Provide references for further information: Can you share references or external links related to CVE-2008-0506?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-65.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://coppermine-gallery.net/forum/index.php?topic=50103.0'}, {'name': 'ADV-2008-0367', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0367'}, {'name': '27512', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27512'}, {'name': '28682', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28682'}, {'name': '20080130 [waraxe-2008-SA#065] - Remote Shell Command Execution in Coppermine 1.4.14', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487310/100/200/threaded'}, {'name': '1019286', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019286'}, {'name': '5019', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5019'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0506?


Explain the CVE ID: What does the identifier CVE-2008-0507 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0507.

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0507?

{'name': 'adserve-adclick-sql-injection(40045)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40045'}, {'name': '27504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27504'}, {'name': 'ADV-2008-0364', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0364'}, {'name': '28708', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28708'}, {'name': '5013', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5013'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0507?


Explain the CVE ID: What does the identifier CVE-2008-0508 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0508.

Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure (aka dean_pm_config[oldstructure]) configuration setting as administrators via the old_struct parameter in a deans_permalinks_migration.php action to wp-admin/options-general.php, as demonstrated by placing an XSS sequence in this setting.


Provide references for further information: Can you share references or external links related to CVE-2008-0508?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstorm.linuxsecurity.com/0801-advisories/deans-xsrf.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://g30rg3x.com/wp-files/dpm_11gx.zip'}, {'tags': ['x_refsource_MISC'], 'url': 'http://g30rg3x.com/xsrf-bajo-deans-permalinks-migration-10'}, {'name': 'permalinks-deanpmconfig-csrf(39845)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39845'}, {'name': 'ADV-2008-0281', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0281'}, {'name': '20080122 XSRF under Deanâ??s Permalinks Migration 1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/486840/100/0/threaded'}, {'name': '28593', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28593'}, {'name': '3595', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3595'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0508?


Explain the CVE ID: What does the identifier CVE-2008-0509 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0509.

Multiple buffer overflows in IBM AIX 4.3 allow remote attackers to cause a denial of service (crash) or possibly gain privileges via a long argument to (1) piox25, related to piox25.c; or (2) piox25remote, related to piox25remote.sh.


Provide references for further information: Can you share references or external links related to CVE-2008-0509?

{'name': 'IZ13739', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=isg1IZ13739'}, {'name': 'ADV-2008-0324', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0324'}, {'name': '28600', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28600'}, {'name': 'oval:org.mitre.oval:def:5796', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5796'}, {'name': '27510', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27510'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0509?


Explain the CVE ID: What does the identifier CVE-2008-0510 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0510.

SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0510?

{'name': '5007', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5007'}, {'name': 'newsletter-index-sql-injection(40036)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40036'}, {'name': 'ADV-2008-0354', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0354'}, {'name': '27502', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27502'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0510?


Explain the CVE ID: What does the identifier CVE-2008-0511 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0511.

SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0511?

{'name': 'ADV-2008-0356', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0356'}, {'name': '5009', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5009'}, {'name': 'mamml-index-sql-injection(40037)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40037'}, {'name': '27503', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27503'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0511?


Explain the CVE ID: What does the identifier CVE-2008-0512 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0512.

SQL injection vulnerability in index.php in the fq (com_fq) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0512?

{'name': 'fq-index-sql-injection(40035)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40035'}, {'name': 'ADV-2008-0355', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0355'}, {'name': '5008', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5008'}, {'name': '27501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27501'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0512?


Explain the CVE ID: What does the identifier CVE-2008-0513 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0513.

Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to parser/parser.php, as demonstrated by a filename ending with %00.gif, a different vector than CVE-2005-1840.


Provide references for further information: Can you share references or external links related to CVE-2008-0513?

{'name': '27495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27495'}, {'name': '5006', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5006'}, {'name': 'phpcms-parser-directory-traversal(40017)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40017'}, {'name': 'ADV-2008-0353', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0353'}, {'name': '20080129 Remote File Disclosure in phpCMS 1.2.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487251/100/0/threaded'}, {'name': '28709', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28709'}, {'name': '20080129 Re: Remote File Disclosure in phpCMS 1.2.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487254/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0513?


Explain the CVE ID: What does the identifier CVE-2008-0514 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0514.

SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action.


Provide references for further information: Can you share references or external links related to CVE-2008-0514?

{'name': 'ADV-2008-0357', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0357'}, {'name': '5010', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5010'}, {'name': 'glossary-index-sql-injection(40038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40038'}, {'name': '27505', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27505'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0514?


