1657 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1657.

Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the class name.


Provide references for further information: Can you share references or external links related to CVE-2012-1657?

{'name': '52341', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52341'}, {'name': '79851', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79851'}, {'name': '48298', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48298'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1471090'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/block_class.git/commit/9a5205d'}, {'name': 'blockclass-addmod-class-xss(73776)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73776'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1471808'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1657?


Explain the CVE ID: What does the identifier CVE-2012-1658 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1658.

Cross-site scripting (XSS) vulnerability in the Read More Link module 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users with the access administration pages permission to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1658?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1471822'}, {'name': '79856', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79856'}, {'name': '52340', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52340'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1471080'}, {'name': '48138', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48138'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'name': 'readmorelink-editadministrationpages-xss(73777)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73777'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1658?


Explain the CVE ID: What does the identifier CVE-2012-1659 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1659.

Cross-site scripting (XSS) vulnerability in the Node Recommendation module 6.x-1.x before 6.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2012-1659?

{'name': 'noderecommendation-unspecified-xss(73778)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73778'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1471906'}, {'name': '48330', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48330'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/noderecommendation.git/commit/55567d0'}, {'name': '52343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52343'}, {'name': '79853', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79853'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1471940'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1659?


Explain the CVE ID: What does the identifier CVE-2012-1660 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1660.

Multiple cross-site scripting (XSS) vulnerabilities in components/select.inc in the Webform module 6.x-3.x before 6.x-3.17 and 7.x-3.x before 7.x-3.17 for Drupal, when the "Select (or other)" module is enabled, allow remote authenticated users with the create webform content permission to inject arbitrary web script or HTML via vectors related to (1) checkboxes or (2) radios.


Provide references for further information: Can you share references or external links related to CVE-2012-1660?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1472180'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1472178'}, {'name': '52345', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52345'}, {'name': '48310', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48310'}, {'name': "[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/04/07/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/webform.git/commit/917fa91'}, {'name': '79852', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/79852'}, {'name': 'drupal-webform-unspecified-xss-var2(73779)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/73779'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/webform.git/commit/90af819'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1472214'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1660?


Explain the CVE ID: What does the identifier CVE-2012-1661 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1661.

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file.


Provide references for further information: Can you share references or external links related to CVE-2012-1661?

{'name': '19138', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/19138'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/113644/ESRI-ArcMap-Arbitrary-Code-Execution.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cs.umb.edu/~joecohen/exploits/CVE-2012-1661/'}, {'name': '1027170', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1027170'}, {'name': '82986', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/82986'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1661?


Explain the CVE ID: What does the identifier CVE-2012-1662 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1662.

CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote attackers to cause a denial of service (service shutdown) via a crafted network request.


Provide references for further information: Can you share references or external links related to CVE-2012-1662?

{'name': '80212', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80212'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7b983E3A52-8374-410A-82BD-B8788733C70F%7d'}, {'name': '48459', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48459'}, {'name': '52655', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52655'}, {'name': '20120321 CA20120320-01: Security Notice for CA ARCserve Backup', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0109.html'}, {'name': '1026832', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026832'}, {'name': 'arcserve-traffic-dos(74175)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74175'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1662?


Explain the CVE ID: What does the identifier CVE-2012-1663 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1663.

Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted certificate list.


Provide references for further information: Can you share references or external links related to CVE-2012-1663?

{'name': 'gnutls-libgnutls-certificate-dos(74099)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74099'}, {'name': '24865', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/24865'}, {'name': '[gnutls-devel] 20120224 gnutls 3.0.14', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/5866'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1663?


Explain the CVE ID: What does the identifier CVE-2012-1664 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1664.

Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in a process action to admin/login.php; (2) pageTitle, (3) current_product_id, or (4) cPath parameter to admin/new_attributes_include.php; (5) sb_id, (6) sb_key, (7) gc_id, (8) gc_key, or (9) path parameter to admin/htaccess.php; (10) title parameter to admin/information_form.php; (11) search parameter to admin/xsell.php; (12) gross or (13) max parameter to admin/stats_products_purchased.php; (14) status parameter to admin/stats_monthly_sales.php; (15) sorted parameter to admin/stats_customers.php; (16) information_id parameter to /admin/information_manager.php; or (17) zID parameter to /admin/geo_zones.php.


Provide references for further information: Can you share references or external links related to CVE-2012-1664?

{'name': '80906', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80906'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.com/advisory/HTB23081'}, {'name': '80912', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80912'}, {'name': '80905', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80905'}, {'name': '80908', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80908'}, {'name': '20120404 Multiple vulnerabilities in osCmax', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-04/0021.html'}, {'name': '80910', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80910'}, {'name': '80911', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80911'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugtrack.oscmax.com/view.php?id=1165'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oscmax.com/blog/michael_s/oscmax_v251_has_been_released_security_update'}, {'name': '80904', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80904'}, {'name': '80909', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80909'}, {'name': '80907', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80907'}, {'name': '80903', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80903'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1664?


Explain the CVE ID: What does the identifier CVE-2012-1665 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1665.

Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or (2) remote administrators to execute arbitrary SQL commands via the status parameter to admin/stats_monthly_sales.php or (3) country parameter in a process action to admin/create_account_process.php.