Explain the CVE ID: What does the identifier CVE-2008-0515 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0515.

SQL injection vulnerability in index.php in the musepoes (com_musepoes) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action.


Provide references for further information: Can you share references or external links related to CVE-2008-0515?

{'name': 'ADV-2008-0358', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0358'}, {'name': '5011', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5011'}, {'name': '27507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27507'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0515?


Explain the CVE ID: What does the identifier CVE-2008-0516 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0516.

PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0516?

{'name': '27515', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27515'}, {'name': '28642', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28642'}, {'name': 'sqlitemanager-confirm-file-include(40065)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40065'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0516?


Explain the CVE ID: What does the identifier CVE-2008-0517 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0517.

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action.


Provide references for further information: Can you share references or external links related to CVE-2008-0517?

{'name': 'estateagent-index-sql-injection(40060)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40060'}, {'name': '27520', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27520'}, {'name': '5016', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5016'}, {'name': 'ADV-2008-0362', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0362'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0517?


Explain the CVE ID: What does the identifier CVE-2008-0518 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0518.

SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.


Provide references for further information: Can you share references or external links related to CVE-2008-0518?

{'name': 'recipes-index-sql-injection(40064)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40064'}, {'name': '5014', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5014'}, {'name': 'ADV-2008-0360', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0360'}, {'name': '27519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27519'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0518?


Explain the CVE ID: What does the identifier CVE-2008-0519 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0519.

SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action.


Provide references for further information: Can you share references or external links related to CVE-2008-0519?

{'name': '5015', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5015'}, {'name': '27522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27522'}, {'name': 'jokes-index-sql-injection(40067)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40067'}, {'name': 'ADV-2008-0361', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0361'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0519?


Explain the CVE ID: What does the identifier CVE-2008-0520 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0520.

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) from_date or (2) to_date parameter to spy.php.


Provide references for further information: Can you share references or external links related to CVE-2008-0520?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wpwp.org/archives/warning-security-bug-in-version/'}, {'name': '5017', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5017'}, {'name': '27525', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27525'}, {'name': '28702', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28702'}, {'name': 'ADV-2008-0365', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0365'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0520?


Explain the CVE ID: What does the identifier CVE-2008-0521 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0521.

Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to read arbitrary files via a .. (dot dot) in the uri parameter to dispatcher.php in (1) examples/dispatcher/framework/, (2) examples/dispatcher/, (3) examples/wizard/, and (4) PHP/, different vectors than CVE-2008-0545.


Provide references for further information: Can you share references or external links related to CVE-2008-0521?

{'name': 'bubbling-dispatcher-directory-traversal(40008)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40008'}, {'name': '5001', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5001'}, {'name': '27482', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27482'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0521?


Explain the CVE ID: What does the identifier CVE-2008-0522 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0522.

Cross-site scripting (XSS) vulnerability in multiple Hal Networks shopping-cart products allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0522?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hal9800.com/home/bug/20080128.html'}, {'name': '27513', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27513'}, {'name': '28692', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28692'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hal9800.com/home/bug/20080127.html'}, {'name': 'ADV-2008-0368', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0368'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hal9800.com/home/bug/20080123.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hal9800.com/home/bug/20080129.html'}, {'name': 'JVN#01162446', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/jp/JVN%2301162446/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0522?


Explain the CVE ID: What does the identifier CVE-2008-0523 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0523.

Multiple cross-site scripting (XSS) vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) License_Plate, (2) License_State, (3) Ticket_Date, and (4) Ticket_Number parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0523?

{'name': '28675', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28675'}, {'name': 'softcart-softcart-xss(40061)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40061'}, {'name': '27524', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0523?


Explain the CVE ID: What does the identifier CVE-2008-0524 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0524.

Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0524?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html'}, {'name': '28690', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28690'}, {'name': '27491', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27491'}, {'name': 'yamaha-routers-http-csrf(40015)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40015'}, {'name': 'JVN#88575577', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/jp/JVN%2388575577/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0524?


Explain the CVE ID: What does the identifier CVE-2008-0525 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0525.

PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2094 through 6.4102 and other products, allows local users to (1) truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and (2) execute arbitrary code via a symlink attack on the /tmp/plshutdown file used by the rebootTask script.


Provide references for further information: Can you share references or external links related to CVE-2008-0525?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=527'}, {'name': '27458', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27458'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://secure-support.novell.com/KanisaPlatform/Publishing/18/3908994_f.SAL_Public.html'}, {'name': 'ADV-2008-0426', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0426'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=528'}, {'name': '3599', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3599'}, {'name': 'patchlinkupdate-reboottask-symlink(39958)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39958'}, {'name': '28657', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28657'}, {'name': 'patchlinkupdate-logtrimmer-symlink(39956)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39956'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=530'}, {'name': '28665', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28665'}, {'name': '20080125 Two vulnerabilities for PatchLink Update Client for Unix.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487103/100/0/threaded'}, {'name': '1019272', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019272'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0525?


Explain the CVE ID: What does the identifier CVE-2008-0526 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0526.

Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a long ICMP echo request (ping) packet.


Provide references for further information: Can you share references or external links related to CVE-2008-0526?

{'name': '1019407', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019407'}, {'name': 'cisco-unifiedipphone-icmp-dos(40487)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40487'}, {'name': '20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml'}, {'name': '27774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27774'}, {'name': 'ADV-2008-0543', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0543'}, {'name': '28935', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28935'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0526?


Explain the CVE ID: What does the identifier CVE-2008-0527 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0527.

The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2008-0527?

{'name': '20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml'}, {'name': '1019408', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019408'}, {'name': 'cisco-unifiedipphone-httpserver-dos(40489)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40489'}, {'name': '27774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27774'}, {'name': 'ADV-2008-0543', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0543'}, {'name': '28935', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28935'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0527?


Explain the CVE ID: What does the identifier CVE-2008-0528 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0528.

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data.


Provide references for further information: Can you share references or external links related to CVE-2008-0528?

{'name': '20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml'}, {'name': '27774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27774'}, {'name': 'cisco-unifiedipphone-sipmime-bo(40492)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40492'}, {'name': 'ADV-2008-0543', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0543'}, {'name': '1019409', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019409'}, {'name': '28935', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28935'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0528?


Explain the CVE ID: What does the identifier CVE-2008-0529 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0529.

Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command.


Provide references for further information: Can you share references or external links related to CVE-2008-0529?

{'name': '20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml'}, {'name': '1019410', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019410'}, {'name': '27774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27774'}, {'name': 'ADV-2008-0543', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0543'}, {'name': 'cisco-unifiedipphone-telnet-bo(40493)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40493'}, {'name': '28935', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28935'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0529?


Explain the CVE ID: What does the identifier CVE-2008-0530 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0530.

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response.


Provide references for further information: Can you share references or external links related to CVE-2008-0530?

{'name': '20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml'}, {'name': '27774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27774'}, {'name': 'cisco-unifiedipphone-dns-bo(40485)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40485'}, {'name': 'ADV-2008-0543', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0543'}, {'name': '1019406', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019406'}, {'name': '28935', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28935'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0530?


Explain the CVE ID: What does the identifier CVE-2008-0531 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0531.

Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message.


Provide references for further information: Can you share references or external links related to CVE-2008-0531?

{'name': 'cisco-unifiedipphone-sipproxy-bo(40498)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40498'}, {'name': '20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml'}, {'name': '1019411', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019411'}, {'name': '27774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27774'}, {'name': 'ADV-2008-0543', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0543'}, {'name': '28935', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28935'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0531?


Explain the CVE ID: What does the identifier CVE-2008-0532 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0532.

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0532?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt'}, {'name': '20080312 Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtml'}, {'name': '20080312 Cisco ACS UCP Remote Pre-Authentication Buffer Overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489463/100/0/threaded'}, {'name': '28222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28222'}, {'name': 'ADV-2008-0868', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0868'}, {'name': '3743', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3743'}, {'name': 'cisco-acs-ucp-csusercgi-bo(41154)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41154'}, {'name': '1019608', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019608'}, {'name': '29351', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29351'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0532?


Explain the CVE ID: What does the identifier CVE-2008-0533 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0533.

Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediately after the Help argument, and possibly unspecified other vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0533?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.recurity-labs.com/content/pub/RecurityLabs_Cisco_ACS_UCP_advisory.txt'}, {'name': '20080312 Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a008095f0c4.shtml'}, {'name': '20080312 Cisco ACS UCP Remote Pre-Authentication Buffer Overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489463/100/0/threaded'}, {'name': '28222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28222'}, {'name': 'ADV-2008-0868', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0868'}, {'name': '3743', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3743'}, {'name': '1019607', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019607'}, {'name': 'cisco-acs-ucp-csusercgi-xss(41156)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41156'}, {'name': '29351', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29351'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0533?