Provide references for further information: Can you share references or external links related to CVE-2012-1665?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.com/advisory/HTB23081'}, {'name': '80901', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80901'}, {'name': '20120404 Multiple vulnerabilities in osCmax', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-04/0021.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugtrack.oscmax.com/view.php?id=1165'}, {'name': '80902', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80902'}, {'name': '80900', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/80900'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oscmax.com/blog/michael_s/oscmax_v251_has_been_released_security_update'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1665?


Explain the CVE ID: What does the identifier CVE-2012-1666 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1666.

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory.


Provide references for further information: Can you share references or external links related to CVE-2012-1666?

{'name': '20120904 VMWare Tools susceptible to binary planting by hijack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-09/0013.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.vmware.com/support/vsphere4/doc/vsp_esxi41_u3_rel_notes.html#resolvedissuessecurity'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1666?


Explain the CVE ID: What does the identifier CVE-2012-1667 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1667.

ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.


Provide references for further information: Can you share references or external links related to CVE-2012-1667?

{'name': 'MDVSA-2012:089', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:089'}, {'name': '53772', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53772'}, {'name': 'SSA:2012-341-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004'}, {'name': '51096', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51096'}, {'name': 'VU#381699', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/381699'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/software/bind/advisories/cve-2012-1667'}, {'name': 'SUSE-SU-2012:0741', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00010.html'}, {'name': 'HPSBUX02795', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=134132772016230&w=2'}, {'name': 'RHSA-2012:1110', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1110.html'}, {'name': 'APPLE-SA-2012-09-19-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5501'}, {'name': 'openSUSE-SU-2012:0722', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.isc.org/article/AA-00698'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488'}, {'name': 'RHSA-2012:0717', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0717.html'}, {'name': 'DSA-2486', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2486'}, {'name': 'SSRT100878', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=134132772016230&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1667?


Explain the CVE ID: What does the identifier CVE-2012-1669 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1669.

Directory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1669?

{'name': '52532', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52532'}, {'name': '80101', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80101'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/111114/phpMoneyBooks-1.0.2-Local-File-Inclusion.html'}, {'name': "20120322 'phpMoneyBooks' Local File Inclusion (CVE-2012-1669)", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Mar/259'}, {'name': '18648', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18648'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/projects/phpmoneybooks/files/Changelog.TXT/download'}, {'name': "20120322 'phpMoneyBooks' Local File Inclusion (CVE-2012-1669)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/522058'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1669?


Explain the CVE ID: What does the identifier CVE-2012-1670 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1670.

admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action.


Provide references for further information: Can you share references or external links related to CVE-2012-1670?

{'name': '52686', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52686'}, {'name': "20120322 'PHP Grade Book' Unauthenticated SQL Database Export (CVE-2012-1670)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2012-03/0115.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.sourceforge.net/project/php-gradebook/phpGradeBook%20-%20BETA/1.9.5/phpGradeBook1.9.5.zip'}, {'name': '48524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48524'}, {'name': '18647', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18647/'}, {'name': 'phpgradebook-info-disclosure(74292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74292'}, {'name': '80311', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80311'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1670?


Explain the CVE ID: What does the identifier CVE-2012-1671 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1671.

Directory traversal vulnerability in index.php in phpPaleo 4.8b155 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1671?

{'name': '18701', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18701'}, {'name': '80100', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/80100'}, {'name': '48398', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48398'}, {'name': '52530', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52530'}, {'name': '[oss-security] 20120315 Re: CVE Requests', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/16/3'}, {'name': '[oss-security] 20120315 CVE Requests', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2012/03/15/11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1671?


Explain the CVE ID: What does the identifier CVE-2012-1672 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1672.

SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL commands via the country parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1672?

{'name': 'hotelbookingportal-getcity-sql-injection(74612)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74612'}, {'name': '18702', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18702/'}, {'name': '52879', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52879'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1672?


Explain the CVE ID: What does the identifier CVE-2012-1673 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1673.

SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands via the password parameter.


Provide references for further information: Can you share references or external links related to CVE-2012-1673?

{'name': '18700', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18700/'}, {'name': 'eticketing-loginscript-sql-injection(74613)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/74613'}, {'name': '52878', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/52878'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1673?


Explain the CVE ID: What does the identifier CVE-2012-1674 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1674.

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582.


Provide references for further information: Can you share references or external links related to CVE-2012-1674?

{'name': '48885', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48885'}, {'name': '1026952', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1026952'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html'}, {'name': 'MDVSA-2013:150', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:150'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1674?


Explain the CVE ID: What does the identifier CVE-2012-1675 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2012-1675.

The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by performing a remote registration of a database (1) instance or (2) service name that already exists, then conducting a man-in-the-middle (MITM) attack to hijack database connections, aka "TNS Poison."


Provide references for further information: Can you share references or external links related to CVE-2012-1675?

{'name': 'SUSE-SU-2012:0765', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00018.html'}, {'name': '53308', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53308'}, {'name': '1027000', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1027000'}, {'name': '20120428 Oracle TNS Poison vulnerability is actually a 0day with no patch available', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Apr/343'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://blogs.oracle.com/security/entry/security_alert_for_cve_2012'}, {'name': 'VU#359816', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/359816'}, {'name': '20120418 The history of a -probably- 13 years old Oracle bug: TNS Poison', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2012/Apr/204'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html'}, {'name': 'MDVSA-2013:150', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:150'}, {'name': 'oracledatabase-tnslistener-spoofing(75303)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/75303'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2012-1675?


Explain the CVE ID: What does the identifier CVE-2012-1676 mean in the context of cybersecurity?