Explain the CVE ID: What does the identifier CVE-2008-0534 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0534.

The SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device restart or daemon outage) via a high rate of login attempts, aka Bug ID CSCsi68582.


Provide references for further information: Can you share references or external links related to CVE-2008-0534?

{'name': '30316', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30316'}, {'name': 'ADV-2008-1774', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1774/references'}, {'name': '30590', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30590'}, {'name': '29609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/29609'}, {'name': 'VU#626979', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/626979'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.icon-labs.com/news/read.asp?newsID=77'}, {'name': '20080521 Cisco Service Control Engine Denial of Service Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml'}, {'name': '1020074', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1020074'}, {'name': 'cisco-sce-sshlogin-dos(42565)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/42565'}, {'name': '29316', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/29316'}, {'name': 'ADV-2008-1604', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1604/references'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0534?


Explain the CVE ID: What does the identifier CVE-2008-0535 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0535.

Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device instability) via "SSH credentials that attempt to change the authentication method," aka Bug ID CSCsm14239.


Provide references for further information: Can you share references or external links related to CVE-2008-0535?

{'name': '30316', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30316'}, {'name': 'ADV-2008-1774', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1774/references'}, {'name': '30590', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30590'}, {'name': '29609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/29609'}, {'name': 'VU#626979', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/626979'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.icon-labs.com/news/read.asp?newsID=77'}, {'name': '20080521 Cisco Service Control Engine Denial of Service Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml'}, {'name': '1020074', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1020074'}, {'name': '29316', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/29316'}, {'name': 'cisco-sce-ssh-credentials-dos(42567)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/42567'}, {'name': 'ADV-2008-1604', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1604/references'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0535?


Explain the CVE ID: What does the identifier CVE-2008-0536 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0536.

Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers "illegal I/O operations," aka Bug ID CSCsh49563.


Provide references for further information: Can you share references or external links related to CVE-2008-0536?

{'name': '30316', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30316'}, {'name': 'ADV-2008-1774', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1774/references'}, {'name': '30590', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30590'}, {'name': '29609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/29609'}, {'name': 'cisco-sce-managementagent-dos(42566)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/42566'}, {'name': 'VU#626979', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/626979'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.icon-labs.com/news/read.asp?newsID=77'}, {'name': '20080521 Cisco Service Control Engine Denial of Service Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml'}, {'name': '1020074', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1020074'}, {'name': '29316', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/29316'}, {'name': 'ADV-2008-1604', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1604/references'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0536?


Explain the CVE ID: What does the identifier CVE-2008-0537 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0537.

Unspecified vulnerability in the Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), and Route Switch Processor 720 (RSP720) for multiple Cisco products, when using Multi Protocol Label Switching (MPLS) VPN and OSPF sham-link, allows remote attackers to cause a denial of service (blocked queue, device restart, or memory leak) via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0537?

{'name': 'cisco-catalyst-sup-rsp-dos(41466)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41466'}, {'name': '29559', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29559'}, {'name': 'TA08-087B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA08-087B.html'}, {'name': 'ADV-2008-1005', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1005/references'}, {'name': '20080326 Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtml'}, {'name': '1019716', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019716'}, {'name': '28463', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0537?


Explain the CVE ID: What does the identifier CVE-2008-0538 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0538.

Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to login.php, the (2) id parameter to display.php, and unspecified other vectors.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0538?

{'name': '20080127 phpIP 4.3.2 - Numerous SQL Injection Vulnerablities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=120139657100513&w=2'}, {'name': 'phpip-display-sql-injection(39965)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39965'}, {'name': '20080127 phpIP 4.3.2 - Numerous SQL Injection Vulnerablities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487122/100/0/threaded'}, {'name': '28656', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28656'}, {'name': 'ADV-2008-0346', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0346'}, {'name': '27468', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27468'}, {'name': '4990', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4990'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0538?


Explain the CVE ID: What does the identifier CVE-2008-0539 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0539.

Cross-site scripting (XSS) vulnerability in dms/policy/rep_request.php in F5 BIG-IP Application Security Manager (ASM) 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the report_type parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0539?

{'name': '27462', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27462'}, {'name': '1019276', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019276'}, {'name': '20080126 F5 BIG-IP Web Management ASM Security Report XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487118/100/0/threaded'}, {'name': 'f5bigipwebmgmt-reprequest-xss(39979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39979'}, {'name': '28655', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28655'}, {'name': 'ADV-2008-0301', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0301'}, {'name': '20080308 F5 BIG-IP Web Management Console XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/489290/100/0/threaded'}, {'name': '3602', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3602'}, {'name': '28151', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28151'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0539?


Explain the CVE ID: What does the identifier CVE-2008-0540 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0540.

Multiple cross-site scripting (XSS) vulnerabilities in trixbox 2.4.2.0 allow remote attackers to inject arbitrary web script or HTML via the query string to index.php in (1) user/ or (2) maint/.


Provide references for further information: Can you share references or external links related to CVE-2008-0540?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.digitrustgroup.com/advisories/web-application-security-trixbox.html'}, {'name': '27460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27460'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0540?


Explain the CVE ID: What does the identifier CVE-2008-0541 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0541.

Multiple cross-site scripting (XSS) vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) open and (2) date_show parameters.


Provide references for further information: Can you share references or external links related to CVE-2008-0541?

{'name': 'simpleforum-forum-xss(39978)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39978'}, {'name': '28681', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28681'}, {'name': '4989', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4989'}, {'name': '27463', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0541?


Explain the CVE ID: What does the identifier CVE-2008-0542 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0542.

Directory traversal vulnerability in thumbnail.php in Gerd Tentler Simple Forum 3.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0542?

{'name': '28681', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28681'}, {'name': 'simpleforum-thumbnail-directory-traversal(39980)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39980'}, {'name': '4989', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4989'}, {'name': '27463', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0542?


Explain the CVE ID: What does the identifier CVE-2008-0543 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0543.

Multiple SQL injection vulnerabilities in Pre Dynamic Institution allow remote attackers to execute arbitrary SQL commands via the (1) sloginid and (2) spass parameters to (a) login.asp and (b) siteadmin/login.asp.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0543?

{'name': 'predynamic-login-sql-injection(39942)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39942'}, {'name': '28651', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28651'}, {'name': '3603', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3603'}, {'name': '20080124 Pre Dynamic Institution bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487054/100/0/threaded'}, {'name': '27451', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27451'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0543?


Explain the CVE ID: What does the identifier CVE-2008-0544 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0544.

Heap-based buffer overflow in the IMG_LoadLBM_RW function in IMG_lbm.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted IFF ILBM file.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0544?

{'name': '27435', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27435'}, {'name': '28869', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28869'}, {'name': '28850', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28850'}, {'name': 'FEDORA-2008-1208', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00008.html'}, {'name': '28752', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28752'}, {'name': 'sdlimage-imgloadlbmrw-bo(39899)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39899'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?r1=3341&r2=3521'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.rpath.com/browse/RPL-2206'}, {'name': 'FEDORA-2008-1231', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00039.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=207933'}, {'name': '29542', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29542'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?revision=3521&view=markup'}, {'name': 'DSA-1493', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1493'}, {'name': '28640', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28640'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2008-0061'}, {'name': '20080213 rPSA-2008-0061-1 SDL_image', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/488079/100/0/threaded'}, {'name': '28830', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28830'}, {'name': 'GLSA-200802-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200802-01.xml'}, {'name': 'USN-595-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-595-1'}, {'name': 'ADV-2008-0266', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0266'}, {'name': 'MDVSA-2008:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:040'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0544?


Explain the CVE ID: What does the identifier CVE-2008-0545 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0545.

Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) uri parameter to (a) yui-menu.tpl.php, (b) simple.tpl.php, and (c) advanced.tpl.php in dispatcher/framework/; and the (2) page parameter to (d) yui-menu.php, (e) simple.php, and (f) advanced.php in dispatcher/framework/, different vectors than CVE-2008-0521.


Provide references for further information: Can you share references or external links related to CVE-2008-0545?

{'name': 'bubblinglibrary-page-uri-file-include(39969)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39969'}, {'name': '27466', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27466'}, {'name': '4991', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4991'}, {'name': 'ADV-2008-0347', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0347'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0545?


Explain the CVE ID: What does the identifier CVE-2008-0546 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0546.

Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idProduct and (2) options parameters to (a) ajax/ajax_optInventory.asp, or the (2) recid parameter to (b) ajax/ajax_getBrands.asp.


Provide references for further information: Can you share references or external links related to CVE-2008-0546?

{'name': '27454', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27454'}, {'name': 'ecommercesuite-ajaxgetbrands-sql-injection(39939)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39939'}, {'name': '28662', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28662'}, {'name': '4988', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4988'}, {'name': 'ADV-2008-0314', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0314'}, {'name': '20080125 [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487058/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1'}, {'name': '3600', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3600'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0546?


Explain the CVE ID: What does the identifier CVE-2008-0547 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0547.

Cross-site scripting (XSS) vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and probably earlier 4.x and 3.x versions, allows remote attackers to inject arbitrary web script or HTML via the helpfield parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0547?

{'name': '27454', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27454'}, {'name': 'ecommercesuite-utilitiesconfighelp-xss(39940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39940'}, {'name': '28662', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28662'}, {'name': '4988', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4988'}, {'name': 'ADV-2008-0314', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0314'}, {'name': '20080125 [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487058/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1'}, {'name': '3600', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3600'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0547?


Explain the CVE ID: What does the identifier CVE-2008-0548 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0548.

Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL dereference when malloc fails.


Provide references for further information: Can you share references or external links related to CVE-2008-0548?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/steamcazz-adv.txt'}, {'name': 'steamcast-contentlength-dos(39927)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39927'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0548?


Explain the CVE ID: What does the identifier CVE-2008-0549 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0549.

Integer overflow in the OggHeaderParse function in Steamcast 0.9.75 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via a long Ogg tag.


Provide references for further information: Can you share references or external links related to CVE-2008-0549?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/poc/steamcazz.zip'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/steamcazz-adv.txt'}, {'name': 'steamcast-oggheaderparse-dos(39929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39929'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0549?


Explain the CVE ID: What does the identifier CVE-2008-0550 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0550.

Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header.


Provide references for further information: Can you share references or external links related to CVE-2008-0550?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/poc/steamcazz.zip'}, {'name': 'steamcast-http-bo(39928)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39928'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/steamcazz-adv.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0550?


Explain the CVE ID: What does the identifier CVE-2008-0551 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0551.

The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0551?

{'name': 'activesquare-namoinstaller-code-execution(39943)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39943'}, {'name': '4986', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4986'}, {'name': '27580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27580'}, {'name': 'ADV-2008-0299', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0299'}, {'name': 'namoinstaller-namoinstaller-code-execution(39974)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39974'}, {'name': '28649', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28649'}, {'name': '27453', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27453'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0551?


Explain the CVE ID: What does the identifier CVE-2008-0552 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0552.

Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.


Provide references for further information: Can you share references or external links related to CVE-2008-0552?

{'name': 'eticket-index-xss(39968)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39968'}, {'name': '27473', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27473'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lonerunners.net/users/jekil/pub/hack-eticket/hack-eticket.txt'}, {'name': '1019278', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019278'}, {'name': "20080127 eTicket 'index.php' Cross Site Scripting Path Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487133/100/0/threaded'}, {'name': '3601', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3601'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0552?


Explain the CVE ID: What does the identifier CVE-2008-0553 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0553.

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.


Provide references for further information: Can you share references or external links related to CVE-2008-0553?

{'name': '30129', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30129'}, {'name': '28784', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28784'}, {'name': 'RHSA-2008:0134', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2008-0134.html'}, {'name': 'DSA-1598', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1598'}, {'name': '20080212 rPSA-2008-0054-1 tk', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/488069/100/0/threaded'}, {'name': 'ADV-2008-1744', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1744'}, {'name': '29622', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29622'}, {'name': '27655', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27655'}, {'name': 'SUSE-SR:2008:008', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html'}, {'name': 'USN-664-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-664-1'}, {'name': 'ADV-2008-1456', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1456/references'}, {'name': '28857', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28857'}, {'name': '30783', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30783'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.rpath.com/browse/RPL-2215'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2008-0009.html'}, {'name': 'oval:org.mitre.oval:def:10098', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098'}, {'name': 'DSA-1490', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1490'}, {'name': '237465', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1'}, {'name': 'RHSA-2008:0136', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2008-0136.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=431518'}, {'name': 'ADV-2008-0430', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0430'}, {'name': '28954', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28954'}, {'name': '30535', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30535'}, {'name': '30188', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30188'}, {'name': 'FEDORA-2008-1131', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894'}, {'name': '20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/493080/100/0/threaded'}, {'name': 'FEDORA-2008-1384', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html'}, {'name': 'FEDORA-2008-1122', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html'}, {'name': '32608', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32608'}, {'name': '29070', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29070'}, {'name': 'FEDORA-2008-3545', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html'}, {'name': '28848', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28848'}, {'name': 'RHSA-2008:0135', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2008-0135.html'}, {'name': '29069', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29069'}, {'name': 'FEDORA-2008-1323', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html'}, {'name': '28867', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28867'}, {'name': '1019309', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019309'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2008-0054'}, {'name': 'MDVSA-2008:041', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:041'}, {'name': 'DSA-1491', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1491'}, {'name': '28807', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28807'}, {'name': 'SUSE-SR:2008:013', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2008_13_sr.html'}, {'name': '30717', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30717'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0553?


Explain the CVE ID: What does the identifier CVE-2008-0554 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0554.

Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.


Provide references for further information: Can you share references or external links related to CVE-2008-0554?

{'name': 'USN-665-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-665-1'}, {'name': '27682', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27682'}, {'name': 'RHSA-2008:0131', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2008-0131.html'}, {'name': 'oval:org.mitre.oval:def:10975', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10975'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464056'}, {'name': '29079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29079'}, {'name': 'MDVSA-2008:039', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:039'}, {'name': '1019358', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019358'}, {'name': '32607', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32607'}, {'name': '30280', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30280'}, {'name': 'ADV-2008-0460', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0460'}, {'name': 'DSA-1579', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1579'}, {'tags': ['x_refsource_MISC'], 'url': 'https://issues.rpath.com/browse/RPL-2216'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0554?


Explain the CVE ID: What does the identifier CVE-2008-0555 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0555.

The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguished Name (DN) in a client certificate, which might allow remote attackers to bypass authentication via a crafted DN that triggers overwriting of environment variables.


Provide references for further information: Can you share references or external links related to CVE-2008-0555?

{'name': '3797', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3797'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cynops.de/advisories/CVE-2008-0555.txt'}, {'name': 'ADV-2008-1079', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1079/references'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.apache-ssl.org/advisory-cve-2008-0555.txt'}, {'name': 'apachessl-expandcert-information-disclosure(41618)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/41618'}, {'name': '28576', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28576'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.klink.name/security/aklink-sa-2008-005-apache-ssl.txt'}, {'name': '29644', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29644'}, {'name': '1019784', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019784'}, {'name': '20080402 ANNOUNCE: Apache-SSL security release - apache_1.3.41+ssl_1.59', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/490386/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0555?


Explain the CVE ID: What does the identifier CVE-2008-0556 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0556.

Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform unauthorized actions as authorized users via a link or IMG tag to RAServer.


Provide references for further information: Can you share references or external links related to CVE-2008-0556?

{'name': '20080213 OpenCA XSRF (CVE-2008-0556)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060300.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.cynops.de/advisories/CVE-2008-0556.txt'}, {'name': 'openca-certificate-csrf(40476)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40476'}, {'name': 'ADV-2008-0588', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0588'}, {'name': '28951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28951'}, {'name': '1019426', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019426'}, {'name': 'VU#264385', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/264385'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0556?


Explain the CVE ID: What does the identifier CVE-2008-0557 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0557.

SQL injection vulnerability in index.php in the CatalogShop (com_catalogshop) 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.


Provide references for further information: Can you share references or external links related to CVE-2008-0557?

{'name': '5030', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5030'}, {'name': '27558', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27558'}, {'name': 'catalogshop-index-sql-injection(40142)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40142'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0557?


Explain the CVE ID: What does the identifier CVE-2008-0558 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0558.

Cross-site scripting (XSS) vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2008-0558?

{'name': '27560', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27560'}, {'name': '28735', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0558?


Explain the CVE ID: What does the identifier CVE-2008-0559 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0559.

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the permalink parameter in core.php, accessed through index.php; and (2) the thispost parameter in comments.php.


Provide references for further information: Can you share references or external links related to CVE-2008-0559?

{'name': '27559', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27559'}, {'name': '3604', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3604'}, {'name': "20080131 nilson's blogger 0.11 remote file disclosure vulnerabilities", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487384/100/0/threaded'}, {'name': '28737', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28737'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0559?


Explain the CVE ID: What does the identifier CVE-2008-0560 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0560.

PHP remote file inclusion vulnerability in cforms-css.php in Oliver Seidel cforms (contactforms), a Wordpress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the tm parameter. NOTE: CVE disputes this issue for 7.3, since there is no tm parameter, and the code exits with a fatal error due to a call to an undefined function


Provide references for further information: Can you share references or external links related to CVE-2008-0560?

{'name': '20080131 contactforms "cforms-css.php" Remote File Inclusion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/487347/100/0/threaded'}, {'name': '20080131 [Fwd: contactforms "cforms-css.php" Remote File Inclusion]', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://www.attrition.org/pipermail/vim/2008-January/001895.html'}, {'name': 'contactform-cformscss-file-include(40143)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40143'}, {'name': '3605', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3605'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0560?


Explain the CVE ID: What does the identifier CVE-2008-0561 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0561.

SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.


Provide references for further information: Can you share references or external links related to CVE-2008-0561?

{'name': '27557', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27557'}, {'name': '5029', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5029'}, {'name': 'akogallery-index-sql-injection(40141)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40141'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0561?


Explain the CVE ID: What does the identifier CVE-2008-0562 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0562.

SQL injection vulnerability in index.php in the Restaurant (com_restaurant) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.


Provide references for further information: Can you share references or external links related to CVE-2008-0562?

{'name': '5031', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5031'}, {'name': 'restaurant-index-sql-injection(40144)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40144'}, {'name': '27551', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27551'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0562?


Explain the CVE ID: What does the identifier CVE-2008-0563 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0563.

Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated users via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format.


Provide references for further information: Can you share references or external links related to CVE-2008-0563?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.liferay.com/browse/LEP-4737'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0563?


Explain the CVE ID: What does the identifier CVE-2008-0564 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0564.

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list's "info attribute" in the web administrator interface, a different vulnerability than CVE-2006-3636.


Provide references for further information: Can you share references or external links related to CVE-2008-0564?

{'name': 'SUSE-SR:2008:017', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html'}, {'name': 'MDVSA-2008:061', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:061'}, {'name': 'RHSA-2011:0307', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0307.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.rpath.com/browse/RPL-2207'}, {'name': 'ADV-2008-0422', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0422'}, {'name': '31687', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31687'}, {'name': 'APPLE-SA-2010-03-29-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2008-0056'}, {'name': 'FEDORA-2008-1334', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00452.html'}, {'name': '28966', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28966'}, {'name': 'USN-586-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-586-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4077'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=559308&group_id=103'}, {'name': '28916', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28916'}, {'name': '[Mailman-Announce] 20080203 Mailman 2.1.10b3 Released (was: Re: Mailman 2.1.10b1 Released)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.python.org/pipermail/mailman-announce/2008-February/000096.html'}, {'name': '20080215 rPSA-2008-0056-1 mailman', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/488236/100/0/threaded'}, {'name': '29388', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29388'}, {'name': '27630', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27630'}, {'name': 'ADV-2011-0542', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0542'}, {'name': '28794', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28794'}, {'name': '29249', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29249'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=431526'}, {'name': '43549', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43549'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0564?


Explain the CVE ID: What does the identifier CVE-2008-0565 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0565.

SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0565?

{'name': '27530', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27530'}, {'name': '5021', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5021'}, {'name': '40840', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/40840'}, {'name': '28727', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28727'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0565?


Explain the CVE ID: What does the identifier CVE-2008-0566 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0566.

PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path_to_public_program parameter.


Provide references for further information: Can you share references or external links related to CVE-2008-0566?

{'name': '5022', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5022'}, {'name': '27529', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27529'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0566?


Explain the CVE ID: What does the identifier CVE-2008-0567 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0567.

Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) PPS/File.php, (2) Writer.php, and (3) PPS.php in excelwriter/; and (4) BIFFwriter.php, (5) Workbook.php, (6) Worksheet.php, and (7) Format.php in excelwriter/Writer/.


Provide references for further information: Can you share references or external links related to CVE-2008-0567?

{'name': '5020', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/5020'}, {'name': '27531', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27531'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0567?


Explain the CVE ID: What does the identifier CVE-2008-0568 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0568.

Unspecified vulnerability in the IP-authentication feature in the Secure Site 5.x-1.0 and 4.7.x-1.0 module for Drupal allows remote attackers to gain the privileges of a user who has authenticated from behind the same proxy server as the attacker.


Provide references for further information: Can you share references or external links related to CVE-2008-0568?

{'name': 'ADV-2008-0377', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0377/references'}, {'name': '27543', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27543'}, {'name': '28732', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28732'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/216019'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0568?


Explain the CVE ID: What does the identifier CVE-2008-0569 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0569.

The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2008-0569?

{'name': 'ADV-2008-0374', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0374/references'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/216024'}, {'name': '28729', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28729'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/216036'}, {'name': '27544', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27544'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/216035'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2008-0569?


Explain the CVE ID: What does the identifier CVE-2008-0570 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2008-0570.

The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID providers to spoof OpenID authentication for domains associated with other providers.